This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json) Hash identifier: dJUQFhW2hS7zY4hgr9ZbfNXGRQAj8XkVhLl3zyLjUVI= Subject key identifier: 78:C0:01:FD:5A:9E:A9:2F:97:07:87:BE:20:0A:74:F0:B2:53:EC:25 Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8 Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8 Certificate serial: 019B281B542AF02AA056331E07CB11A20E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft Manifest number: 170C Signing time: Tue 16 Dec 2025 17:00:38 +0000 Manifest this update: Tue 16 Dec 2025 17:00:38 +0000 Manifest next update: Wed 17 Dec 2025 17:00:38 +0000 Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: +98YTUVS1IsQ5XZhl1EgJhS55ptLc/MueIbjuzjJTHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:54:2a:f0:2a:a0:56:33:1e:07:cb:11:a2:0e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8 Validity Not Before: Dec 16 17:00:38 2025 GMT Not After : Dec 17 17:00:38 2025 GMT Subject: CN=78c001fd5a9ea92f970787be200a74f0b253ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:c9:ef:58:48:b2:16:ac:f1:e8:36:3d:76: 55:f2:32:2d:05:cd:36:af:0b:04:53:f0:bd:ad:dd: c9:bb:49:be:7d:e3:3b:79:53:1d:36:6e:f0:a3:76: 5a:61:85:37:3a:58:4a:29:f0:42:ba:d4:1f:05:36: 2d:87:54:91:7b:60:c9:b1:ac:13:ba:46:f0:b0:8d: 32:06:4e:c7:bc:82:ac:c2:d6:e6:91:6c:9a:d9:b1: e8:d0:0d:60:7b:ad:2c:f8:71:fc:81:ef:7b:2c:fd: ed:44:52:de:a2:09:7e:d4:7f:19:8e:fe:62:0c:38: 87:d7:ea:53:13:03:6c:27:32:70:06:d1:38:70:bc: 9f:2f:f5:02:18:00:b6:64:2e:eb:ca:cf:0a:08:87: 35:b1:e7:8f:1d:cb:f8:44:11:3f:6b:de:c6:07:e4: ab:90:8c:6c:67:29:93:44:bc:f9:84:44:29:6b:09: 08:fa:ed:6a:c8:0c:b5:15:70:3b:ac:5b:52:62:95: 24:09:00:0c:04:35:95:df:f9:a3:cf:76:ef:04:91: fc:72:77:8b:77:48:36:c9:f0:31:23:05:7a:d0:f2: ed:52:8d:82:ba:21:c4:7b:04:8b:1e:bf:1e:44:2b: 9c:0e:b0:0f:6c:90:d3:5c:23:12:b8:12:80:19:b1: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C0:01:FD:5A:9E:A9:2F:97:07:87:BE:20:0A:74:F0:B2:53:EC:25 X509v3 Authority Key Identifier: keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4f:56:64:9e:58:93:4c:b8:fd:23:21:6f:e6:d6:77:7e:3c: b7:72:75:c5:e6:6e:35:82:e5:cd:34:6e:57:7e:12:34:25:56: 27:d8:3c:10:9a:c1:3c:df:b8:09:73:13:a5:cc:62:7b:0f:98: 4f:78:08:c8:89:98:47:ef:fa:db:03:1c:d1:76:4a:38:05:2c: 67:da:41:d6:26:ba:38:1d:dd:99:72:74:df:81:bc:0d:a3:9a: 6f:53:ba:21:46:05:ed:7a:de:60:e3:d1:16:50:85:f9:f7:2c: 4f:b3:48:65:45:78:52:82:5b:d9:1e:ba:0e:1c:d9:de:3b:61: 54:9a:71:9b:9e:8b:d7:03:0d:38:bc:69:22:1d:45:e6:c3:b6: a2:2a:6f:7d:3b:67:30:b9:47:14:fd:92:50:e5:fd:c0:26:87: 00:99:11:02:89:35:ee:0e:eb:79:dc:a6:fa:3f:e2:75:58:a1: 2b:df:db:f9:12:0a:b4:b2:2d:ad:0f:5a:ed:85:64:98:f8:0c: 75:47:09:ac:11:df:22:5a:b9:bc:a6:5b:45:f0:e3:e3:0e:3f: 61:a5:4b:79:fa:2f:55:89:c1:9e:f1:f2:d7:79:fa:8d:9b:b6: d8:e9:0e:0f:68:17:cf:e3:89:58:d0:80:0a:50:ae:2b:c0:d6: 53:e0:be:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG1Qq8CqgVjMeB8sRog57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1 ZTYxYTgwHhcNMjUxMjE2MTcwMDM4WhcNMjUxMjE3MTcwMDM4WjAzMTEwLwYDVQQD Eyg3OGMwMDFmZDVhOWVhOTJmOTcwNzg3YmUyMDBhNzRmMGIyNTNlYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQLJ71hIshas8eg2PXZV8jItBc02 rwsEU/C9rd3Ju0m+feM7eVMdNm7wo3ZaYYU3OlhKKfBCutQfBTYth1SRe2DJsawT ukbwsI0yBk7HvIKswtbmkWya2bHo0A1ge60s+HH8ge97LP3tRFLeogl+1H8Zjv5i DDiH1+pTEwNsJzJwBtE4cLyfL/UCGAC2ZC7rys8KCIc1seePHcv4RBE/a97GB+Sr kIxsZymTRLz5hEQpawkI+u1qyAy1FXA7rFtSYpUkCQAMBDWV3/mjz3bvBJH8cneL d0g2yfAxIwV60PLtUo2CuiHEewSLHr8eRCucDrAPbJDTXCMSuBKAGbHRVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjAAf1anqkvlweHviAKdPCyU+wlMB8GA1UdIwQY MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk9WZJ5Y k0y4/SMhb+bWd348t3J1xeZuNYLlzTRuV34SNCVWJ9g8EJrBPN+4CXMTpcxiew+Y T3gIyImYR+/62wMc0XZKOAUsZ9pB1ia6OB3dmXJ034G8DaOab1O6IUYF7XreYOPR FlCF+fcsT7NIZUV4UoJb2R66DhzZ3jthVJpxm56L1wMNOLxpIh1F5sO2oipvfTtn MLlHFP2SUOX9wCaHAJkRAok17g7redym+j/idVihK9/b+RIKtLItrQ9a7YVkmPgM dUcJrBHfIlq5vKZbRfDj4w4/YaVLefovVYnBnvHy13n6jZu22OkOD2gXz+OJWNCA ClCuK8DWU+C+Fw== -----END CERTIFICATE-----Generated at Wed Dec 17 00:24:08 2025 by rpki-client