This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft File: B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json) Hash identifier: ObbUNbsi5pq0FfQiG7kVdM+hEVrnYtVjX/cM3bgy3Bk= Subject key identifier: 2A:87:96:DE:A2:86:D9:9F:28:E2:8B:51:3B:7C:59:2E:0B:26:B1:2E Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13 Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113 Certificate serial: 019B47019781F7235AB2B612FE8683F17221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft Manifest number: 0446 Signing time: Mon 22 Dec 2025 17:00:45 +0000 Manifest this update: Mon 22 Dec 2025 17:00:45 +0000 Manifest next update: Tue 23 Dec 2025 17:00:45 +0000 Files and hashes: 1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=) 2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: UQrnapdF/sFyz2I3A7GRll9d6BDpt2DhU83ljHU/S/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:97:81:f7:23:5a:b2:b6:12:fe:86:83:f1:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113 Validity Not Before: Dec 22 17:00:45 2025 GMT Not After : Dec 23 17:00:45 2025 GMT Subject: CN=2a8796dea286d99f28e28b513b7c592e0b26b12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:9f:f0:30:a5:58:c5:eb:8b:e8:3f:e0:8f: bc:b9:2d:95:39:3b:3a:37:71:9a:32:73:93:35:f8: f1:9c:60:63:6a:26:42:cb:ba:06:0a:57:53:8e:d0: d5:21:ff:ee:d1:2d:e6:4c:ac:79:61:3d:71:37:fc: c4:8b:75:b2:2a:19:08:c6:8f:e4:bd:85:d5:80:c9: dd:84:7f:c6:2c:65:39:73:6b:cb:29:a2:71:58:d7: 4f:67:8c:b3:67:6f:5b:12:d6:fd:ee:fc:c5:d3:32: 9a:85:d9:79:c3:56:01:a6:98:59:84:ff:07:c8:d7: 84:07:0e:69:9a:a2:db:36:09:88:68:56:6b:42:05: d3:c7:74:2b:39:5a:67:b4:8c:9b:e4:be:77:05:b8: f1:c8:cf:ea:27:bd:fe:ba:92:e4:c6:b0:c8:0f:6c: 17:83:2a:0c:52:cf:9d:53:09:20:c8:89:49:5e:e3: d7:a3:8c:f1:e7:b2:18:cf:60:d8:66:c5:b8:25:b8: 65:fc:4c:ce:57:b4:9d:f9:cb:fb:a4:5e:ef:89:1f: e4:4b:a0:89:d2:1c:32:b5:32:e3:46:36:b4:98:53: 04:07:c3:bb:10:84:1e:1b:d0:2b:1c:40:4f:61:5a: 26:68:30:ed:35:3d:da:d4:26:42:64:c0:2b:c2:1b: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:96:DE:A2:86:D9:9F:28:E2:8B:51:3B:7C:59:2E:0B:26:B1:2E X509v3 Authority Key Identifier: keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:de:14:cc:d4:c2:96:62:69:e8:65:20:d3:ec:4f:db:c8:5c: db:0b:94:28:5d:2f:b6:d9:a9:b0:73:d0:f7:99:50:72:a1:55: 03:66:21:46:dc:3e:6d:9a:21:fe:58:b8:9f:3c:e0:91:b9:aa: 5a:a9:20:15:82:fd:6e:9c:19:12:23:a6:4a:49:47:b4:0e:27: 38:2a:d1:86:84:c9:cd:4e:37:d1:66:19:0c:c4:d5:f1:44:49: 2f:f2:9f:7a:67:b7:5d:fa:44:de:d8:8a:0d:7d:2a:59:77:ae: 86:13:1c:33:05:f5:71:d0:aa:fe:2c:a0:03:ce:56:10:4b:e4: 7e:02:ef:d1:d1:3f:8b:d3:f3:ec:c8:7d:60:e0:ef:0d:1f:1d: 02:e4:52:a8:c0:f8:6e:c6:4c:35:50:12:36:b7:b0:f1:3b:96: 6b:72:6d:39:ec:dc:bd:8b:c9:3b:d5:64:11:9f:67:3e:03:d9: c7:5a:63:91:27:c4:23:38:92:b4:35:35:b3:7f:e2:ed:30:e1: 05:04:07:31:29:d8:8c:3f:bb:0c:1a:da:bf:d6:d6:34:2a:eb: 15:aa:1e:34:6b:4f:e6:0d:6b:67:d9:f8:ec:e4:a5:e0:90:1a: e2:5e:89:07:6d:b9:1f:92:47:bb:8e:fd:e1:74:4e:ba:1c:cb: da:52:37:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAZeB9yNasrYS/oaD8XIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGUxODUzZTU5NjYxZjkwOGUyMjY5NTBjYmRjNTJiOTdm NjIxMTMwHhcNMjUxMjIyMTcwMDQ1WhcNMjUxMjIzMTcwMDQ1WjAzMTEwLwYDVQQD EygyYTg3OTZkZWEyODZkOTlmMjhlMjhiNTEzYjdjNTkyZTBiMjZiMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Kf8DClWMXri+g/4I+8uS2VOTs6 N3GaMnOTNfjxnGBjaiZCy7oGCldTjtDVIf/u0S3mTKx5YT1xN/zEi3WyKhkIxo/k vYXVgMndhH/GLGU5c2vLKaJxWNdPZ4yzZ29bEtb97vzF0zKahdl5w1YBpphZhP8H yNeEBw5pmqLbNgmIaFZrQgXTx3QrOVpntIyb5L53BbjxyM/qJ73+upLkxrDID2wX gyoMUs+dUwkgyIlJXuPXo4zx57IYz2DYZsW4Jbhl/EzOV7Sd+cv7pF7viR/kS6CJ 0hwytTLjRja0mFMEB8O7EIQeG9ArHEBPYVomaDDtNT3a1CZCZMArwhsRqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqHlt6ihtmfKOKLUTt8WS4LJrEuMB8GA1UdIwQY MBaAFAfeGFPllmH5COImlQy9xSuX9iETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEt ZTMwZGQ2NjFlZDIwLzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEtZTMwZGQ2NjFlZDIw LzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV94UzNTC lmJp6GUg0+xP28hc2wuUKF0vttmpsHPQ95lQcqFVA2YhRtw+bZoh/li4nzzgkbmq WqkgFYL9bpwZEiOmSklHtA4nOCrRhoTJzU430WYZDMTV8URJL/Kfeme3XfpE3tiK DX0qWXeuhhMcMwX1cdCq/iygA85WEEvkfgLv0dE/i9Pz7Mh9YODvDR8dAuRSqMD4 bsZMNVASNrew8TuWa3JtOezcvYvJO9VkEZ9nPgPZx1pjkSfEIziStDU1s3/i7TDh BQQHMSnYjD+7DBrav9bWNCrrFaoeNGtP5g1rZ9n47OSl4JAa4l6JB225H5JHu479 4XROuhzL2lI3DQ== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:14 2025 by rpki-client