This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json) Hash identifier: l45syhITgxLxnKaxh7QwNJsoYmko17AytlkFvGDRYg0= Subject key identifier: 4E:74:F0:DE:88:45:D2:B0:11:17:CA:D9:42:FB:83:40:FD:42:17:42 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019B32D70FAB9B41FA73BD218B2A3CE27D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:01:53 +0000 Manifest this update: Thu 18 Dec 2025 19:01:53 +0000 Manifest next update: Fri 19 Dec 2025 19:01:53 +0000 Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: YvImSRNHwEsYDsQefrx3hLUP95yegzO0ctIYZaVnCgo=) 2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=) 3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=) 4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:0f:ab:9b:41:fa:73:bd:21:8b:2a:3c:e2:7d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Dec 18 19:01:53 2025 GMT Not After : Dec 19 19:01:53 2025 GMT Subject: CN=4e74f0de8845d2b01117cad942fb8340fd421742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:3c:d6:70:40:9d:df:9b:f3:b2:cc:df:a2: a5:7a:1f:fe:e7:a3:89:1e:00:83:e3:f7:ad:d4:2c: 7f:b5:43:9a:23:e5:32:46:7f:15:56:cc:cd:92:cc: f1:7e:d1:c5:14:5e:f0:c0:0c:87:76:6f:ac:c8:6f: a8:93:78:7d:c6:14:7e:b3:cf:da:f3:1a:58:2e:93: 4d:23:e0:30:27:ca:cd:29:f2:f9:21:42:6f:ce:e6: e2:6a:4c:3f:b3:79:09:89:b7:5e:d7:0a:95:7d:bc: 2c:68:1a:31:97:8e:0a:d6:72:fe:bc:5d:1c:df:c7: 95:ce:d2:5a:9c:0c:61:b1:c5:5c:85:fe:5b:46:cc: ec:21:1f:f1:99:73:ca:5b:46:d3:a4:ae:62:7e:b6: 4b:94:b0:9e:82:24:99:28:ae:95:2e:d3:c3:ae:16: 91:c8:66:a9:ea:8e:4c:2b:c6:3e:88:dc:20:92:3e: 09:da:0a:77:91:39:be:bc:55:e1:7c:ad:ae:41:67: f4:10:c6:20:39:fd:ed:a3:71:5d:d0:98:71:85:49: d8:5c:17:6e:2c:ad:0f:e9:08:3c:38:0d:fb:5a:71: ae:24:bb:e4:81:88:6c:09:f7:60:60:c1:89:aa:df: 0c:9b:fb:4c:68:85:da:bc:a4:3e:96:db:ea:ad:35: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:F0:DE:88:45:D2:B0:11:17:CA:D9:42:FB:83:40:FD:42:17:42 X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f1:17:8a:10:73:05:d0:f2:1c:3e:b9:32:38:08:b1:23:59: c0:d8:37:e0:e2:55:74:6c:f5:e6:c2:d5:78:6f:94:67:57:3f: ef:d2:11:56:d4:41:74:3a:cf:5c:3f:be:e5:30:e4:91:b4:71: b0:4e:34:fa:d8:cf:ce:1d:9f:a2:4c:01:b4:a0:73:c0:b8:87: 35:cd:4b:f0:26:0f:fc:45:fa:b6:c4:42:70:c0:27:9e:97:99: 03:c3:9e:cb:3a:32:ef:18:19:2a:ca:c2:0e:e0:b7:0a:48:1e: ae:ca:02:66:68:58:a2:ea:0c:31:69:b4:60:ec:99:d5:76:73: fc:99:b5:71:9f:5e:96:1c:04:07:74:7e:b9:c5:5e:85:45:60: 4b:ac:5b:38:50:16:45:b9:45:cb:8e:29:2c:67:39:ef:6c:c0: cf:c1:ad:57:4f:74:ea:2d:1e:f9:be:2e:00:9b:4e:a7:de:ce: 3e:b1:04:5b:1d:2e:a2:1f:90:df:24:80:fc:09:f4:e2:f2:d2: fd:cd:1d:c7:3c:d2:fc:3f:d9:f0:f6:a1:5d:24:db:47:14:bf: 28:e4:23:5b:70:9d:c0:90:f2:26:54:66:22:43:81:b9:f9:62: 92:6d:17:ad:f9:92:c1:93:e2:c9:16:e9:aa:8b:50:f2:ea:93: 04:a4:17:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1w+rm0H6c70hiyo84n0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjUxMjE4MTkwMTUzWhcNMjUxMjE5MTkwMTUzWjAzMTEwLwYDVQQD Eyg0ZTc0ZjBkZTg4NDVkMmIwMTExN2NhZDk0MmZiODM0MGZkNDIxNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywE81nBAnd+b87LM36Kleh/+56OJ HgCD4/et1Cx/tUOaI+UyRn8VVszNkszxftHFFF7wwAyHdm+syG+ok3h9xhR+s8/a 8xpYLpNNI+AwJ8rNKfL5IUJvzubiakw/s3kJibde1wqVfbwsaBoxl44K1nL+vF0c 38eVztJanAxhscVchf5bRszsIR/xmXPKW0bTpK5ifrZLlLCegiSZKK6VLtPDrhaR yGap6o5MK8Y+iNwgkj4J2gp3kTm+vFXhfK2uQWf0EMYgOf3to3Fd0JhxhUnYXBdu LK0P6Qg8OA37WnGuJLvkgYhsCfdgYMGJqt8Mm/tMaIXavKQ+ltvqrTXy8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE508N6IRdKwERfK2UL7g0D9QhdCMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfEXihBz BdDyHD65MjgIsSNZwNg34OJVdGz15sLVeG+UZ1c/79IRVtRBdDrPXD++5TDkkbRx sE40+tjPzh2fokwBtKBzwLiHNc1L8CYP/EX6tsRCcMAnnpeZA8Oeyzoy7xgZKsrC DuC3CkgersoCZmhYouoMMWm0YOyZ1XZz/Jm1cZ9elhwEB3R+ucVehUVgS6xbOFAW RblFy44pLGc572zAz8GtV0906i0e+b4uAJtOp97OPrEEWx0uoh+Q3ySA/An04vLS /c0dxzzS/D/Z8PahXSTbRxS/KOQjW3CdwJDyJlRmIkOBuflikm0XrfmSwZPiyRbp qotQ8uqTBKQXnA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:18 2025 by rpki-client