This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json) Hash identifier: J4ymLWDEaPpB8aiWEeBqeToyrep3ALrZHki3UupxTdQ= Subject key identifier: 0D:F9:87:6C:54:3E:CB:A8:8C:F8:22:ED:E6:E3:41:FE:AE:02:37:60 Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Certificate serial: 019B4280604909E89D0AB75168D9A85D5E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft Manifest number: 0459 Signing time: Sun 21 Dec 2025 20:01:08 +0000 Manifest this update: Sun 21 Dec 2025 20:01:08 +0000 Manifest next update: Mon 22 Dec 2025 20:01:08 +0000 Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=) 2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 9Fw6U1sGPm9sLByb5BGDgY6PbaOYfTncWaygFfV3Ln4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:60:49:09:e8:9d:0a:b7:51:68:d9:a8:5d:5e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Validity Not Before: Dec 21 20:01:08 2025 GMT Not After : Dec 22 20:01:08 2025 GMT Subject: CN=0df9876c543ecba88cf822ede6e341feae023760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:2a:40:19:69:fd:f1:ac:91:88:8f:70:ec: ca:1e:08:aa:a2:88:13:88:b8:54:23:d7:e5:4d:9d: 84:31:0a:d2:0d:3a:97:c0:74:8c:9c:37:ba:c1:70: de:5c:4c:c4:0e:b3:27:8a:78:33:e9:d3:05:b1:b5: 0e:58:95:24:25:64:35:f0:b2:73:9d:6b:95:e0:65: ce:54:93:0f:c9:d9:c2:3d:1d:0d:14:6a:39:f4:32: 48:18:01:70:99:2c:e6:a4:a5:16:68:69:06:c1:13: c1:3e:18:7d:25:5a:06:6d:52:27:52:cc:f2:b0:c0: a1:57:43:2f:b4:c8:0b:5c:e4:50:ec:db:42:e4:57: 35:73:83:ac:5d:9b:3f:44:60:85:e9:15:5c:78:bc: f9:04:bb:81:77:74:4a:73:56:28:d9:cf:9d:7a:a6: a9:d6:b3:11:40:2f:1d:4e:55:eb:16:57:01:1a:d3: 02:48:8e:df:41:5a:00:31:1d:d4:5e:d4:5b:e4:23: d7:6c:d9:93:aa:25:ac:52:ef:69:a4:43:83:dd:e4: f1:27:51:b7:5d:20:e4:13:6d:30:bc:6d:24:79:c6: cd:cb:f8:13:58:03:c1:bb:01:68:96:44:54:74:df: 01:c0:3b:93:16:14:29:96:1c:d9:89:7d:a7:0a:92: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:87:6C:54:3E:CB:A8:8C:F8:22:ED:E6:E3:41:FE:AE:02:37:60 X509v3 Authority Key Identifier: keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:4f:ba:ba:3b:0e:6d:c1:19:c8:ae:81:c9:e6:9e:29:4e: 9e:c3:66:93:ec:07:40:8c:33:79:24:af:42:22:c8:b2:20:d5: b3:f4:f8:5f:58:f9:b9:df:ed:9f:22:87:eb:2b:72:bb:3b:d9: 38:9c:4b:1b:ae:01:c6:9a:f0:4d:3e:3d:77:53:2c:86:e4:1b: 08:77:2b:f7:92:9e:b7:35:b5:f9:38:10:8a:2e:e5:a6:14:56: 8d:9b:50:de:13:e4:17:c5:98:4a:78:d4:1f:62:c0:c6:04:4c: 6d:79:f8:6a:2f:75:ec:44:dd:70:87:7f:88:69:02:01:36:49: 2f:3b:d9:c7:55:74:3e:6c:c9:b6:05:d9:83:59:aa:cf:22:91: 0a:b4:f1:c4:70:81:24:39:b6:1a:70:5b:95:5e:a3:82:37:90: 8f:41:6e:fc:9f:5a:70:5c:36:39:46:49:86:8f:42:8c:33:69: 71:b4:e1:3b:9f:0c:b9:f7:4c:4a:33:4e:89:fa:d6:e2:bd:1a: b7:77:d9:0a:72:e9:9f:6a:ea:7c:69:a8:18:57:5f:08:0e:15: 0a:42:14:d6:c7:7c:f6:6d:7a:cb:bb:30:c4:48:43:3b:10:d6: 60:9a:5a:5c:23:0c:25:3e:6f:13:47:f7:34:1e:92:36:2e:de: 51:61:32:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgGBJCeidCrdRaNmoXV40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My N2IyMjUwHhcNMjUxMjIxMjAwMTA4WhcNMjUxMjIyMjAwMTA4WjAzMTEwLwYDVQQD EygwZGY5ODc2YzU0M2VjYmE4OGNmODIyZWRlNmUzNDFmZWFlMDIzNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMcqQBlp/fGskYiPcOzKHgiqoogT iLhUI9flTZ2EMQrSDTqXwHSMnDe6wXDeXEzEDrMningz6dMFsbUOWJUkJWQ18LJz nWuV4GXOVJMPydnCPR0NFGo59DJIGAFwmSzmpKUWaGkGwRPBPhh9JVoGbVInUszy sMChV0MvtMgLXORQ7NtC5Fc1c4OsXZs/RGCF6RVceLz5BLuBd3RKc1Yo2c+deqap 1rMRQC8dTlXrFlcBGtMCSI7fQVoAMR3UXtRb5CPXbNmTqiWsUu9ppEOD3eTxJ1G3 XSDkE20wvG0kecbNy/gTWAPBuwFolkRUdN8BwDuTFhQplhzZiX2nCpLMnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA35h2xUPsuojPgi7ebjQf6uAjdgMB8GA1UdIwQY MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt ZGM0ZTc5ODhhMjhhLzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYNPuro7 Dm3BGciugcnmnilOnsNmk+wHQIwzeSSvQiLIsiDVs/T4X1j5ud/tnyKH6ytyuzvZ OJxLG64BxprwTT49d1MshuQbCHcr95KetzW1+TgQii7lphRWjZtQ3hPkF8WYSnjU H2LAxgRMbXn4ai917ETdcId/iGkCATZJLzvZx1V0PmzJtgXZg1mqzyKRCrTxxHCB JDm2GnBblV6jgjeQj0Fu/J9acFw2OUZJho9CjDNpcbThO58MufdMSjNOifrW4r0a t3fZCnLpn2rqfGmoGFdfCA4VCkIU1sd89m16y7swxEhDOxDWYJpaXCMMJT5vE0f3 NB6SNi7eUWEyCA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:53:19 2025 by rpki-client