This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json) Hash identifier: pqwDLQqBzRA2pdoTV4INN2zWBu2BocaemGwajZFdEPE= Subject key identifier: 08:CF:78:E3:9C:76:7A:DA:63:E4:2E:63:38:A7:EF:9B:DB:88:5C:67 Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019B3156174A9F214763F982D7115B054468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 12:01:24 +0000 Manifest this update: Thu 18 Dec 2025 12:01:24 +0000 Manifest next update: Fri 19 Dec 2025 12:01:24 +0000 Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: HSpFs7FwQtrLnh9IsDL/GAlGJ/JDV6pPmYzcBvHAjSw=) 2: WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa (hash: 0X0If49M+V2ammA0VwSceRVBIsja0kYtbwYh9ggCEXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:17:4a:9f:21:47:63:f9:82:d7:11:5b:05:44:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Dec 18 12:01:24 2025 GMT Not After : Dec 19 12:01:24 2025 GMT Subject: CN=08cf78e39c767ada63e42e6338a7ef9bdb885c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:c0:fa:ec:8d:b5:9a:c1:d0:e7:54:d8:92: 31:26:3e:a3:42:e5:7d:9e:b8:73:e3:0c:a6:bb:a0: 8c:3f:d7:29:52:67:5c:b5:cf:93:5d:d7:81:27:9a: c8:72:c8:4f:c4:03:2a:1f:ae:4c:15:d5:1d:37:6e: b3:cf:ed:ef:e0:af:79:76:ec:44:8a:6d:5a:42:14: b6:72:11:1a:67:9b:57:2b:94:df:fb:3e:45:f6:7e: ac:74:fb:84:3d:8a:fe:f9:47:ae:f9:86:81:0a:2e: cd:36:cc:1c:c8:55:13:61:5e:fb:6c:d5:66:1b:2a: f6:35:62:39:9d:76:8c:ff:e7:ea:f3:45:83:e6:1c: 10:da:81:12:7f:30:9f:1b:53:5f:c5:01:6c:84:d2: c9:3a:a3:44:a6:d9:d7:33:51:f0:f0:be:dd:a0:6d: 18:66:36:33:ca:30:c7:82:b1:e5:3e:e8:86:f7:f8: 1d:3d:38:e7:f1:7d:ef:05:f4:95:a3:43:fc:7b:a2: 6d:17:1b:34:db:99:4e:6b:b3:7f:dd:ff:48:9e:e8: 73:1c:18:24:51:f6:59:ee:3b:64:29:4f:8f:15:4e: 58:1b:35:26:3f:06:5e:dc:73:fb:ec:31:32:0c:70: 61:3d:80:08:11:32:3d:68:dc:ce:5a:0b:61:c9:34: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:78:E3:9C:76:7A:DA:63:E4:2E:63:38:A7:EF:9B:DB:88:5C:67 X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5d:86:4b:d8:c3:e8:e2:6d:bf:4e:a6:82:43:0d:ff:dc:84: 1f:1e:2c:cb:fb:fc:16:9b:12:b2:a4:82:75:06:f8:ad:3a:8e: 56:db:9b:06:98:66:8e:ab:ed:b7:34:65:36:7d:f4:13:8e:72: 02:4c:7a:90:0f:7f:cd:cd:87:68:fb:03:61:67:46:ce:71:91: 89:87:0a:93:c5:23:81:a5:b5:a0:73:ea:64:55:1a:d8:79:92: 02:78:a0:39:42:da:e7:8b:81:7d:3d:61:bf:3e:bc:fe:06:74: a0:e7:80:4c:29:9e:4d:dc:13:22:41:06:11:18:2e:64:a6:1a: 37:be:b7:7a:fb:a2:96:61:cc:10:12:44:38:c6:36:ea:1e:95: e6:63:4d:00:be:72:af:2b:8b:e2:6b:75:79:12:a7:d3:18:18: 0a:54:e6:d4:ec:2e:08:7a:41:5f:e4:af:25:8f:3a:19:18:f1: d8:e8:27:be:9b:40:46:9b:49:cb:c1:f2:b4:07:b1:04:d2:8e: 6e:7a:7f:ba:ce:3b:30:4f:33:60:ef:13:61:5a:ce:f2:94:d6: 01:39:7c:d2:8b:30:28:96:bc:84:26:9f:8d:3a:51:67:1a:8d: e2:5d:1e:1d:e1:e0:ac:af:cb:64:64:ff:85:8c:33:cd:53:1c: ec:c3:da:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhdKnyFHY/mC1xFbBURoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjUxMjE4MTIwMTI0WhcNMjUxMjE5MTIwMTI0WjAzMTEwLwYDVQQD EygwOGNmNzhlMzljNzY3YWRhNjNlNDJlNjMzOGE3ZWY5YmRiODg1YzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9bA+uyNtZrB0OdU2JIxJj6jQuV9 nrhz4wymu6CMP9cpUmdctc+TXdeBJ5rIcshPxAMqH65MFdUdN26zz+3v4K95duxE im1aQhS2chEaZ5tXK5Tf+z5F9n6sdPuEPYr++Ueu+YaBCi7NNswcyFUTYV77bNVm Gyr2NWI5nXaM/+fq80WD5hwQ2oESfzCfG1NfxQFshNLJOqNEptnXM1Hw8L7doG0Y ZjYzyjDHgrHlPuiG9/gdPTjn8X3vBfSVo0P8e6JtFxs025lOa7N/3f9InuhzHBgk UfZZ7jtkKU+PFU5YGzUmPwZe3HP77DEyDHBhPYAIETI9aNzOWgthyTRMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjPeOOcdnraY+QuYzin75vbiFxnMB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil2GS9jD 6OJtv06mgkMN/9yEHx4sy/v8FpsSsqSCdQb4rTqOVtubBphmjqvttzRlNn30E45y Akx6kA9/zc2HaPsDYWdGznGRiYcKk8UjgaW1oHPqZFUa2HmSAnigOULa54uBfT1h vz68/gZ0oOeATCmeTdwTIkEGERguZKYaN763evuilmHMEBJEOMY26h6V5mNNAL5y ryuL4mt1eRKn0xgYClTm1OwuCHpBX+SvJY86GRjx2OgnvptARptJy8HytAexBNKO bnp/us47ME8zYO8TYVrO8pTWATl80oswKJa8hCafjTpRZxqN4l0eHeHgrK/LZGT/ hYwzzVMc7MPaTg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:06:06 2025 by rpki-client