This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json) Hash identifier: VAPJjgJVm4x50Ub506pv8tsQwZOWJ6ceOdV4HRCudNE= Subject key identifier: 1C:86:3F:CD:68:42:46:C2:BC:45:4E:ED:62:74:B9:D5:C6:1D:E7:BA Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Certificate serial: 019B07B518A29701B9A15A5BE625A2180CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft Manifest number: 0E4E Signing time: Wed 10 Dec 2025 10:01:07 +0000 Manifest this update: Wed 10 Dec 2025 10:01:07 +0000 Manifest next update: Thu 11 Dec 2025 10:01:07 +0000 Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: nFRmErfyrr9VZ5IqMwhV7YBydQbguLdH8Ooaq4HOrqg=) 2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:18:a2:97:01:b9:a1:5a:5b:e6:25:a2:18:0c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Validity Not Before: Dec 10 10:01:07 2025 GMT Not After : Dec 11 10:01:07 2025 GMT Subject: CN=1c863fcd684246c2bc454eed6274b9d5c61de7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:d4:af:93:1b:c5:27:7a:74:ff:32:3c:ea: d1:a9:5b:54:24:64:1f:c0:d2:8c:c1:c9:e9:2f:31: 50:bb:e3:1d:21:54:74:65:76:9a:bf:d8:d9:33:f3: ef:5b:c9:4a:2a:78:30:62:a4:86:81:e3:1c:91:93: 7a:ac:b3:98:b3:50:8b:1c:68:e3:67:c7:db:a3:4b: 62:07:61:ea:1d:fc:f0:15:6f:31:09:21:3f:f9:a3: 7b:5c:ae:87:cd:39:eb:f6:66:42:fb:4d:c3:dd:94: 93:26:30:c7:45:61:e8:72:04:23:6f:28:c1:72:7c: 94:b9:92:cc:4e:84:4c:9a:8c:65:61:12:58:1d:c5: 33:b1:6f:b2:77:77:a4:77:5c:df:5f:d3:3c:47:c9: e2:53:fa:40:1b:a5:b0:c9:60:2d:b9:d8:3d:b4:fc: 6a:55:48:47:ea:ea:2b:b3:ee:10:e7:61:7e:a2:c3: f0:ed:89:97:f9:75:d9:2c:30:cc:aa:2b:3e:f1:74: c1:06:14:a5:6d:cd:48:46:59:21:9f:02:99:3e:13: 7f:d3:4c:32:2d:23:da:65:b2:2c:df:0d:40:96:9b: e0:f4:6a:2a:07:57:0a:5e:03:a1:1f:a6:bf:5b:01: 3f:b2:e9:52:29:32:56:35:61:1d:64:e2:cf:97:0a: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:3F:CD:68:42:46:C2:BC:45:4E:ED:62:74:B9:D5:C6:1D:E7:BA X509v3 Authority Key Identifier: keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5d:f6:eb:a2:a9:e1:92:21:3b:af:55:c3:fb:b7:29:04:1b: 83:47:b5:2f:25:88:dd:a5:be:d8:8e:3c:dd:87:31:93:19:e5: b2:bc:56:28:5c:75:f4:b6:cf:c3:98:94:bc:5f:b6:e0:aa:70: f0:ff:e8:9a:89:2a:a7:1d:87:bb:ad:90:47:f3:ca:8f:cb:53: 5f:5f:3a:cd:22:c5:14:78:3c:2f:3f:f0:51:8f:7b:0c:eb:4a: 8e:00:cf:e8:22:99:75:a2:df:d5:91:e0:41:0d:cf:ba:9a:04: 6f:78:23:95:1f:0f:fd:9f:62:d5:b0:2e:de:03:65:22:95:79: 52:ba:9b:af:f1:96:e8:0c:80:b2:43:6f:90:d4:d8:12:af:2b: 2c:16:d7:84:ce:29:de:13:5c:c0:55:08:0b:8b:36:d8:03:6d: f9:a2:b3:de:f2:d0:95:e9:c0:2b:d7:7a:5f:8b:8e:c2:73:2a: 39:14:15:f4:62:f1:e7:6f:ae:43:41:12:02:57:1e:b8:c3:9a: 75:ed:86:9d:02:c9:d2:5c:52:7b:58:63:34:c3:97:5d:e2:a3: 4c:50:84:6d:49:c6:a7:49:c5:07:47:ab:67:4e:dd:2c:43:30: f8:f8:a4:ca:95:97:5a:41:10:95:28:1e:96:87:3b:4f:43:9c: 14:6a:ad:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtRiilwG5oVpb5iWiGAy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk ODFhYTAwHhcNMjUxMjEwMTAwMTA3WhcNMjUxMjExMTAwMTA3WjAzMTEwLwYDVQQD EygxYzg2M2ZjZDY4NDI0NmMyYmM0NTRlZWQ2Mjc0YjlkNWM2MWRlN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzHUr5MbxSd6dP8yPOrRqVtUJGQf wNKMwcnpLzFQu+MdIVR0ZXaav9jZM/PvW8lKKngwYqSGgeMckZN6rLOYs1CLHGjj Z8fbo0tiB2HqHfzwFW8xCSE/+aN7XK6HzTnr9mZC+03D3ZSTJjDHRWHocgQjbyjB cnyUuZLMToRMmoxlYRJYHcUzsW+yd3ekd1zfX9M8R8niU/pAG6WwyWAtudg9tPxq VUhH6uors+4Q52F+osPw7YmX+XXZLDDMqis+8XTBBhSlbc1IRlkhnwKZPhN/00wy LSPaZbIs3w1Alpvg9GoqB1cKXgOhH6a/WwE/sulSKTJWNWEdZOLPlwqHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByGP81oQkbCvEVO7WJ0udXGHee6MB8GA1UdIwQY MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF3266Kp 4ZIhO69Vw/u3KQQbg0e1LyWI3aW+2I483YcxkxnlsrxWKFx19LbPw5iUvF+24Kpw 8P/omokqpx2Hu62QR/PKj8tTX186zSLFFHg8Lz/wUY97DOtKjgDP6CKZdaLf1ZHg QQ3PupoEb3gjlR8P/Z9i1bAu3gNlIpV5Urqbr/GW6AyAskNvkNTYEq8rLBbXhM4p 3hNcwFUIC4s22ANt+aKz3vLQlenAK9d6X4uOwnMqORQV9GLx52+uQ0ESAlceuMOa de2GnQLJ0lxSe1hjNMOXXeKjTFCEbUnGp0nFB0erZ07dLEMw+PikypWXWkEQlSge loc7T0OcFGqtEQ== -----END CERTIFICATE-----Generated at Wed Dec 10 19:27:57 2025 by rpki-client