This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json) Hash identifier: 4SQ+GjEbKQ7vvVOWsAio1q6PQw33vJtDzH8gE0qO1tc= Subject key identifier: 9E:7B:D0:18:8D:D9:45:BB:FA:7F:AF:A2:13:BE:80:94:FA:46:54:A0 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019B30E7F8A7B36AFB7F2E17ECAFF7194CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 10:01:07 +0000 Manifest this update: Thu 18 Dec 2025 10:01:07 +0000 Manifest next update: Fri 19 Dec 2025 10:01:07 +0000 Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: DlXzd7Dl0CWEIrmk+HaVQZI8fLwoHRV4afREsJ8d+Tc=) 2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=) 3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=) 4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:f8:a7:b3:6a:fb:7f:2e:17:ec:af:f7:19:4c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Dec 18 10:01:07 2025 GMT Not After : Dec 19 10:01:07 2025 GMT Subject: CN=9e7bd0188dd945bbfa7fafa213be8094fa4654a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:8a:17:8c:f9:8c:59:1a:59:22:71:76:1b: f8:17:a2:9a:50:3e:38:2b:cf:e7:c8:6c:95:2d:f1: de:c5:d8:c2:38:ef:87:11:72:0e:02:94:9f:77:7f: c8:99:8b:c4:6b:cf:a4:2f:03:92:eb:5e:ed:5a:57: 62:3d:d8:b0:d8:26:86:cf:58:c6:32:43:ea:09:4d: 4f:ab:16:4e:d2:44:d3:97:40:22:3e:8a:cb:48:f1: d0:7c:bc:be:c7:d4:75:87:b7:66:dd:3c:51:3b:7c: 11:cb:ef:4f:f3:f5:03:58:5d:31:2c:17:fa:10:2c: 8e:71:5c:b5:a3:5d:42:06:ef:48:a1:d6:8d:a2:99: d0:58:21:f1:f2:ba:41:42:22:6b:0d:98:3f:a7:40: 91:32:a1:22:12:f2:6e:c4:b3:3c:10:c4:97:e3:16: 4c:b3:87:9f:5d:2c:e5:68:c8:97:b8:9b:b2:3c:4b: 9e:5f:03:9a:07:24:b9:01:5f:65:9a:c3:05:90:03: 05:42:f6:6f:11:73:1f:18:e2:1c:20:05:24:96:a9: d0:2f:6f:c8:0e:d0:6e:78:42:13:3e:9d:62:27:c2: e8:fd:2c:16:69:05:59:4e:fe:d9:79:3c:b9:3f:61: e5:d8:f8:8b:09:58:7f:c7:0c:3f:64:76:c0:5f:8d: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7B:D0:18:8D:D9:45:BB:FA:7F:AF:A2:13:BE:80:94:FA:46:54:A0 X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fc:17:ca:f3:6e:7c:f8:67:16:6c:9e:a6:a4:07:78:39:a1: 16:73:a7:40:3a:76:72:ad:96:eb:85:93:b5:0d:12:6b:20:58: c9:18:0c:46:f1:bf:0e:5c:21:16:db:41:d7:ed:1c:f7:0f:5f: a7:ef:ea:e7:06:0f:33:4c:5a:40:c0:4d:a0:c0:61:50:16:4d: 82:da:bd:a2:b5:9d:31:fb:41:65:60:0f:72:28:28:92:65:85: 3f:f7:91:cc:37:c6:ce:a7:05:a5:42:21:6e:25:cf:2d:7f:04: 62:27:06:b8:d6:f4:c5:d6:dc:20:b2:d4:f9:62:ba:a2:a6:7c: 15:b6:27:32:b1:0f:21:be:1f:b0:61:11:8c:06:d2:61:a1:5f: 5b:e0:9f:17:83:c5:f2:1b:dc:8a:50:31:31:d4:0a:78:34:67: 8a:7c:cc:8d:c3:3f:6b:f0:08:ac:56:4c:fe:2f:90:be:26:05: 6a:a6:11:c9:9c:fc:35:84:ff:0a:76:ec:4b:b3:55:82:f5:47: 42:75:d3:d9:4b:80:a6:f8:ae:e5:05:8e:03:4d:6a:25:01:bb: ed:6a:84:6a:d4:e2:44:34:14:3a:98:00:2b:38:90:c4:c6:dd: e1:5a:3f:9c:23:f7:49:cb:c2:27:9f:9f:73:0b:34:90:b2:63: ba:f0:74:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw5/ins2r7fy4X7K/3GUzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjUxMjE4MTAwMTA3WhcNMjUxMjE5MTAwMTA3WjAzMTEwLwYDVQQD Eyg5ZTdiZDAxODhkZDk0NWJiZmE3ZmFmYTIxM2JlODA5NGZhNDY1NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eKKF4z5jFkaWSJxdhv4F6KaUD44 K8/nyGyVLfHexdjCOO+HEXIOApSfd3/ImYvEa8+kLwOS617tWldiPdiw2CaGz1jG MkPqCU1PqxZO0kTTl0AiPorLSPHQfLy+x9R1h7dm3TxRO3wRy+9P8/UDWF0xLBf6 ECyOcVy1o11CBu9IodaNopnQWCHx8rpBQiJrDZg/p0CRMqEiEvJuxLM8EMSX4xZM s4efXSzlaMiXuJuyPEueXwOaByS5AV9lmsMFkAMFQvZvEXMfGOIcIAUklqnQL2/I DtBueEITPp1iJ8Lo/SwWaQVZTv7ZeTy5P2Hl2PiLCVh/xww/ZHbAX414zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ570BiN2UW7+n+vohO+gJT6RlSgMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPwXyvNu fPhnFmyepqQHeDmhFnOnQDp2cq2W64WTtQ0SayBYyRgMRvG/DlwhFttB1+0c9w9f p+/q5wYPM0xaQMBNoMBhUBZNgtq9orWdMftBZWAPcigokmWFP/eRzDfGzqcFpUIh biXPLX8EYicGuNb0xdbcILLU+WK6oqZ8FbYnMrEPIb4fsGERjAbSYaFfW+CfF4PF 8hvcilAxMdQKeDRninzMjcM/a/AIrFZM/i+QviYFaqYRyZz8NYT/CnbsS7NVgvVH QnXT2UuApviu5QWOA01qJQG77WqEatTiRDQUOpgAKziQxMbd4Vo/nCP3ScvCJ5+f cws0kLJjuvB0lg== -----END CERTIFICATE-----Generated at Thu Dec 18 16:14:54 2025 by rpki-client