This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json) Hash identifier: MQ3TJPzxcJSLp+SzBSmx8s3azA5MfKGjw8EyNJ0fpVI= Subject key identifier: A4:38:70:4B:47:B8:9A:0E:21:F3:11:E6:44:4F:42:AC:41:09:DE:EA Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Certificate serial: 019B6B457367C0E19D9880504AA8537C4E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft Manifest number: 1730 Signing time: Mon 29 Dec 2025 18:01:12 +0000 Manifest this update: Mon 29 Dec 2025 18:01:12 +0000 Manifest next update: Tue 30 Dec 2025 18:01:12 +0000 Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=) 2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: GjJYmwk/OEwQX9YiZbjtfjBWteeqq2LxYj53qBvVu3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:73:67:c0:e1:9d:98:80:50:4a:a8:53:7c:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Validity Not Before: Dec 29 18:01:12 2025 GMT Not After : Dec 30 18:01:12 2025 GMT Subject: CN=a438704b47b89a0e21f311e6444f42ac4109deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:2e:bf:4a:9f:5f:ad:9c:ff:40:99:f1:b1: 26:82:76:34:02:9b:41:15:31:af:63:5c:21:3f:1f: bb:29:a9:cc:99:ea:1e:1e:ba:bc:35:d5:d4:2c:72: d8:33:0f:73:ab:97:a4:b9:76:90:e6:4c:37:18:3e: 71:b9:55:f4:f3:5f:46:b8:9b:b4:21:05:23:85:8b: 86:ce:4f:26:d2:85:7a:e4:31:2c:be:66:e9:ac:e4: 1b:98:8b:f2:76:fa:11:5a:f3:b1:f7:37:16:ac:bf: 42:2f:8d:79:bb:7b:59:8b:99:fa:92:60:4f:8c:32: 0b:ae:87:d8:1f:7f:23:42:b8:71:16:2b:9a:2e:69: 9a:19:8a:11:1e:84:33:91:82:f5:91:b5:23:fd:bd: 5f:fe:37:9e:f8:bd:d3:d9:37:95:7a:6f:ec:af:79: a0:77:49:bf:cf:04:4a:2f:52:29:82:b5:aa:23:ed: ff:2f:6e:37:ad:4f:a1:83:d8:b6:f0:d9:0a:28:26: c1:5b:c5:60:63:d2:60:ba:87:fe:37:c7:75:e9:eb: 80:46:89:d9:79:51:af:d6:ad:6b:30:b5:9b:6e:4f: eb:7a:38:77:dd:5a:6f:49:6b:8a:9c:f1:1f:15:ad: c3:07:b1:b2:d8:e4:5f:c9:96:86:aa:bf:67:87:a0: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:70:4B:47:B8:9A:0E:21:F3:11:E6:44:4F:42:AC:41:09:DE:EA X509v3 Authority Key Identifier: keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9d:98:4f:f1:71:fc:0f:fd:de:da:80:bd:d4:b2:d6:51:76: 9a:88:87:64:c5:3f:7c:f0:6f:41:6a:b8:9d:20:41:b8:27:ae: 38:2a:5c:9e:6d:ae:0b:4d:b5:18:66:55:f0:3a:f3:b3:4c:1b: 9d:5d:c3:53:c5:5d:c5:d8:61:66:c5:e0:bb:c6:e4:08:46:ef: f2:23:78:92:c6:d2:fd:b7:23:2b:42:b5:4d:9c:72:e8:39:ae: c6:c5:b3:c3:b5:75:c2:77:a5:b1:b9:7a:fd:18:e1:2f:e6:27: 9d:20:1a:b0:69:c9:3f:4a:4d:a2:bf:0d:72:8c:87:98:cf:48: fb:2f:f4:06:92:6a:14:5e:59:a8:cc:2b:2d:f8:bb:58:40:54: 4c:11:20:50:10:79:02:6a:3c:1d:a6:06:77:3c:c9:fe:46:fa: 14:9c:70:f5:25:98:ba:5c:bb:e2:ca:5a:5a:1c:88:3a:81:fc: c0:7c:0f:76:5e:57:59:90:b3:89:f7:4c:80:6d:9c:9a:6e:81: 9f:ac:c7:ba:a2:d0:8c:54:a3:73:cb:44:8c:9c:e4:de:ff:94: df:31:50:e3:9d:d2:55:d9:9d:b3:05:df:b0:17:30:4e:c5:eb: c7:c4:82:87:bf:1e:a7:8e:c0:b7:bf:cf:7f:0b:bc:82:72:3a: 99:71:91:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRXNnwOGdmIBQSqhTfE5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5 ZjRmNGMwHhcNMjUxMjI5MTgwMTEyWhcNMjUxMjMwMTgwMTEyWjAzMTEwLwYDVQQD EyhhNDM4NzA0YjQ3Yjg5YTBlMjFmMzExZTY0NDRmNDJhYzQxMDlkZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo8uv0qfX62c/0CZ8bEmgnY0AptB FTGvY1whPx+7KanMmeoeHrq8NdXULHLYMw9zq5ekuXaQ5kw3GD5xuVX0819GuJu0 IQUjhYuGzk8m0oV65DEsvmbprOQbmIvydvoRWvOx9zcWrL9CL415u3tZi5n6kmBP jDILrofYH38jQrhxFiuaLmmaGYoRHoQzkYL1kbUj/b1f/jee+L3T2TeVem/sr3mg d0m/zwRKL1IpgrWqI+3/L243rU+hg9i28NkKKCbBW8VgY9Jguof+N8d16euARonZ eVGv1q1rMLWbbk/rejh33VpvSWuKnPEfFa3DB7Gy2ORfyZaGqr9nh6DW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ4cEtHuJoOIfMR5kRPQqxBCd7qMB8GA1UdIwQY MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ2YT/Fx /A/93tqAvdSy1lF2moiHZMU/fPBvQWq4nSBBuCeuOCpcnm2uC021GGZV8Drzs0wb nV3DU8VdxdhhZsXgu8bkCEbv8iN4ksbS/bcjK0K1TZxy6DmuxsWzw7V1wnelsbl6 /RjhL+YnnSAasGnJP0pNor8NcoyHmM9I+y/0BpJqFF5ZqMwrLfi7WEBUTBEgUBB5 Amo8HaYGdzzJ/kb6FJxw9SWYuly74spaWhyIOoH8wHwPdl5XWZCzifdMgG2cmm6B n6zHuqLQjFSjc8tEjJzk3v+U3zFQ453SVdmdswXfsBcwTsXrx8SCh78ep47At7/P fwu8gnI6mXGRnw== -----END CERTIFICATE-----Generated at Mon Dec 29 20:58:33 2025 by rpki-client