This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json) Hash identifier: v3h2ODuCFkEvYfpPBu8TH3Yrvt9/Q25dly4yZ83W9MM= Subject key identifier: 9F:17:22:D7:31:6E:30:12:07:20:B6:0B:EE:C5:EB:F2:CB:A3:B9:C0 Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019B4B83370F1978BAEF194440131A700D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 14:00:49 +0000 Manifest this update: Tue 23 Dec 2025 14:00:49 +0000 Manifest next update: Wed 24 Dec 2025 14:00:49 +0000 Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: 7NUBP59PMzaLR40lJ2mfz7qo6dXVmy1fXyAGEtvmzSU=) 2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:37:0f:19:78:ba:ef:19:44:40:13:1a:70:0d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Dec 23 14:00:49 2025 GMT Not After : Dec 24 14:00:49 2025 GMT Subject: CN=9f1722d7316e30120720b60beec5ebf2cba3b9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:1c:98:1c:7b:64:2c:fc:5d:f7:ee:7b:a2: 1e:e4:35:c4:01:26:ab:6e:6a:31:78:32:c6:88:56: e2:6e:ce:18:fe:b6:46:c3:4d:8d:01:21:ea:6c:d9: 64:f4:37:c5:7d:c9:f4:3b:fc:47:c4:34:4e:c8:0f: dd:57:75:98:50:ab:2c:b3:87:1a:fd:cf:d3:e7:95: 28:4a:b9:ec:ec:0d:5e:b0:f7:6d:5e:0f:f9:bf:22: f4:ea:d4:68:c2:85:db:38:31:e0:0f:15:74:c1:be: 91:1a:d3:66:83:35:4c:f8:43:05:6c:3b:7d:40:a1: fa:9f:64:f4:64:39:f8:72:ce:ef:42:6f:26:0d:3e: f6:5d:29:6f:47:fe:45:ef:1d:3d:54:47:c8:4f:54: b2:84:a4:e5:26:3e:8d:a4:de:e2:85:8f:9f:62:8b: 5a:cf:ca:f7:73:32:62:40:db:79:c3:26:01:f4:c1: df:f1:ae:1e:86:43:93:08:bc:97:61:7b:ac:7e:3e: 95:dc:28:b5:ca:02:da:a1:84:67:57:42:05:2e:f2: b4:38:65:dc:9b:07:9c:09:0d:82:c9:9b:cf:51:9a: 94:87:c0:0c:01:90:ed:8c:8a:04:09:89:66:28:f0: 94:b5:99:92:bd:e9:f4:b4:6f:b9:bd:af:c9:9b:03: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:22:D7:31:6E:30:12:07:20:B6:0B:EE:C5:EB:F2:CB:A3:B9:C0 X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:50:50:69:d7:b4:0a:e5:c4:84:ca:6e:63:1d:b9:0e:e6:98: 88:57:2a:28:34:18:33:7b:bd:83:1a:c2:79:c3:61:e9:a2:97: 96:44:56:ed:af:f8:eb:13:68:51:0d:2a:d9:5f:69:8a:7a:df: f9:93:5c:87:b1:e5:eb:c5:c8:5a:e4:aa:26:30:26:4b:77:af: 0c:be:cd:b4:5b:5b:ec:5d:62:ea:3b:a8:ba:43:d0:4e:1a:9f: 4d:05:34:cd:86:e1:a9:f3:e1:4f:c5:97:32:2d:10:eb:20:29: 9f:28:d7:92:15:93:9f:98:33:0c:d2:f9:89:8c:eb:00:31:40: 0a:95:c2:c0:6e:99:48:2e:5d:7a:85:b8:06:41:c9:93:bf:5f: 43:56:f6:f4:4d:c9:19:54:1a:e6:f6:c0:4a:54:07:fc:c2:35: ef:f3:40:03:e3:96:db:c9:e2:17:35:a4:4a:a0:cf:f1:4d:ef: 6c:cb:f8:d9:85:d9:2c:51:09:81:33:eb:00:90:7f:1b:e0:cf: 5b:43:88:80:8f:49:db:17:3a:55:e8:a4:e5:0c:74:92:29:f1: b1:6f:3e:12:90:f0:a4:3b:7d:fb:2a:4c:78:0d:00:14:1c:92: 0e:ef:94:6c:e1:4a:1b:76:58:8f:4b:e6:c1:bc:61:b6:4e:6a: 87:ad:77:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgzcPGXi67xlEQBMacA11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjUxMjIzMTQwMDQ5WhcNMjUxMjI0MTQwMDQ5WjAzMTEwLwYDVQQD Eyg5ZjE3MjJkNzMxNmUzMDEyMDcyMGI2MGJlZWM1ZWJmMmNiYTNiOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXMcmBx7ZCz8Xffue6Ie5DXEASar bmoxeDLGiFbibs4Y/rZGw02NASHqbNlk9DfFfcn0O/xHxDROyA/dV3WYUKsss4ca /c/T55UoSrns7A1esPdtXg/5vyL06tRowoXbODHgDxV0wb6RGtNmgzVM+EMFbDt9 QKH6n2T0ZDn4cs7vQm8mDT72XSlvR/5F7x09VEfIT1SyhKTlJj6NpN7ihY+fYota z8r3czJiQNt5wyYB9MHf8a4ehkOTCLyXYXusfj6V3Ci1ygLaoYRnV0IFLvK0OGXc mwecCQ2CyZvPUZqUh8AMAZDtjIoECYlmKPCUtZmSven0tG+5va/JmwNm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8XItcxbjASByC2C+7F6/LLo7nAMB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVBQade0 CuXEhMpuYx25DuaYiFcqKDQYM3u9gxrCecNh6aKXlkRW7a/46xNoUQ0q2V9pinrf +ZNch7Hl68XIWuSqJjAmS3evDL7NtFtb7F1i6juoukPQThqfTQU0zYbhqfPhT8WX Mi0Q6yApnyjXkhWTn5gzDNL5iYzrADFACpXCwG6ZSC5deoW4BkHJk79fQ1b29E3J GVQa5vbASlQH/MI17/NAA+OW28niFzWkSqDP8U3vbMv42YXZLFEJgTPrAJB/G+DP W0OIgI9J2xc6Veik5Qx0kinxsW8+EpDwpDt9+ypMeA0AFBySDu+UbOFKG3ZYj0vm wbxhtk5qh6130Q== -----END CERTIFICATE-----Generated at Tue Dec 23 15:22:09 2025 by rpki-client