This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json) Hash identifier: 8MLeV/Cf1aHAGMtz6qYk0m+68bWpWvTFC1bbACJ9HPI= Subject key identifier: C8:FB:F3:BE:EA:00:25:6E:79:9C:81:1B:89:6E:6D:11:C4:DE:43:E3 Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61 Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661 Certificate serial: 019B3C7E00530132020B21FA09F4A6485618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft Manifest number: 01A3 Signing time: Sat 20 Dec 2025 16:00:49 +0000 Manifest this update: Sat 20 Dec 2025 16:00:49 +0000 Manifest next update: Sun 21 Dec 2025 16:00:49 +0000 Files and hashes: 1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=) 2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: NpwTJKEqDPSCTmyxBYqz7SofwgpGQK5nR/FWJ8LZVYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:00:53:01:32:02:0b:21:fa:09:f4:a6:48:56:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661 Validity Not Before: Dec 20 16:00:49 2025 GMT Not After : Dec 21 16:00:49 2025 GMT Subject: CN=c8fbf3beea00256e799c811b896e6d11c4de43e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:09:ee:2c:53:d5:d6:a7:20:78:b8:10:88: 24:fd:a7:90:86:b8:88:8b:11:08:eb:22:57:ec:10: 21:f2:57:ac:70:9d:56:3b:9c:9f:b2:58:d6:5e:56: 46:35:30:5e:38:04:6a:eb:5c:41:22:da:b2:bb:8c: 20:01:a5:e6:fc:96:60:8e:fc:22:ba:c4:6b:70:04: 22:a0:c2:f5:db:86:e5:90:3d:49:a9:c4:15:79:11: f8:a2:66:f1:66:20:66:6f:ea:c1:5b:b2:c5:0c:d6: 3e:5c:16:be:04:22:86:b0:b1:3e:24:83:ce:0d:5b: 32:79:1c:9b:97:28:57:39:a4:4b:ce:67:11:33:8b: f6:52:76:72:62:de:19:7b:ae:45:33:2d:21:97:54: b1:b3:88:4d:8f:2b:c1:72:f0:c3:50:54:3e:f3:c4: 7e:37:5f:63:43:06:1e:67:a3:76:30:05:8f:9b:98: 6d:4e:84:62:96:43:23:7a:a1:12:2e:41:11:83:78: e9:7c:64:4f:ca:70:57:75:9d:4d:90:57:5b:5a:a9: f6:87:65:5b:57:2e:3c:3a:08:7f:17:ce:f0:e5:08: 9d:98:b5:90:f9:86:9e:f8:fb:b0:b5:a5:18:c6:8b: b9:37:a3:31:01:55:9a:80:23:d5:13:84:91:e2:12: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:F3:BE:EA:00:25:6E:79:9C:81:1B:89:6E:6D:11:C4:DE:43:E3 X509v3 Authority Key Identifier: keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a7:d0:8e:be:0b:90:a5:87:c4:0a:33:1c:38:d9:91:92:8d: 0b:dc:b4:38:d4:91:09:ab:92:4e:c8:92:a5:63:f9:db:84:0c: eb:59:bb:96:9b:a6:0f:1f:7a:be:df:51:ec:2b:c8:bd:2f:55: c3:f4:b1:25:d9:b0:89:66:80:ec:b9:c1:9b:6b:dd:05:5b:ad: 9d:f0:4b:36:fb:0f:2e:e5:f6:bd:71:4e:54:5a:1a:ca:e6:ac: 8f:26:5d:98:fd:8c:15:7d:48:cd:dd:48:29:26:83:59:a7:a0: 16:2d:a4:f5:af:d8:f4:a5:c1:b9:0e:c5:e8:4f:47:5d:78:39: 78:4e:26:b7:41:d8:a6:4c:5a:9b:33:d9:6f:9e:29:13:1a:cc: 26:47:7a:11:88:6e:3e:41:d3:6a:d0:c9:b9:e9:77:db:e9:7f: 45:b4:a8:07:70:51:b4:2a:ef:88:33:10:c5:b6:6e:13:b4:a1: c9:81:8d:80:ce:5c:f4:77:fb:aa:d4:d3:38:7d:f6:1b:30:54: dc:b9:62:8e:8b:61:b1:28:0b:55:00:6f:a5:27:96:5c:04:39: ea:8c:ac:82:1b:56:4e:63:63:34:e5:de:fa:04:9a:53:73:73: 33:1a:65:a0:f7:c2:81:ba:9f:b5:db:1d:1a:21:7c:1c:82:bf: ab:39:d9:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgBTATICCyH6CfSmSFYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDdkMDZkMTRiYTRlMjc4MDk3ZjM1YTgwYzcxNTY4NGNh YzI2NjEwHhcNMjUxMjIwMTYwMDQ5WhcNMjUxMjIxMTYwMDQ5WjAzMTEwLwYDVQQD EyhjOGZiZjNiZWVhMDAyNTZlNzk5YzgxMWI4OTZlNmQxMWM0ZGU0M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc0J7ixT1danIHi4EIgk/aeQhriI ixEI6yJX7BAh8lescJ1WO5yfsljWXlZGNTBeOARq61xBItqyu4wgAaXm/JZgjvwi usRrcAQioML124blkD1JqcQVeRH4ombxZiBmb+rBW7LFDNY+XBa+BCKGsLE+JIPO DVsyeRyblyhXOaRLzmcRM4v2UnZyYt4Ze65FMy0hl1Sxs4hNjyvBcvDDUFQ+88R+ N19jQwYeZ6N2MAWPm5htToRilkMjeqESLkERg3jpfGRPynBXdZ1NkFdbWqn2h2Vb Vy48Ogh/F87w5QidmLWQ+Yae+PuwtaUYxou5N6MxAVWagCPVE4SR4hIqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj7877qACVueZyBG4lubRHE3kPjMB8GA1UdIwQY MBaAFAdH0G0Uuk4ngJfzWoDHFWhMrCZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEt MGQxY2JmY2QzYmMwLzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEtMGQxY2JmY2QzYmMw LzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6fQjr4L kKWHxAozHDjZkZKNC9y0ONSRCauSTsiSpWP524QM61m7lpumDx96vt9R7CvIvS9V w/SxJdmwiWaA7LnBm2vdBVutnfBLNvsPLuX2vXFOVFoayuasjyZdmP2MFX1Izd1I KSaDWaegFi2k9a/Y9KXBuQ7F6E9HXXg5eE4mt0HYpkxamzPZb54pExrMJkd6EYhu PkHTatDJuel32+l/RbSoB3BRtCrviDMQxbZuE7ShyYGNgM5c9Hf7qtTTOH32GzBU 3LlijothsSgLVQBvpSeWXAQ56oysghtWTmNjNOXe+gSaU3NzMxploPfCgbqftdsd GiF8HIK/qznZOA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:27 2025 by rpki-client