This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json) Hash identifier: 8aCHwLUMYJ0nvzVP4iZlytMWLvd+g2H+73B8pfl42Lw= Subject key identifier: 99:4C:76:CD:8C:C2:E6:DD:C0:63:AD:F1:0F:50:51:5F:70:33:B9:9D Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Certificate serial: 019B405B14AD8733A2F60A2D88EBED24204B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:01:09 +0000 Manifest this update: Sun 21 Dec 2025 10:01:09 +0000 Manifest next update: Mon 22 Dec 2025 10:01:09 +0000 Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: gg2sF5E0zuI46ctsIGE6GHpsfS80yyFbfUxMJMyQktY=) 2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:14:ad:87:33:a2:f6:0a:2d:88:eb:ed:24:20:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Validity Not Before: Dec 21 10:01:09 2025 GMT Not After : Dec 22 10:01:09 2025 GMT Subject: CN=994c76cd8cc2e6ddc063adf10f50515f7033b99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:61:79:67:6d:fa:96:b8:2e:87:b6:5f:87: 2a:86:2b:0c:8b:45:81:33:32:b8:00:2a:54:fe:35: 51:95:4e:2b:30:87:a3:33:2d:b4:fd:6e:8e:d9:fe: 63:68:10:e2:5c:e4:86:20:8e:54:1f:76:b5:0f:5a: 0c:ad:b1:5c:db:04:5e:e2:c8:5e:e7:83:00:00:19: 53:b2:d4:d0:16:0d:7c:11:26:4b:bd:c1:5e:86:38: 42:03:19:0e:7e:bb:a3:d6:0c:e9:55:25:34:d1:db: b1:7d:1f:14:f3:bc:80:71:e4:26:1b:c2:39:37:0a: 69:54:69:a4:c4:b5:72:53:8c:e9:a5:25:64:67:dd: 0b:56:04:c0:77:80:9b:d4:66:ca:24:ca:11:6c:97: 85:1a:73:50:f0:84:9b:75:2c:27:61:f7:af:dd:62: 71:13:42:67:cd:1e:9c:ee:5c:18:eb:f3:66:ad:08: b0:b4:52:60:14:7b:19:3b:36:c4:3d:ce:9a:c8:fd: 7c:bf:35:11:58:e4:62:8e:1e:6f:15:dd:92:2f:9a: 45:fb:33:57:e3:12:b7:28:19:a7:6a:72:f5:0e:fb: d1:14:85:49:54:1d:40:0e:0c:30:98:1f:ad:e1:1e: 4c:fe:22:60:82:44:63:b9:34:c3:99:2c:d0:c3:7a: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4C:76:CD:8C:C2:E6:DD:C0:63:AD:F1:0F:50:51:5F:70:33:B9:9D X509v3 Authority Key Identifier: keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cb:92:33:a8:d4:df:5c:d0:f8:c6:5d:e9:33:46:2f:3e:70: 9b:c0:80:d1:41:00:47:27:48:5e:25:07:e5:1c:6a:a5:b7:51: a8:2b:7f:00:b6:19:6f:2b:9a:d3:14:7d:b9:a6:79:20:d8:c6: 74:ba:e4:e3:2d:17:92:1f:f1:6b:04:e6:b3:76:dd:36:6d:ba: 88:bd:9d:de:b3:86:32:d3:ae:d6:5d:7a:38:6c:6b:aa:fe:8b: 8e:8d:d6:35:26:4b:5a:91:b3:57:5f:f4:35:69:1a:ad:44:d5: 59:45:e5:d4:9b:9d:74:1f:56:dd:fd:e4:f1:b3:bc:2c:e1:39: fe:7a:55:76:0e:db:95:46:30:5b:c2:87:55:b8:cd:8c:73:b5: 0e:7c:2b:0c:72:46:0a:13:ed:89:04:5a:d7:02:36:bf:48:7f: 78:2f:87:ee:2a:05:bb:09:17:76:2d:b5:f3:a6:f3:72:cf:b8: 09:ec:ad:ab:c0:ba:00:e3:11:e0:eb:6b:75:f1:54:46:58:c9: fb:f2:3d:94:8c:05:29:5f:b7:68:bd:54:dc:c2:4b:5a:fb:6d: 8b:28:0c:73:e0:db:51:03:fd:16:07:6d:52:36:4f:a2:aa:fb: e5:df:fe:6f:72:91:13:c9:e2:41:a9:17:76:38:54:54:be:81: f8:e9:3c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxSthzOi9gotiOvtJCBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3 OWE1MjIwHhcNMjUxMjIxMTAwMTA5WhcNMjUxMjIyMTAwMTA5WjAzMTEwLwYDVQQD Eyg5OTRjNzZjZDhjYzJlNmRkYzA2M2FkZjEwZjUwNTE1ZjcwMzNiOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mpheWdt+pa4Loe2X4cqhisMi0WB MzK4ACpU/jVRlU4rMIejMy20/W6O2f5jaBDiXOSGII5UH3a1D1oMrbFc2wRe4she 54MAABlTstTQFg18ESZLvcFehjhCAxkOfruj1gzpVSU00duxfR8U87yAceQmG8I5 NwppVGmkxLVyU4zppSVkZ90LVgTAd4Cb1GbKJMoRbJeFGnNQ8ISbdSwnYfev3WJx E0JnzR6c7lwY6/NmrQiwtFJgFHsZOzbEPc6ayP18vzURWORijh5vFd2SL5pF+zNX 4xK3KBmnanL1DvvRFIVJVB1ADgwwmB+t4R5M/iJggkRjuTTDmSzQw3p1bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlMds2MwubdwGOt8Q9QUV9wM7mdMB8GA1UdIwQY MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2 LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsuSM6jU 31zQ+MZd6TNGLz5wm8CA0UEARydIXiUH5RxqpbdRqCt/ALYZbyua0xR9uaZ5INjG dLrk4y0Xkh/xawTms3bdNm26iL2d3rOGMtOu1l16OGxrqv6Ljo3WNSZLWpGzV1/0 NWkarUTVWUXl1JuddB9W3f3k8bO8LOE5/npVdg7blUYwW8KHVbjNjHO1DnwrDHJG ChPtiQRa1wI2v0h/eC+H7ioFuwkXdi2186bzcs+4Ceytq8C6AOMR4OtrdfFURljJ +/I9lIwFKV+3aL1U3MJLWvttiygMc+DbUQP9FgdtUjZPoqr75d/+b3KRE8niQakX djhUVL6B+Ok8CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:17:53 2025 by rpki-client