This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json) Hash identifier: l8+kmK+9OCfL6aSvqF+VBtKcS/NWbruSbxZZmxsybyk= Subject key identifier: 29:1F:74:DA:6A:86:43:DF:96:74:86:E8:2F:A4:99:3F:4E:07:11:E6 Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Certificate serial: 019B6CC6E7B2C0E683EF8BECBA23C7B79052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 01:02:13 +0000 Manifest this update: Tue 30 Dec 2025 01:02:13 +0000 Manifest next update: Wed 31 Dec 2025 01:02:13 +0000 Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: 5WksPpOAtKzsJsiMwoB0YiLZivclAhd+hxUhO1lfZqk=) 2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:e7:b2:c0:e6:83:ef:8b:ec:ba:23:c7:b7:90:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Validity Not Before: Dec 30 01:02:13 2025 GMT Not After : Dec 31 01:02:13 2025 GMT Subject: CN=291f74da6a8643df967486e82fa4993f4e0711e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:d3:b7:e6:22:60:b8:92:06:56:77:8a:ac: a0:dc:4b:c1:1b:0a:c4:3b:98:67:e4:44:40:b4:00: 09:3b:16:da:02:91:72:3d:43:b0:59:e9:ad:10:6a: 2b:dd:1e:44:8c:e7:25:15:b2:b3:df:8f:f7:78:bd: 55:41:ec:56:0a:a4:0f:c7:a1:35:1e:6a:f8:66:0b: c3:75:67:4a:62:4f:fd:ec:5d:95:68:55:44:dc:10: f0:b0:a4:71:09:9c:fb:4f:32:2e:a2:fd:17:5d:4e: 2f:17:62:5a:d6:3b:d8:fb:3e:6b:a1:a9:4b:d9:bb: 8b:8e:79:05:ab:26:51:05:1a:f0:55:46:ec:df:53: f4:fb:ef:89:2c:ec:66:bd:79:e7:12:dc:01:22:f3: 05:ae:c3:17:a9:03:74:59:13:3b:32:12:04:30:45: 4a:e6:31:d1:f5:bd:e1:d4:e6:04:2f:7d:ac:a2:55: 02:fc:c3:09:c3:97:2e:27:61:aa:24:e8:f5:3b:f2: 83:ca:99:c7:bb:cb:31:0e:60:63:5e:66:2a:77:9f: 41:4c:41:63:0d:54:97:a8:67:28:3b:c3:80:c1:73: 58:b6:28:08:ba:4e:3e:a9:4f:fa:4f:0e:d3:f4:36: 03:db:9d:e9:97:78:f4:db:2f:0c:51:52:c5:a2:9b: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1F:74:DA:6A:86:43:DF:96:74:86:E8:2F:A4:99:3F:4E:07:11:E6 X509v3 Authority Key Identifier: keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:f7:4a:41:be:d6:20:f1:95:98:ba:7e:be:4e:3a:6d:6d: c7:47:e9:e0:bf:8b:ab:4a:eb:0e:0f:18:e1:00:eb:5d:75:5f: c8:24:79:57:46:84:3d:f3:a5:9e:c8:0a:22:1e:7d:8e:bd:ee: 7a:75:8d:5c:60:de:b6:3f:02:79:c2:60:56:8f:a7:ae:d9:09: 40:49:b7:8d:43:71:f8:0c:8c:ea:e4:7d:13:8e:29:92:bf:3d: fa:d0:86:21:c2:2b:02:5e:d9:06:68:b8:46:89:81:e0:93:89: 86:db:08:b3:37:63:26:64:54:21:4a:ad:4c:26:fc:69:a4:f9: 4d:5a:06:f5:11:fb:77:58:1b:8f:9d:4d:a4:a6:f3:85:8e:7a: 99:13:7e:7f:e1:18:8b:38:f4:a8:c8:c1:59:05:61:e7:b7:d9: ce:c1:e8:60:b6:63:15:d8:3f:90:96:e5:cc:4b:48:f7:56:bc: 79:3e:44:9f:b1:a8:f5:b7:b4:af:fd:79:00:73:60:31:88:67: 6b:8f:66:a0:55:91:bb:6b:75:13:0c:63:91:fa:f7:53:cc:0a: 30:7f:d2:1e:05:50:ad:76:71:06:0a:80:2e:b2:f8:c1:04:0c: 04:20:4c:4b:70:7e:3d:08:77:e1:7a:af:ee:3a:b4:8f:d4:51: 00:23:b8:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxueywOaD74vsuiPHt5BSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3 OWE1MjIwHhcNMjUxMjMwMDEwMjEzWhcNMjUxMjMxMDEwMjEzWjAzMTEwLwYDVQQD EygyOTFmNzRkYTZhODY0M2RmOTY3NDg2ZTgyZmE0OTkzZjRlMDcxMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvvTt+YiYLiSBlZ3iqyg3EvBGwrE O5hn5ERAtAAJOxbaApFyPUOwWemtEGor3R5EjOclFbKz34/3eL1VQexWCqQPx6E1 Hmr4ZgvDdWdKYk/97F2VaFVE3BDwsKRxCZz7TzIuov0XXU4vF2Ja1jvY+z5roalL 2buLjnkFqyZRBRrwVUbs31P0+++JLOxmvXnnEtwBIvMFrsMXqQN0WRM7MhIEMEVK 5jHR9b3h1OYEL32solUC/MMJw5cuJ2GqJOj1O/KDypnHu8sxDmBjXmYqd59BTEFj DVSXqGcoO8OAwXNYtigIuk4+qU/6Tw7T9DYD253pl3j02y8MUVLFoptxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkfdNpqhkPflnSG6C+kmT9OBxHmMB8GA1UdIwQY MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2 LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbc/3SkG+ 1iDxlZi6fr5OOm1tx0fp4L+Lq0rrDg8Y4QDrXXVfyCR5V0aEPfOlnsgKIh59jr3u enWNXGDetj8CecJgVo+nrtkJQEm3jUNx+AyM6uR9E44pkr89+tCGIcIrAl7ZBmi4 RomB4JOJhtsIszdjJmRUIUqtTCb8aaT5TVoG9RH7d1gbj51NpKbzhY56mRN+f+EY izj0qMjBWQVh57fZzsHoYLZjFdg/kJblzEtI91a8eT5En7Go9be0r/15AHNgMYhn a49moFWRu2t1Ewxjkfr3U8wKMH/SHgVQrXZxBgqALrL4wQQMBCBMS3B+PQh34Xqv 7jq0j9RRACO42Q== -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:00 2025 by rpki-client