This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft File: B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json) Hash identifier: 6/2MA1nWnKIpMSt6L1TVKrtcJaFLlfzuYzF0+NCX2PI= Subject key identifier: 44:91:AC:9A:07:E4:64:34:46:09:A8:4C:CE:03:10:50:DD:AD:FA:86 Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Certificate serial: 019AF3C0C4CC764F442725756B1E99ED46F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 13:01:28 +0000 Manifest this update: Sat 06 Dec 2025 13:01:28 +0000 Manifest next update: Sun 07 Dec 2025 13:01:28 +0000 Files and hashes: 1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: eK4s543RGSXBSbvyDiv7sCaEZcS0UPAk33v59BAl/0c=) 2: V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa (hash: 0JhsZS/w87YjLNxBWJNFG7eEJHrJWihhV/iC23LdiYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:c4:cc:76:4f:44:27:25:75:6b:1e:99:ed:46:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Validity Not Before: Dec 6 13:01:28 2025 GMT Not After : Dec 7 13:01:28 2025 GMT Subject: CN=4491ac9a07e464344609a84cce031050ddadfa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:52:01:d6:1d:d2:9d:cb:aa:07:2d:cb:cf: 4e:39:9b:09:08:26:ae:e9:db:6b:48:ba:01:6d:84: 24:61:ea:fb:57:79:ac:05:70:13:74:53:a5:72:e5: b3:ed:30:94:b4:58:f9:95:f5:60:2b:9f:23:18:23: 70:2d:59:02:46:37:bd:a3:51:cf:c3:e7:46:61:3c: 0e:ef:66:84:ad:d8:e4:8d:cf:ca:aa:b5:de:a1:27: 4f:55:70:48:f1:73:c7:b0:d9:c5:c0:79:91:f2:e7: d7:30:b0:73:90:0d:cc:c4:cd:79:72:6c:3f:29:30: 00:47:7c:a8:f7:04:e2:5e:03:d1:41:5f:03:65:b5: 8d:41:e4:73:fd:36:77:6a:22:c9:4d:68:7b:26:63: 51:75:04:f3:6b:60:c4:4f:09:4b:3d:07:e8:80:33: 80:b6:19:d6:ed:59:c7:c9:28:19:56:50:7c:ac:21: 38:45:f7:5c:4b:e6:a8:1f:d7:d5:5e:a9:be:38:90: 31:60:12:35:1c:99:99:f9:d2:bb:76:b4:73:bb:fb: 01:c7:be:6e:ab:85:0c:58:aa:93:9f:c3:c0:b9:14: 39:1b:46:03:7c:e8:e2:69:47:7f:6b:7b:5b:56:f4: 2e:34:2b:6b:02:47:b4:2a:bc:dd:15:90:3b:e9:58: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:91:AC:9A:07:E4:64:34:46:09:A8:4C:CE:03:10:50:DD:AD:FA:86 X509v3 Authority Key Identifier: keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:6e:1b:e7:25:65:19:33:aa:d4:c5:7b:d8:9e:8a:9f:1c: 3a:63:82:79:a0:0b:73:87:c6:03:d4:66:4e:90:42:26:f2:ca: 83:8a:9e:db:35:71:78:af:f4:fa:9e:b6:b1:ef:00:20:91:cc: cd:bb:e8:fa:49:72:ec:f9:d2:f6:55:d5:c0:8e:4d:56:b3:4d: 12:55:4c:3c:24:69:58:d2:6d:5a:ae:d6:c5:85:a5:3f:23:fb: 7f:8e:d1:b6:d4:8a:be:47:ad:ab:cb:dd:1b:dd:ed:b9:78:81: ec:f0:93:c7:7b:a9:45:f8:aa:cb:6d:a0:67:97:e0:a3:36:14: f4:75:c9:86:8a:35:a5:66:78:2e:78:eb:19:be:26:bd:cb:40: 1b:8e:f0:63:da:36:e1:b5:fa:f0:d3:51:81:29:62:f1:d5:c1: 6f:7b:bb:61:6e:4b:72:b6:ea:0f:b8:d9:4d:2b:8c:0f:d4:b2: e5:4c:09:a5:3f:e9:d5:51:ef:c1:b0:89:9a:02:0e:d7:47:93: 8f:3d:b0:f1:19:ca:5b:92:c9:2b:bd:aa:0b:cd:9d:dd:90:67: 52:b3:23:c0:8b:f6:12:3c:81:ef:0c:62:df:c3:16:08:ee:97: 31:9f:82:a1:9f:c1:87:9e:e3:22:f6:f3:48:89:f3:81:68:2a: a5:7a:eb:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMTMdk9EJyV1ax6Z7UbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDQ2YzdmNjM0MjFkNzNjMjhmOGNhNzdmZDJkNGEzNTcy MTAwMTUwHhcNMjUxMjA2MTMwMTI4WhcNMjUxMjA3MTMwMTI4WjAzMTEwLwYDVQQD Eyg0NDkxYWM5YTA3ZTQ2NDM0NDYwOWE4NGNjZTAzMTA1MGRkYWRmYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkVSAdYd0p3Lqgcty89OOZsJCCau 6dtrSLoBbYQkYer7V3msBXATdFOlcuWz7TCUtFj5lfVgK58jGCNwLVkCRje9o1HP w+dGYTwO72aErdjkjc/KqrXeoSdPVXBI8XPHsNnFwHmR8ufXMLBzkA3MxM15cmw/ KTAAR3yo9wTiXgPRQV8DZbWNQeRz/TZ3aiLJTWh7JmNRdQTza2DETwlLPQfogDOA thnW7VnHySgZVlB8rCE4RfdcS+aoH9fVXqm+OJAxYBI1HJmZ+dK7drRzu/sBx75u q4UMWKqTn8PAuRQ5G0YDfOjiaUd/a3tbVvQuNCtrAke0KrzdFZA76Vi4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESRrJoH5GQ0RgmoTM4DEFDdrfqGMB8GA1UdIwQY MBaAFAdEbH9jQh1zwo+Mp3/S1KNXIQAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUt YTRmMTFiMDRjNjQwLzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUtYTRmMTFiMDRjNjQw LzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbFuG+cl ZRkzqtTFe9ieip8cOmOCeaALc4fGA9RmTpBCJvLKg4qe2zVxeK/0+p62se8AIJHM zbvo+kly7PnS9lXVwI5NVrNNElVMPCRpWNJtWq7WxYWlPyP7f47RttSKvketq8vd G93tuXiB7PCTx3upRfiqy22gZ5fgozYU9HXJhoo1pWZ4LnjrGb4mvctAG47wY9o2 4bX68NNRgSli8dXBb3u7YW5LcrbqD7jZTSuMD9Sy5UwJpT/p1VHvwbCJmgIO10eT jz2w8RnKW5LJK72qC82d3ZBnUrMjwIv2EjyB7wxi38MWCO6XMZ+CoZ/Bh57jIvbz SInzgWgqpXrrjg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:05 2025 by rpki-client