This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json) Hash identifier: nsln+GSzlOMqN1XjcOCw22j/7o5rBwbRXY/ctoQmwt8= Subject key identifier: 21:D7:FA:47:72:C9:97:6F:B3:63:8F:0B:EA:73:4F:58:E9:14:4B:EE Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Certificate serial: 019B76DB647E2B56E53DFFA98E97EDF0EF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft Manifest number: 087D Signing time: Thu 01 Jan 2026 00:00:48 +0000 Manifest this update: Thu 01 Jan 2026 00:00:48 +0000 Manifest next update: Fri 02 Jan 2026 00:00:48 +0000 Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: 2ZIYxKXRaXcBLOfm/eM32/LwYV/RZCkyQtVt+u9orfw=) 2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:64:7e:2b:56:e5:3d:ff:a9:8e:97:ed:f0:ef:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Validity Not Before: Jan 1 00:00:48 2026 GMT Not After : Jan 2 00:00:48 2026 GMT Subject: CN=21d7fa4772c9976fb3638f0bea734f58e9144bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:ff:8e:61:7c:df:4c:52:e9:36:62:2b:ff: 87:16:6d:dc:2a:51:dd:3b:22:56:3f:c4:3a:53:7e: 0a:34:99:3b:5c:aa:99:4a:48:12:a7:6c:fd:47:e2: db:92:88:b9:9f:63:0a:5f:7f:a8:99:91:42:e9:43: 47:87:62:e0:d9:d6:35:b9:f1:07:7c:64:82:8e:ff: c6:30:1f:27:9f:45:dc:7a:17:bd:61:7f:70:bb:17: 5d:5b:02:9f:3e:26:1b:a6:87:bd:c6:ef:1d:c5:9e: a7:8a:19:08:9c:df:93:43:45:92:3f:0b:31:2a:5c: 74:b7:13:64:d0:8a:53:5b:88:85:7f:55:ec:b3:4b: 7f:3f:0e:75:ab:ba:ad:92:8c:50:f1:34:80:db:fd: 14:c8:de:63:ea:bb:b8:1b:e1:d9:48:b1:56:32:df: ba:95:3c:19:46:3e:6f:22:0d:7a:51:21:01:bf:2e: f6:d4:b2:6f:b8:a1:bd:45:9e:ad:3d:cd:da:fa:f6: 5f:49:9d:a1:a6:84:53:bb:d8:59:8a:2b:ba:8c:34: d1:f4:0d:7c:31:1e:12:23:74:51:4d:2b:3e:dd:eb: de:fa:3e:52:b2:6c:70:f7:78:17:da:82:76:b0:c3: 5b:c5:58:51:2a:2c:4a:f7:6b:99:f5:6a:d7:f3:21: 70:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D7:FA:47:72:C9:97:6F:B3:63:8F:0B:EA:73:4F:58:E9:14:4B:EE X509v3 Authority Key Identifier: keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:20:14:79:ee:da:00:0c:d7:2e:f1:1b:ce:8d:af:1e:54: f4:e5:7c:ff:fa:b3:f8:a1:d8:67:25:c6:23:bb:b5:fd:6f:7b: 03:e2:8c:e5:12:e9:a3:a7:40:71:69:23:22:68:02:d4:e1:ae: f1:29:1a:18:4a:b3:b7:18:79:0a:42:7a:86:86:98:68:2c:cb: b9:9d:f7:5d:19:d0:08:85:28:95:f9:ce:9e:98:26:bd:1f:88: a2:f0:c7:c4:a3:6b:d6:a2:2a:f5:78:6d:5c:df:5c:f8:d2:a0: 9f:25:1a:93:df:72:c7:2b:34:ae:6c:1b:a6:c1:95:0d:f0:42: ed:d0:16:fd:f7:b5:c4:03:91:35:80:25:8d:37:6c:23:95:c0: 16:ad:84:e3:59:78:38:6d:51:89:cf:e2:32:b5:fd:a6:a8:ac: a6:ed:e6:7b:14:15:72:39:91:71:34:ef:53:a5:7c:88:1c:d0: 82:27:a6:38:47:4a:b0:12:4d:ca:36:3f:c8:a3:dc:20:43:88: 0c:f5:e2:a6:1f:af:da:41:e1:77:d0:6e:18:00:dc:cd:67:5d: 66:fc:6f:53:69:27:20:57:63:9d:6b:a1:d8:b4:04:60:39:4b: ca:a6:45:a5:f9:ce:46:62:e3:a0:7d:e3:12:27:0f:76:5e:94: 1d:bd:7b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt222R+K1blPf+pjpft8O8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl ZmE1MGYwHhcNMjYwMTAxMDAwMDQ4WhcNMjYwMTAyMDAwMDQ4WjAzMTEwLwYDVQQD EygyMWQ3ZmE0NzcyYzk5NzZmYjM2MzhmMGJlYTczNGY1OGU5MTQ0YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFf/jmF830xS6TZiK/+HFm3cKlHd OyJWP8Q6U34KNJk7XKqZSkgSp2z9R+Lbkoi5n2MKX3+omZFC6UNHh2Lg2dY1ufEH fGSCjv/GMB8nn0Xcehe9YX9wuxddWwKfPiYbpoe9xu8dxZ6nihkInN+TQ0WSPwsx Klx0txNk0IpTW4iFf1Xss0t/Pw51q7qtkoxQ8TSA2/0UyN5j6ru4G+HZSLFWMt+6 lTwZRj5vIg16USEBvy721LJvuKG9RZ6tPc3a+vZfSZ2hpoRTu9hZiiu6jDTR9A18 MR4SI3RRTSs+3eve+j5Ssmxw93gX2oJ2sMNbxVhRKixK92uZ9WrX8yFw6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHX+kdyyZdvs2OPC+pzT1jpFEvuMB8GA1UdIwQY MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqAgFHnu 2gAM1y7xG86Nrx5U9OV8//qz+KHYZyXGI7u1/W97A+KM5RLpo6dAcWkjImgC1OGu 8SkaGEqztxh5CkJ6hoaYaCzLuZ33XRnQCIUolfnOnpgmvR+IovDHxKNr1qIq9Xht XN9c+NKgnyUak99yxys0rmwbpsGVDfBC7dAW/fe1xAORNYAljTdsI5XAFq2E41l4 OG1Ric/iMrX9pqispu3mexQVcjmRcTTvU6V8iBzQgiemOEdKsBJNyjY/yKPcIEOI DPXiph+v2kHhd9BuGADczWddZvxvU2knIFdjnWuh2LQEYDlLyqZFpfnORmLjoH3j EicPdl6UHb17Vw== -----END CERTIFICATE-----Generated at Thu Jan 1 05:44:46 2026 by rpki-client