This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: Pl4CgpMSMxPF0FF4emYKBd+VbPf3dIASSminjv7tsls= Subject key identifier: 8C:96:64:45:9D:49:D5:A2:D8:A4:B7:3F:8C:9C:55:B7:2A:57:88:FE Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019B1A97BD8BC7CDE1BB1EE12386B3049707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 02:01:50 +0000 Manifest this update: Sun 14 Dec 2025 02:01:50 +0000 Manifest next update: Mon 15 Dec 2025 02:01:50 +0000 Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=) 2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=) 3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: y8FNtRN/YLR2KwFd6v4eKkSw9AMhmtUKxVy7xIhm06Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:bd:8b:c7:cd:e1:bb:1e:e1:23:86:b3:04:97:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Dec 14 02:01:50 2025 GMT Not After : Dec 15 02:01:50 2025 GMT Subject: CN=8c9664459d49d5a2d8a4b73f8c9c55b72a5788fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:76:c1:04:dc:6e:82:63:01:65:9d:ea:7b: 56:7b:ad:f9:a1:7b:eb:8e:21:8a:7b:c0:d2:82:62: 31:aa:b1:bc:6c:28:01:8f:2b:32:f8:71:cb:ec:11: ef:89:b9:6a:8b:70:ac:47:1f:62:3d:80:e9:85:a5: dc:63:f0:75:ee:7a:79:9f:0b:57:9d:a5:77:f7:48: f2:87:dd:18:05:82:c1:94:6e:58:c0:07:85:4c:f5: a8:55:93:08:18:1b:6a:81:c2:4c:33:97:04:86:cb: d1:18:7c:89:81:34:f3:ce:08:03:a9:1e:e7:da:33: e4:c6:9e:de:7b:88:90:83:c6:9d:92:78:44:ba:ea: f7:cd:46:af:9e:ca:f7:df:35:bf:03:40:c4:4b:b7: 69:26:9c:37:c9:0c:01:c5:c0:8f:cf:7b:50:bc:b1: 3e:9c:91:03:9c:ff:c1:5b:02:a8:18:c2:89:2a:63: 85:2c:86:d2:5d:e4:a7:6c:36:45:ea:d1:c4:33:2e: 40:b3:bb:34:56:4b:7f:ed:04:a5:53:8f:24:d1:2c: 8f:17:cb:9d:d3:c0:d1:dc:4d:76:d8:24:a3:6f:80: cf:2b:3f:cb:f8:e8:7c:02:f2:86:da:2b:31:9a:bb: bf:54:aa:5f:cf:e4:90:04:26:95:ea:5d:96:3f:43: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:64:45:9D:49:D5:A2:D8:A4:B7:3F:8C:9C:55:B7:2A:57:88:FE X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:64:ac:47:9a:45:8c:d2:36:bf:65:ee:d9:42:21:8a:c4:47: db:80:93:65:aa:2e:57:f7:fc:f5:86:9c:ff:1b:4d:d5:9c:e6: 16:2f:47:d1:61:46:2d:16:a0:59:8f:cb:eb:44:eb:32:77:37: 67:3f:05:fa:af:72:93:2d:5c:1d:3a:ee:75:f4:7c:60:06:ab: e7:37:2d:78:37:53:ae:18:87:d3:1b:f8:b4:3f:e5:71:64:83: 28:a4:91:64:47:5d:68:e2:1b:df:0a:3b:bb:b2:56:02:ea:93: 3a:3d:11:f6:17:26:41:bf:21:4a:b6:f6:47:dd:73:04:fa:6f: 8c:96:79:4f:11:33:5b:03:f5:d4:41:14:02:8b:85:9a:09:38: 8e:3d:e7:2a:f3:03:64:40:8e:47:d0:60:48:72:68:23:d4:b9: 84:e0:28:a5:d6:30:23:b0:67:cf:bc:9e:96:8b:d9:28:d9:28: 31:79:92:cf:b1:84:b7:b9:35:8d:a1:39:79:b2:fe:8e:2e:39: b4:2c:83:b0:43:b5:86:34:4d:d9:95:44:60:dc:2a:8c:97:a6: 4c:b1:5c:9c:14:d9:dd:2a:ea:9f:c7:7e:b4:82:dc:c7:0d:03: 62:71:0f:27:31:1a:9f:eb:2f:b4:50:97:d6:98:33:14:84:97: 1a:4d:a0:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal72Lx83hux7hI4azBJcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjUxMjE0MDIwMTUwWhcNMjUxMjE1MDIwMTUwWjAzMTEwLwYDVQQD Eyg4Yzk2NjQ0NTlkNDlkNWEyZDhhNGI3M2Y4YzljNTViNzJhNTc4OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e92wQTcboJjAWWd6ntWe635oXvr jiGKe8DSgmIxqrG8bCgBjysy+HHL7BHviblqi3CsRx9iPYDphaXcY/B17np5nwtX naV390jyh90YBYLBlG5YwAeFTPWoVZMIGBtqgcJMM5cEhsvRGHyJgTTzzggDqR7n 2jPkxp7ee4iQg8adknhEuur3zUavnsr33zW/A0DES7dpJpw3yQwBxcCPz3tQvLE+ nJEDnP/BWwKoGMKJKmOFLIbSXeSnbDZF6tHEMy5As7s0Vkt/7QSlU48k0SyPF8ud 08DR3E122CSjb4DPKz/L+Oh8AvKG2isxmru/VKpfz+SQBCaV6l2WP0MZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyWZEWdSdWi2KS3P4ycVbcqV4j+MB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmSsR5pF jNI2v2Xu2UIhisRH24CTZaouV/f89Yac/xtN1ZzmFi9H0WFGLRagWY/L60TrMnc3 Zz8F+q9yky1cHTrudfR8YAar5zcteDdTrhiH0xv4tD/lcWSDKKSRZEddaOIb3wo7 u7JWAuqTOj0R9hcmQb8hSrb2R91zBPpvjJZ5TxEzWwP11EEUAouFmgk4jj3nKvMD ZECOR9BgSHJoI9S5hOAopdYwI7Bnz7yelovZKNkoMXmSz7GEt7k1jaE5ebL+ji45 tCyDsEO1hjRN2ZVEYNwqjJemTLFcnBTZ3Srqn8d+tILcxw0DYnEPJzEan+svtFCX 1pgzFISXGk2gPg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:04 2025 by rpki-client