This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json) Hash identifier: IXLE91jF/kXkV/4BzkBkZf+Yawv/ehYX2gc2cdpHJ1o= Subject key identifier: FC:48:76:88:77:A2:A7:CB:EF:A9:04:13:03:8C:37:61:60:B8:D6:8D Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019B0E92E8699EECFA640C8CC48760EA416C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 18:01:07 +0000 Manifest this update: Thu 11 Dec 2025 18:01:07 +0000 Manifest next update: Fri 12 Dec 2025 18:01:07 +0000 Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: loP2bwd9EFPHsy6p/caap8rBi+z8yMC5odb9/449OjM=) 2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=) 3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e8:69:9e:ec:fa:64:0c:8c:c4:87:60:ea:41:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Dec 11 18:01:07 2025 GMT Not After : Dec 12 18:01:07 2025 GMT Subject: CN=fc48768877a2a7cbefa90413038c376160b8d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:cd:21:bd:a6:2a:ee:8f:f0:17:fe:ca:f8: 6b:fb:e2:a5:57:18:b3:b5:86:c5:cc:a3:31:da:a0: 29:fc:9b:33:d4:d4:b3:f2:8a:9f:4e:92:2c:51:61: 2b:12:22:0e:5c:d9:01:62:7f:08:17:55:f6:af:59: f2:67:5f:b5:6b:0f:ae:9f:06:7f:e0:b6:2b:b9:e9: 59:d3:51:63:77:5d:a7:e8:97:ca:e4:93:02:82:79: 40:29:f7:09:24:de:e4:d5:e0:47:2d:86:82:7d:9e: b8:02:51:b6:dc:ed:4b:89:80:7b:00:69:50:2e:63: 50:a0:fa:8f:c3:fc:0d:d1:f2:38:97:9c:2e:e0:7a: 2d:e9:98:ad:da:ae:60:ba:3a:3a:46:12:d4:99:ef: 55:7d:9d:6b:f6:b9:4d:fa:cf:66:f3:05:58:4f:e0: 01:bf:7a:24:51:66:51:46:38:88:3e:7a:ab:28:2d: 76:8f:5f:92:43:3d:b9:66:23:24:2d:36:55:26:49: 71:c8:38:3a:63:c7:86:6e:11:e6:06:34:78:69:65: c9:9f:d3:d6:6d:6f:64:d3:a8:3b:5f:68:b8:e5:8d: 58:f6:a9:d8:90:70:fb:32:34:fa:66:5a:ed:8c:15: 9f:06:37:2b:13:be:2a:9a:3b:3e:0e:f4:05:4a:b6: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:76:88:77:A2:A7:CB:EF:A9:04:13:03:8C:37:61:60:B8:D6:8D X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:5e:bb:7c:8d:a2:2d:4e:81:4d:3e:61:96:c7:6d:f7:36: d3:69:5c:dd:77:1b:18:f7:47:cd:16:86:a2:8c:70:c9:33:b6: 6e:ea:f4:b6:bf:76:4e:09:3f:b5:c4:5f:f2:31:ed:8a:1c:77: 1a:b9:03:a5:0a:e2:9e:22:db:54:38:77:1a:7e:53:41:ab:ea: 1f:64:21:37:e7:27:85:56:51:e8:12:de:76:db:8e:28:1f:a4: 43:39:0b:83:01:cf:bc:4c:39:67:a1:38:fe:55:d3:5c:5d:f7: bb:22:15:40:30:a6:6e:2d:b9:d7:91:d2:6e:b2:c7:d4:29:81: 33:0f:ef:48:b6:af:da:c6:27:7c:4b:2a:dd:bb:47:08:ec:90: 46:56:50:a2:3b:a5:93:8c:e8:89:11:af:f6:73:cd:60:76:62: 3b:c5:7e:82:a0:ce:9e:96:98:a0:b9:9a:e2:9d:c9:cf:ba:ae: 70:99:b3:dc:fb:1f:d3:b8:b6:2b:a0:db:d1:53:68:87:45:c6: a8:92:b8:42:34:f9:4a:9b:61:91:59:d2:c9:d6:4d:54:22:5e: 18:3b:14:ef:35:9e:45:2f:70:3a:b7:75:bf:68:30:49:b4:63: ed:e5:51:d2:80:90:e6:3e:f3:ae:d5:36:3c:97:ae:0d:42:85: 53:87:8d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuhpnuz6ZAyMxIdg6kFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjUxMjExMTgwMTA3WhcNMjUxMjEyMTgwMTA3WjAzMTEwLwYDVQQD EyhmYzQ4NzY4ODc3YTJhN2NiZWZhOTA0MTMwMzhjMzc2MTYwYjhkNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8rNIb2mKu6P8Bf+yvhr++KlVxiz tYbFzKMx2qAp/Jsz1NSz8oqfTpIsUWErEiIOXNkBYn8IF1X2r1nyZ1+1aw+unwZ/ 4LYruelZ01Fjd12n6JfK5JMCgnlAKfcJJN7k1eBHLYaCfZ64AlG23O1LiYB7AGlQ LmNQoPqPw/wN0fI4l5wu4Hot6Zit2q5gujo6RhLUme9VfZ1r9rlN+s9m8wVYT+AB v3okUWZRRjiIPnqrKC12j1+SQz25ZiMkLTZVJklxyDg6Y8eGbhHmBjR4aWXJn9PW bW9k06g7X2i45Y1Y9qnYkHD7MjT6ZlrtjBWfBjcrE74qmjs+DvQFSra5owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxIdoh3oqfL76kEEwOMN2FguNaNMB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNleu3yN oi1OgU0+YZbHbfc202lc3XcbGPdHzRaGooxwyTO2bur0tr92Tgk/tcRf8jHtihx3 GrkDpQriniLbVDh3Gn5TQavqH2QhN+cnhVZR6BLedtuOKB+kQzkLgwHPvEw5Z6E4 /lXTXF33uyIVQDCmbi2515HSbrLH1CmBMw/vSLav2sYnfEsq3btHCOyQRlZQojul k4zoiRGv9nPNYHZiO8V+gqDOnpaYoLma4p3Jz7qucJmz3Psf07i2K6Db0VNoh0XG qJK4QjT5SpthkVnSydZNVCJeGDsU7zWeRS9wOrd1v2gwSbRj7eVR0oCQ5j7zrtU2 PJeuDUKFU4eNHg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:54 2025 by rpki-client