This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json) Hash identifier: Svy79qaWH6F4Hlh0u6ntebhxOmUWLwqrAn6yRy+ccM8= Subject key identifier: 8A:B8:62:CB:81:0C:3E:08:B6:3F:2C:CA:79:70:BE:80:AF:C9:22:69 Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb Certificate serial: 019B183A7B751127A96E838B397E805683E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft Manifest number: 1771 Signing time: Sat 13 Dec 2025 15:00:44 +0000 Manifest this update: Sat 13 Dec 2025 15:00:44 +0000 Manifest next update: Sun 14 Dec 2025 15:00:44 +0000 Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: lsF9XAKPXHwZ0fqa33s7G5tlnLhQJT/w6wiY/1LfNz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:7b:75:11:27:a9:6e:83:8b:39:7e:80:56:83:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb Validity Not Before: Dec 13 15:00:44 2025 GMT Not After : Dec 14 15:00:44 2025 GMT Subject: CN=8ab862cb810c3e08b63f2cca7970be80afc92269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:39:20:b7:8c:4a:07:29:9f:6b:02:ad:2e: a2:77:0f:1f:17:0f:4e:ab:50:cb:e6:7b:25:42:70: fa:d7:9a:d3:d7:71:d8:c6:a7:dd:1f:b6:6f:02:31: 12:03:cb:0c:a2:85:75:2b:3f:d5:50:e1:99:cf:da: f2:c8:c5:35:f6:8b:ec:19:0f:7e:aa:6f:1a:93:70: a7:ba:87:1e:5b:b2:40:44:f7:d4:c3:70:b6:4c:d7: 1f:84:d3:e0:59:21:c3:39:f0:e2:85:ea:9a:27:8a: dc:e8:0f:c7:a0:68:49:b7:2f:af:87:e5:f7:ec:5e: 49:01:66:bf:70:02:33:52:ee:49:6f:06:ec:c7:af: 74:2e:20:6c:c5:11:96:69:a8:68:7b:8d:8a:ac:f6: 69:49:d0:4f:8c:ed:42:fa:3e:21:78:3d:42:4e:5b: 71:86:1f:33:34:07:16:85:85:9b:c5:a8:57:4d:b2: f6:27:ee:db:9c:f7:8a:f0:d7:6a:29:7f:a4:d7:c3: df:92:ec:76:1a:4e:6f:38:13:5a:47:d4:62:df:54: df:8a:60:d9:a8:d4:0e:35:bb:ad:71:52:8c:c6:12: e9:af:23:8d:92:fd:0d:df:b0:3a:e9:af:ac:45:f3: 08:b6:01:5c:95:13:96:f3:f0:bb:90:b1:0e:3a:ca: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:62:CB:81:0C:3E:08:B6:3F:2C:CA:79:70:BE:80:AF:C9:22:69 X509v3 Authority Key Identifier: keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:69:e4:ff:c5:c2:c2:f5:f6:e5:fa:29:8f:65:1f:d6:97:7d: 47:d1:48:b8:a1:f6:0e:66:9d:2e:bf:08:b2:cf:34:ee:e0:89: f8:e9:0f:6c:cd:fd:4c:81:70:4e:8b:9e:e5:80:6c:fb:d6:09: f4:ab:8a:a9:ed:3b:ac:54:70:30:8a:ae:b9:5d:c7:58:9b:71: 85:7a:3f:08:d2:42:c2:fb:0b:8e:8a:98:fc:7f:86:b3:ba:6b: e1:a2:92:14:58:c5:60:e6:31:b8:e2:f5:c7:d3:45:b7:84:5d: 32:22:d4:3e:bf:08:d9:f0:d6:e0:79:9a:b3:fa:4b:5a:f6:79: 0d:8c:fb:10:3e:ef:2b:0d:b7:f8:c6:53:03:13:e6:95:07:52: 5e:fc:2a:84:4f:98:ee:c7:a2:57:a5:d6:00:d5:c1:37:32:a1: ab:62:4b:73:d9:49:c6:d3:b5:66:78:f7:f8:7c:49:3a:c6:9a: 8d:4e:48:a3:03:58:78:0d:b7:a7:9a:9b:0d:ff:af:9b:a8:70: 9e:6a:89:78:68:34:8c:ac:a2:de:cc:1c:c9:82:ee:ad:99:61: 5b:72:e4:67:d8:7b:8c:ad:89:0b:fc:ff:08:5b:73:7b:8b:cc: dd:87:dd:a6:f8:d8:e7:13:b6:45:a0:b5:e7:5c:4e:92:57:0a: 2b:f4:80:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOnt1ESepboOLOX6AVoPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5 NzJiZWIwHhcNMjUxMjEzMTUwMDQ0WhcNMjUxMjE0MTUwMDQ0WjAzMTEwLwYDVQQD Eyg4YWI4NjJjYjgxMGMzZTA4YjYzZjJjY2E3OTcwYmU4MGFmYzkyMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ks5ILeMSgcpn2sCrS6idw8fFw9O q1DL5nslQnD615rT13HYxqfdH7ZvAjESA8sMooV1Kz/VUOGZz9ryyMU19ovsGQ9+ qm8ak3CnuoceW7JARPfUw3C2TNcfhNPgWSHDOfDiheqaJ4rc6A/HoGhJty+vh+X3 7F5JAWa/cAIzUu5Jbwbsx690LiBsxRGWaahoe42KrPZpSdBPjO1C+j4heD1CTltx hh8zNAcWhYWbxahXTbL2J+7bnPeK8NdqKX+k18Pfkux2Gk5vOBNaR9Ri31TfimDZ qNQONbutcVKMxhLpryONkv0N37A66a+sRfMItgFclROW8/C7kLEOOsp4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq4YsuBDD4Itj8synlwvoCvySJpMB8GA1UdIwQY MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWnk/8XC wvX25fopj2Uf1pd9R9FIuKH2DmadLr8Iss807uCJ+OkPbM39TIFwToue5YBs+9YJ 9KuKqe07rFRwMIquuV3HWJtxhXo/CNJCwvsLjoqY/H+Gs7pr4aKSFFjFYOYxuOL1 x9NFt4RdMiLUPr8I2fDW4Hmas/pLWvZ5DYz7ED7vKw23+MZTAxPmlQdSXvwqhE+Y 7seiV6XWANXBNzKhq2JLc9lJxtO1Znj3+HxJOsaajU5IowNYeA23p5qbDf+vm6hw nmqJeGg0jKyi3swcyYLurZlhW3LkZ9h7jK2JC/z/CFtze4vM3YfdpvjY5xO2RaC1 51xOklcKK/SAfw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:58 2025 by rpki-client