This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json) Hash identifier: Z0ijsNiz0kUX2DUOGHQoDK1GNJ2DGok6ygetPD71rR0= Subject key identifier: AC:0A:6D:BA:9B:4F:2B:A1:82:AA:CE:FD:E0:91:60:B6:93:13:54:57 Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Certificate serial: 019B1BA94A80AFF27B2F2EB313AD09854963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 07:00:37 +0000 Manifest this update: Sun 14 Dec 2025 07:00:37 +0000 Manifest next update: Mon 15 Dec 2025 07:00:37 +0000 Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: Ikrb9dh6gcimlEwL2AjKa+kROab6pDIQA5Wbhd7wrbg=) 2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:4a:80:af:f2:7b:2f:2e:b3:13:ad:09:85:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Validity Not Before: Dec 14 07:00:37 2025 GMT Not After : Dec 15 07:00:37 2025 GMT Subject: CN=ac0a6dba9b4f2ba182aacefde09160b693135457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:40:02:ef:34:ed:3b:2a:db:cc:6c:c6:58: 07:cf:5f:bd:37:c4:e3:c7:3c:94:7c:6d:bf:62:87: 47:15:68:bb:10:ea:85:ba:0b:dc:ce:9c:d1:b2:cf: c6:fa:f2:76:95:0f:84:f1:ef:c0:6e:0c:f6:1b:f0: c8:46:0e:13:bc:3b:05:af:b6:05:44:3b:ab:72:3d: 97:b4:56:32:14:ec:c1:3f:45:a2:94:1a:2d:8d:36: ed:bd:13:b7:08:44:fd:02:25:8b:3f:ad:0f:46:e1: 25:c1:ec:1f:51:c1:6d:fc:b9:03:59:da:98:6e:c5: 34:2d:c8:a4:d9:7e:bc:94:ff:94:32:58:36:84:57: bf:86:39:cd:e4:5a:a0:e1:08:fc:f5:73:43:6d:ec: f9:34:2e:a5:5b:92:3c:9a:c2:10:0b:13:2f:ca:5c: 8b:aa:c8:a4:7c:bc:d9:28:7a:f5:9a:dd:7a:a7:42: 74:04:cb:f7:3e:d2:91:33:9a:38:cd:dc:3d:9c:87: 2b:29:cc:b2:31:42:26:7a:e0:ac:8e:40:0b:97:43: 65:b3:2b:bb:9f:99:9b:bb:14:2b:da:34:61:f5:73: e3:87:df:05:2d:78:a9:70:eb:0f:b9:5b:97:be:3b: 02:6a:f9:fc:e2:a2:f9:8f:df:af:fc:e1:d2:51:7a: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0A:6D:BA:9B:4F:2B:A1:82:AA:CE:FD:E0:91:60:B6:93:13:54:57 X509v3 Authority Key Identifier: keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1a:48:25:9c:d5:db:a3:29:42:f9:2a:ba:aa:d3:37:bb:40: 14:b3:91:e1:91:11:83:fd:ac:23:ed:1a:90:21:2e:c7:71:db: 0d:c5:68:49:25:54:69:97:ac:7e:a3:f3:86:06:86:69:14:f8: ef:99:f5:b7:a8:67:69:77:95:61:fc:45:34:82:74:a1:d9:b3: 56:97:69:27:8a:bd:3b:1e:4d:c4:bf:d4:86:5e:07:f4:db:8b: 11:fc:90:fd:b5:b4:4c:78:d0:e1:a2:cd:c2:b6:54:fe:80:2d: cc:2a:8c:22:d8:d2:4d:25:4d:bd:35:2a:55:2b:42:21:45:95: d8:86:75:f0:9e:39:09:fb:66:0b:ed:38:2b:ef:84:c2:3d:4d: 85:6f:9d:fd:c6:81:28:1d:be:1d:a7:26:9b:7c:c9:56:30:4d: 98:a3:93:cf:51:e7:09:12:37:b2:fe:b2:2b:f9:e3:bd:fe:8f: 37:0a:6e:b8:22:db:1a:61:4c:b2:1b:56:3a:c0:d1:83:cf:2b: 91:de:16:a3:09:a0:43:c6:0f:c7:d2:68:58:13:b5:37:69:dc: ee:08:e9:44:ac:a9:e8:00:61:2a:29:6f:c4:40:89:43:b7:c2: 84:60:f9:33:f1:3c:df:52:32:62:4e:e5:2e:70:e7:a0:43:bd: b0:08:5c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqUqAr/J7Ly6zE60JhUljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3 M2I2NDMwHhcNMjUxMjE0MDcwMDM3WhcNMjUxMjE1MDcwMDM3WjAzMTEwLwYDVQQD EyhhYzBhNmRiYTliNGYyYmExODJhYWNlZmRlMDkxNjBiNjkzMTM1NDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP9AAu807Tsq28xsxlgHz1+9N8Tj xzyUfG2/YodHFWi7EOqFugvczpzRss/G+vJ2lQ+E8e/Abgz2G/DIRg4TvDsFr7YF RDurcj2XtFYyFOzBP0WilBotjTbtvRO3CET9AiWLP60PRuElwewfUcFt/LkDWdqY bsU0Lcik2X68lP+UMlg2hFe/hjnN5Fqg4Qj89XNDbez5NC6lW5I8msIQCxMvylyL qsikfLzZKHr1mt16p0J0BMv3PtKRM5o4zdw9nIcrKcyyMUImeuCsjkALl0Nlsyu7 n5mbuxQr2jRh9XPjh98FLXipcOsPuVuXvjsCavn84qL5j9+v/OHSUXou3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwKbbqbTyuhgqrO/eCRYLaTE1RXMB8GA1UdIwQY MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt MzRmN2Q1MTMxMzY3LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3 LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhpIJZzV 26MpQvkquqrTN7tAFLOR4ZERg/2sI+0akCEux3HbDcVoSSVUaZesfqPzhgaGaRT4 75n1t6hnaXeVYfxFNIJ0odmzVpdpJ4q9Ox5NxL/Uhl4H9NuLEfyQ/bW0THjQ4aLN wrZU/oAtzCqMItjSTSVNvTUqVStCIUWV2IZ18J45CftmC+04K++Ewj1NhW+d/caB KB2+Hacmm3zJVjBNmKOTz1HnCRI3sv6yK/njvf6PNwpuuCLbGmFMshtWOsDRg88r kd4WowmgQ8YPx9JoWBO1N2nc7gjpRKyp6ABhKilvxECJQ7fChGD5M/E831IyYk7l LnDnoEO9sAhcbg== -----END CERTIFICATE-----Generated at Sun Dec 14 17:13:15 2025 by rpki-client