This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json) Hash identifier: 27fh4EWmpC0yGfaF2Q++WdUb3cJj3teqSMkxKu5Xbgw= Subject key identifier: 84:4F:84:49:1A:29:87:CF:BD:94:09:A4:26:AC:8C:B7:01:ED:16:E8 Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019B5419015EC7CC083288A3D08A762C18D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 06:01:23 +0000 Manifest this update: Thu 25 Dec 2025 06:01:23 +0000 Manifest next update: Fri 26 Dec 2025 06:01:23 +0000 Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: 315VbG+nPw83htY3+ub4crWNFB5MOgju71pGUbeMPAE=) 2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=) 3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:01:5e:c7:cc:08:32:88:a3:d0:8a:76:2c:18:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Dec 25 06:01:23 2025 GMT Not After : Dec 26 06:01:23 2025 GMT Subject: CN=844f84491a2987cfbd9409a426ac8cb701ed16e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:f9:b6:38:c4:41:07:12:e6:07:0b:4c:3a: a7:47:88:90:82:fe:31:f8:98:0c:14:1a:1e:58:d7: b7:6c:0d:2b:32:2e:db:28:8b:a2:f3:de:0f:5d:b7: 2c:ad:62:6c:f3:6f:43:33:9e:ae:17:cd:d5:a8:d6: 76:c2:a0:f0:c8:3a:15:cc:b6:c9:57:d8:6a:b2:d9: e5:56:d4:9f:3c:bf:2d:a7:7b:52:a7:fe:96:27:fb: de:7d:a8:2d:92:d4:b4:92:8c:87:c3:f0:24:12:0d: 46:6a:6a:9f:b0:f0:a2:ac:4c:a5:f6:c7:75:07:89: 03:4d:14:75:d8:be:16:e5:e3:c7:68:9d:ea:cc:f8: 64:1b:96:aa:5c:7f:53:10:96:d1:05:34:8c:94:62: 8a:55:13:77:9e:b3:72:a2:90:84:f7:25:be:63:f8: 1a:d6:57:b4:80:ba:1d:a7:ce:09:f8:d7:ac:73:41: f9:95:0a:70:4d:84:16:d7:93:6a:d5:fe:bf:ed:c8: 5c:a3:6d:16:4d:52:ed:f5:77:74:a2:c1:0c:43:42: a1:3d:62:30:3c:0a:90:c0:8b:4e:09:fd:14:7c:56: 65:ad:81:e6:8f:8d:53:27:2b:38:3f:ab:e8:5e:8c: 76:e0:ad:d6:97:32:ac:1b:92:ce:ee:83:1f:bc:2d: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4F:84:49:1A:29:87:CF:BD:94:09:A4:26:AC:8C:B7:01:ED:16:E8 X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1a:a1:79:12:99:f5:b9:a8:df:84:aa:49:5d:bc:38:ff:3e: 6f:0c:37:d3:26:8c:57:69:e4:ff:ac:25:0a:87:51:a2:60:a1: 8c:90:79:4a:59:5d:55:50:2a:d9:a0:3b:d2:d5:9b:0b:5c:25: 83:4d:ca:ce:a0:9f:e0:27:92:62:95:d3:5a:5d:6a:cf:59:c1: 1b:08:f6:95:f2:ae:fd:9f:dc:eb:4e:0f:13:92:37:48:c9:a7: 48:db:32:de:7d:c0:71:c3:08:12:96:71:32:81:99:42:d0:15: c0:52:83:5c:88:1b:ec:f1:80:3b:fa:f4:8b:51:a4:3c:a0:20: ac:ea:e0:77:11:5b:da:a8:af:0f:61:69:b4:db:6f:6c:2b:f7: 5e:8f:82:f1:22:df:0e:de:ca:b0:aa:1e:e0:81:64:be:44:fd: 19:ac:71:04:68:8d:b7:b5:87:0b:7c:9d:5b:13:30:75:72:57: 37:5b:e3:18:e3:3f:34:77:be:61:04:6a:7b:79:fc:48:8c:73: b6:1a:e3:ac:ce:4c:91:36:34:a1:ff:e9:1f:dd:f1:3a:3d:7c: 27:77:84:ea:93:4b:76:07:70:4a:63:72:50:35:09:4b:49:b2: 7e:fb:3a:40:a2:b1:6d:fb:30:f4:8d:4a:76:cd:ca:26:3d:99: 8e:55:fa:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGQFex8wIMoij0Ip2LBjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjUxMjI1MDYwMTIzWhcNMjUxMjI2MDYwMTIzWjAzMTEwLwYDVQQD Eyg4NDRmODQ0OTFhMjk4N2NmYmQ5NDA5YTQyNmFjOGNiNzAxZWQxNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyL5tjjEQQcS5gcLTDqnR4iQgv4x +JgMFBoeWNe3bA0rMi7bKIui894PXbcsrWJs829DM56uF83VqNZ2wqDwyDoVzLbJ V9hqstnlVtSfPL8tp3tSp/6WJ/vefagtktS0koyHw/AkEg1GamqfsPCirEyl9sd1 B4kDTRR12L4W5ePHaJ3qzPhkG5aqXH9TEJbRBTSMlGKKVRN3nrNyopCE9yW+Y/ga 1le0gLodp84J+Nesc0H5lQpwTYQW15Nq1f6/7chco20WTVLt9Xd0osEMQ0KhPWIw PAqQwItOCf0UfFZlrYHmj41TJys4P6voXox24K3WlzKsG5LO7oMfvC3YKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRPhEkaKYfPvZQJpCasjLcB7RboMB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRqheRKZ 9bmo34SqSV28OP8+bww30yaMV2nk/6wlCodRomChjJB5SlldVVAq2aA70tWbC1wl g03KzqCf4CeSYpXTWl1qz1nBGwj2lfKu/Z/c604PE5I3SMmnSNsy3n3AccMIEpZx MoGZQtAVwFKDXIgb7PGAO/r0i1GkPKAgrOrgdxFb2qivD2FptNtvbCv3Xo+C8SLf Dt7KsKoe4IFkvkT9GaxxBGiNt7WHC3ydWxMwdXJXN1vjGOM/NHe+YQRqe3n8SIxz thrjrM5MkTY0of/pH93xOj18J3eE6pNLdgdwSmNyUDUJS0myfvs6QKKxbfsw9I1K ds3KJj2ZjlX6MA== -----END CERTIFICATE-----Generated at Thu Dec 25 13:04:07 2025 by rpki-client