This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json) Hash identifier: GbPVbi8028+C38Dcvskv3KKQyvWPb6yeGWh4Zn9/BjY= Subject key identifier: 0D:6F:E8:9D:AA:5C:50:33:65:91:A7:94:B8:27:51:00:58:7D:2A:A9 Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Certificate serial: 019B6A32BAF74230934FA2103E55B84D860C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft Manifest number: 11B0 Signing time: Mon 29 Dec 2025 13:01:07 +0000 Manifest this update: Mon 29 Dec 2025 13:01:07 +0000 Manifest next update: Tue 30 Dec 2025 13:01:07 +0000 Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=) 2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: 4G1gro/BbOzYD11KEqlpgbZ3PzpY23wtDs41aUz0UhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:ba:f7:42:30:93:4f:a2:10:3e:55:b8:4d:86:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Validity Not Before: Dec 29 13:01:07 2025 GMT Not After : Dec 30 13:01:07 2025 GMT Subject: CN=0d6fe89daa5c50336591a794b8275100587d2aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:1a:77:25:fb:df:8b:3b:a9:25:62:bb:18: 08:4c:2b:6a:4f:d9:8d:33:ae:58:f7:33:ff:a9:d9: d3:13:63:2a:6d:da:65:4b:6c:a2:74:9d:0a:e0:c6: 51:38:4d:2f:87:bd:6b:20:8e:0b:6c:d0:7c:33:bd: 20:3f:a0:4e:92:3b:1b:e0:cd:37:0b:62:4d:f8:81: c3:ba:06:6d:e3:49:30:ba:08:1d:53:78:d2:f5:51: 84:61:39:78:26:89:73:de:0f:59:03:4d:18:03:80: 31:07:9d:31:e7:1d:fb:f3:b3:5f:64:ce:f2:7f:f0: ee:09:5a:54:dc:d1:92:4e:8a:24:d9:28:5e:0a:98: 7e:eb:7d:6b:5b:b2:b9:62:95:4c:7e:6c:dd:73:07: 75:5a:79:ff:02:ee:f2:09:00:d0:5f:3d:5f:df:7e: 1d:83:cc:88:8b:6c:a5:ae:8c:83:dc:81:b7:93:55: e7:91:55:51:c7:b5:31:c2:ef:2c:f3:49:76:0a:f5: 6d:da:6e:4d:3a:9f:ad:f1:0c:77:0e:ee:9a:58:37: 91:7b:2d:63:6a:6e:3c:11:f1:44:1e:de:58:47:54: f0:99:52:64:54:af:2b:96:1a:2b:df:25:86:f2:2a: ab:c3:b8:ed:dc:43:1d:1b:e9:7a:75:f8:cb:35:de: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6F:E8:9D:AA:5C:50:33:65:91:A7:94:B8:27:51:00:58:7D:2A:A9 X509v3 Authority Key Identifier: keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f0:dc:47:57:ff:9a:af:08:2e:81:d2:3b:35:f6:1b:08:c5: 24:79:b7:b4:f2:b7:67:3a:55:a4:29:71:f2:07:ca:e2:ad:e2: c2:c1:8a:ec:e4:9c:b9:97:02:64:62:ca:e2:5e:c6:b5:25:25: e8:11:d7:93:00:0f:e7:e3:bf:c8:da:74:9d:e6:61:e6:a2:b7: b9:ae:ec:8a:93:5c:e3:98:74:15:04:7a:88:b5:76:12:76:af: 1e:f8:88:46:d1:45:17:41:29:92:93:8a:ea:bc:44:3e:54:86: a9:28:40:2a:bc:26:54:3e:b4:f2:f5:00:40:f2:62:4d:8f:a6: c5:27:6f:f6:56:3f:09:c5:0c:3e:f8:79:c4:2a:c0:1c:09:d9: 80:e8:6e:8f:88:dc:bc:4a:19:1d:77:9c:d0:28:b0:1c:b4:12: 0b:84:c6:e7:57:93:1d:8d:53:b1:4c:6e:40:13:0f:02:e1:93: 55:de:5f:a2:13:ac:2f:2a:70:e2:44:85:14:4b:d9:d6:fe:37: 95:87:93:c2:a0:13:24:2c:a2:43:f3:64:2b:9e:43:64:9f:67: 36:d6:90:eb:4b:8a:01:ac:70:0a:2d:45:10:74:cd:8d:e0:34: 32:d5:46:15:0f:2d:eb:b5:a3:b1:32:af:b3:1e:eb:3f:e0:f4: b2:10:73:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMrr3QjCTT6IQPlW4TYYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODZjOWY3Y2QxNzNiYmNkMWRiNjFlMGYxYjRlYmUwNWMx YjljYTEwHhcNMjUxMjI5MTMwMTA3WhcNMjUxMjMwMTMwMTA3WjAzMTEwLwYDVQQD EygwZDZmZTg5ZGFhNWM1MDMzNjU5MWE3OTRiODI3NTEwMDU4N2QyYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss4adyX734s7qSViuxgITCtqT9mN M65Y9zP/qdnTE2MqbdplS2yidJ0K4MZROE0vh71rII4LbNB8M70gP6BOkjsb4M03 C2JN+IHDugZt40kwuggdU3jS9VGEYTl4Jolz3g9ZA00YA4AxB50x5x3787NfZM7y f/DuCVpU3NGSTook2SheCph+631rW7K5YpVMfmzdcwd1Wnn/Au7yCQDQXz1f334d g8yIi2ylroyD3IG3k1XnkVVRx7Uxwu8s80l2CvVt2m5NOp+t8Qx3Du6aWDeRey1j am48EfFEHt5YR1TwmVJkVK8rlhor3yWG8iqrw7jt3EMdG+l6dfjLNd4TNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1v6J2qXFAzZZGnlLgnUQBYfSqpMB8GA1UdIwQY MBaAFG+GyffNFzu80dth4PG06+BcG5yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMt ZGMwZGM1ZDUxNDFmLzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMtZGMwZGM1ZDUxNDFm LzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvDcR1f/ mq8ILoHSOzX2GwjFJHm3tPK3ZzpVpClx8gfK4q3iwsGK7OScuZcCZGLK4l7GtSUl 6BHXkwAP5+O/yNp0neZh5qK3ua7sipNc45h0FQR6iLV2EnavHviIRtFFF0EpkpOK 6rxEPlSGqShAKrwmVD608vUAQPJiTY+mxSdv9lY/CcUMPvh5xCrAHAnZgOhuj4jc vEoZHXec0CiwHLQSC4TG51eTHY1TsUxuQBMPAuGTVd5fohOsLypw4kSFFEvZ1v43 lYeTwqATJCyiQ/NkK55DZJ9nNtaQ60uKAaxwCi1FEHTNjeA0MtVGFQ8t67WjsTKv sx7rP+D0shBzZQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:18 2025 by rpki-client