This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json) Hash identifier: vMc8ymjjhRuM+yQZQyHhG32pywMR8BboYm7AH7mRtO8= Subject key identifier: 3F:CE:8E:7E:D1:E3:3A:19:CE:4E:9A:5A:27:60:27:C4:34:E6:F1:2A Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019AF3890A6A888210E2B6AAEDAF13C00792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:35 +0000 Manifest this update: Sat 06 Dec 2025 12:00:35 +0000 Manifest next update: Sun 07 Dec 2025 12:00:35 +0000 Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: eaaHB2hJeGIkwg3JvayhHhi6WN0/ijwK/5dFJiPD+fs=) 2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=) 3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0a:6a:88:82:10:e2:b6:aa:ed:af:13:c0:07:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Dec 6 12:00:35 2025 GMT Not After : Dec 7 12:00:35 2025 GMT Subject: CN=3fce8e7ed1e33a19ce4e9a5a276027c434e6f12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:35:fd:67:a8:43:46:59:94:cc:b9:ec:6a: f8:de:73:d3:25:0b:6e:ad:e4:87:f2:93:d6:ab:96: e8:ef:a7:1d:67:0d:b9:6a:99:38:85:63:a4:fe:df: 0a:c5:ed:6c:8e:b4:62:fa:86:15:30:bd:14:d0:4c: ff:41:f9:e3:dc:31:29:d6:b0:55:d2:46:68:51:56: a5:c2:e5:c4:d1:9b:8e:7d:22:5c:af:b8:64:6c:1b: 32:26:e3:f4:ed:be:2f:5a:24:41:1c:d3:d4:42:01: 29:a0:7d:69:c7:01:a5:0a:df:0b:47:3d:11:35:6d: 43:de:fd:2d:54:14:7f:aa:34:63:55:a8:83:89:68: ea:33:ae:bf:db:c2:82:be:66:33:2c:1e:d8:17:70: e8:33:4e:74:76:85:c3:65:eb:68:99:66:6e:89:7d: 06:76:82:8c:d5:20:a2:e7:01:8a:64:dc:a5:6d:9f: f0:83:0a:e0:62:f3:67:01:38:89:4b:5f:58:8a:5c: 97:f1:47:58:86:5e:c6:d5:e8:40:20:36:8d:97:5f: 85:dd:b3:d9:76:c8:50:72:17:16:05:60:15:d4:a6: a9:90:c0:33:0a:f7:4f:2a:33:7e:fc:ac:61:7e:56: 76:8c:58:e2:87:d1:18:b6:e7:a1:8b:4f:b7:01:81: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:8E:7E:D1:E3:3A:19:CE:4E:9A:5A:27:60:27:C4:34:E6:F1:2A X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1b:fc:e2:f8:2f:ec:59:cd:d8:b7:68:33:07:4e:ae:32:b2: c9:cf:99:1c:0d:a6:b5:96:70:97:d7:fb:12:aa:31:f4:0b:04: 90:9b:de:e0:c9:d4:40:de:71:cc:e7:8c:e3:89:fb:8b:16:7e: de:72:27:4c:e3:bb:6e:ea:42:fa:92:c3:dd:04:e0:8a:f9:92: 02:40:b5:59:b1:bd:50:20:49:7c:69:0f:2d:6f:3a:66:51:71: 42:c0:3e:ee:db:fc:69:fb:8a:a8:a3:e1:1b:2a:1b:2b:fb:d8: 6e:a2:4c:dc:0a:71:95:46:58:0b:15:56:93:e5:b7:40:34:18: 16:c9:91:d5:52:a3:f5:8b:53:1e:1c:e6:e7:b7:9a:f4:30:ee: ef:65:27:3c:5d:7e:02:94:bd:15:68:94:6e:89:84:9f:15:64: 3b:1b:91:b4:6f:e6:07:d2:77:43:5d:5c:a4:6a:04:be:ab:b5: 41:3b:d6:da:62:b5:2d:df:cb:0c:8f:c3:1d:5e:3e:58:bb:ee: e2:f9:67:aa:20:ca:96:7b:52:6e:25:27:4a:fe:a8:2f:22:0f: da:cf:92:63:f5:dc:4c:68:6f:30:70:4d:f8:73:5a:df:bb:7f: 98:84:05:2a:21:e1:4a:93:c1:1b:94:21:dd:ad:a3:b1:1e:07: 7f:c5:c1:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQpqiIIQ4raq7a8TwAeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjUxMjA2MTIwMDM1WhcNMjUxMjA3MTIwMDM1WjAzMTEwLwYDVQQD EygzZmNlOGU3ZWQxZTMzYTE5Y2U0ZTlhNWEyNzYwMjdjNDM0ZTZmMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpY1/WeoQ0ZZlMy57Gr43nPTJQtu reSH8pPWq5bo76cdZw25apk4hWOk/t8Kxe1sjrRi+oYVML0U0Ez/Qfnj3DEp1rBV 0kZoUValwuXE0ZuOfSJcr7hkbBsyJuP07b4vWiRBHNPUQgEpoH1pxwGlCt8LRz0R NW1D3v0tVBR/qjRjVaiDiWjqM66/28KCvmYzLB7YF3DoM050doXDZetomWZuiX0G doKM1SCi5wGKZNylbZ/wgwrgYvNnATiJS19YilyX8UdYhl7G1ehAIDaNl1+F3bPZ dshQchcWBWAV1KapkMAzCvdPKjN+/KxhflZ2jFjih9EYtuehi0+3AYGviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/Ojn7R4zoZzk6aWidgJ8Q05vEqMB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChv84vgv 7FnN2LdoMwdOrjKyyc+ZHA2mtZZwl9f7Eqox9AsEkJve4MnUQN5xzOeM44n7ixZ+ 3nInTOO7bupC+pLD3QTgivmSAkC1WbG9UCBJfGkPLW86ZlFxQsA+7tv8afuKqKPh GyobK/vYbqJM3ApxlUZYCxVWk+W3QDQYFsmR1VKj9YtTHhzm57ea9DDu72UnPF1+ ApS9FWiUbomEnxVkOxuRtG/mB9J3Q11cpGoEvqu1QTvW2mK1Ld/LDI/DHV4+WLvu 4vlnqiDKlntSbiUnSv6oLyIP2s+SY/XcTGhvMHBN+HNa37t/mIQFKiHhSpPBG5Qh 3a2jsR4Hf8XBOw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:16 2025 by rpki-client