This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json) Hash identifier: DTP4InUv3NFAkDAc+wricrN/QA88ShPt78ydEgfW3Cg= Subject key identifier: 01:AB:82:79:E3:AC:1B:CF:31:F1:70:6C:42:F4:C8:21:F6:99:AD:2F Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d Certificate serial: 019B2B8B282B75A1BE0F90BABF424D3718DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft Manifest number: 104E Signing time: Wed 17 Dec 2025 09:01:38 +0000 Manifest this update: Wed 17 Dec 2025 09:01:38 +0000 Manifest next update: Thu 18 Dec 2025 09:01:38 +0000 Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=) 2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=) 3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: /sB2cMHHhprh0NIFppYXLrhaQeEqfoz40BLgO88b1xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:28:2b:75:a1:be:0f:90:ba:bf:42:4d:37:18:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d Validity Not Before: Dec 17 09:01:38 2025 GMT Not After : Dec 18 09:01:38 2025 GMT Subject: CN=01ab8279e3ac1bcf31f1706c42f4c821f699ad2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:f1:20:d9:a4:2e:5c:08:e1:1c:8b:a4:8a: ea:80:22:d7:62:aa:fd:f5:42:c1:e2:4d:0f:2e:7e: bc:98:0c:57:7d:d8:fd:6b:d8:7c:8e:8f:63:e0:45: 6a:57:a3:d5:01:c1:39:be:d9:0b:cf:11:55:cf:d3: ef:e2:50:2b:f0:00:c1:d2:ec:d4:f8:9c:c9:f1:74: 45:4c:d0:b7:c6:1a:4d:5f:40:1f:d6:b3:d2:7d:c9: 58:d9:ad:24:16:af:46:af:1d:60:5b:71:08:46:68: 39:b2:7e:a9:f4:8b:93:a4:84:80:08:90:a6:1e:7f: 51:41:5b:af:da:1d:a6:50:7f:81:09:d7:76:5c:41: 28:ce:e0:71:b1:c1:3f:48:9c:70:53:e5:9d:b8:56: cb:c4:05:ed:40:c0:4d:e8:4b:75:4b:56:28:b3:ba: f5:89:ab:d8:7a:37:92:12:9a:b7:90:ba:1a:e0:05: 07:60:1d:88:8b:c6:2b:66:f5:e3:43:45:9d:28:fd: fd:40:39:27:69:2c:51:2a:d9:d3:14:3f:ca:91:6f: 15:1e:53:77:0b:39:b2:25:9a:88:90:a9:82:e9:c0: 7d:04:e0:a0:3b:35:03:60:8f:61:59:82:ae:7f:c9: b9:9c:6f:74:a3:85:14:69:3a:69:70:cc:1a:8b:61: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:82:79:E3:AC:1B:CF:31:F1:70:6C:42:F4:C8:21:F6:99:AD:2F X509v3 Authority Key Identifier: keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5c:02:38:29:af:ff:b1:2d:1c:ca:77:16:17:a4:6e:7e:c9: f7:63:05:11:2e:ce:72:60:70:eb:4e:e7:4b:dd:ea:77:13:28: 70:38:9a:98:eb:0e:e7:3e:3c:75:b2:e6:fd:29:ae:2c:43:17: d7:c3:07:e2:9c:19:2f:ec:80:6f:5c:0a:8c:e4:32:2e:e0:ea: 5d:26:5b:77:b9:f2:2c:64:4a:4e:db:42:0d:fd:6d:fc:86:be: 8d:c3:46:dc:4d:85:f0:6e:3f:b1:86:f1:3b:ca:4d:3b:6d:27: 5b:a9:8c:f9:b5:9e:9e:79:74:80:ae:78:ee:20:14:a2:5d:62: 04:d2:5c:c4:a1:03:a8:71:f0:20:2c:b7:0b:77:3e:0a:36:15: 57:e7:e9:82:30:cf:2a:3d:a9:f1:b0:94:75:c7:6d:14:cc:5e: be:f0:71:b3:36:54:63:a8:b6:5b:e4:dc:d9:03:78:09:01:0e: 26:18:38:89:58:af:cd:08:47:99:e0:df:28:96:5e:fc:73:7e: 3f:e1:de:1f:09:7c:fa:90:3d:6f:1e:e1:43:f7:e9:15:5d:af: eb:05:89:0c:32:d0:c8:5a:63:c6:fa:60:61:c6:33:4c:21:08: 45:b5:aa:f0:60:03:e9:77:0e:be:6b:e2:c1:3d:1f:ed:e0:6e: 0c:7c:86:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriygrdaG+D5C6v0JNNxjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk ZTRjNmQwHhcNMjUxMjE3MDkwMTM4WhcNMjUxMjE4MDkwMTM4WjAzMTEwLwYDVQQD EygwMWFiODI3OWUzYWMxYmNmMzFmMTcwNmM0MmY0YzgyMWY2OTlhZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXPxINmkLlwI4RyLpIrqgCLXYqr9 9ULB4k0PLn68mAxXfdj9a9h8jo9j4EVqV6PVAcE5vtkLzxFVz9Pv4lAr8ADB0uzU +JzJ8XRFTNC3xhpNX0Af1rPSfclY2a0kFq9Grx1gW3EIRmg5sn6p9IuTpISACJCm Hn9RQVuv2h2mUH+BCdd2XEEozuBxscE/SJxwU+WduFbLxAXtQMBN6Et1S1Yos7r1 iavYejeSEpq3kLoa4AUHYB2Ii8YrZvXjQ0WdKP39QDknaSxRKtnTFD/KkW8VHlN3 CzmyJZqIkKmC6cB9BOCgOzUDYI9hWYKuf8m5nG90o4UUaTppcMwai2FlCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGrgnnjrBvPMfFwbEL0yCH2ma0vMB8GA1UdIwQY MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlwCOCmv /7EtHMp3Fhekbn7J92MFES7OcmBw607nS93qdxMocDiamOsO5z48dbLm/SmuLEMX 18MH4pwZL+yAb1wKjOQyLuDqXSZbd7nyLGRKTttCDf1t/Ia+jcNG3E2F8G4/sYbx O8pNO20nW6mM+bWennl0gK547iAUol1iBNJcxKEDqHHwICy3C3c+CjYVV+fpgjDP Kj2p8bCUdcdtFMxevvBxszZUY6i2W+Tc2QN4CQEOJhg4iVivzQhHmeDfKJZe/HN+ P+HeHwl8+pA9bx7hQ/fpFV2v6wWJDDLQyFpjxvpgYcYzTCEIRbWq8GAD6XcOvmvi wT0f7eBuDHyG6g== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:28 2025 by rpki-client