This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json) Hash identifier: FYHQzljU3I7yZpA+gnCzLNrIWKjrFS1lLQnR2Wn3Of4= Subject key identifier: 37:33:BC:86:B2:A1:40:E6:49:D2:55:77:EB:94:B7:76:E2:C8:CF:59 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019AF31D4407D2F65699CED0CDBA6E6B427C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:52 +0000 Manifest this update: Sat 06 Dec 2025 10:02:52 +0000 Manifest next update: Sun 07 Dec 2025 10:02:52 +0000 Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: TcNpPU41IVVuP2d+F05SSbkqxRgDAmUCbqSeztgiOAk=) 2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=) 3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=) 4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:44:07:d2:f6:56:99:ce:d0:cd:ba:6e:6b:42:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Dec 6 10:02:52 2025 GMT Not After : Dec 7 10:02:52 2025 GMT Subject: CN=3733bc86b2a140e649d25577eb94b776e2c8cf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:22:f3:d4:b6:98:af:21:0c:b0:b5:d4:66: c3:5b:a2:9d:00:93:16:d3:58:1a:11:a8:b1:9a:24: 51:cb:bd:28:7a:5f:b7:17:2d:38:fe:b2:4a:71:4e: d8:3a:13:92:6a:b5:8c:13:70:96:7d:df:f4:f8:26: a1:63:b9:ec:a3:e8:ad:1a:49:b1:f7:ce:8c:66:3f: 03:b7:ce:04:50:40:9a:58:9c:b2:eb:ae:5f:58:f9: bb:41:14:6e:23:b1:cd:96:b4:1e:62:af:a6:ad:26: 09:64:54:a0:f8:20:ab:f6:73:4b:2e:23:30:34:7e: 3c:3b:68:af:0c:94:3c:90:96:24:dc:24:8d:75:ed: f9:5c:05:36:8d:2e:41:ce:8b:7b:af:8f:9c:f1:b6: 13:ec:a9:66:3c:d9:df:b4:f0:4b:18:66:f1:fb:3b: 68:80:65:f4:a6:ae:fb:40:c1:28:ec:0a:d1:7e:8b: f4:88:fc:9a:fd:45:e8:8e:4c:03:cb:86:e9:ea:5f: 69:c5:84:09:27:49:b0:76:4b:7e:05:6e:6d:d6:01: 8c:72:13:0e:dd:e3:18:ef:f4:b9:d9:0e:18:9e:93: 18:cd:15:7f:2c:59:7e:5d:fa:dc:62:74:bf:54:55: 72:f3:94:f0:19:72:8a:df:5d:08:7b:7c:b5:5f:c8: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:BC:86:B2:A1:40:E6:49:D2:55:77:EB:94:B7:76:E2:C8:CF:59 X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d1:83:98:e7:06:24:64:6c:f7:52:a3:0c:f5:48:86:48:09: 73:fa:b3:ad:50:c0:d7:ab:c1:e4:54:c2:9c:3b:81:ef:bd:36: 52:c2:f5:2e:df:fc:00:65:cc:db:bd:af:22:ea:e6:02:0e:35: a1:fe:c5:a5:4b:0a:3d:fd:de:53:d9:29:ad:7a:c7:5b:73:a2: 3a:c5:b3:4c:a2:66:a0:ea:ee:9c:08:ea:22:20:20:9d:a1:55: fb:54:fa:67:88:35:ac:6d:61:bb:a9:87:68:47:fc:d1:8c:b1: b5:8e:18:58:14:96:52:70:4f:ea:3a:48:00:cd:46:ec:ca:14: e5:7b:ce:3d:af:32:7a:41:f9:9e:b2:b9:7f:16:0f:51:c4:cb: 7d:b2:ad:c1:fb:f5:62:93:9f:aa:89:d4:6b:49:40:7c:83:7d: 92:a9:19:84:4f:bf:e2:5b:55:91:ac:fd:f2:b4:b5:e1:db:53: a9:e7:fe:4c:b0:7d:f4:1d:a4:82:83:32:0a:58:59:6b:5a:0d: 51:57:e0:47:0f:9b:f4:a4:50:df:73:59:b5:ff:72:3b:60:a2: 55:3b:6d:90:cc:66:66:7d:0c:ce:dd:a8:98:19:91:31:94:08: db:f4:5a:e4:91:e8:3f:ae:3e:b9:46:01:ff:71:d5:3f:44:56: df:be:04:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUQH0vZWmc7Qzbpua0J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjUxMjA2MTAwMjUyWhcNMjUxMjA3MTAwMjUyWjAzMTEwLwYDVQQD EygzNzMzYmM4NmIyYTE0MGU2NDlkMjU1NzdlYjk0Yjc3NmUyYzhjZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowAi89S2mK8hDLC11GbDW6KdAJMW 01gaEaixmiRRy70oel+3Fy04/rJKcU7YOhOSarWME3CWfd/0+CahY7nso+itGkmx 986MZj8Dt84EUECaWJyy665fWPm7QRRuI7HNlrQeYq+mrSYJZFSg+CCr9nNLLiMw NH48O2ivDJQ8kJYk3CSNde35XAU2jS5Bzot7r4+c8bYT7KlmPNnftPBLGGbx+zto gGX0pq77QMEo7ArRfov0iPya/UXojkwDy4bp6l9pxYQJJ0mwdkt+BW5t1gGMchMO 3eMY7/S52Q4YnpMYzRV/LFl+XfrcYnS/VFVy85TwGXKK310Ie3y1X8jWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDczvIayoUDmSdJVd+uUt3biyM9ZMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNGDmOcG JGRs91KjDPVIhkgJc/qzrVDA16vB5FTCnDuB7702UsL1Lt/8AGXM272vIurmAg41 of7FpUsKPf3eU9kprXrHW3OiOsWzTKJmoOrunAjqIiAgnaFV+1T6Z4g1rG1hu6mH aEf80YyxtY4YWBSWUnBP6jpIAM1G7MoU5XvOPa8yekH5nrK5fxYPUcTLfbKtwfv1 YpOfqonUa0lAfIN9kqkZhE+/4ltVkaz98rS14dtTqef+TLB99B2kgoMyClhZa1oN UVfgRw+b9KRQ33NZtf9yO2CiVTttkMxmZn0Mzt2omBmRMZQI2/Ra5JHoP64+uUYB /3HVP0RW374Ezw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:16 2025 by rpki-client