This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json) Hash identifier: oUrb4QwgE0EA7s0JKRS1Qpsm/2yAJGx5uUecVkJz7Gg= Subject key identifier: FF:53:A0:A8:7E:7E:F4:EA:43:1F:2D:4C:C8:24:05:B5:F2:9B:3B:4F Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5 Certificate serial: 019B3CB4F69635269FBD9824C8851FB1808A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft Manifest number: 0F84 Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=) 2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=) 3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: B84buHR0hMM2aSrx3ai8x7c3g0xmuFnNqJjupQ9w540=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f6:96:35:26:9f:bd:98:24:c8:85:1f:b1:80:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=ff53a0a87e7ef4ea431f2d4cc82405b5f29b3b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:5b:e4:4e:bb:c9:28:13:5d:27:6c:f7:4d: 7d:da:c6:6f:74:68:67:39:bc:36:0d:65:e7:16:02: a6:27:f4:bf:7d:c6:15:df:1f:6b:4e:a6:00:0e:02: 48:38:3f:ed:5c:68:27:de:e5:4f:98:e5:67:f6:bd: 6d:d9:47:09:dc:44:dc:8d:19:c9:c7:22:31:5e:9d: 72:8f:6e:b3:af:8a:5f:93:d8:17:a3:ca:4f:cb:06: b5:ec:ee:28:b0:d8:f2:7a:82:13:2a:97:51:e8:77: a6:c2:ca:1f:2a:62:8d:98:8d:7f:a4:50:9b:4c:15: d8:57:f9:2d:ca:13:66:c4:18:4a:e7:33:b7:35:9e: ed:a9:3a:64:a7:53:b3:37:2a:4d:f7:9b:28:fa:41: b9:43:3d:63:69:9f:e8:db:82:84:e3:4a:8a:00:1c: 36:3e:43:85:72:2e:36:5c:ac:d7:f0:0d:85:01:4e: 9f:8e:f3:7f:ed:de:de:d7:97:43:88:38:2a:c0:1a: 3f:73:95:58:a1:91:1f:1e:2a:a9:2d:86:59:fe:35: 93:64:db:cd:4c:93:c1:31:91:97:18:01:c6:64:64: 0b:a3:8a:d7:51:bb:18:ba:09:4a:bb:22:fb:c7:cb: 78:29:c2:b1:85:03:e0:4e:ee:c2:d8:76:5a:0a:78: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:A0:A8:7E:7E:F4:EA:43:1F:2D:4C:C8:24:05:B5:F2:9B:3B:4F X509v3 Authority Key Identifier: keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e9:f5:42:03:22:0c:06:5f:9b:e1:73:44:b8:22:05:5e:1e: 82:14:cc:21:aa:6a:58:5f:c3:3b:d9:bd:21:7a:9e:b3:2a:dc: c6:76:eb:b5:67:9e:aa:44:62:e0:1c:70:42:c2:65:ba:a8:31: c7:41:6c:38:61:7e:6f:77:b6:a5:c9:c2:26:37:d8:75:1d:62: dc:bc:75:06:be:99:ca:a0:7e:42:23:da:6f:6a:d7:40:75:8e: 3b:8d:b6:f5:27:0e:d7:c3:c5:3d:64:c1:51:f5:b1:90:cb:8c: d2:d7:02:5c:72:97:6a:92:35:51:3b:53:7c:8b:82:f4:17:1e: cc:fa:ec:bc:0b:97:dd:5c:cf:9a:cc:fe:70:a7:1b:30:59:cc: 6f:a3:d9:45:66:43:be:8a:4f:1b:59:54:4e:af:a0:05:14:b4: 1c:c2:29:26:15:6c:f8:00:56:42:ce:e7:d3:45:ab:30:e7:93: 66:f0:60:47:c6:e7:24:67:c0:e8:79:26:54:bb:01:b6:0f:91: 96:6f:53:b3:f7:7e:85:bf:7b:7a:ca:7d:44:bc:cb:f0:ce:7a: bf:a1:80:47:cb:23:09:57:12:01:e5:38:e7:2b:22:84:7f:6e: 05:5b:24:68:de:11:1e:de:34:7e:5a:0d:cf:00:1c:c8:d6:31: a9:6f:b8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPaWNSafvZgkyIUfsYCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw ZmFkZTUwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD EyhmZjUzYTBhODdlN2VmNGVhNDMxZjJkNGNjODI0MDViNWYyOWIzYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUdb5E67ySgTXSds90192sZvdGhn Obw2DWXnFgKmJ/S/fcYV3x9rTqYADgJIOD/tXGgn3uVPmOVn9r1t2UcJ3ETcjRnJ xyIxXp1yj26zr4pfk9gXo8pPywa17O4osNjyeoITKpdR6HemwsofKmKNmI1/pFCb TBXYV/ktyhNmxBhK5zO3NZ7tqTpkp1OzNypN95so+kG5Qz1jaZ/o24KE40qKABw2 PkOFci42XKzX8A2FAU6fjvN/7d7e15dDiDgqwBo/c5VYoZEfHiqpLYZZ/jWTZNvN TJPBMZGXGAHGZGQLo4rXUbsYuglKuyL7x8t4KcKxhQPgTu7C2HZaCnhucwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9ToKh+fvTqQx8tTMgkBbXymztPMB8GA1UdIwQY MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt NWQ5MmNlZjIzYzVhLzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOn1QgMi DAZfm+FzRLgiBV4eghTMIapqWF/DO9m9IXqesyrcxnbrtWeeqkRi4BxwQsJluqgx x0FsOGF+b3e2pcnCJjfYdR1i3Lx1Br6ZyqB+QiPab2rXQHWOO4229ScO18PFPWTB UfWxkMuM0tcCXHKXapI1UTtTfIuC9BcezPrsvAuX3VzPmsz+cKcbMFnMb6PZRWZD vopPG1lUTq+gBRS0HMIpJhVs+ABWQs7n00WrMOeTZvBgR8bnJGfA6HkmVLsBtg+R lm9Ts/d+hb97esp9RLzL8M56v6GAR8sjCVcSAeU45ysihH9uBVskaN4RHt40floN zwAcyNYxqW+4xg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:33 2025 by rpki-client