This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json) Hash identifier: QUXejV8fL9+yAZjo6bduIBTD3bc2qeLdYiHwIa9RqUc= Subject key identifier: 54:5A:7B:3A:CD:7F:AC:E1:27:CF:BA:28:5E:8E:BE:20:C9:30:90:73 Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7 Certificate serial: 019B5FAEEB819BF72D0EBE34796956290C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft Manifest number: 17A1 Signing time: Sat 27 Dec 2025 12:00:57 +0000 Manifest this update: Sat 27 Dec 2025 12:00:57 +0000 Manifest next update: Sun 28 Dec 2025 12:00:57 +0000 Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: rdrh1jInAiBxUQ3K9NTnxMOoRut4ohkhMdqJyjwQtbs=) 2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=) 3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:eb:81:9b:f7:2d:0e:be:34:79:69:56:29:0c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7 Validity Not Before: Dec 27 12:00:57 2025 GMT Not After : Dec 28 12:00:57 2025 GMT Subject: CN=545a7b3acd7face127cfba285e8ebe20c9309073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:c4:af:5c:ec:06:d7:3c:68:60:a4:03:e8: 8f:3a:1a:20:e0:b7:b6:e7:7c:79:0c:2e:45:45:41: c4:4c:25:4f:fe:24:d6:e3:a3:89:94:ac:d0:ca:3c: c2:59:10:1f:14:35:12:19:58:26:fc:76:37:96:7d: ab:49:67:08:e8:b9:ee:bd:81:90:cc:da:74:77:f1: fd:73:43:ba:d6:95:10:47:1f:05:d1:2f:c7:fe:23: 81:30:60:b1:82:96:10:0e:a2:f9:02:8b:b8:5a:0d: e2:c6:be:d0:53:5c:e0:c4:98:00:33:f6:0c:28:43: f6:c8:0c:4e:6f:76:51:0c:15:56:93:6b:0e:56:7c: 5d:36:9f:0f:6c:47:75:7e:34:20:64:14:85:05:77: 87:00:1b:b0:b5:f1:f3:dc:45:0d:9f:cc:4c:06:f2: 67:a3:d3:ca:95:0b:51:d4:f6:70:e2:80:1f:47:48: 80:8a:1d:1f:40:b1:eb:4f:d9:85:de:01:76:21:c9: 77:e7:f0:e5:69:e2:96:32:10:af:13:f7:b7:a1:de: de:45:a2:fa:4e:c1:5b:bc:0b:d5:f6:49:68:a3:df: 34:dc:70:8c:16:e3:eb:57:45:a0:a6:20:9a:6d:81: 4c:77:3f:07:cb:08:3d:0c:b7:73:ec:48:fe:41:75: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:7B:3A:CD:7F:AC:E1:27:CF:BA:28:5E:8E:BE:20:C9:30:90:73 X509v3 Authority Key Identifier: keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3f:4a:4f:43:5d:e8:23:3b:af:e1:19:04:ea:8f:6a:a4:fd: a7:de:dd:98:21:07:4f:f2:03:18:e6:6c:94:65:5f:c8:84:6d: 52:84:22:df:89:5b:b2:87:5a:bb:5a:10:87:f9:7d:f6:22:2f: 9c:29:10:d5:d7:c1:8c:ab:10:5c:dd:e3:cf:c4:bf:2c:9f:12: 5b:37:22:ff:2b:f7:a6:c2:6a:56:bf:cb:75:5f:1b:5d:59:fc: 26:39:de:03:25:b5:1d:61:52:ae:3e:47:7d:a1:19:cf:48:8c: eb:33:0a:83:61:43:b1:6f:7b:96:66:bb:fe:0d:85:00:b5:c6: 4e:3d:00:4a:98:d4:9d:3e:ce:ed:7a:3d:8d:1d:60:eb:75:db: 07:3b:b6:e4:c9:c7:28:46:34:5f:20:dd:83:b8:d4:48:71:01: 33:8a:48:60:a9:59:39:de:b2:93:4f:37:0d:ee:13:67:88:a1: 9c:00:28:d8:c9:36:40:06:4d:fe:04:80:e4:f6:45:50:0e:ce: af:e5:45:9c:39:90:85:7c:1a:14:68:c4:9c:74:f1:1c:76:14: ee:43:d6:c5:b7:0a:e4:72:1f:02:25:61:2e:cf:f3:a3:26:53: 0f:3d:d2:5f:3a:fc:a2:da:2a:4b:10:8a:87:64:32:1c:1d:d2: 3f:e5:a0:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfruuBm/ctDr40eWlWKQyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0 ODg2ZjcwHhcNMjUxMjI3MTIwMDU3WhcNMjUxMjI4MTIwMDU3WjAzMTEwLwYDVQQD Eyg1NDVhN2IzYWNkN2ZhY2UxMjdjZmJhMjg1ZThlYmUyMGM5MzA5MDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HPEr1zsBtc8aGCkA+iPOhog4Le2 53x5DC5FRUHETCVP/iTW46OJlKzQyjzCWRAfFDUSGVgm/HY3ln2rSWcI6LnuvYGQ zNp0d/H9c0O61pUQRx8F0S/H/iOBMGCxgpYQDqL5Aou4Wg3ixr7QU1zgxJgAM/YM KEP2yAxOb3ZRDBVWk2sOVnxdNp8PbEd1fjQgZBSFBXeHABuwtfHz3EUNn8xMBvJn o9PKlQtR1PZw4oAfR0iAih0fQLHrT9mF3gF2Icl35/DlaeKWMhCvE/e3od7eRaL6 TsFbvAvV9kloo9803HCMFuPrV0WgpiCabYFMdz8Hywg9DLdz7Ej+QXUnmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRaezrNf6zhJ8+6KF6OviDJMJBzMB8GA1UdIwQY MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt NzUzNzQxYTgwZTk0LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0 LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj9KT0Nd 6CM7r+EZBOqPaqT9p97dmCEHT/IDGOZslGVfyIRtUoQi34lbsodau1oQh/l99iIv nCkQ1dfBjKsQXN3jz8S/LJ8SWzci/yv3psJqVr/LdV8bXVn8JjneAyW1HWFSrj5H faEZz0iM6zMKg2FDsW97lma7/g2FALXGTj0ASpjUnT7O7Xo9jR1g63XbBzu25MnH KEY0XyDdg7jUSHEBM4pIYKlZOd6yk083De4TZ4ihnAAo2Mk2QAZN/gSA5PZFUA7O r+VFnDmQhXwaFGjEnHTxHHYU7kPWxbcK5HIfAiVhLs/zoyZTDz3SXzr8otoqSxCK h2QyHB3SP+WgfQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:51:05 2025 by rpki-client