This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json) Hash identifier: dohYgNHZgQyGEs7IxeIsk27aDGgXIUMWfm6QNaZ9PMU= Subject key identifier: 7B:42:7A:6C:8B:77:9B:9F:8F:36:D3:9B:C1:5B:46:53:0F:DC:4F:05 Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Certificate serial: 019B4A71790B20A3E77E57B1132216307522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft Manifest number: 0BF1 Signing time: Tue 23 Dec 2025 09:01:48 +0000 Manifest this update: Tue 23 Dec 2025 09:01:48 +0000 Manifest next update: Wed 24 Dec 2025 09:01:48 +0000 Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: OYL6AIuxEucX6Jy3KWI+R1LujsjhNjNzU18UtfUVjNQ=) 2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=) 3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:79:0b:20:a3:e7:7e:57:b1:13:22:16:30:75:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Validity Not Before: Dec 23 09:01:48 2025 GMT Not After : Dec 24 09:01:48 2025 GMT Subject: CN=7b427a6c8b779b9f8f36d39bc15b46530fdc4f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:a5:7f:f5:43:76:55:2e:74:1c:1a:f0:af: 30:8e:f6:50:c3:6e:b2:c9:71:e4:d3:0a:92:aa:dd: eb:a2:84:a9:7e:c5:1d:fe:a9:97:05:e4:fa:af:81: 56:46:9a:91:07:5e:16:70:90:cb:6a:eb:c2:a3:08: b3:4d:7b:ea:ca:a6:4e:39:58:3b:de:0f:78:89:5c: 34:38:61:d9:e4:a3:55:fd:7b:2f:5b:9d:46:96:f6: a0:4d:4b:c0:92:ea:d8:6a:49:c5:86:48:78:f3:aa: 70:87:4b:36:21:97:33:77:e0:e4:35:21:60:90:68: 39:c0:38:be:05:a8:90:2e:ff:a4:b4:d8:9e:90:0c: 59:d3:bc:ac:dd:fe:47:8a:11:d8:47:12:e3:40:37: 70:10:77:b5:19:d8:fc:bb:ce:a9:2c:0f:0b:fe:e4: 7d:2d:dd:d5:08:b3:49:62:dc:20:33:29:c9:a2:f1: 75:e4:1c:03:59:2d:ed:18:60:b1:2f:e4:93:63:60: a6:f2:bb:65:83:8e:bd:21:86:3e:a1:65:aa:d0:30: 42:8e:cc:ba:c1:3a:4a:45:9d:24:aa:f3:ff:51:fd: 70:8c:6c:4a:ff:89:4c:62:e7:bd:f5:a8:41:f6:b3: 95:11:c5:fb:bf:ee:a4:52:d1:82:d7:1b:ee:cb:4c: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:7A:6C:8B:77:9B:9F:8F:36:D3:9B:C1:5B:46:53:0F:DC:4F:05 X509v3 Authority Key Identifier: keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e8:d3:f8:fc:9d:ec:ff:8d:6e:32:a1:9f:15:d2:7e:9f:cd: 7c:b8:6a:e3:ae:ea:7b:70:45:ba:0f:86:cf:84:dd:6f:f1:48: fc:e2:fd:59:40:63:83:ad:f5:52:a0:df:ee:4c:10:08:92:70: a6:15:bb:82:5a:7e:39:2d:22:33:13:39:32:37:65:d7:24:8d: 87:9c:45:00:d9:ad:b2:c5:16:59:9c:4c:89:c9:26:be:90:cc: 91:aa:90:40:46:68:d9:55:ab:3d:50:a4:1a:49:56:d5:c4:e8: 5d:68:f4:60:bf:c1:9b:61:74:fd:8a:1e:54:c0:a4:81:49:b7: b3:43:30:10:95:6a:10:66:b2:d9:69:77:ab:34:a8:79:b6:dc: e4:ea:36:c4:82:17:96:cb:c9:81:78:88:05:99:ec:d2:a8:3d: 42:74:c1:a6:47:42:52:f7:13:93:e5:f3:46:c5:df:06:20:08: b1:c2:b1:9d:9c:2e:b2:aa:eb:69:b3:8e:da:a3:b0:24:82:b0: 97:7d:a0:2b:f2:e4:63:fa:cb:64:63:1b:a1:83:97:e9:17:c1: 61:c0:81:b4:8e:88:b0:a5:69:85:70:da:68:94:73:de:d4:0d: 58:e9:c1:64:a8:ec:b4:77:2f:9a:b7:4f:65:f2:6c:f6:17:3b: 1b:a2:7e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcXkLIKPnflexEyIWMHUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1 MzViN2EwHhcNMjUxMjIzMDkwMTQ4WhcNMjUxMjI0MDkwMTQ4WjAzMTEwLwYDVQQD Eyg3YjQyN2E2YzhiNzc5YjlmOGYzNmQzOWJjMTViNDY1MzBmZGM0ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JOlf/VDdlUudBwa8K8wjvZQw26y yXHk0wqSqt3rooSpfsUd/qmXBeT6r4FWRpqRB14WcJDLauvCowizTXvqyqZOOVg7 3g94iVw0OGHZ5KNV/XsvW51GlvagTUvAkurYaknFhkh486pwh0s2IZczd+DkNSFg kGg5wDi+BaiQLv+ktNiekAxZ07ys3f5HihHYRxLjQDdwEHe1Gdj8u86pLA8L/uR9 Ld3VCLNJYtwgMynJovF15BwDWS3tGGCxL+STY2Cm8rtlg469IYY+oWWq0DBCjsy6 wTpKRZ0kqvP/Uf1wjGxK/4lMYue99ahB9rOVEcX7v+6kUtGC1xvuy0z1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtCemyLd5ufjzbTm8FbRlMP3E8FMB8GA1UdIwQY MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnujT+Pyd 7P+NbjKhnxXSfp/NfLhq467qe3BFug+Gz4Tdb/FI/OL9WUBjg631UqDf7kwQCJJw phW7glp+OS0iMxM5Mjdl1ySNh5xFANmtssUWWZxMickmvpDMkaqQQEZo2VWrPVCk GklW1cToXWj0YL/Bm2F0/YoeVMCkgUm3s0MwEJVqEGay2Wl3qzSoebbc5Oo2xIIX lsvJgXiIBZns0qg9QnTBpkdCUvcTk+XzRsXfBiAIscKxnZwusqrrabOO2qOwJIKw l32gK/LkY/rLZGMboYOX6RfBYcCBtI6IsKVphXDaaJRz3tQNWOnBZKjstHcvmrdP ZfJs9hc7G6J+1g== -----END CERTIFICATE-----Generated at Tue Dec 23 14:51:28 2025 by rpki-client