This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json) Hash identifier: gbN7V9DuIfTWSshIqV+WT1ZxBMNkuy3XooxWPIJw81U= Subject key identifier: 09:8B:66:08:B9:10:A5:93:A4:42:1C:C4:F5:3A:D7:98:1E:E7:8C:A4 Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Certificate serial: 019B405C4C3B7F66F18D4F07F7EAF8BF6CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft Manifest number: 1659 Signing time: Sun 21 Dec 2025 10:02:29 +0000 Manifest this update: Sun 21 Dec 2025 10:02:29 +0000 Manifest next update: Mon 22 Dec 2025 10:02:29 +0000 Files and hashes: 1: 1Jntrl_laJPDesbXGgiWwWcFtHo.roa (hash: CoDTsiAxYNrmfWYqfUWdVx8o7SlGJlQ4gwhBUllspFY=) 2: IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa (hash: sqoYzZMt8wf4mUS5nMLQEfv8sbqAQGSNWeCswIb6zp0=) 3: YOMeWbqb2YP39GnUdvNTCOO7DWs.roa (hash: erbiSipizHuhTzJ/bRQWlIlf0Vk1QR2jgutHpwagwgc=) 4: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: mjFjpbCRYuv46dgWODD16bNl604Dd4bzfEQl/icuUps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:4c:3b:7f:66:f1:8d:4f:07:f7:ea:f8:bf:6c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Validity Not Before: Dec 21 10:02:29 2025 GMT Not After : Dec 22 10:02:29 2025 GMT Subject: CN=098b6608b910a593a4421cc4f53ad7981ee78ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:79:50:8f:0b:a3:9c:d7:21:38:65:d5:4c: cc:81:c9:f2:0f:3c:72:bc:75:5f:6b:60:a6:fa:24: 41:22:b7:7e:84:53:f0:0e:2e:6f:c9:db:75:68:30: 89:ff:c3:b6:19:8c:0b:f0:44:ed:80:e9:a7:61:06: 7e:7f:66:cb:d6:74:dd:b2:c1:54:09:0b:3e:92:45: e0:bf:03:ae:38:dc:c1:a5:7a:1f:a6:df:33:38:f8: 23:5a:f5:36:3a:e1:c1:06:78:60:a0:e1:73:4b:e9: af:54:f4:28:69:eb:fd:84:e5:54:8e:33:28:b4:cc: ae:7e:2b:4b:d1:4b:70:ae:12:44:33:d1:1d:2f:78: cc:9a:1c:b4:6a:2b:70:29:ba:7d:10:0e:39:f0:00: b8:8b:3c:4c:0d:81:3b:fe:95:7e:bc:bf:01:26:13: 93:36:71:6a:8e:73:2b:8e:90:9f:11:cd:b7:df:eb: 68:b5:a1:15:f2:5a:b4:9f:5f:81:0b:05:72:5a:33: ee:e9:80:9b:d2:f7:a3:1a:64:03:8e:9d:6a:ce:e7: 0e:ae:b2:a7:76:8d:1d:ab:9b:d9:dc:ed:d5:06:37: 40:54:c4:ec:a5:5c:f0:80:22:e0:d7:f7:2c:b1:4b: c3:d1:48:b7:a1:b7:90:eb:45:26:a7:89:7f:5e:54: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:66:08:B9:10:A5:93:A4:42:1C:C4:F5:3A:D7:98:1E:E7:8C:A4 X509v3 Authority Key Identifier: keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:71:cf:bf:fb:9c:dd:1b:8f:8c:5f:4e:0e:06:f7:d5:dc:15: 2f:1b:39:29:38:3e:9c:4f:96:59:d2:59:27:f0:67:14:88:28: e7:a6:bb:c5:03:da:30:16:7a:07:65:53:a2:eb:5c:ff:45:9d: b9:51:84:69:3d:8d:6b:8c:3d:71:b4:03:d2:29:25:79:d9:e8: e8:b3:07:cb:a2:82:46:c9:9e:5e:11:e9:cb:2f:e9:ac:67:29: c0:96:06:65:a8:cb:2b:ea:f0:60:00:68:a6:16:ae:a3:92:8e: d4:50:65:fb:d2:b5:47:4e:d6:7f:b0:16:e8:33:87:ea:21:34: 46:c8:85:65:fe:66:e0:4b:c5:a0:09:cd:bc:0e:c0:f8:d1:2d: e7:37:c1:ec:e7:af:58:29:1d:e9:25:b6:96:68:90:60:d4:68: 44:47:a1:0a:a5:64:51:59:23:42:85:13:68:f1:66:81:ef:79: 60:aa:59:a6:3c:af:a0:74:7d:f7:eb:9b:40:f9:8d:20:e7:2b: 61:de:c1:6e:12:d6:0e:1f:ff:f3:d3:cf:82:c5:02:b0:8d:d8: e1:e4:fe:09:f2:ec:05:53:7e:3b:fc:9a:79:7f:a3:6d:34:b1: df:9f:7a:e0:ca:af:ac:61:fd:85:39:bc:1a:c8:db:9f:cb:4d: 10:9b:ec:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEw7f2bxjU8H9+r4v2y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl MjdmNzMwHhcNMjUxMjIxMTAwMjI5WhcNMjUxMjIyMTAwMjI5WjAzMTEwLwYDVQQD EygwOThiNjYwOGI5MTBhNTkzYTQ0MjFjYzRmNTNhZDc5ODFlZTc4Y2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivJ5UI8Lo5zXIThl1UzMgcnyDzxy vHVfa2Cm+iRBIrd+hFPwDi5vydt1aDCJ/8O2GYwL8ETtgOmnYQZ+f2bL1nTdssFU CQs+kkXgvwOuONzBpXofpt8zOPgjWvU2OuHBBnhgoOFzS+mvVPQoaev9hOVUjjMo tMyufitL0UtwrhJEM9EdL3jMmhy0aitwKbp9EA458AC4izxMDYE7/pV+vL8BJhOT NnFqjnMrjpCfEc233+totaEV8lq0n1+BCwVyWjPu6YCb0vejGmQDjp1qzucOrrKn do0dq5vZ3O3VBjdAVMTspVzwgCLg1/cssUvD0Ui3obeQ60Ump4l/XlQaIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmLZgi5EKWTpEIcxPU615ge54ykMB8GA1UdIwQY MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt NDhiYTkyOGZiMWJlLzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHHPv/uc 3RuPjF9ODgb31dwVLxs5KTg+nE+WWdJZJ/BnFIgo56a7xQPaMBZ6B2VToutc/0Wd uVGEaT2Na4w9cbQD0ikledno6LMHy6KCRsmeXhHpyy/prGcpwJYGZajLK+rwYABo phauo5KO1FBl+9K1R07Wf7AW6DOH6iE0RsiFZf5m4EvFoAnNvA7A+NEt5zfB7Oev WCkd6SW2lmiQYNRoREehCqVkUVkjQoUTaPFmge95YKpZpjyvoHR99+ubQPmNIOcr Yd7BbhLWDh//89PPgsUCsI3Y4eT+CfLsBVN+O/yaeX+jbTSx35964MqvrGH9hTm8 Gsjbn8tNEJvs9g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:34:49 2025 by rpki-client