This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json) Hash identifier: MPO51Ho1Pxa0lLYdqSyd0na6h/rNVoGc+KzwUSZBYTQ= Subject key identifier: 9C:82:18:5C:80:45:B8:73:C7:DF:8F:5E:08:47:BB:4F:93:00:BA:A3 Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318 Certificate serial: 019B18DF5915305F6CFD54C7B73D7A2A8439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 18:00:48 +0000 Manifest this update: Sat 13 Dec 2025 18:00:48 +0000 Manifest next update: Sun 14 Dec 2025 18:00:48 +0000 Files and hashes: 1: 8s9AQh9G6fVBfnNbnVmZTqXsuwg.roa (hash: 7Lq9v+syjN0uylqG5ZKh6ZFMzZAMtKjXsvWJlQW3WqE=) 2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: L8YSGMlWDoIYvZ3+nNyaYaQv2z8Km+8lJpYiP5WQvWU=) 3: Co6zif6CgWxRVPx-_ozSij8EWsM.roa (hash: tL4rizo5edxFSlgftU4orevud41ccjdavnz1fdBIeh8=) 4: FACURSdoz5OXAwHWNlnhNICg9F0.roa (hash: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=) 5: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (hash: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=) 6: LbBUCL65r2B63EtnXKf7awdkLYs.roa (hash: 2aoR9do7AfxOMNUBvut0kk7xNv4cPQ2DW93XsHzKCbI=) 7: sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (hash: Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:59:15:30:5f:6c:fd:54:c7:b7:3d:7a:2a:84:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d44a52778aa65f736e72436003f6654f268318 Validity Not Before: Dec 13 18:00:48 2025 GMT Not After : Dec 14 18:00:48 2025 GMT Subject: CN=9c82185c8045b873c7df8f5e0847bb4f9300baa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:e3:1b:2f:11:8f:cf:19:52:4e:0a:35:50: 33:e3:a9:cc:88:58:7e:8a:86:ad:df:6b:82:1a:c5: 3b:ac:06:93:47:68:d6:98:5d:3e:2b:03:24:3d:21: ac:06:19:84:e3:b9:6f:63:5f:84:d3:60:45:3e:c4: a9:8b:ee:d7:b4:8b:5d:57:57:2c:da:4f:07:03:85: b6:df:bb:15:a1:61:dd:bc:50:d3:d4:cc:b8:85:a4: a4:53:50:e6:60:89:6d:ae:66:9e:6c:4f:bc:b1:ab: e4:56:a6:40:10:c5:6b:91:6e:88:94:77:c7:15:48: 7b:8c:57:5d:4b:6f:fc:22:6f:1c:29:cb:de:70:e1: 39:d3:15:ef:6f:1f:34:4c:a0:ed:0f:1e:e5:c3:ec: 23:e5:1e:ff:13:16:b8:c2:19:a2:ec:b4:d4:3f:ad: 82:6a:fa:6f:6d:f4:96:5f:28:18:e7:ce:b9:f6:b6: f0:fe:17:57:ee:12:29:4e:ae:01:17:15:34:2d:0e: 99:c2:62:24:3a:c8:ff:48:82:a3:99:32:58:d3:58: d6:d1:57:0e:bd:1d:d5:a8:df:b7:70:56:b8:ed:6c: 5d:6d:6d:e1:e5:85:93:1f:9a:70:2c:9c:05:bc:a8: 16:d3:cc:e0:65:ec:80:db:34:d6:de:76:f0:a2:e4: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:82:18:5C:80:45:B8:73:C7:DF:8F:5E:08:47:BB:4F:93:00:BA:A3 X509v3 Authority Key Identifier: keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2d:3b:19:d6:ac:7d:3f:c8:46:b0:9f:56:09:35:03:33:5b: 6e:37:45:ae:3e:d7:67:8e:df:06:42:0c:2a:19:2a:2c:74:f8: 57:20:7f:af:a0:1f:ea:c3:52:40:73:4a:54:9b:b9:15:1b:e3: c9:79:93:22:03:b7:87:a4:08:f8:27:41:0e:bf:0b:6a:a2:2f: 6a:70:00:a3:82:e5:21:94:69:db:1f:1f:29:55:77:04:90:5c: 12:b6:ad:89:c5:14:ed:1e:4e:ba:6d:b1:18:60:e0:4c:3d:90: 86:5c:6a:2b:91:5b:0e:17:42:91:a5:0e:4d:0a:c3:3f:51:02: 00:2a:14:52:c1:33:e2:5c:4b:bc:a9:50:ca:8f:50:56:06:02: 56:3f:90:87:01:47:01:a1:46:2b:ef:77:44:26:f1:1a:45:07: de:af:f9:6d:ec:09:dd:9f:ee:98:90:3d:a1:89:0e:fc:45:fb: 1b:e4:8e:9a:97:64:f8:2d:57:b6:85:7a:61:32:e2:72:3c:d4: ba:72:08:db:d8:1e:00:5f:15:25:bf:01:70:62:66:eb:4a:62: 83:75:f2:22:fe:6c:e0:90:d7:37:57:89:34:a6:e0:00:10:eb: 4b:2a:04:2d:ea:33:33:7b:6d:90:a0:0a:37:01:95:17:6c:2b: ab:2c:46:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY31kVMF9s/VTHtz16KoQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDQ0YTUyNzc4YWE2NWY3MzZlNzI0MzYwMDNmNjY1NGYy NjgzMTgwHhcNMjUxMjEzMTgwMDQ4WhcNMjUxMjE0MTgwMDQ4WjAzMTEwLwYDVQQD Eyg5YzgyMTg1YzgwNDViODczYzdkZjhmNWUwODQ3YmI0ZjkzMDBiYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JLjGy8Rj88ZUk4KNVAz46nMiFh+ ioat32uCGsU7rAaTR2jWmF0+KwMkPSGsBhmE47lvY1+E02BFPsSpi+7XtItdV1cs 2k8HA4W237sVoWHdvFDT1My4haSkU1DmYIltrmaebE+8savkVqZAEMVrkW6IlHfH FUh7jFddS2/8Im8cKcvecOE50xXvbx80TKDtDx7lw+wj5R7/Exa4whmi7LTUP62C avpvbfSWXygY58659rbw/hdX7hIpTq4BFxU0LQ6ZwmIkOsj/SIKjmTJY01jW0VcO vR3VqN+3cFa47WxdbW3h5YWTH5pwLJwFvKgW08zgZeyA2zTW3nbwouT/yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyCGFyARbhzx9+PXghHu0+TALqjMB8GA1UdIwQY MBaAFAfUSlJ3iqZfc25yQ2AD9mVPJoMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGIt MWQyOGE2MGUwZTMwLzEvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGItMWQyOGE2MGUwZTMw LzEvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsS07Gdas fT/IRrCfVgk1AzNbbjdFrj7XZ47fBkIMKhkqLHT4VyB/r6Af6sNSQHNKVJu5FRvj yXmTIgO3h6QI+CdBDr8LaqIvanAAo4LlIZRp2x8fKVV3BJBcEraticUU7R5Oum2x GGDgTD2QhlxqK5FbDhdCkaUOTQrDP1ECACoUUsEz4lxLvKlQyo9QVgYCVj+QhwFH AaFGK+93RCbxGkUH3q/5bewJ3Z/umJA9oYkO/EX7G+SOmpdk+C1XtoV6YTLicjzU unII29geAF8VJb8BcGJm60pig3XyIv5s4JDXN1eJNKbgABDrSyoELeozM3ttkKAK NwGVF2wrqyxG9w== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:05 2025 by rpki-client