This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json) Hash identifier: Lo791Yagk5CRNTGzObdii52U6ZXUkw22GVFyQcUEDQQ= Subject key identifier: 21:88:4B:3F:11:FA:4B:0A:13:39:CC:44:2A:18:AB:A9:25:1E:EF:85 Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Certificate serial: 019B69570E5F44093B5865D8DDFCFCF24507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft Manifest number: 0876 Signing time: Mon 29 Dec 2025 09:01:11 +0000 Manifest this update: Mon 29 Dec 2025 09:01:11 +0000 Manifest next update: Tue 30 Dec 2025 09:01:11 +0000 Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: Am8pmNyCkuMZntKDJtFAPl5HS/Uzlzebmnm96I7H/m0=) 2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:0e:5f:44:09:3b:58:65:d8:dd:fc:fc:f2:45:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Validity Not Before: Dec 29 09:01:11 2025 GMT Not After : Dec 30 09:01:11 2025 GMT Subject: CN=21884b3f11fa4b0a1339cc442a18aba9251eef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:6e:67:19:cb:70:9b:cf:38:84:43:ab:8e: 09:e9:04:17:53:83:50:01:07:bf:4f:a7:84:c6:62: 32:01:87:d0:30:be:59:76:1b:b0:4a:46:dc:04:3b: f9:14:8e:f1:8e:e8:f5:c0:05:5b:bc:60:6a:13:b5: 3b:1b:2c:f5:88:25:f0:d8:34:7b:5f:46:3a:b8:b6: 9e:56:84:6f:55:37:bd:68:f1:65:39:a1:36:ed:a7: 12:32:be:a8:b1:54:86:a1:9e:da:62:bb:64:dd:52: a9:a5:67:4f:78:1a:ad:a2:36:23:0a:c2:95:5e:19: ba:b2:c1:5f:79:f9:f9:dc:28:eb:ec:77:78:cd:fb: d9:c1:a7:11:51:db:af:12:8a:45:2a:40:59:54:49: 74:89:81:0e:51:18:03:d7:2c:39:6f:20:e4:d2:89: 6d:ce:13:b1:6f:29:b6:1b:ff:9c:77:c6:0d:99:e6: 84:c9:3f:be:d7:0d:0c:40:7f:14:8b:b9:56:db:ce: bc:48:20:9c:24:13:65:ca:6e:2e:65:d4:30:66:e2: ac:09:25:cb:a3:bf:be:44:4c:de:70:c2:bf:1a:e6: 2d:24:59:15:f3:53:31:0d:1f:cd:5f:2c:62:4b:a5: c3:a2:e2:c5:5a:1f:d8:26:a4:ed:52:1f:83:99:33: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:88:4B:3F:11:FA:4B:0A:13:39:CC:44:2A:18:AB:A9:25:1E:EF:85 X509v3 Authority Key Identifier: keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f8:57:33:24:d4:0c:d6:7d:18:f0:35:cc:cf:cd:55:90:88: 7b:ee:6a:3e:9b:96:a1:fb:be:fe:01:1b:eb:15:a0:8f:5f:97: 4f:40:c6:bc:9b:08:58:ae:ad:3c:86:70:b2:11:1a:f0:b5:5b: 7d:37:16:3e:da:e9:53:09:5f:37:3e:de:9f:e8:90:6a:41:71: 96:3f:90:a4:d7:27:2a:5a:2a:a2:25:4f:1a:3b:30:c1:c7:1d: 32:83:63:d6:fb:f6:69:94:5e:98:7e:b4:0e:c5:a9:e4:78:82: 66:24:bb:cf:e4:15:df:cf:d1:9a:79:13:ba:54:87:13:f8:86: 78:eb:72:c3:dc:73:19:d5:6d:11:91:c3:31:56:3a:1a:6f:46: 0d:30:02:c2:bd:15:0a:cd:af:a9:cf:d2:11:32:4d:37:d3:45: f4:b6:b4:de:4a:6f:31:31:2b:01:7d:a6:21:8b:71:6c:10:77: 2d:e5:31:56:5b:e7:3a:6d:1f:cf:c2:06:08:0b:b3:ce:12:e1: 86:e6:1a:86:17:68:c5:25:06:2c:58:91:0d:0c:68:ef:ba:f6: 89:26:07:39:7c:b1:9f:1a:6a:5a:0a:63:64:c1:af:13:c4:61: 9d:6a:41:02:86:ce:ed:de:6a:f6:f6:18:c7:fb:a8:a1:1d:72: 80:8e:3a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVw5fRAk7WGXY3fz88kUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl ZmE1MGYwHhcNMjUxMjI5MDkwMTExWhcNMjUxMjMwMDkwMTExWjAzMTEwLwYDVQQD EygyMTg4NGIzZjExZmE0YjBhMTMzOWNjNDQyYTE4YWJhOTI1MWVlZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTFuZxnLcJvPOIRDq44J6QQXU4NQ AQe/T6eExmIyAYfQML5ZdhuwSkbcBDv5FI7xjuj1wAVbvGBqE7U7Gyz1iCXw2DR7 X0Y6uLaeVoRvVTe9aPFlOaE27acSMr6osVSGoZ7aYrtk3VKppWdPeBqtojYjCsKV Xhm6ssFfefn53Cjr7Hd4zfvZwacRUduvEopFKkBZVEl0iYEOURgD1yw5byDk0olt zhOxbym2G/+cd8YNmeaEyT++1w0MQH8Ui7lW2868SCCcJBNlym4uZdQwZuKsCSXL o7++REzecMK/GuYtJFkV81MxDR/NXyxiS6XDouLFWh/YJqTtUh+DmTM8OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGISz8R+ksKEznMRCoYq6klHu+FMB8GA1UdIwQY MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvhXMyTU DNZ9GPA1zM/NVZCIe+5qPpuWofu+/gEb6xWgj1+XT0DGvJsIWK6tPIZwshEa8LVb fTcWPtrpUwlfNz7en+iQakFxlj+QpNcnKloqoiVPGjswwccdMoNj1vv2aZRemH60 DsWp5HiCZiS7z+QV38/RmnkTulSHE/iGeOtyw9xzGdVtEZHDMVY6Gm9GDTACwr0V Cs2vqc/SETJNN9NF9La03kpvMTErAX2mIYtxbBB3LeUxVlvnOm0fz8IGCAuzzhLh huYahhdoxSUGLFiRDQxo77r2iSYHOXyxnxpqWgpjZMGvE8RhnWpBAobO7d5q9vYY x/uooR1ygI46rw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:22:15 2025 by rpki-client