This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json) Hash identifier: uenK4jZ7Zs1QKJpvXpLYxogeEX67AIkznW7IDa8BkI4= Subject key identifier: 6F:B5:49:AB:92:03:EC:B8:0B:53:97:60:7F:2C:D2:CB:CD:55:C9:99 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019B3A90C7610DAE02C712669B189190E40B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:05 +0000 Manifest this update: Sat 20 Dec 2025 07:02:05 +0000 Manifest next update: Sun 21 Dec 2025 07:02:05 +0000 Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: Kaj0rpb+UKMpbaf0qsP8QgrYM/vVXPi5wivXqRWTeqk=) 2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=) 3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=) 4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:c7:61:0d:ae:02:c7:12:66:9b:18:91:90:e4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Dec 20 07:02:05 2025 GMT Not After : Dec 21 07:02:05 2025 GMT Subject: CN=6fb549ab9203ecb80b5397607f2cd2cbcd55c999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:ea:dd:c6:66:17:a2:04:25:c6:bf:36:0a: 1c:c6:b3:74:38:b1:bb:2e:0d:84:b6:86:12:ef:fc: 61:ac:e2:36:76:b8:5d:1c:cf:32:ab:e1:0a:4e:af: 7a:f1:e9:0d:88:30:bb:10:32:76:06:65:bb:a6:a9: c4:01:c4:2b:ee:25:28:3d:52:00:c8:61:04:39:32: a7:c1:88:0f:51:64:d0:77:6b:b4:52:33:7a:29:33: 1a:c0:fb:9e:5f:29:33:71:d3:8d:4e:16:55:cb:32: 8e:a5:16:5a:9b:5e:af:6f:36:71:f0:35:7c:0c:cc: f6:99:81:6f:de:55:d9:c2:3a:fe:ad:81:d8:b9:ae: 32:1d:aa:db:bb:07:d4:1c:32:7b:c1:56:ab:c0:1d: 2c:6d:a0:15:c9:42:cb:32:5a:b1:0f:86:7d:6c:86: 49:82:8a:0f:78:c8:c3:60:57:fb:72:3e:70:da:7a: 09:0e:93:f0:f4:fc:5a:af:54:7a:62:2c:bc:ff:4d: 95:a1:e9:58:71:a8:fa:27:1c:d2:5b:5c:61:21:03: 8d:fc:be:ab:62:7d:fc:84:6e:4a:9f:25:85:c6:5f: 19:1a:a5:a5:26:e8:d3:78:aa:f2:e3:33:c5:38:aa: 9d:e9:85:8a:34:6f:13:a4:66:3c:59:b4:ad:14:25: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:49:AB:92:03:EC:B8:0B:53:97:60:7F:2C:D2:CB:CD:55:C9:99 X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:11:5c:8d:0c:b0:79:3c:1a:23:ef:cb:12:2f:9b:12:dc:39: 5b:17:d0:c0:24:09:b2:09:40:62:99:03:5f:62:88:7b:aa:7f: f9:53:c5:33:b9:84:36:a6:12:e5:fa:6e:7f:87:d0:5a:7d:b2: 48:c3:49:e6:82:4b:1a:67:73:a2:27:90:bb:33:8f:9c:8d:67: 48:2a:b4:d2:4c:8f:92:5d:00:58:9e:8a:cc:2f:94:8a:70:b8: b3:ee:13:44:fb:d3:4b:4b:18:04:57:29:90:f3:e7:a8:bc:72: 99:2e:2c:4b:1d:77:80:34:97:5d:42:e6:2a:09:45:67:58:ab: e2:88:f7:2b:19:cc:c7:b1:a7:60:79:c2:38:4f:5d:1d:94:7e: 73:ec:f8:37:07:1f:53:0b:4a:51:d1:91:69:85:64:66:29:7a: 5c:b0:a0:d4:0b:b6:e7:c6:4b:80:69:87:a5:e0:ef:3c:ce:d4: 22:84:b5:ca:a2:cc:f3:8b:6a:9d:8c:5f:20:8d:a5:4a:5c:30: a5:8a:11:ba:82:c7:75:37:20:22:fb:bd:eb:53:e9:88:5b:20: 76:36:a7:01:f6:27:23:c1:90:cd:7e:81:1e:c2:ff:fd:70:6b: d4:f4:48:a3:26:31:c4:72:79:22:93:5c:1a:95:21:1c:1b:92: cd:06:68:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kMdhDa4CxxJmmxiRkOQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjUxMjIwMDcwMjA1WhcNMjUxMjIxMDcwMjA1WjAzMTEwLwYDVQQD Eyg2ZmI1NDlhYjkyMDNlY2I4MGI1Mzk3NjA3ZjJjZDJjYmNkNTVjOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVfq3cZmF6IEJca/NgocxrN0OLG7 Lg2EtoYS7/xhrOI2drhdHM8yq+EKTq968ekNiDC7EDJ2BmW7pqnEAcQr7iUoPVIA yGEEOTKnwYgPUWTQd2u0UjN6KTMawPueXykzcdONThZVyzKOpRZam16vbzZx8DV8 DMz2mYFv3lXZwjr+rYHYua4yHarbuwfUHDJ7wVarwB0sbaAVyULLMlqxD4Z9bIZJ gooPeMjDYFf7cj5w2noJDpPw9Pxar1R6Yiy8/02VoelYcaj6JxzSW1xhIQON/L6r Yn38hG5KnyWFxl8ZGqWlJujTeKry4zPFOKqd6YWKNG8TpGY8WbStFCWkaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+1SauSA+y4C1OXYH8s0svNVcmZMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxFcjQyw eTwaI+/LEi+bEtw5WxfQwCQJsglAYpkDX2KIe6p/+VPFM7mENqYS5fpuf4fQWn2y SMNJ5oJLGmdzoieQuzOPnI1nSCq00kyPkl0AWJ6KzC+UinC4s+4TRPvTS0sYBFcp kPPnqLxymS4sSx13gDSXXULmKglFZ1ir4oj3KxnMx7GnYHnCOE9dHZR+c+z4Nwcf UwtKUdGRaYVkZil6XLCg1Au258ZLgGmHpeDvPM7UIoS1yqLM84tqnYxfII2lSlww pYoRuoLHdTcgIvu961PpiFsgdjanAfYnI8GQzX6BHsL//XBr1PRIoyYxxHJ5IpNc GpUhHBuSzQZo1w== -----END CERTIFICATE-----Generated at Sat Dec 20 08:52:32 2025 by rpki-client