This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json) Hash identifier: zzTCH/Q6UcDtBtcaPF0NTlXBaTUKu1Zh7FfquMxNk78= Subject key identifier: F7:A5:D2:FB:9F:CF:80:4C:9D:A1:CC:73:47:A3:8B:7D:FD:22:E9:D4 Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7 Certificate serial: 019B3156287115012346E509BEEA41CDF172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 12:01:28 +0000 Manifest this update: Thu 18 Dec 2025 12:01:28 +0000 Manifest next update: Fri 19 Dec 2025 12:01:28 +0000 Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: g84998rnVNHlRDeJVGIQ4wOxSX7kh8aIieJ1khfesu0=) 2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=) 3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:28:71:15:01:23:46:e5:09:be:ea:41:cd:f1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7 Validity Not Before: Dec 18 12:01:28 2025 GMT Not After : Dec 19 12:01:28 2025 GMT Subject: CN=f7a5d2fb9fcf804c9da1cc7347a38b7dfd22e9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:85:c8:66:8a:a9:64:23:cf:1e:49:09:c4: 7a:3e:1d:22:88:06:d1:16:b0:25:b0:20:fe:1b:3f: b3:3e:3a:71:44:fb:bc:d2:89:b5:a6:5e:e8:3b:b8: 05:d0:73:95:f0:34:fd:9a:ba:85:0c:df:c0:a7:dd: 96:ae:7c:28:ae:48:1f:05:14:ec:10:7c:99:e5:8e: ff:28:fe:ac:61:90:19:44:65:14:6d:18:a5:e3:21: 75:75:2e:fa:b5:12:3f:8f:aa:6c:8b:9c:72:0a:fc: 63:15:cc:24:c4:2b:c7:f3:29:84:bc:27:a4:72:54: 3f:82:28:de:d5:80:8b:f5:39:07:14:2f:fc:8c:1e: ba:86:c8:96:24:55:aa:c2:4d:0e:9e:6b:7c:89:6d: 5b:a9:ce:e6:a5:d6:40:0b:57:bc:7f:a6:95:80:02: e5:8a:75:9b:02:8d:45:8c:21:aa:ab:07:65:ad:96: 8f:01:40:83:69:d7:ba:2a:91:39:e0:dc:bc:4d:28: b8:53:25:29:ba:71:ba:20:b6:72:ec:32:29:f5:2c: a5:ea:84:09:ef:8d:15:56:81:f6:d4:e0:6e:d3:36: 63:44:4f:5b:fd:3b:ba:fe:fc:20:12:3b:db:5d:fc: b5:bb:f3:b7:ca:97:63:d0:b8:aa:d9:9d:d1:af:3a: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A5:D2:FB:9F:CF:80:4C:9D:A1:CC:73:47:A3:8B:7D:FD:22:E9:D4 X509v3 Authority Key Identifier: keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a5:e9:5c:6b:3c:c3:32:28:41:72:d1:e4:66:c9:b6:7a:b1: 88:18:14:55:0f:14:92:4f:6e:9c:bf:6f:87:71:1a:9d:94:63: 68:e1:e5:12:4e:4f:f1:98:e8:eb:66:eb:72:27:29:ef:3b:3b: 2a:57:ba:48:3f:f7:7a:5f:9c:a0:ee:04:03:9d:77:00:f0:9e: c9:3c:67:2c:b9:ac:9e:64:39:71:96:45:d6:9e:d5:f6:58:6e: 56:a8:c8:ef:d9:8e:c9:44:8c:4e:60:cb:10:62:1d:2c:88:61: db:d2:12:08:f2:15:b8:6b:3e:90:3a:72:91:4c:ad:f5:21:84: 92:cb:0a:f5:70:f8:ac:28:d0:a7:ea:a4:73:cb:ac:25:8e:41: 32:0a:af:f2:2d:d9:5b:39:39:54:5b:83:9e:e1:a8:a3:d5:4a: f6:d1:4b:c5:d1:92:96:18:43:98:44:bf:51:27:2e:a6:9b:2a: cc:1b:fb:86:67:40:b3:32:a3:11:ac:9e:ac:af:fc:9f:e9:63: 1e:fb:f9:77:62:1b:98:9f:b1:38:14:9e:3a:d0:59:f3:6e:d6: cf:15:3d:c3:58:10:cd:d0:c1:a5:6f:06:ed:ec:87:40:2c:46: 96:44:92:f9:4b:ea:21:5d:80:f5:58:38:8c:7d:39:a2:b9:5a: 8c:4d:81:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVihxFQEjRuUJvupBzfFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0 ODg2ZjcwHhcNMjUxMjE4MTIwMTI4WhcNMjUxMjE5MTIwMTI4WjAzMTEwLwYDVQQD EyhmN2E1ZDJmYjlmY2Y4MDRjOWRhMWNjNzM0N2EzOGI3ZGZkMjJlOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w6FyGaKqWQjzx5JCcR6Ph0iiAbR FrAlsCD+Gz+zPjpxRPu80om1pl7oO7gF0HOV8DT9mrqFDN/Ap92WrnworkgfBRTs EHyZ5Y7/KP6sYZAZRGUUbRil4yF1dS76tRI/j6psi5xyCvxjFcwkxCvH8ymEvCek clQ/gije1YCL9TkHFC/8jB66hsiWJFWqwk0Onmt8iW1bqc7mpdZAC1e8f6aVgALl inWbAo1FjCGqqwdlrZaPAUCDade6KpE54Ny8TSi4UyUpunG6ILZy7DIp9Syl6oQJ 740VVoH21OBu0zZjRE9b/Tu6/vwgEjvbXfy1u/O3ypdj0Liq2Z3Rrzpa5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPel0vufz4BMnaHMc0eji339IunUMB8GA1UdIwQY MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt NzUzNzQxYTgwZTk0LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0 LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqXpXGs8 wzIoQXLR5GbJtnqxiBgUVQ8Ukk9unL9vh3EanZRjaOHlEk5P8Zjo62brcicp7zs7 Kle6SD/3el+coO4EA513APCeyTxnLLmsnmQ5cZZF1p7V9lhuVqjI79mOyUSMTmDL EGIdLIhh29ISCPIVuGs+kDpykUyt9SGEkssK9XD4rCjQp+qkc8usJY5BMgqv8i3Z Wzk5VFuDnuGoo9VK9tFLxdGSlhhDmES/UScuppsqzBv7hmdAszKjEayerK/8n+lj Hvv5d2IbmJ+xOBSeOtBZ827WzxU9w1gQzdDBpW8G7eyHQCxGlkSS+UvqIV2A9Vg4 jH05orlajE2BCg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:54:39 2025 by rpki-client