This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft File: B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json) Hash identifier: h+vhG3Py2grBqOVHa5UKPpxOQ9Mvj7ns1LjWB3FJwSo= Subject key identifier: 5D:FC:A3:E2:80:A6:18:3A:3E:FC:B2:38:AD:4C:51:98:18:18:A0:9C Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e Certificate serial: 019B0F37AE998AE1C7B50FDC0320443C3288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft Manifest number: 115B Signing time: Thu 11 Dec 2025 21:01:05 +0000 Manifest this update: Thu 11 Dec 2025 21:01:05 +0000 Manifest next update: Fri 12 Dec 2025 21:01:05 +0000 Files and hashes: 1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: NxZabGVp/aLOC9Bk2hcf3bvBv1sAvB93EYLXBM0WxPk=) 2: WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa (hash: jPFVdHVWjo+CbaX7r8T+q+wkvMyetEyIe+LzWcBGU+g=) 3: lYXFJBiFIo7GF8qx1TduAJu4mZk.roa (hash: EFfOawY/LhITRuUSXF2uybmDfyRYV8O+uOvPFUBho9Y=) 4: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ae:99:8a:e1:c7:b5:0f:dc:03:20:44:3c:32:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e Validity Not Before: Dec 11 21:01:05 2025 GMT Not After : Dec 12 21:01:05 2025 GMT Subject: CN=5dfca3e280a6183a3efcb238ad4c51981818a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:6c:d3:bf:6c:61:99:bb:72:37:57:96:5f: cf:60:33:ec:00:01:c5:c5:de:1f:51:36:6c:24:9b: a6:2d:af:70:35:82:20:05:14:30:c5:94:33:9d:fd: b6:2e:73:1c:a0:56:4d:3b:df:0c:07:88:86:7d:d8: b0:b7:8d:e4:89:b8:e1:04:d0:f0:f4:9a:9d:b6:c2: 05:5e:e6:a6:f8:83:06:27:b1:02:9f:2d:3d:01:af: df:55:1d:85:7b:20:56:cc:c8:dc:45:54:4e:ec:1a: ea:6e:0f:b8:d4:3e:77:12:28:a1:6f:1d:f9:de:b8: 41:80:b5:e1:a7:3a:7e:58:e3:bf:89:ac:b7:0d:d7: 4f:8c:03:36:5e:a9:c4:4d:2b:8c:ca:61:9e:9f:c7: d1:4f:06:18:6b:39:49:eb:68:e7:b0:1e:ab:4b:b5: cf:ef:4c:11:3b:74:5b:7a:df:aa:51:89:d1:11:9d: 87:ff:48:c3:3d:8c:6b:b7:51:02:b2:29:d9:0b:2a: 97:03:18:f5:5b:af:70:16:19:73:9c:d0:1f:5b:5c: 81:1c:e4:a9:f4:4f:1e:72:ad:66:ba:c2:dd:ef:98: 53:78:9e:0f:f5:28:34:76:8a:70:28:47:3a:eb:9c: aa:f1:46:89:bc:73:40:1a:30:52:c9:8f:31:04:5f: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FC:A3:E2:80:A6:18:3A:3E:FC:B2:38:AD:4C:51:98:18:18:A0:9C X509v3 Authority Key Identifier: keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e5:a0:b2:26:be:34:d2:7f:ec:26:34:dc:ac:6b:91:d3:09: 69:35:59:48:14:cc:bf:6b:6e:2c:e8:cc:fd:f0:a4:56:e7:73: 45:2b:ff:d3:c0:6f:21:33:b4:00:29:43:8c:95:7e:2d:42:00: 86:19:81:25:6f:a7:cb:ce:0f:77:cd:88:0c:30:c6:14:64:30: 46:f6:25:7c:93:ef:c5:b7:25:04:6a:bc:26:7e:4e:20:7f:f3: d0:a8:86:70:cc:89:b7:20:0d:05:16:dc:f4:c7:45:0e:7f:46: 98:7e:a3:c2:a2:61:7a:f9:0d:cc:76:67:36:b9:78:4d:e1:0e: 1a:72:e4:44:5b:00:13:37:a9:c3:56:64:c7:6c:48:af:99:6d: f4:cb:00:42:97:79:36:5a:6e:89:2c:5f:c8:cf:1f:72:40:b9: fc:85:7b:ef:77:0a:84:33:52:15:6e:7b:d5:5c:09:d2:7a:e4: c1:cd:00:56:03:33:e0:4c:a1:fc:6b:a4:06:78:7f:33:c9:f2: 2e:44:86:51:9c:c6:1c:5f:b9:49:5f:2a:cf:e0:09:45:51:d5: d3:7d:62:23:7a:8f:94:f3:2b:a8:1f:dc:6f:75:86:a9:76:0b: ac:2d:1d:15:1d:80:f7:b4:49:90:87:a0:e4:6b:93:3d:75:c1: d7:94:73:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN66ZiuHHtQ/cAyBEPDKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0 Zjg1N2UwHhcNMjUxMjExMjEwMTA1WhcNMjUxMjEyMjEwMTA1WjAzMTEwLwYDVQQD Eyg1ZGZjYTNlMjgwYTYxODNhM2VmY2IyMzhhZDRjNTE5ODE4MThhMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR5s079sYZm7cjdXll/PYDPsAAHF xd4fUTZsJJumLa9wNYIgBRQwxZQznf22LnMcoFZNO98MB4iGfdiwt43kibjhBNDw 9JqdtsIFXuam+IMGJ7ECny09Aa/fVR2FeyBWzMjcRVRO7Brqbg+41D53Eiihbx35 3rhBgLXhpzp+WOO/iay3DddPjAM2XqnETSuMymGen8fRTwYYazlJ62jnsB6rS7XP 70wRO3Rbet+qUYnREZ2H/0jDPYxrt1ECsinZCyqXAxj1W69wFhlznNAfW1yBHOSp 9E8ecq1musLd75hTeJ4P9Sg0dopwKEc665yq8UaJvHNAGjBSyY8xBF9MwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF38o+KAphg6PvyyOK1MUZgYGKCcMB8GA1UdIwQY MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt MWVjY2JlNjdjNjYxLzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeWgsia+ NNJ/7CY03KxrkdMJaTVZSBTMv2tuLOjM/fCkVudzRSv/08BvITO0AClDjJV+LUIA hhmBJW+ny84Pd82IDDDGFGQwRvYlfJPvxbclBGq8Jn5OIH/z0KiGcMyJtyANBRbc 9MdFDn9GmH6jwqJhevkNzHZnNrl4TeEOGnLkRFsAEzepw1Zkx2xIr5lt9MsAQpd5 NlpuiSxfyM8fckC5/IV773cKhDNSFW571VwJ0nrkwc0AVgMz4Eyh/GukBnh/M8ny LkSGUZzGHF+5SV8qz+AJRVHV031iI3qPlPMrqB/cb3WGqXYLrC0dFR2A97RJkIeg 5GuTPXXB15RzSQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:48 2025 by rpki-client