This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json) Hash identifier: rhsqN/7oNH8iO6CpqxLbsRTsjHLrkSqFxg8FRMm5aI8= Subject key identifier: 5C:B1:A1:B3:9D:9B:5A:E6:53:91:76:2F:51:00:2E:35:37:F4:54:A9 Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Certificate serial: 019B53AC56EAAFD058C01A05FFDC4679FF6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 04:02:41 +0000 Manifest this update: Thu 25 Dec 2025 04:02:41 +0000 Manifest next update: Fri 26 Dec 2025 04:02:41 +0000 Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: eK57wjtmp2ErjMfLCEO+R8Ta6T4shAQKnwWX/yHS32A=) 2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:56:ea:af:d0:58:c0:1a:05:ff:dc:46:79:ff:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Validity Not Before: Dec 25 04:02:41 2025 GMT Not After : Dec 26 04:02:41 2025 GMT Subject: CN=5cb1a1b39d9b5ae65391762f51002e3537f454a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:bb:ac:77:e8:2f:fa:c7:ee:81:df:42:2c:e5: 6d:bd:4b:c9:7a:ac:79:95:92:34:d3:97:75:b7:64: ad:ea:d3:fd:22:44:f5:14:9b:90:26:c6:60:a4:dd: 28:dc:e1:86:69:3b:44:b5:38:68:de:1e:65:b0:52: 68:43:14:bb:f8:4f:f8:70:2f:d5:b0:97:8b:d1:ef: c2:4f:93:a3:6f:6e:36:b2:7c:7a:7c:a2:5f:0d:48: bd:2c:92:68:40:03:47:26:33:4a:38:eb:f1:93:4b: c9:05:0b:42:b3:5c:2b:77:69:dd:f9:4f:3c:ca:65: dc:67:14:fe:ad:5a:5f:e4:ab:4c:f4:9b:43:a9:b2: b0:c8:9c:16:7e:3e:f2:12:42:19:0b:97:e5:08:38: 55:0a:72:de:78:db:7f:7a:01:75:6a:03:f1:38:8f: 2c:1b:ff:80:6f:b5:76:66:7a:1c:aa:61:28:15:9e: c4:c3:d5:3e:fe:e4:f7:68:45:af:56:0a:be:24:ad: de:d4:f0:84:96:ef:88:b0:b9:58:64:81:09:a1:fd: b9:78:cf:5a:48:11:f0:3f:f6:99:f9:59:a6:2e:c2: f9:fc:57:84:77:91:06:fa:3c:cb:fe:55:a4:76:e7: 51:fb:51:d3:c0:cc:11:95:bb:08:56:1f:f3:de:8b: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B1:A1:B3:9D:9B:5A:E6:53:91:76:2F:51:00:2E:35:37:F4:54:A9 X509v3 Authority Key Identifier: keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b6:ea:15:8f:5d:86:a4:c9:81:1f:4d:b2:1f:4e:83:42:f9: ae:96:30:c9:80:bd:92:c7:bd:df:89:6c:c4:13:74:51:d1:26: 0f:89:99:d7:39:c4:af:52:16:62:db:cd:8c:c1:47:04:2c:0b: 64:ec:23:f4:36:62:c0:06:aa:8e:36:ab:48:ee:2e:d8:26:cc: 12:e4:aa:29:b4:69:de:ae:2a:6d:6c:9e:46:de:c5:3d:22:28: 48:5a:11:61:47:49:ab:cb:d2:22:37:fc:d9:1f:f0:ef:e7:f5: ec:ad:fb:4e:73:1e:0c:4b:fc:f9:7b:0e:1c:97:dd:2c:6e:61: 8e:b6:07:5e:37:e8:2c:13:4e:5b:7e:d2:b1:88:56:40:2e:ae: 91:f8:53:b9:0d:5c:37:9a:0c:b0:1b:bc:2c:d5:5c:bf:a8:f3: c8:e4:c5:f2:b3:95:55:33:ca:3f:e8:77:d2:1b:d8:46:ee:e6: 2f:4a:49:19:9b:25:d8:73:11:92:27:f7:30:10:3d:28:ee:32: 64:10:7a:84:ef:01:ab:bb:ba:ee:3b:8a:ea:13:27:15:02:ae: 1c:75:ed:ab:9b:ea:e4:c6:30:b8:e0:63:ef:38:09:6b:11:ee: 5a:8d:24:1d:05:58:81:fd:64:64:58:4f:24:37:68:51:b1:b4: a9:33:48:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrFbqr9BYwBoF/9xGef9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh MzRjMjIwHhcNMjUxMjI1MDQwMjQxWhcNMjUxMjI2MDQwMjQxWjAzMTEwLwYDVQQD Eyg1Y2IxYTFiMzlkOWI1YWU2NTM5MTc2MmY1MTAwMmUzNTM3ZjQ1NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/rusd+gv+sfugd9CLOVtvUvJeqx5 lZI005d1t2St6tP9IkT1FJuQJsZgpN0o3OGGaTtEtTho3h5lsFJoQxS7+E/4cC/V sJeL0e/CT5Ojb242snx6fKJfDUi9LJJoQANHJjNKOOvxk0vJBQtCs1wrd2nd+U88 ymXcZxT+rVpf5KtM9JtDqbKwyJwWfj7yEkIZC5flCDhVCnLeeNt/egF1agPxOI8s G/+Ab7V2ZnocqmEoFZ7Ew9U+/uT3aEWvVgq+JK3e1PCElu+IsLlYZIEJof25eM9a SBHwP/aZ+VmmLsL5/FeEd5EG+jzL/lWkdudR+1HTwMwRlbsIVh/z3oucywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyxobOdm1rmU5F2L1EALjU39FSpMB8GA1UdIwQY MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLbqFY9d hqTJgR9Nsh9Og0L5rpYwyYC9kse934lsxBN0UdEmD4mZ1znEr1IWYtvNjMFHBCwL ZOwj9DZiwAaqjjarSO4u2CbMEuSqKbRp3q4qbWyeRt7FPSIoSFoRYUdJq8vSIjf8 2R/w7+f17K37TnMeDEv8+XsOHJfdLG5hjrYHXjfoLBNOW37SsYhWQC6ukfhTuQ1c N5oMsBu8LNVcv6jzyOTF8rOVVTPKP+h30hvYRu7mL0pJGZsl2HMRkif3MBA9KO4y ZBB6hO8Bq7u67juK6hMnFQKuHHXtq5vq5MYwuOBj7zgJaxHuWo0kHQVYgf1kZFhP JDdoUbG0qTNIYg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:32 2025 by rpki-client