This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft File: B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json) Hash identifier: Ji8GWamYEDmM3MDhMbqqXBf9AeOR0mEXYXs6grei6uA= Subject key identifier: C0:4B:E1:BA:7F:4F:5A:F9:F8:D4:F7:46:5D:08:6D:6B:F3:C6:D5:2D Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13 Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113 Certificate serial: 019B3D59B09650ED3185E172A20A33197226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft Manifest number: 0441 Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=) 2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: kbXFCUKEPYVcDAU/OtFBSeLBDsvArNn++p4puZVbZd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b0:96:50:ed:31:85:e1:72:a2:0a:33:19:72:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113 Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=c04be1ba7f4f5af9f8d4f7465d086d6bf3c6d52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:96:f0:00:68:7f:4d:5e:15:5b:01:09:9f: a3:82:9f:d2:80:02:86:25:f9:3c:56:bf:2b:54:21: 1b:e6:26:60:8d:b8:08:ba:86:43:58:20:bc:d6:5e: 24:c1:9c:95:05:29:2a:58:61:14:39:84:42:6d:d2: 49:49:95:dd:f6:20:ee:bb:a9:60:09:0e:e4:ef:f4: 1e:1b:d7:17:8a:2d:55:c7:e9:26:f9:95:62:a0:56: 26:a3:df:8c:b9:3f:91:8c:4a:39:10:ec:a0:c4:c9: bc:90:81:27:99:9f:e2:6b:42:4d:3b:01:1e:50:25: 30:26:51:e8:b3:49:a7:27:db:35:3f:20:e8:e2:36: 67:6b:ea:ed:40:1a:59:fd:54:7f:36:e6:65:44:52: 66:73:59:5e:0f:9a:6f:1c:12:a8:3b:19:43:0a:65: 55:75:19:de:44:4b:27:2a:18:fa:f7:09:2d:5a:94: e6:52:9b:2b:d2:da:80:a3:78:75:9c:15:c7:23:ea: 8a:b5:e8:e7:85:aa:0b:5b:a1:5f:53:04:46:d3:8a: 50:78:24:53:bf:23:9e:97:34:0d:c5:c5:5c:6d:c9: 6a:d9:df:de:fe:9b:04:f4:1e:38:ef:94:d0:83:4b: 01:e1:54:b4:f8:c7:df:2a:10:43:95:3d:84:bf:4c: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:E1:BA:7F:4F:5A:F9:F8:D4:F7:46:5D:08:6D:6B:F3:C6:D5:2D X509v3 Authority Key Identifier: keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cc:ad:62:e9:7b:2b:00:df:5d:f0:79:42:66:5d:46:0c:6d: 85:f4:34:17:25:1b:bf:0d:93:a0:2a:40:2e:ae:b8:c3:c8:ac: 7f:81:d5:64:03:c3:1e:0a:24:c5:4f:1f:d0:f5:86:2a:8b:6d: 9d:ff:41:4f:64:36:d8:a2:f7:cd:44:25:89:bf:78:46:13:07: 21:6d:fb:c1:fd:05:b1:1e:68:95:5f:2b:2d:a6:2e:05:2c:b2: 73:6c:12:99:18:1d:1d:b3:77:11:84:31:13:ab:3a:d6:3d:2f: 7c:fe:02:10:66:3e:8c:e2:ea:82:c3:c5:ef:90:0b:0f:d4:65: b7:cb:f6:5c:f6:33:a1:c2:61:6e:2a:13:82:b3:1e:9c:84:43: f7:a1:89:45:43:16:93:3b:bc:e5:b0:fe:9b:9f:df:22:c1:15: 04:ea:cf:9a:1b:9d:b4:bd:77:3c:d9:66:fb:44:e0:df:00:b6: f2:3a:ef:5c:4f:ae:64:8e:66:1e:38:14:58:db:6b:ed:74:7b: d7:be:a2:25:db:9b:66:91:32:fa:4b:7a:c3:9d:96:9b:76:f8: 13:0f:d9:1a:17:0a:6a:21:9f:d9:b8:56:76:27:73:03:97:a5: f5:c2:77:ac:4a:09:69:68:bd:ab:90:2f:bc:0a:f4:c6:86:88: 09:65:91:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbCWUO0xheFyogozGXImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGUxODUzZTU5NjYxZjkwOGUyMjY5NTBjYmRjNTJiOTdm NjIxMTMwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD EyhjMDRiZTFiYTdmNGY1YWY5ZjhkNGY3NDY1ZDA4NmQ2YmYzYzZkNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuqW8ABof01eFVsBCZ+jgp/SgAKG Jfk8Vr8rVCEb5iZgjbgIuoZDWCC81l4kwZyVBSkqWGEUOYRCbdJJSZXd9iDuu6lg CQ7k7/QeG9cXii1Vx+km+ZVioFYmo9+MuT+RjEo5EOygxMm8kIEnmZ/ia0JNOwEe UCUwJlHos0mnJ9s1PyDo4jZna+rtQBpZ/VR/NuZlRFJmc1leD5pvHBKoOxlDCmVV dRneREsnKhj69wktWpTmUpsr0tqAo3h1nBXHI+qKtejnhaoLW6FfUwRG04pQeCRT vyOelzQNxcVcbclq2d/e/psE9B4475TQg0sB4VS0+MffKhBDlT2Ev0yXxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBL4bp/T1r5+NT3Rl0IbWvzxtUtMB8GA1UdIwQY MBaAFAfeGFPllmH5COImlQy9xSuX9iETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEt ZTMwZGQ2NjFlZDIwLzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEtZTMwZGQ2NjFlZDIw LzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8ytYul7 KwDfXfB5QmZdRgxthfQ0FyUbvw2ToCpALq64w8isf4HVZAPDHgokxU8f0PWGKott nf9BT2Q22KL3zUQlib94RhMHIW37wf0FsR5olV8rLaYuBSyyc2wSmRgdHbN3EYQx E6s61j0vfP4CEGY+jOLqgsPF75ALD9Rlt8v2XPYzocJhbioTgrMenIRD96GJRUMW kzu85bD+m5/fIsEVBOrPmhudtL13PNlm+0Tg3wC28jrvXE+uZI5mHjgUWNtr7XR7 176iJdubZpEy+kt6w52Wm3b4Ew/ZGhcKaiGf2bhWdidzA5el9cJ3rEoJaWi9q5Av vAr0xoaICWWRvw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:22 2025 by rpki-client