This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: be8yE7Vbv2nPWdIyCHWShuawFP4/yxSeJxLh6xnftxo= Subject key identifier: 0E:20:71:64:E8:7A:2A:DF:D9:60:E9:30:94:E6:29:1E:9E:2A:AD:FA Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019B0F0112523BED3CF40EF97C26206298D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 20:01:26 +0000 Manifest this update: Thu 11 Dec 2025 20:01:26 +0000 Manifest next update: Fri 12 Dec 2025 20:01:26 +0000 Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=) 2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=) 3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: Lg6cglbk6hwn/t2dB+Hf8e9BCRfGLFlfTta1nGn0bE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:12:52:3b:ed:3c:f4:0e:f9:7c:26:20:62:98:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Dec 11 20:01:26 2025 GMT Not After : Dec 12 20:01:26 2025 GMT Subject: CN=0e207164e87a2adfd960e93094e6291e9e2aadfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:d3:0e:f7:81:29:8a:18:84:a7:98:ae:22: 37:55:68:2e:3e:cf:48:bf:fa:df:97:84:cf:01:61: 70:32:e2:0c:6e:14:74:4c:9b:91:ed:ee:73:af:fb: 09:4f:83:cc:61:46:5a:a8:82:61:85:ba:d4:a3:00: e7:f5:80:08:a1:68:d4:d8:19:1a:ab:b2:8e:e7:32: 0b:d5:8b:09:82:8f:11:4b:cd:8e:74:65:d9:80:6a: 6a:a5:38:b0:b5:3a:04:73:aa:89:b2:86:29:cf:65: bb:eb:a2:4d:4d:fd:2c:73:fd:11:e3:08:8a:3e:a1: fd:07:ba:70:5a:ee:f4:a6:d0:fe:cc:f6:72:ce:db: 6e:dc:19:3e:a2:11:26:f9:9d:9e:5d:c9:ef:4f:d5: f0:56:19:a3:65:7c:26:3c:ed:c4:a9:41:e6:a5:42: 43:3e:c2:f4:1d:d0:32:0d:f3:ee:14:f7:d4:4b:fc: 3f:cc:1b:ab:6b:2c:97:94:50:e6:b2:63:b5:1f:d6: 5a:65:e5:df:95:ca:55:af:ae:13:3e:a2:8e:d1:cb: 36:5a:ba:e9:d3:41:20:8d:f6:27:9f:ec:76:4c:3f: a5:83:0a:51:a6:b5:a6:11:c4:0e:e9:f9:7a:06:a5: d5:54:32:5c:47:60:40:79:ba:0d:9e:0e:14:3a:d6: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:71:64:E8:7A:2A:DF:D9:60:E9:30:94:E6:29:1E:9E:2A:AD:FA X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:47:89:cf:ca:93:d7:a2:d8:66:2f:02:60:53:e7:d6:41:07: 99:2c:d6:3e:93:13:93:2e:f6:cf:4b:eb:80:b0:0c:49:96:2e: fa:8e:f6:6e:62:a0:a5:e9:d1:fc:13:e0:0e:51:df:58:25:c7: 65:a2:a6:d2:cb:d8:b2:74:1d:e0:eb:7b:b3:2a:62:5a:e1:a2: 59:4b:aa:75:20:a6:b6:fa:6b:c0:48:86:f2:ed:e0:cd:4f:eb: 12:5c:49:cb:5f:dd:eb:49:55:86:70:89:5c:96:5f:69:11:b9: 2c:08:1b:e6:8c:f5:12:83:3e:58:1f:71:94:f9:30:d2:fa:66: 46:89:62:04:31:b9:a5:91:d5:ba:6c:01:31:91:a0:d6:d3:da: 7f:bc:56:42:09:41:ce:50:52:90:9e:eb:c7:50:39:da:d6:c2: 3a:1d:59:fd:05:fc:80:a8:b6:4b:ea:07:6a:3f:be:32:53:e2: d5:7a:86:11:fc:10:8d:0e:6c:03:91:72:0c:49:53:f2:dd:ac: 43:48:4c:e0:9a:54:11:06:48:18:09:77:15:45:ac:d0:fe:d7: 2c:27:fb:d5:52:aa:07:a0:24:bf:d0:9f:5a:c2:b2:4c:c6:cc: 6e:1e:5f:b3:00:51:0b:6d:02:a4:63:85:e0:db:c1:21:08:ba: e9:b3:d4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPARJSO+089A75fCYgYpjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjUxMjExMjAwMTI2WhcNMjUxMjEyMjAwMTI2WjAzMTEwLwYDVQQD EygwZTIwNzE2NGU4N2EyYWRmZDk2MGU5MzA5NGU2MjkxZTllMmFhZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4nTDveBKYoYhKeYriI3VWguPs9I v/rfl4TPAWFwMuIMbhR0TJuR7e5zr/sJT4PMYUZaqIJhhbrUowDn9YAIoWjU2Bka q7KO5zIL1YsJgo8RS82OdGXZgGpqpTiwtToEc6qJsoYpz2W766JNTf0sc/0R4wiK PqH9B7pwWu70ptD+zPZyzttu3Bk+ohEm+Z2eXcnvT9XwVhmjZXwmPO3EqUHmpUJD PsL0HdAyDfPuFPfUS/w/zBurayyXlFDmsmO1H9ZaZeXflcpVr64TPqKO0cs2Wrrp 00EgjfYnn+x2TD+lgwpRprWmEcQO6fl6BqXVVDJcR2BAeboNng4UOtbesQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4gcWToeirf2WDpMJTmKR6eKq36MB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUeJz8qT 16LYZi8CYFPn1kEHmSzWPpMTky72z0vrgLAMSZYu+o72bmKgpenR/BPgDlHfWCXH ZaKm0svYsnQd4Ot7sypiWuGiWUuqdSCmtvprwEiG8u3gzU/rElxJy1/d60lVhnCJ XJZfaRG5LAgb5oz1EoM+WB9xlPkw0vpmRoliBDG5pZHVumwBMZGg1tPaf7xWQglB zlBSkJ7rx1A52tbCOh1Z/QX8gKi2S+oHaj++MlPi1XqGEfwQjQ5sA5FyDElT8t2s Q0hM4JpUEQZIGAl3FUWs0P7XLCf71VKqB6Akv9CfWsKyTMbMbh5fswBRC20CpGOF 4NvBIQi66bPU/A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:30:09 2025 by rpki-client