This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json) Hash identifier: UBpHi4OByVObxKdiODDOUbPo2Ydzcxoax+2i0Tgi9fg= Subject key identifier: 6F:A7:B1:3D:71:0C:AB:E8:76:3F:5A:B2:B8:5D:40:B4:91:0E:BF:EF Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4 Certificate serial: 019B1EE19713E32BCC136E4FB8ADBC16D96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft Manifest number: 1037 Signing time: Sun 14 Dec 2025 22:00:59 +0000 Manifest this update: Sun 14 Dec 2025 22:00:59 +0000 Manifest next update: Mon 15 Dec 2025 22:00:59 +0000 Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: EKblyZZD0bG3RrFWOUpwZOsV014QVooZztY7+Y4TMdY=) 2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=) 3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:97:13:e3:2b:cc:13:6e:4f:b8:ad:bc:16:d9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4 Validity Not Before: Dec 14 22:00:59 2025 GMT Not After : Dec 15 22:00:59 2025 GMT Subject: CN=6fa7b13d710cabe8763f5ab2b85d40b4910ebfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:8f:d3:15:29:ce:d4:ae:43:22:13:45:ab: 74:c8:dc:15:d0:45:95:27:01:be:51:bd:77:25:bb: 72:46:e5:2f:38:e5:2e:c1:a2:25:1d:53:f3:98:5a: f3:16:c7:84:79:94:0f:f6:53:37:fd:f6:ee:32:9d: 9e:5e:8e:48:4b:4e:a9:f0:4f:81:9f:40:cb:84:e1: df:16:96:9d:7c:86:68:0e:e0:71:cb:8a:bd:df:97: f9:d0:c2:65:c5:0f:7a:34:f6:4b:c5:34:39:02:30: 75:dc:b3:31:e5:c8:71:8d:52:dc:ba:e2:b0:8f:a4: 76:da:5f:5a:07:cf:1d:73:10:9c:82:61:3d:aa:db: 13:0f:34:a4:fe:47:8a:cf:97:2c:25:94:17:95:b0: 5c:45:08:b9:04:6a:3b:49:e3:00:62:a8:52:81:f5: 5e:c2:06:ea:9e:77:e7:3a:3d:6e:3d:9f:13:32:e1: b3:f9:db:58:6b:b2:b7:28:85:a9:e7:92:dc:2b:b0: 8d:b9:8c:90:27:69:3d:67:97:f4:e0:d0:03:fc:f8: 21:73:10:13:9e:b7:e0:2b:f1:c4:6a:d5:80:2e:13: 0d:84:6c:ea:0e:d3:a5:20:d3:68:b4:07:7b:32:9b: f5:95:a6:dd:e4:87:83:b0:e7:7e:da:da:50:0a:83: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A7:B1:3D:71:0C:AB:E8:76:3F:5A:B2:B8:5D:40:B4:91:0E:BF:EF X509v3 Authority Key Identifier: keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:35:7a:92:5e:4c:f5:cf:03:c9:c9:24:0d:0f:5c:8d:c7: a9:bf:94:41:27:d0:a0:1e:7c:3c:a0:e6:09:e5:2f:b6:39:f0: c7:81:08:97:4b:96:f5:fc:0f:f9:2b:53:05:a0:98:ca:6c:da: 19:7f:3e:ed:4d:23:ca:0d:62:e5:cc:bd:b7:de:7c:de:f8:2b: 40:13:55:53:db:9f:68:b9:b6:28:7f:42:99:a3:62:1b:8a:f9: c2:35:f2:a4:bc:ed:9b:f5:b7:e0:5e:1c:c8:20:40:97:bd:d7: 75:40:51:7b:5d:23:4e:ed:7b:cd:ee:4e:e5:ba:59:c8:bd:f8: 46:9c:c5:9b:eb:3c:fd:42:35:01:c7:a6:a8:b3:84:5a:ef:f6: c6:92:9b:45:c6:df:3b:78:92:69:54:66:ea:32:11:d9:ec:79: 53:e1:06:17:a1:a6:08:ff:cb:81:05:eb:ab:a5:0d:9e:be:75: 49:e5:a2:c7:83:89:c5:56:b3:38:5d:c7:ea:89:10:2f:48:cc: 35:ac:7e:4e:a3:89:f3:97:69:b2:a5:dc:3d:eb:32:1c:d8:47: 83:ad:32:e3:d7:79:5c:01:67:24:64:41:f0:03:3e:a4:b3:cd: 42:a3:b5:52:0b:a6:be:c8:23:8d:10:c0:60:b9:23:c7:89:3c: 93:23:31:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4ZcT4yvME25PuK28FtluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi ODgzYzQwHhcNMjUxMjE0MjIwMDU5WhcNMjUxMjE1MjIwMDU5WjAzMTEwLwYDVQQD Eyg2ZmE3YjEzZDcxMGNhYmU4NzYzZjVhYjJiODVkNDBiNDkxMGViZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSP0xUpztSuQyITRat0yNwV0EWV JwG+Ub13JbtyRuUvOOUuwaIlHVPzmFrzFseEeZQP9lM3/fbuMp2eXo5IS06p8E+B n0DLhOHfFpadfIZoDuBxy4q935f50MJlxQ96NPZLxTQ5AjB13LMx5chxjVLcuuKw j6R22l9aB88dcxCcgmE9qtsTDzSk/keKz5csJZQXlbBcRQi5BGo7SeMAYqhSgfVe wgbqnnfnOj1uPZ8TMuGz+dtYa7K3KIWp55LcK7CNuYyQJ2k9Z5f04NAD/PghcxAT nrfgK/HEatWALhMNhGzqDtOlINNotAd7Mpv1labd5IeDsOd+2tpQCoPfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+nsT1xDKvodj9asrhdQLSRDr/vMB8GA1UdIwQY MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfg1epJe TPXPA8nJJA0PXI3Hqb+UQSfQoB58PKDmCeUvtjnwx4EIl0uW9fwP+StTBaCYymza GX8+7U0jyg1i5cy9t9583vgrQBNVU9ufaLm2KH9CmaNiG4r5wjXypLztm/W34F4c yCBAl73XdUBRe10jTu17ze5O5bpZyL34RpzFm+s8/UI1AcemqLOEWu/2xpKbRcbf O3iSaVRm6jIR2ex5U+EGF6GmCP/LgQXrq6UNnr51SeWix4OJxVazOF3H6okQL0jM Nax+TqOJ85dpsqXcPesyHNhHg60y49d5XAFnJGRB8AM+pLPNQqO1UgumvsgjjRDA YLkjx4k8kyMxAA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:10:08 2025 by rpki-client