This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json) Hash identifier: W5uGWXbMVxp8ck0UCd5G+o+GlX5uXNYQSn/HlT9wZGQ= Subject key identifier: C5:BC:3A:4F:36:CE:5F:98:8B:50:03:DC:72:FA:D9:DA:2A:31:59:9A Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019B1A29384597304AE8DD6FA5D7A37A0F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 00:01:07 +0000 Manifest this update: Sun 14 Dec 2025 00:01:07 +0000 Manifest next update: Mon 15 Dec 2025 00:01:07 +0000 Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: F3oeP7hEmRdOxRqEO2DUktd9qGoyxpmlfy0W3aEThSE=) 2: WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa (hash: 0X0If49M+V2ammA0VwSceRVBIsja0kYtbwYh9ggCEXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:38:45:97:30:4a:e8:dd:6f:a5:d7:a3:7a:0f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Dec 14 00:01:07 2025 GMT Not After : Dec 15 00:01:07 2025 GMT Subject: CN=c5bc3a4f36ce5f988b5003dc72fad9da2a31599a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a8:7e:fb:e3:27:c7:12:b2:53:15:b0:40:dd: b8:b0:c8:60:5c:af:b4:53:19:25:34:5b:36:81:c5: c5:e0:a9:35:0e:36:98:d4:49:ac:b8:53:43:ef:6c: 60:b0:8e:b5:4a:01:7d:43:b1:5f:b5:4e:c8:0b:83: 56:ca:48:72:49:f2:a2:d2:e0:70:7a:69:65:b2:d2: e7:e2:2a:d7:56:a8:5a:42:35:ea:66:7c:24:f2:65: 55:72:34:4a:f6:56:b4:14:50:52:9a:ee:96:0e:e5: b1:72:e2:0c:d3:3c:a1:95:52:33:82:6a:ef:88:4c: ed:f0:fe:0b:b7:9e:17:04:2b:2a:91:51:54:77:cd: 46:2f:b9:ea:57:9f:e7:43:e2:1d:b8:8b:15:5e:2e: ce:dc:a6:a5:fa:cc:bc:e9:58:c1:bc:99:02:cd:13: 05:d1:94:ec:f7:4b:39:9f:ec:34:be:13:e1:48:2b: 6e:ab:3d:99:0b:09:cf:f6:f8:40:d7:0b:c2:33:03: 22:24:84:bc:85:a5:0a:78:70:81:0f:ad:78:5f:67: 04:60:3a:b1:11:6e:a9:03:cb:cd:e5:bb:6e:74:46: 3b:7e:e5:79:ff:ce:f5:31:ee:ad:33:0e:4b:ae:69: 69:22:ee:a3:cd:39:20:d8:7e:a4:c0:2f:1f:b3:55: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:3A:4F:36:CE:5F:98:8B:50:03:DC:72:FA:D9:DA:2A:31:59:9A X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:13:4e:96:e7:86:3a:67:6c:31:bd:c5:ce:25:1a:99:42:2b: 46:0c:da:fb:e7:8e:d5:7c:f7:81:16:60:5b:4c:cb:c8:24:16: d0:65:e4:a5:a5:35:47:69:7a:86:e7:c8:55:18:df:fb:cc:66: 46:6b:ea:79:eb:a2:a7:5f:fd:fc:60:b9:27:3b:b8:6a:63:6e: 80:36:dc:49:d3:a2:f2:36:02:74:ca:58:1e:79:89:41:a5:10: 0e:fc:55:8a:d4:63:b4:31:95:ee:0c:f1:f4:6f:fa:66:24:47: 2d:3e:f4:80:85:e5:53:df:8f:40:2b:d4:67:6f:6b:a0:2c:6b: cb:9b:b9:d0:ea:af:22:6f:8e:f4:f3:8b:55:dc:c9:f8:2d:75: 3c:10:e9:09:50:8d:bf:4a:c0:f4:81:d4:2d:30:28:23:e9:92: 87:8e:06:e4:7b:0e:be:73:60:1c:14:25:5a:7d:7c:34:4a:4e: 86:31:a4:d4:27:4f:16:64:ac:84:32:02:fe:f1:86:18:1a:28: 9b:6c:44:90:85:85:d2:10:ce:eb:98:5d:6f:a4:86:da:25:56: f9:1c:13:3e:4d:36:ae:cb:9a:71:30:d9:45:d3:73:9a:cf:a5: b3:e2:db:08:a3:61:6b:2a:05:ab:5a:88:19:f8:f1:e4:7c:fc: 9b:5b:b9:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKThFlzBK6N1vpdejeg+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjUxMjE0MDAwMTA3WhcNMjUxMjE1MDAwMTA3WjAzMTEwLwYDVQQD EyhjNWJjM2E0ZjM2Y2U1Zjk4OGI1MDAzZGM3MmZhZDlkYTJhMzE1OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6h+++MnxxKyUxWwQN24sMhgXK+0 UxklNFs2gcXF4Kk1DjaY1EmsuFND72xgsI61SgF9Q7FftU7IC4NWykhySfKi0uBw emllstLn4irXVqhaQjXqZnwk8mVVcjRK9la0FFBSmu6WDuWxcuIM0zyhlVIzgmrv iEzt8P4Lt54XBCsqkVFUd81GL7nqV5/nQ+IduIsVXi7O3Kal+sy86VjBvJkCzRMF 0ZTs90s5n+w0vhPhSCtuqz2ZCwnP9vhA1wvCMwMiJIS8haUKeHCBD614X2cEYDqx EW6pA8vN5btudEY7fuV5/871Me6tMw5LrmlpIu6jzTkg2H6kwC8fs1VzZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW8Ok82zl+Yi1AD3HL62doqMVmaMB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBNOlueG OmdsMb3FziUamUIrRgza++eO1Xz3gRZgW0zLyCQW0GXkpaU1R2l6hufIVRjf+8xm Rmvqeeuip1/9/GC5Jzu4amNugDbcSdOi8jYCdMpYHnmJQaUQDvxVitRjtDGV7gzx 9G/6ZiRHLT70gIXlU9+PQCvUZ29roCxry5u50OqvIm+O9POLVdzJ+C11PBDpCVCN v0rA9IHULTAoI+mSh44G5HsOvnNgHBQlWn18NEpOhjGk1CdPFmSshDIC/vGGGBoo m2xEkIWF0hDO65hdb6SG2iVW+RwTPk02rsuacTDZRdNzms+ls+LbCKNhayoFq1qI Gfjx5Hz8m1u5Fg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:05 2025 by rpki-client