This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json) Hash identifier: 4JjusDblbxTMFUq/CuBzD7vayzZxVGutjqJxnVJKu8o= Subject key identifier: 11:3E:91:2B:AA:36:98:DF:93:B0:54:26:A2:4B:08:26:82:A3:C3:FD Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Certificate serial: 019B3FB6053051201E2808B065A61AF65202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft Manifest number: 0E6B Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: u7dn1HcFZJHT+/4QPmdIJtnqJHBmdx2QsigV/zeLB6k=) 2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:05:30:51:20:1e:28:08:b0:65:a6:1a:f6:52:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=113e912baa3698df93b05426a24b082682a3c3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:31:1b:4a:dc:ed:48:3e:54:e2:83:79:24: 75:98:23:bd:60:9f:70:fd:c9:af:53:f4:50:8c:67: d7:ab:01:2f:67:56:db:4c:e0:60:24:e0:a6:fc:be: 7a:bb:f9:c0:76:cc:7e:4b:8b:a5:df:24:47:8e:04: ad:20:68:77:5e:72:ad:b3:82:ae:e9:e9:67:23:d8: a6:90:32:49:8a:05:68:f9:23:aa:45:ae:61:75:28: c9:56:30:83:a7:46:38:2a:f9:71:69:5e:3e:a0:ba: 06:ab:7c:90:fe:48:2e:06:1c:ef:b6:3f:95:70:b4: fc:e0:8f:30:13:54:37:72:f3:48:fc:62:2b:0b:08: 2c:38:e8:11:80:62:86:63:1b:3e:1d:89:44:48:d5: 22:a2:84:fb:f4:fc:e6:3c:c1:b2:75:d0:cb:07:4b: 67:56:f9:65:b1:67:01:0c:62:3e:e3:bc:9e:ba:6e: 1c:ff:84:66:f3:73:3b:1a:ca:d7:ac:ec:bb:7c:79: e9:96:cc:1f:e0:92:9a:91:52:ff:3f:31:92:de:ec: f5:18:9c:f9:33:62:4e:da:ce:05:b9:a5:71:61:f3: 8d:e4:6b:03:65:e0:53:da:cf:d6:2c:61:3b:c8:36: 3c:9b:22:c7:4f:d3:5e:71:81:31:10:1a:97:c6:f1: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3E:91:2B:AA:36:98:DF:93:B0:54:26:A2:4B:08:26:82:A3:C3:FD X509v3 Authority Key Identifier: keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:72:27:c7:9c:e6:d0:3d:ae:5f:f1:25:ab:33:53:b3:ff:13: 9e:4b:de:13:a1:ce:14:59:dd:25:3b:d6:fd:63:9a:70:89:9a: 12:54:53:d7:e7:0f:62:7b:14:a4:84:88:ee:6f:7c:f4:da:55: dd:42:da:11:7c:e1:77:e8:67:c5:1b:39:e6:b9:5d:24:8b:85: b0:b9:0a:1d:1e:01:bb:5a:20:06:ce:ec:40:25:3a:77:7a:1b: 3a:63:42:d4:93:08:ca:c4:ce:73:71:e3:2f:fe:1f:43:e0:4a: 59:14:ce:24:4a:ec:dd:4b:31:66:a6:d7:b4:0c:df:9d:9c:2e: 09:88:0d:bf:8b:22:63:c9:af:7b:e5:40:b5:46:8a:f3:a5:79: e9:fd:6e:0c:06:b9:16:02:33:67:99:e0:31:f2:c1:e4:91:ae: 0b:2e:a8:c2:93:fb:55:65:42:fc:51:64:00:32:67:fd:18:3f: 57:d4:4a:a1:33:6b:ff:ad:12:68:47:51:c1:83:af:18:f2:f7: ed:e1:eb:73:90:72:93:18:9c:b5:99:81:56:10:4d:8b:ea:ad: a9:f5:52:43:7b:5e:ac:87:d3:57:18:d9:07:51:80:91:60:bb: 76:36:27:36:01:37:f3:20:18:60:2f:b1:bb:89:92:96:ae:d9: e0:65:18:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgUwUSAeKAiwZaYa9lICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk ODFhYTAwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD EygxMTNlOTEyYmFhMzY5OGRmOTNiMDU0MjZhMjRiMDgyNjgyYTNjM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LUxG0rc7Ug+VOKDeSR1mCO9YJ9w /cmvU/RQjGfXqwEvZ1bbTOBgJOCm/L56u/nAdsx+S4ul3yRHjgStIGh3XnKts4Ku 6elnI9imkDJJigVo+SOqRa5hdSjJVjCDp0Y4KvlxaV4+oLoGq3yQ/kguBhzvtj+V cLT84I8wE1Q3cvNI/GIrCwgsOOgRgGKGYxs+HYlESNUiooT79PzmPMGyddDLB0tn VvllsWcBDGI+47yeum4c/4Rm83M7GsrXrOy7fHnplswf4JKakVL/PzGS3uz1GJz5 M2JO2s4FuaVxYfON5GsDZeBT2s/WLGE7yDY8myLHT9NecYExEBqXxvFvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE+kSuqNpjfk7BUJqJLCCaCo8P9MB8GA1UdIwQY MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHInx5zm 0D2uX/ElqzNTs/8TnkveE6HOFFndJTvW/WOacImaElRT1+cPYnsUpISI7m989NpV 3ULaEXzhd+hnxRs55rldJIuFsLkKHR4Bu1ogBs7sQCU6d3obOmNC1JMIysTOc3Hj L/4fQ+BKWRTOJErs3UsxZqbXtAzfnZwuCYgNv4siY8mve+VAtUaK86V56f1uDAa5 FgIzZ5ngMfLB5JGuCy6owpP7VWVC/FFkADJn/Rg/V9RKoTNr/60SaEdRwYOvGPL3 7eHrc5BykxictZmBVhBNi+qtqfVSQ3terIfTVxjZB1GAkWC7djYnNgE38yAYYC+x u4mSlq7Z4GUYrg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:43 2025 by rpki-client