This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json) Hash identifier: l0E4z7eFbuANF4Oi+/16wekp9iKfe6jkS/LLw4vcYVg= Subject key identifier: D2:FC:55:D6:8A:99:0A:9B:71:50:B3:54:5D:D0:D3:6A:30:2F:B0:E1 Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642 Certificate serial: 019B59770B3FA7B4648BF6FC3E98AB146A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft Manifest number: 97 Signing time: Fri 26 Dec 2025 07:02:12 +0000 Manifest this update: Fri 26 Dec 2025 07:02:12 +0000 Manifest next update: Sat 27 Dec 2025 07:02:12 +0000 Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: It2atSRnSPh1LFSKSWntfDQkXOkupO7MRFLf69NNfbY=) 2: X8Nnra_HltNRWULUv0jOvOL0YgA.roa (hash: VancjWcYbkfiXC8CFP9Ka11PiwvtrDF34c2Qr/v152E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:0b:3f:a7:b4:64:8b:f6:fc:3e:98:ab:14:6a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642 Validity Not Before: Dec 26 07:02:12 2025 GMT Not After : Dec 27 07:02:12 2025 GMT Subject: CN=d2fc55d68a990a9b7150b3545dd0d36a302fb0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:e3:a0:83:3d:79:65:7b:d1:8a:76:28:db: da:f7:e4:7e:54:b9:9a:8c:49:be:35:c6:4c:6f:f5: 8a:c3:e5:90:04:d3:eb:45:35:08:76:b0:fc:7f:88: 32:95:e8:7b:28:ba:d6:66:b8:46:4a:80:e3:24:a4: 17:5e:28:37:cf:1f:36:80:81:23:5d:43:7f:7f:f2: 55:a5:3a:79:0a:86:02:9f:0a:ff:97:6a:63:71:62: a2:0f:c2:82:cc:bc:54:e7:33:f9:3a:ad:da:87:da: 19:ac:f8:14:b2:d0:05:21:82:69:01:54:94:62:7f: ac:f6:0f:b9:12:fa:1a:37:18:23:6f:fb:f5:4b:f6: 7e:ed:47:07:bb:59:be:e9:7e:0f:33:3a:8a:82:4a: c7:8c:45:5f:eb:c5:64:42:02:08:44:90:00:88:9b: 3f:28:27:ff:47:c6:ae:92:bc:25:96:34:07:a4:b1: dc:b5:7c:a5:84:02:16:7a:3d:6e:4a:e1:3f:ed:4a: 65:60:b4:35:3d:55:48:32:50:11:fa:f6:07:5b:5f: 3c:d9:14:7a:3b:7c:d6:18:68:18:80:7a:34:33:c7: c5:12:2e:09:19:60:0a:e4:4a:ee:8f:ee:c2:8d:59: 2e:33:f4:47:54:20:08:99:f9:64:a1:bf:0e:93:2d: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FC:55:D6:8A:99:0A:9B:71:50:B3:54:5D:D0:D3:6A:30:2F:B0:E1 X509v3 Authority Key Identifier: keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e7:8c:d1:9f:cb:c3:5b:fd:e7:67:f1:75:79:fc:5d:ff:24: 80:67:ed:0f:c1:39:8b:64:6b:5f:82:b5:db:ac:bd:47:90:07: fa:f8:db:92:cb:9a:7d:36:ce:34:ad:bb:17:c0:48:0f:2f:99: 5b:0c:8c:e3:85:e1:9b:b0:7b:c0:5a:18:65:e1:6c:41:37:4d: 35:3a:9f:42:94:9e:e7:13:52:95:37:b2:9a:31:f0:0b:97:1b: db:95:6b:05:ec:91:37:8a:cc:9d:c5:4d:2a:1a:21:3f:6f:6b: 9e:f9:05:25:32:b2:cd:a7:c2:ea:0d:6c:eb:4c:45:56:7a:7d: 85:0e:84:a9:46:49:67:b5:ba:42:48:60:d1:01:a4:2c:00:ec: 86:f9:95:d9:f4:e4:22:c4:90:eb:ab:25:91:c2:82:34:e2:a0: 6a:17:d0:3a:06:61:a4:2c:5d:2d:cc:f1:05:48:3c:29:0e:18: 26:c3:4a:6d:09:fc:b2:f7:d4:14:08:b8:c6:f9:31:21:c7:3f: f2:c9:87:15:5a:b0:04:6b:9f:47:c3:3d:76:66:0a:a3:02:e5: a7:dc:b3:ce:9d:63:70:5b:24:df:c1:81:6a:24:46:a0:ae:3c: 0d:1e:ab:8c:53:ca:7e:eb:80:95:1e:2c:2f:ec:c2:77:8d:e9: b9:0a:50:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdws/p7Rki/b8PpirFGqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGU0NjNmMzZjNDdmNzZhYjdjMTk2YTdmNWVkZDRmMWJl ZGE2NDIwHhcNMjUxMjI2MDcwMjEyWhcNMjUxMjI3MDcwMjEyWjAzMTEwLwYDVQQD EyhkMmZjNTVkNjhhOTkwYTliNzE1MGIzNTQ1ZGQwZDM2YTMwMmZiMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuojjoIM9eWV70Yp2KNva9+R+VLma jEm+NcZMb/WKw+WQBNPrRTUIdrD8f4gyleh7KLrWZrhGSoDjJKQXXig3zx82gIEj XUN/f/JVpTp5CoYCnwr/l2pjcWKiD8KCzLxU5zP5Oq3ah9oZrPgUstAFIYJpAVSU Yn+s9g+5EvoaNxgjb/v1S/Z+7UcHu1m+6X4PMzqKgkrHjEVf68VkQgIIRJAAiJs/ KCf/R8aukrwlljQHpLHctXylhAIWej1uSuE/7UplYLQ1PVVIMlAR+vYHW1882RR6 O3zWGGgYgHo0M8fFEi4JGWAK5Eruj+7CjVkuM/RHVCAImflkob8Oky3aLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL8VdaKmQqbcVCzVF3Q02owL7DhMB8GA1UdIwQY MBaAFAeORj82xH92q3wZan9e3U8b7aZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTRiNTYtMmYwYy00OTA4LWJlNDct ODFmN2Y3YjkzMzAwLzEvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTRiNTYtMmYwYy00OTA4LWJlNDctODFmN2Y3YjkzMzAw LzEvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACueM0Z/L w1v952fxdXn8Xf8kgGftD8E5i2RrX4K126y9R5AH+vjbksuafTbONK27F8BIDy+Z WwyM44Xhm7B7wFoYZeFsQTdNNTqfQpSe5xNSlTeymjHwC5cb25VrBeyRN4rMncVN KhohP29rnvkFJTKyzafC6g1s60xFVnp9hQ6EqUZJZ7W6Qkhg0QGkLADshvmV2fTk IsSQ66slkcKCNOKgahfQOgZhpCxdLczxBUg8KQ4YJsNKbQn8svfUFAi4xvkxIcc/ 8smHFVqwBGufR8M9dmYKowLlp9yzzp1jcFsk38GBaiRGoK48DR6rjFPKfuuAlR4s L+zCd43puQpQOw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:06 2025 by rpki-client