This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json) Hash identifier: 4X5Eo+CeqD6NU1LPTAi16vE4nP0tes38/gRDwPA6Rqs= Subject key identifier: A3:BD:89:C2:15:66:CB:87:99:58:03:56:F0:07:87:C9:95:7D:87:06 Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019B07EBA99ADC44D74CE748DDB533544CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 11:00:43 +0000 Manifest this update: Wed 10 Dec 2025 11:00:43 +0000 Manifest next update: Thu 11 Dec 2025 11:00:43 +0000 Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: E5yp1GL6+3L6P4wbqrjfWuSxCoGOlnvE9m2SGSTUrkc=) 2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:a9:9a:dc:44:d7:4c:e7:48:dd:b5:33:54:4c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Dec 10 11:00:43 2025 GMT Not After : Dec 11 11:00:43 2025 GMT Subject: CN=a3bd89c21566cb8799580356f00787c9957d8706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:77:f3:92:ed:58:8a:1c:c4:6e:ed:f0:aa: c9:6a:f6:0b:20:11:ac:e3:64:ad:a1:ee:91:96:29: 41:73:12:41:ce:79:aa:39:39:8d:22:0f:b0:cc:58: 20:76:2e:cd:32:40:8e:d1:6b:6e:7f:b2:a3:03:50: 85:f8:0e:4d:f1:f5:39:98:40:22:cb:3c:59:f6:63: 3f:b0:f9:23:e9:e0:d6:d0:88:04:e1:f7:39:6c:d6: 0f:3a:39:de:5d:8e:2f:c4:48:91:50:de:73:4d:45: 13:e3:f4:a8:46:36:cd:45:6d:19:c3:c5:04:a2:cf: 50:83:c0:92:6c:5c:5d:36:f9:11:33:be:be:d4:e0: 7f:5a:2d:92:94:8b:46:d3:06:7a:b3:a9:4e:67:8f: 86:74:8c:be:1e:3b:4a:c6:48:6c:95:06:71:c9:d7: 32:44:14:29:9c:f1:75:4f:7d:c5:c0:18:89:7f:34: 3a:50:fe:66:29:f5:97:9b:5f:2d:5e:d8:39:c0:db: 3d:5c:1a:30:4a:ec:15:52:9e:8c:25:53:fc:59:32: 4a:08:d3:06:9c:e2:86:4d:28:e6:d6:44:2f:bc:0c: 75:8d:85:2f:f1:3b:21:a2:2f:4e:0b:95:59:20:f3: aa:d3:60:3e:87:94:9a:eb:6c:37:53:81:4a:d1:8a: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:89:C2:15:66:CB:87:99:58:03:56:F0:07:87:C9:95:7D:87:06 X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:81:49:e8:60:72:22:d3:88:0c:32:cf:28:14:98:e5:f9:f6: 26:3e:7c:fa:2e:96:33:1b:be:7f:ab:fa:14:2e:c1:76:eb:46: a9:00:ae:ba:ca:5d:c0:cc:ff:ed:e5:f8:d2:1a:77:3e:82:1c: 38:2f:5d:79:32:86:07:8c:25:a4:f4:b0:ba:98:0d:cd:3d:64: ac:65:7a:fe:82:34:89:1a:51:aa:2b:4e:fa:5a:36:93:51:10: 6c:3f:06:9f:76:4e:d3:2f:70:4e:ff:a9:37:c2:ea:7c:89:4e: bf:b4:b8:09:81:95:6e:cc:5e:6b:a9:82:5d:ae:e0:ab:16:63: de:d3:c7:6b:ab:6d:ef:2a:0f:78:89:53:70:77:ee:87:18:27: 90:77:ea:28:12:8c:4f:c3:8c:4c:73:76:95:ac:69:e8:cd:e9: 49:85:12:b7:c7:2c:91:4a:19:16:99:a3:56:a8:15:63:8b:9f: f9:81:cb:de:d5:ce:74:fd:30:d3:1f:11:1d:e2:99:15:0e:24: bf:22:a3:b3:39:a2:26:5f:4c:1e:50:c7:a6:19:f7:be:f6:c5: 7d:21:17:ab:ab:df:2e:9b:4a:03:20:a8:36:24:53:fa:fd:d2: 4e:b9:1b:e2:b8:90:a7:7f:46:d4:9b:8a:e3:db:19:05:56:9f: b2:5a:42:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH66ma3ETXTOdI3bUzVEzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjUxMjEwMTEwMDQzWhcNMjUxMjExMTEwMDQzWjAzMTEwLwYDVQQD EyhhM2JkODljMjE1NjZjYjg3OTk1ODAzNTZmMDA3ODdjOTk1N2Q4NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67J385LtWIocxG7t8KrJavYLIBGs 42Stoe6RlilBcxJBznmqOTmNIg+wzFggdi7NMkCO0Wtuf7KjA1CF+A5N8fU5mEAi yzxZ9mM/sPkj6eDW0IgE4fc5bNYPOjneXY4vxEiRUN5zTUUT4/SoRjbNRW0Zw8UE os9Qg8CSbFxdNvkRM76+1OB/Wi2SlItG0wZ6s6lOZ4+GdIy+HjtKxkhslQZxydcy RBQpnPF1T33FwBiJfzQ6UP5mKfWXm18tXtg5wNs9XBowSuwVUp6MJVP8WTJKCNMG nOKGTSjm1kQvvAx1jYUv8Tshoi9OC5VZIPOq02A+h5Sa62w3U4FK0YpqyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO9icIVZsuHmVgDVvAHh8mVfYcGMB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoFJ6GBy ItOIDDLPKBSY5fn2Jj58+i6WMxu+f6v6FC7BdutGqQCuuspdwMz/7eX40hp3PoIc OC9deTKGB4wlpPSwupgNzT1krGV6/oI0iRpRqitO+lo2k1EQbD8Gn3ZO0y9wTv+p N8LqfIlOv7S4CYGVbsxea6mCXa7gqxZj3tPHa6tt7yoPeIlTcHfuhxgnkHfqKBKM T8OMTHN2laxp6M3pSYUSt8cskUoZFpmjVqgVY4uf+YHL3tXOdP0w0x8RHeKZFQ4k vyKjszmiJl9MHlDHphn3vvbFfSEXq6vfLptKAyCoNiRT+v3STrkb4riQp39G1JuK 49sZBVafslpCLQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:43 2025 by rpki-client