This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json) Hash identifier: sI/27nj+9m9It3qpNCwP5ZAPkOJlDPuQI+M/Fv6PtK4= Subject key identifier: 36:AF:2D:41:D8:41:1A:F4:AD:26:2B:DD:E9:51:8E:37:B6:39:3F:23 Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Certificate serial: 019B59777F7505C38E98D0368BA8C9C0A027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:02:42 +0000 Manifest this update: Fri 26 Dec 2025 07:02:42 +0000 Manifest next update: Sat 27 Dec 2025 07:02:42 +0000 Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: mDr022pwX0rGpQKU70cNCCTOumwdgJYecIREJ3Yusqs=) 2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7f:75:05:c3:8e:98:d0:36:8b:a8:c9:c0:a0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Validity Not Before: Dec 26 07:02:42 2025 GMT Not After : Dec 27 07:02:42 2025 GMT Subject: CN=36af2d41d8411af4ad262bdde9518e37b6393f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:0f:49:ed:05:d5:af:24:d3:5e:6f:64:26: 46:4e:c9:b8:a0:32:ab:34:61:fd:b9:a7:d9:0e:1b: 8b:0d:45:38:e9:65:5c:82:32:3c:ea:36:62:bf:4f: c2:14:05:bd:bf:ad:07:b1:ab:46:9a:1a:fb:e4:96: 20:34:fb:f7:55:50:73:8e:f4:8a:4c:4a:6b:d4:b6: c2:4f:ce:b1:bd:25:ce:83:98:8c:87:9e:52:1f:b3: 47:49:01:8d:7e:23:e5:58:cb:11:4b:87:ea:d3:ae: f4:b0:a6:87:66:10:88:e0:89:40:f8:21:a1:9a:5c: 87:71:b2:af:85:06:20:3f:be:c3:39:11:b4:d3:07: 3b:6e:5b:18:7b:49:dc:16:83:56:7d:1b:26:13:e2: d1:18:0d:59:08:f8:01:d8:54:51:a6:16:6e:92:42: e4:55:78:69:5b:b1:09:75:63:74:99:9e:3b:6f:90: a2:4d:b0:1e:aa:c2:3e:f5:81:2f:65:4f:47:82:44: 5e:01:f7:ea:a4:99:c9:49:af:b1:65:da:0f:37:a5: 8f:10:1d:29:6a:77:c8:aa:91:37:3e:24:66:26:f0: 93:27:aa:92:fc:00:1b:44:9e:ec:20:e9:92:82:7f: a0:c2:75:f0:79:4f:97:0e:e3:74:0e:d9:3e:1c:b2: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AF:2D:41:D8:41:1A:F4:AD:26:2B:DD:E9:51:8E:37:B6:39:3F:23 X509v3 Authority Key Identifier: keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a3:78:f4:ab:09:49:25:b2:08:f8:93:20:96:48:85:56:ca: 5b:e9:f3:be:d2:dc:88:3d:e5:dc:0b:16:e6:80:c8:34:a3:f9: fc:39:7a:90:f2:aa:c4:f4:95:88:62:1c:ac:0e:d5:e4:1b:fa: 05:99:08:11:68:33:d8:a2:23:36:cc:03:a5:98:ad:9e:a6:9e: 09:c5:37:1e:8e:85:49:75:3c:77:b6:04:84:7c:03:9f:20:ff: 17:76:06:c9:23:38:d6:d5:af:cc:11:7b:7b:48:89:d4:79:a2: dc:be:4b:7e:d0:f6:4e:ed:d5:44:15:31:09:0b:d1:8d:ce:e9: 43:ea:f7:a5:d9:fd:4d:85:25:a4:88:5e:ba:11:60:6b:f3:9e: 6d:6d:37:1b:38:66:4a:9f:00:71:42:0e:85:65:b9:cc:21:41: 56:ed:8d:29:cb:df:8e:67:ad:31:d4:58:45:95:92:8c:fe:c0: 83:99:3e:9d:20:66:7e:76:2e:81:99:06:62:a5:84:cc:25:09: b0:3b:16:bb:a0:33:6b:72:d2:e2:92:73:e5:91:e7:ae:24:b4: 71:9c:5a:b4:e8:f7:2c:cc:f3:cb:dd:8b:9a:89:12:07:26:47: cd:1f:4f:bf:79:c9:82:14:87:51:01:50:f1:91:b8:8b:70:0a: 4c:62:0a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd391BcOOmNA2i6jJwKAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh MzRjMjIwHhcNMjUxMjI2MDcwMjQyWhcNMjUxMjI3MDcwMjQyWjAzMTEwLwYDVQQD EygzNmFmMmQ0MWQ4NDExYWY0YWQyNjJiZGRlOTUxOGUzN2I2MzkzZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAPSe0F1a8k015vZCZGTsm4oDKr NGH9uafZDhuLDUU46WVcgjI86jZiv0/CFAW9v60HsatGmhr75JYgNPv3VVBzjvSK TEpr1LbCT86xvSXOg5iMh55SH7NHSQGNfiPlWMsRS4fq0670sKaHZhCI4IlA+CGh mlyHcbKvhQYgP77DORG00wc7blsYe0ncFoNWfRsmE+LRGA1ZCPgB2FRRphZukkLk VXhpW7EJdWN0mZ47b5CiTbAeqsI+9YEvZU9HgkReAffqpJnJSa+xZdoPN6WPEB0p anfIqpE3PiRmJvCTJ6qS/AAbRJ7sIOmSgn+gwnXweU+XDuN0Dtk+HLJ3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDavLUHYQRr0rSYr3elRjje2OT8jMB8GA1UdIwQY MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaN49KsJ SSWyCPiTIJZIhVbKW+nzvtLciD3l3AsW5oDINKP5/Dl6kPKqxPSViGIcrA7V5Bv6 BZkIEWgz2KIjNswDpZitnqaeCcU3Ho6FSXU8d7YEhHwDnyD/F3YGySM41tWvzBF7 e0iJ1Hmi3L5LftD2Tu3VRBUxCQvRjc7pQ+r3pdn9TYUlpIheuhFga/OebW03Gzhm Sp8AcUIOhWW5zCFBVu2NKcvfjmetMdRYRZWSjP7Ag5k+nSBmfnYugZkGYqWEzCUJ sDsWu6Aza3LS4pJz5ZHnriS0cZxatOj3LMzzy92LmokSByZHzR9Pv3nJghSHUQFQ 8ZG4i3AKTGIKCg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:48 2025 by rpki-client