This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json) Hash identifier: StYdhrf3CBoBaILTkvqkg6GoHe8vwk37con5WXQLspU= Subject key identifier: 8D:FB:AE:ED:C0:E0:AF:15:CA:5D:51:D1:4B:48:91:68:71:58:46:65 Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Certificate serial: 019B48823F832F35E9FAA0A1E76A670D46C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft Manifest number: 0865 Signing time: Tue 23 Dec 2025 00:00:53 +0000 Manifest this update: Tue 23 Dec 2025 00:00:53 +0000 Manifest next update: Wed 24 Dec 2025 00:00:53 +0000 Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: z7YpZ45KCZwqXwdtcTVfYw6/j+YzmBdnXhH+aDvhUU8=) 2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:3f:83:2f:35:e9:fa:a0:a1:e7:6a:67:0d:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Validity Not Before: Dec 23 00:00:53 2025 GMT Not After : Dec 24 00:00:53 2025 GMT Subject: CN=8dfbaeedc0e0af15ca5d51d14b48916871584665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:a0:5b:bc:fd:12:58:bd:bd:e6:3d:0e:66: c0:a4:9f:38:b8:ce:e2:61:cb:d2:60:28:d3:e0:bf: 75:f1:46:79:0c:66:02:85:5e:d3:13:dd:70:0f:ee: 4b:9d:b3:db:a2:a3:93:de:25:53:29:db:9d:6f:1b: bc:3d:96:3c:db:74:10:7f:3d:ce:13:0f:5f:83:5e: 15:d7:d0:1e:b4:e6:70:fc:bb:b6:1a:42:6f:05:9b: 1b:08:6d:50:e7:f3:f9:2d:e7:c5:b8:53:7a:cc:a2: bc:6f:d6:9a:fc:22:b6:26:b9:26:b4:f5:a9:f3:3f: 7a:bb:dc:af:da:62:3c:64:3f:32:9e:fb:09:75:11: ec:16:2f:5b:c7:ad:a8:3a:96:52:22:55:58:82:35: 62:bf:ee:74:41:30:cb:8d:34:e0:ce:60:ac:4b:bf: 3b:3a:13:22:db:ce:f8:fe:84:f9:07:c5:a8:ad:45: 05:d4:45:4c:32:86:12:18:5d:96:9c:a0:ef:26:76: 9f:e2:13:61:60:d8:5e:65:c1:d4:37:49:c3:40:8f: 1b:a7:3d:f7:d1:08:5d:cd:fb:8c:13:a3:7d:2a:ec: 8a:b7:51:0b:11:17:fa:89:07:9a:e1:94:5f:e5:b6: 01:fa:6f:02:e2:66:10:1d:32:87:13:64:f1:35:51: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FB:AE:ED:C0:E0:AF:15:CA:5D:51:D1:4B:48:91:68:71:58:46:65 X509v3 Authority Key Identifier: keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:89:71:9a:7b:f7:f2:d9:7b:ca:57:7a:18:36:1c:97:59:a9: 7b:f6:b2:1f:68:51:01:27:d3:60:51:bf:fb:cf:13:26:ef:17: 97:05:88:09:6f:42:bd:59:4a:3e:fe:48:78:57:e2:39:76:a4: 32:b7:c7:39:48:c2:37:86:6c:83:4e:f9:87:f4:49:6e:45:90: 45:22:84:5f:a1:24:d6:4e:96:39:84:e2:6a:31:59:34:6b:b8: 8e:71:8d:2e:4a:5d:a0:1e:e7:64:a7:e0:ad:38:d4:72:dd:cc: ff:de:c8:ec:46:8a:68:07:0e:4b:41:07:b7:af:d6:32:03:9c: 56:0a:ae:59:b1:7e:28:3b:63:91:d9:34:38:34:18:a3:b6:0a: 68:06:59:15:d0:46:89:2b:4e:15:ac:36:44:f0:41:ee:e7:9d: bb:50:8c:65:ee:b1:43:90:36:4d:33:2b:f8:88:f0:6d:24:33: 5d:ca:13:2c:60:bb:8d:e5:95:42:30:1f:48:94:3d:85:83:4c: a5:23:4f:e4:97:d7:ee:51:7b:d4:3e:2e:5d:3b:af:42:f7:e7: 4e:56:14:23:80:42:9d:80:83:18:72:e9:8f:6e:6c:95:8e:ee: 00:0b:94:5b:3b:64:84:ca:09:61:ef:07:4f:81:ea:e7:6a:30: ab:a7:d8:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgj+DLzXp+qCh52pnDUbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl ZmE1MGYwHhcNMjUxMjIzMDAwMDUzWhcNMjUxMjI0MDAwMDUzWjAzMTEwLwYDVQQD Eyg4ZGZiYWVlZGMwZTBhZjE1Y2E1ZDUxZDE0YjQ4OTE2ODcxNTg0NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcagW7z9Eli9veY9DmbApJ84uM7i YcvSYCjT4L918UZ5DGYChV7TE91wD+5LnbPboqOT3iVTKdudbxu8PZY823QQfz3O Ew9fg14V19AetOZw/Lu2GkJvBZsbCG1Q5/P5LefFuFN6zKK8b9aa/CK2JrkmtPWp 8z96u9yv2mI8ZD8ynvsJdRHsFi9bx62oOpZSIlVYgjViv+50QTDLjTTgzmCsS787 OhMi2874/oT5B8WorUUF1EVMMoYSGF2WnKDvJnaf4hNhYNheZcHUN0nDQI8bpz33 0QhdzfuME6N9KuyKt1ELERf6iQea4ZRf5bYB+m8C4mYQHTKHE2TxNVFMVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI37ru3A4K8Vyl1R0UtIkWhxWEZlMB8GA1UdIwQY MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYlxmnv3 8tl7yld6GDYcl1mpe/ayH2hRASfTYFG/+88TJu8XlwWICW9CvVlKPv5IeFfiOXak MrfHOUjCN4Zsg075h/RJbkWQRSKEX6Ek1k6WOYTiajFZNGu4jnGNLkpdoB7nZKfg rTjUct3M/97I7EaKaAcOS0EHt6/WMgOcVgquWbF+KDtjkdk0ODQYo7YKaAZZFdBG iStOFaw2RPBB7uedu1CMZe6xQ5A2TTMr+IjwbSQzXcoTLGC7jeWVQjAfSJQ9hYNM pSNP5JfX7lF71D4uXTuvQvfnTlYUI4BCnYCDGHLpj25slY7uAAuUWztkhMoJYe8H T4Hq52owq6fY8A== -----END CERTIFICATE-----Generated at Tue Dec 23 03:23:21 2025 by rpki-client