This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json) Hash identifier: o4Tc9/ingZIcacK2Lz54vpUmnjCEmv7c5TDFIYFdZBM= Subject key identifier: 12:8A:0F:69:ED:A3:1C:B5:FF:24:35:DF:B8:74:A0:7E:6D:EF:A3:6E Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973 Certificate serial: 019B0E2601DA96D13DAF20131E43D660917A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft Manifest number: 12DD Signing time: Thu 11 Dec 2025 16:02:10 +0000 Manifest this update: Thu 11 Dec 2025 16:02:10 +0000 Manifest next update: Fri 12 Dec 2025 16:02:10 +0000 Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=) 2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: hj5qqJa5Xv2cRq+iaW12ftl1lBV4/Sg/T6JBwR3Estw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:01:da:96:d1:3d:af:20:13:1e:43:d6:60:91:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973 Validity Not Before: Dec 11 16:02:10 2025 GMT Not After : Dec 12 16:02:10 2025 GMT Subject: CN=128a0f69eda31cb5ff2435dfb874a07e6defa36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:5d:10:1e:23:52:60:e7:2b:35:e1:aa:cc: 38:8c:23:81:85:9d:61:1e:19:a5:1a:72:ca:2c:93: 8e:c5:56:4e:c1:95:c5:bb:fe:0d:87:8c:8a:c5:aa: e4:8a:5f:b5:4c:ea:96:a1:24:ca:5f:9c:21:4e:38: dd:b3:90:dd:15:fb:24:f6:90:a3:08:86:39:35:a8: 32:fc:e4:97:64:7f:a6:44:0f:c4:2e:80:70:fc:ed: b9:e2:2f:40:a3:14:ea:50:94:92:8a:0b:0f:94:5a: e6:70:38:a6:32:5c:8c:5a:fa:55:4c:67:53:e9:b3: 39:14:85:b7:ed:52:14:ed:2d:66:ac:4c:c2:32:e1: 62:32:44:1b:97:53:58:11:df:b9:d8:ce:31:83:86: 7b:c4:0a:bd:2b:b8:63:c1:fd:b6:11:14:fe:62:b0: 7b:42:7c:13:63:18:6d:de:1a:98:51:4a:b9:1e:91: b0:4d:b6:33:1d:b3:19:bd:e8:d6:3c:56:e8:8e:57: 61:ca:02:23:67:82:2f:af:bd:c3:c3:96:71:55:aa: 1e:81:36:c6:e7:a1:3c:29:17:cd:2b:4f:b6:7e:88: 40:36:d3:55:72:13:3d:fe:f1:ce:f3:46:b2:ad:96: 80:48:51:c3:f9:8a:98:32:ae:79:57:df:f4:35:f5: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:0F:69:ED:A3:1C:B5:FF:24:35:DF:B8:74:A0:7E:6D:EF:A3:6E X509v3 Authority Key Identifier: keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ad:fb:ec:6d:c7:a2:a8:15:7f:c5:dd:cc:5d:d8:f4:bf:8e: 49:b4:12:c0:74:ad:49:76:cb:65:40:5e:fb:73:e1:8e:6f:b8: a8:fd:4a:e6:77:32:85:6d:9d:71:bf:60:a8:06:5b:ce:ec:70: 76:03:91:0c:0d:73:e1:d3:a6:20:cf:55:47:9e:18:d4:37:40: d2:8a:ae:bc:89:47:ea:45:6d:c3:af:11:1a:cd:f9:ec:ef:43: 92:a3:b9:4c:be:a5:d6:29:5a:c2:7d:84:7a:74:80:76:6d:2c: 27:b8:66:5c:60:37:81:ff:b3:5d:4e:28:aa:78:9d:17:4b:9e: cf:d4:79:9c:90:9c:c7:bd:63:49:7f:eb:67:53:73:b2:de:77: b1:71:b8:06:3c:d9:f5:90:bd:ed:43:c3:cc:7e:90:da:1f:d6: 31:d0:30:bf:bb:68:0c:82:c2:6d:18:05:ac:19:80:04:51:a7: 55:95:27:28:d1:19:db:b8:c1:b2:86:d0:3e:c5:81:53:36:41: 38:66:76:d8:01:d5:54:16:91:65:2d:1d:8a:76:c2:f6:f9:49: 74:93:28:8a:de:07:4b:22:8a:53:82:98:c1:d4:e8:85:fe:e7: ca:09:59:d4:68:4c:ef:85:3e:4d:58:3d:88:0e:d4:8a:19:bb: f3:5e:ae:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgHaltE9ryATHkPWYJF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2 MmQ5NzMwHhcNMjUxMjExMTYwMjEwWhcNMjUxMjEyMTYwMjEwWjAzMTEwLwYDVQQD EygxMjhhMGY2OWVkYTMxY2I1ZmYyNDM1ZGZiODc0YTA3ZTZkZWZhMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzldEB4jUmDnKzXhqsw4jCOBhZ1h HhmlGnLKLJOOxVZOwZXFu/4Nh4yKxarkil+1TOqWoSTKX5whTjjds5DdFfsk9pCj CIY5Nagy/OSXZH+mRA/ELoBw/O254i9AoxTqUJSSigsPlFrmcDimMlyMWvpVTGdT 6bM5FIW37VIU7S1mrEzCMuFiMkQbl1NYEd+52M4xg4Z7xAq9K7hjwf22ERT+YrB7 QnwTYxht3hqYUUq5HpGwTbYzHbMZvejWPFbojldhygIjZ4Ivr73Dw5ZxVaoegTbG 56E8KRfNK0+2fohANtNVchM9/vHO80ayrZaASFHD+YqYMq55V9/0NfWDhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKKD2ntoxy1/yQ137h0oH5t76NuMB8GA1UdIwQY MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2 LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6377G3H oqgVf8XdzF3Y9L+OSbQSwHStSXbLZUBe+3Phjm+4qP1K5ncyhW2dcb9gqAZbzuxw dgORDA1z4dOmIM9VR54Y1DdA0oquvIlH6kVtw68RGs357O9DkqO5TL6l1ilawn2E enSAdm0sJ7hmXGA3gf+zXU4oqnidF0uez9R5nJCcx71jSX/rZ1Nzst53sXG4BjzZ 9ZC97UPDzH6Q2h/WMdAwv7toDILCbRgFrBmABFGnVZUnKNEZ27jBsobQPsWBUzZB OGZ22AHVVBaRZS0dinbC9vlJdJMoit4HSyKKU4KYwdTohf7nyglZ1GhM74U+TVg9 iA7Uihm7816u+g== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:06 2025 by rpki-client