This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft File: B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json) Hash identifier: 1E6h5R2hbjg0ZBTiUVFyFnFD6Se2oMFH5T9RY8FTYdk= Subject key identifier: 9F:B2:13:DB:8B:DA:83:24:F1:03:77:FF:AE:A6:B6:F6:71:81:11:D9 Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Certificate serial: 019B240801AA78A6046E4C3BE8D63F890FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft Manifest number: 170C Signing time: Mon 15 Dec 2025 22:01:02 +0000 Manifest this update: Mon 15 Dec 2025 22:01:02 +0000 Manifest next update: Tue 16 Dec 2025 22:01:02 +0000 Files and hashes: 1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: pc1Tah58wEZLBR5bwLQ3r/Ca7CGbxa1i5UhNpx8/AzM=) 2: V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa (hash: 0JhsZS/w87YjLNxBWJNFG7eEJHrJWihhV/iC23LdiYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:01:aa:78:a6:04:6e:4c:3b:e8:d6:3f:89:0f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Validity Not Before: Dec 15 22:01:02 2025 GMT Not After : Dec 16 22:01:02 2025 GMT Subject: CN=9fb213db8bda8324f10377ffaea6b6f6718111d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:63:bf:1a:14:7b:f4:5e:8e:24:7a:42:6a: a6:3b:42:db:d3:5e:06:8c:7e:ab:cd:80:5f:dd:96: 6e:57:73:67:8e:f2:e8:22:4e:aa:8e:47:c7:76:22: 81:6c:fe:4e:47:66:12:34:f1:3a:a4:b5:ef:be:c9: ba:27:7b:8a:fa:1f:49:e7:2d:7f:14:1a:13:fb:04: c9:2e:d9:a5:69:75:13:92:78:4e:05:e3:5e:aa:69: 33:5d:25:8e:74:fe:1f:3d:78:dc:2b:4c:37:b5:24: 2e:2d:21:d8:50:05:2b:d0:3c:63:d3:32:ba:47:b0: 90:a7:69:cd:76:88:a1:d8:22:03:63:6b:35:1d:5e: 6e:e1:7c:cd:a1:5f:17:9b:18:1a:99:2c:83:60:13: 5a:95:fc:a8:4a:00:ab:25:77:ea:35:ee:6f:39:8b: 5d:af:c8:44:b4:74:a7:14:79:18:1b:63:a4:d7:40: ef:11:7b:76:e3:2d:b6:b9:be:79:16:27:29:ca:d2: 87:94:6a:35:95:e8:2e:db:2f:0f:8a:53:28:03:7d: 01:91:22:39:d8:a2:14:1b:cd:02:71:6a:23:0d:da: 84:d2:32:da:82:57:9c:84:71:a4:0f:55:98:fb:0a: 26:97:a9:d0:01:f4:71:6f:b4:a0:be:57:55:33:87: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:13:DB:8B:DA:83:24:F1:03:77:FF:AE:A6:B6:F6:71:81:11:D9 X509v3 Authority Key Identifier: keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ad:dc:d3:41:d6:29:fa:e7:08:81:06:65:83:65:c8:a0:e0: 39:e0:d0:43:19:f0:0e:5b:46:a2:cd:ac:1e:53:11:12:7e:ea: 36:24:6f:ff:89:bb:e1:ec:ab:c0:16:37:18:cc:2c:b6:08:be: cc:4a:64:40:c3:bc:75:80:ee:98:e1:21:f2:2c:e6:7e:21:1f: cc:c5:4b:33:bf:02:51:40:bc:7c:51:55:9d:2a:42:b6:b0:ba: 3b:9b:3f:fa:98:6e:99:e3:ac:38:be:32:71:95:49:bc:02:4b: 35:68:8f:c1:1f:31:f9:80:80:56:85:67:af:67:8b:95:9b:e0: d7:39:83:3b:55:7b:e0:a3:0d:71:4c:3c:02:9a:ea:f4:d2:c6: ce:db:83:8c:68:ce:90:d1:32:8e:b2:cd:8e:04:6c:3d:40:6a: 57:ed:78:25:b5:00:79:4e:35:be:6e:c6:61:74:1d:d7:8b:53: fe:8d:7f:51:5b:66:15:05:cd:8b:2a:4e:29:1d:87:d3:bc:7e: 12:a0:c7:da:6f:d3:95:52:7f:6c:35:a7:1c:34:a2:5b:b0:a0: 9f:31:ff:18:7c:26:6e:cd:5d:24:f8:ee:b5:4e:12:85:c5:a3: 57:22:f4:58:71:d3:45:f5:30:27:97:ec:a3:78:6c:39:d3:e8: e8:44:5d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCAGqeKYEbkw76NY/iQ+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDQ2YzdmNjM0MjFkNzNjMjhmOGNhNzdmZDJkNGEzNTcy MTAwMTUwHhcNMjUxMjE1MjIwMTAyWhcNMjUxMjE2MjIwMTAyWjAzMTEwLwYDVQQD Eyg5ZmIyMTNkYjhiZGE4MzI0ZjEwMzc3ZmZhZWE2YjZmNjcxODExMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJNjvxoUe/RejiR6QmqmO0Lb014G jH6rzYBf3ZZuV3NnjvLoIk6qjkfHdiKBbP5OR2YSNPE6pLXvvsm6J3uK+h9J5y1/ FBoT+wTJLtmlaXUTknhOBeNeqmkzXSWOdP4fPXjcK0w3tSQuLSHYUAUr0Dxj0zK6 R7CQp2nNdoih2CIDY2s1HV5u4XzNoV8XmxgamSyDYBNalfyoSgCrJXfqNe5vOYtd r8hEtHSnFHkYG2Ok10DvEXt24y22ub55FicpytKHlGo1legu2y8PilMoA30BkSI5 2KIUG80CcWojDdqE0jLaglechHGkD1WY+woml6nQAfRxb7SgvldVM4cPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+yE9uL2oMk8QN3/66mtvZxgRHZMB8GA1UdIwQY MBaAFAdEbH9jQh1zwo+Mp3/S1KNXIQAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUt YTRmMTFiMDRjNjQwLzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUtYTRmMTFiMDRjNjQw LzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH63c00HW KfrnCIEGZYNlyKDgOeDQQxnwDltGos2sHlMREn7qNiRv/4m74eyrwBY3GMwstgi+ zEpkQMO8dYDumOEh8izmfiEfzMVLM78CUUC8fFFVnSpCtrC6O5s/+phumeOsOL4y cZVJvAJLNWiPwR8x+YCAVoVnr2eLlZvg1zmDO1V74KMNcUw8Aprq9NLGztuDjGjO kNEyjrLNjgRsPUBqV+14JbUAeU41vm7GYXQd14tT/o1/UVtmFQXNiypOKR2H07x+ EqDH2m/TlVJ/bDWnHDSiW7CgnzH/GHwmbs1dJPjutU4ShcWjVyL0WHHTRfUwJ5fs o3hsOdPo6ERdyg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:43 2025 by rpki-client