This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json) Hash identifier: kbU57s+kivU/oa5Qo1qraTDBIZCR5SKucULFIEvLgHA= Subject key identifier: D6:01:F5:4F:E3:2F:72:7B:5D:B9:9D:59:6C:23:D4:C6:43:24:AD:69 Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5 Certificate serial: 019B1049F5283B0D37C6635B28AFE3448FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft Manifest number: 0F6D Signing time: Fri 12 Dec 2025 02:00:40 +0000 Manifest this update: Fri 12 Dec 2025 02:00:40 +0000 Manifest next update: Sat 13 Dec 2025 02:00:40 +0000 Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=) 2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=) 3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: P0WETSv7aa1BVY5yBWwLCJ39fO6syg9I6hZ0AZd9ZOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:f5:28:3b:0d:37:c6:63:5b:28:af:e3:44:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5 Validity Not Before: Dec 12 02:00:40 2025 GMT Not After : Dec 13 02:00:40 2025 GMT Subject: CN=d601f54fe32f727b5db99d596c23d4c64324ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:13:5c:98:b7:3d:05:27:d9:25:4f:81:80: dc:ba:30:ab:2a:dc:61:cc:64:b4:4f:17:27:8c:dd: 40:18:7a:65:11:a6:d3:be:cd:6b:2b:5f:ba:72:60: bf:84:28:c8:43:cf:90:bf:6a:f4:dd:7e:d2:7d:e2: 98:19:57:0c:65:16:4e:ed:e8:31:8e:b3:b8:1a:f4: 17:51:0f:d8:11:7f:a8:84:c2:90:88:7a:4e:a3:9c: 0f:92:91:63:8b:0d:26:30:f5:9c:22:ed:25:80:89: d7:1b:d7:3f:71:c2:58:54:4b:17:32:98:57:1a:a4: 07:6d:02:0a:fd:89:81:4d:43:e5:e3:75:48:be:99: 7d:18:fa:07:09:61:ec:e6:1c:f1:a8:d9:28:61:21: 64:4d:1e:14:26:a6:8e:33:d3:d3:75:39:68:b8:9a: da:c4:22:14:39:c9:e3:19:14:0d:06:56:58:d1:f0: 42:e1:01:6c:1b:34:30:9f:19:e2:c8:f9:9e:3b:76: f4:80:e0:f4:9f:e7:77:a2:1d:28:5f:fc:1d:83:cb: f4:30:3b:7a:4c:60:0f:5b:8f:8c:9d:cd:72:3a:56: ec:df:2a:5b:5b:a1:3e:54:45:38:25:93:cb:a4:00: 27:c3:f3:55:aa:be:65:37:0e:1a:59:c2:95:a4:ec: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:F5:4F:E3:2F:72:7B:5D:B9:9D:59:6C:23:D4:C6:43:24:AD:69 X509v3 Authority Key Identifier: keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ed:50:d8:ab:bc:e7:26:c6:3b:87:71:65:3c:0b:a1:64:d5: 9b:71:6b:fd:14:d6:78:6a:d7:1d:00:12:65:e2:f5:9f:cc:bf: 18:f1:d6:8a:09:e8:7d:d9:97:61:fe:44:f6:90:02:b0:39:eb: e2:3e:c7:25:4c:c3:55:01:6a:28:b1:90:dd:be:6b:05:68:ff: b1:aa:f8:6a:da:06:ce:70:64:dc:ed:5e:53:f5:01:1f:1e:77: ad:89:ae:e3:c6:30:6f:02:7c:f8:d1:db:21:6b:da:cf:d4:40: b8:63:51:13:08:65:3b:3b:84:0c:a8:44:df:7d:10:32:65:43: 04:26:69:d2:bb:79:c5:99:41:49:ab:7e:be:2a:a9:d5:36:1d: c4:7d:df:db:a3:c5:f0:02:cb:83:19:69:28:e0:52:b0:54:e9: 9e:5e:f6:38:f5:4f:b3:56:70:24:0c:cf:04:28:b3:4d:45:f4: 83:bb:29:64:e9:62:d4:e9:83:d2:a6:1c:49:e2:46:4d:69:08: ea:21:0c:1c:28:a2:18:9e:2a:23:2e:6d:8e:46:37:2c:6b:6b: 0b:fc:8a:a8:f4:bc:e3:5a:93:25:db:34:15:42:5a:f2:92:01: 75:a4:71:35:79:1d:28:4b:9b:45:c3:c7:14:b3:af:d9:46:40: 35:1b:59:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSfUoOw03xmNbKK/jRI++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw ZmFkZTUwHhcNMjUxMjEyMDIwMDQwWhcNMjUxMjEzMDIwMDQwWjAzMTEwLwYDVQQD EyhkNjAxZjU0ZmUzMmY3MjdiNWRiOTlkNTk2YzIzZDRjNjQzMjRhZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bcTXJi3PQUn2SVPgYDcujCrKtxh zGS0TxcnjN1AGHplEabTvs1rK1+6cmC/hCjIQ8+Qv2r03X7SfeKYGVcMZRZO7egx jrO4GvQXUQ/YEX+ohMKQiHpOo5wPkpFjiw0mMPWcIu0lgInXG9c/ccJYVEsXMphX GqQHbQIK/YmBTUPl43VIvpl9GPoHCWHs5hzxqNkoYSFkTR4UJqaOM9PTdTlouJra xCIUOcnjGRQNBlZY0fBC4QFsGzQwnxniyPmeO3b0gOD0n+d3oh0oX/wdg8v0MDt6 TGAPW4+Mnc1yOlbs3ypbW6E+VEU4JZPLpAAnw/NVqr5lNw4aWcKVpOx8rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYB9U/jL3J7XbmdWWwj1MZDJK1pMB8GA1UdIwQY MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt NWQ5MmNlZjIzYzVhLzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+1Q2Ku8 5ybGO4dxZTwLoWTVm3Fr/RTWeGrXHQASZeL1n8y/GPHWignofdmXYf5E9pACsDnr 4j7HJUzDVQFqKLGQ3b5rBWj/sar4atoGznBk3O1eU/UBHx53rYmu48YwbwJ8+NHb IWvaz9RAuGNREwhlOzuEDKhE330QMmVDBCZp0rt5xZlBSat+viqp1TYdxH3f26PF 8ALLgxlpKOBSsFTpnl72OPVPs1ZwJAzPBCizTUX0g7spZOli1OmD0qYcSeJGTWkI 6iEMHCiiGJ4qIy5tjkY3LGtrC/yKqPS841qTJds0FUJa8pIBdaRxNXkdKEubRcPH FLOv2UZANRtZ7A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:50 2025 by rpki-client