This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json) Hash identifier: IEG7qoVrVwI0gfmo33IW072CRZCf/zB8driPZUI9FWk= Subject key identifier: 27:FC:4F:E6:82:7B:AA:A9:9A:DA:70:C9:79:95:68:35:61:CA:44:B5 Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Certificate serial: 019B5ABFD53F93924C9ECAD90D37F3DEE6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft Manifest number: 11A8 Signing time: Fri 26 Dec 2025 13:01:19 +0000 Manifest this update: Fri 26 Dec 2025 13:01:19 +0000 Manifest next update: Sat 27 Dec 2025 13:01:19 +0000 Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=) 2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: 2KF8YRJwJ3zj6kW0wffmI4rX3MdyjKt9xlB4XX6zTC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d5:3f:93:92:4c:9e:ca:d9:0d:37:f3:de:e6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Validity Not Before: Dec 26 13:01:19 2025 GMT Not After : Dec 27 13:01:19 2025 GMT Subject: CN=27fc4fe6827baaa99ada70c97995683561ca44b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:c6:3d:e3:68:7f:b2:d6:db:d2:75:6e:7c: b1:a0:fb:12:05:5a:a9:cb:34:de:ee:e3:f1:f1:76: a8:75:6a:33:8a:3b:54:68:ec:d0:c9:46:16:a0:60: 18:2b:6c:e7:fa:1a:70:c8:2d:07:79:85:9e:96:24: 30:db:78:e5:2a:11:15:5f:71:dc:82:3e:da:e5:ba: 16:3b:ac:2f:d4:bf:7e:65:c1:86:28:39:48:42:c2: af:88:7a:08:6f:58:f2:12:71:54:41:88:18:c7:05: b9:f4:a8:d8:6b:eb:b8:19:23:44:d7:52:85:ba:95: 20:2c:e0:b5:6d:c0:62:36:32:f3:07:0d:3e:14:91: 4a:f2:4f:0e:a8:b9:bd:3a:12:54:b1:ad:5b:4b:76: af:6f:aa:7d:4c:eb:6e:b5:4c:be:fa:e1:75:5b:fd: b1:c2:37:cf:f3:05:c3:5a:7f:e0:0c:95:8f:53:b3: 20:95:78:2e:c8:8a:63:ee:20:81:d7:22:e4:7b:e7: 87:f7:39:d8:35:e7:6f:8e:9c:50:4d:73:f8:22:88: 63:3a:4a:1c:f1:ca:42:89:27:40:8b:27:5b:88:77: 09:b5:6e:28:6f:17:32:b1:00:81:2b:b4:57:ba:1d: 59:47:a5:ca:8e:1f:39:7d:c7:fe:b5:ba:39:17:25: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:4F:E6:82:7B:AA:A9:9A:DA:70:C9:79:95:68:35:61:CA:44:B5 X509v3 Authority Key Identifier: keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ee:5c:9a:6c:af:47:e5:c7:29:fa:a5:65:ef:d7:ba:42:de: b1:9c:89:af:2c:e1:d9:74:09:a7:81:72:ca:74:76:e7:37:2c: ea:56:0f:81:dd:52:77:42:24:fb:2c:63:4d:59:d1:6e:e5:fc: 50:53:19:69:78:0b:70:1b:53:8e:aa:8f:97:61:d2:a7:94:c3: 91:2f:16:86:7c:3b:07:57:1a:42:16:87:11:b9:96:e7:95:ab: d2:3d:fb:4f:88:6a:20:c5:07:fc:e0:0f:a8:4b:dd:56:d6:ab: 1f:82:09:69:41:7d:78:8b:34:56:13:ba:9d:83:d1:86:a6:86: 31:d5:f6:e6:7c:33:45:ae:c6:62:be:b3:33:51:13:4c:cc:a7: 43:fc:fc:cb:5c:fc:d5:05:b0:e6:f0:14:75:39:61:ee:e5:3b: c8:71:5d:00:4f:3e:eb:60:32:09:ee:cb:26:c7:dd:c7:ec:a8: 0f:42:19:eb:72:f8:c2:d8:29:b4:64:32:f7:c0:1a:ea:e1:3b: bb:37:93:cf:f4:1b:23:0e:73:b7:c0:f4:a5:0c:ba:f6:61:29: de:99:9f:91:03:0c:0e:86:56:6d:9f:d2:29:ac:48:aa:69:33: 4a:8f:f2:bf:67:76:12:65:f2:59:80:32:1d:6f:52:f2:1c:81: 56:9a:95:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9U/k5JMnsrZDTfz3ua/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODZjOWY3Y2QxNzNiYmNkMWRiNjFlMGYxYjRlYmUwNWMx YjljYTEwHhcNMjUxMjI2MTMwMTE5WhcNMjUxMjI3MTMwMTE5WjAzMTEwLwYDVQQD EygyN2ZjNGZlNjgyN2JhYWE5OWFkYTcwYzk3OTk1NjgzNTYxY2E0NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzvGPeNof7LW29J1bnyxoPsSBVqp yzTe7uPx8XaodWozijtUaOzQyUYWoGAYK2zn+hpwyC0HeYWeliQw23jlKhEVX3Hc gj7a5boWO6wv1L9+ZcGGKDlIQsKviHoIb1jyEnFUQYgYxwW59KjYa+u4GSNE11KF upUgLOC1bcBiNjLzBw0+FJFK8k8OqLm9OhJUsa1bS3avb6p9TOtutUy++uF1W/2x wjfP8wXDWn/gDJWPU7MglXguyIpj7iCB1yLke+eH9znYNedvjpxQTXP4IohjOkoc 8cpCiSdAiydbiHcJtW4obxcysQCBK7RXuh1ZR6XKjh85fcf+tbo5FyX9/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf8T+aCe6qpmtpwyXmVaDVhykS1MB8GA1UdIwQY MBaAFG+GyffNFzu80dth4PG06+BcG5yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMt ZGMwZGM1ZDUxNDFmLzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMtZGMwZGM1ZDUxNDFm LzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAee5cmmyv R+XHKfqlZe/XukLesZyJryzh2XQJp4FyynR25zcs6lYPgd1Sd0Ik+yxjTVnRbuX8 UFMZaXgLcBtTjqqPl2HSp5TDkS8Whnw7B1caQhaHEbmW55Wr0j37T4hqIMUH/OAP qEvdVtarH4IJaUF9eIs0VhO6nYPRhqaGMdX25nwzRa7GYr6zM1ETTMynQ/z8y1z8 1QWw5vAUdTlh7uU7yHFdAE8+62AyCe7LJsfdx+yoD0IZ63L4wtgptGQy98Aa6uE7 uzeTz/QbIw5zt8D0pQy69mEp3pmfkQMMDoZWbZ/SKaxIqmkzSo/yv2d2EmXyWYAy HW9S8hyBVpqVBg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:15 2025 by rpki-client