This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json) Hash identifier: 47/J+OawQd4Lhg6NPl4lE8JDtoiIlV/dhxWel/Zz9+o= Subject key identifier: 27:56:52:8E:77:53:01:8B:A1:5A:A6:11:6F:70:D8:A4:51:10:93:AF Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d Certificate serial: 019B21E2B000FB11302AC0A9D3E0E9644D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft Manifest number: 1049 Signing time: Mon 15 Dec 2025 12:01:02 +0000 Manifest this update: Mon 15 Dec 2025 12:01:02 +0000 Manifest next update: Tue 16 Dec 2025 12:01:02 +0000 Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=) 2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=) 3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: m8yfEdROGzUwU5q7sTXAFsws1SBzpKA1AxycNOp22FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:b0:00:fb:11:30:2a:c0:a9:d3:e0:e9:64:4d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d Validity Not Before: Dec 15 12:01:02 2025 GMT Not After : Dec 16 12:01:02 2025 GMT Subject: CN=2756528e7753018ba15aa6116f70d8a4511093af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:e1:33:f3:fb:01:03:e0:75:65:85:8d:99: 91:27:2d:b0:a2:cf:c0:32:b8:08:b6:44:c1:d0:10: c2:3f:b7:58:e2:a7:30:e8:47:24:6e:05:db:df:d1: 4a:11:e2:c4:1d:c1:64:ed:81:48:98:57:aa:d5:56: ea:1a:7b:eb:ad:c5:a5:60:a2:aa:09:03:39:5e:9c: cc:61:a8:72:9f:66:11:47:d9:fa:59:b5:c2:26:75: 5c:9e:79:a7:77:63:95:3a:d9:fd:c2:09:53:f9:06: 86:93:f0:3c:7a:80:3e:ca:ab:8e:80:c1:75:c8:68: f2:ce:46:dc:33:2f:10:79:b7:89:ba:7a:62:b8:5b: a8:fc:01:73:11:a7:f6:41:de:c8:b0:28:d3:93:9c: bd:30:48:af:92:35:43:79:db:4b:44:3c:f5:a6:49: d7:a9:78:91:e8:69:d7:0c:47:9d:62:21:3b:9f:62: 90:f5:41:2c:ef:8f:cb:b0:07:a8:e4:5a:f6:7c:5c: fc:3b:d4:ff:09:5c:1e:ca:b6:1c:b5:7d:6c:6c:70: 9a:00:77:45:8d:27:ef:ff:1a:9c:7f:06:09:e9:a9: e7:91:2c:4d:84:2d:9f:18:d1:51:6f:bc:13:2d:e0: 51:39:07:c5:f1:c8:21:6f:16:c4:3d:d6:cf:64:ef: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:52:8E:77:53:01:8B:A1:5A:A6:11:6F:70:D8:A4:51:10:93:AF X509v3 Authority Key Identifier: keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:44:58:f9:9d:ce:45:0b:37:3b:a8:06:b8:78:f6:01:b8:ae: 8e:08:15:2a:86:38:38:5c:11:64:af:9d:8d:8f:cc:53:68:20: c3:0d:52:05:13:a1:8e:83:24:62:76:92:f0:29:e2:63:5a:c0: 52:03:aa:b1:88:fd:4c:d4:fd:43:19:87:9b:7f:dc:38:00:fe: 83:8c:7c:28:7f:10:2e:81:1d:a9:24:32:7b:7d:63:5c:03:e9: 2f:fc:55:fe:d3:d1:f9:1e:db:65:88:ee:7b:88:41:ca:92:2b: 1c:a6:25:00:b9:58:3c:06:56:61:7f:99:33:df:d3:dd:ab:99: 0f:96:32:c0:66:4d:8c:53:b5:2c:e8:1f:08:9a:59:e3:45:3d: a3:8b:47:57:eb:eb:e9:64:0a:d8:28:a3:d4:de:51:d1:80:1c: 38:06:9a:de:52:34:67:5a:52:8c:78:ca:0c:6f:fd:95:0d:46: f8:d5:e3:98:1a:88:53:56:54:68:9c:c6:2e:02:20:42:1a:7c: 41:18:2b:76:1e:6b:97:86:3e:ed:2f:26:f8:d7:b1:45:e8:33: 7f:6b:9c:3e:57:63:74:02:a3:99:19:a2:12:a9:0b:b2:b4:a9: 13:bc:2a:34:19:d7:66:67:a5:79:f7:b4:3d:ae:15:58:e1:f9: f0:d7:56:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4rAA+xEwKsCp0+DpZE0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk ZTRjNmQwHhcNMjUxMjE1MTIwMTAyWhcNMjUxMjE2MTIwMTAyWjAzMTEwLwYDVQQD EygyNzU2NTI4ZTc3NTMwMThiYTE1YWE2MTE2ZjcwZDhhNDUxMTA5M2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzHhM/P7AQPgdWWFjZmRJy2wos/A MrgItkTB0BDCP7dY4qcw6EckbgXb39FKEeLEHcFk7YFImFeq1VbqGnvrrcWlYKKq CQM5XpzMYahyn2YRR9n6WbXCJnVcnnmnd2OVOtn9wglT+QaGk/A8eoA+yquOgMF1 yGjyzkbcMy8QebeJunpiuFuo/AFzEaf2Qd7IsCjTk5y9MEivkjVDedtLRDz1pknX qXiR6GnXDEedYiE7n2KQ9UEs74/LsAeo5Fr2fFz8O9T/CVweyrYctX1sbHCaAHdF jSfv/xqcfwYJ6annkSxNhC2fGNFRb7wTLeBROQfF8cghbxbEPdbPZO80vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdWUo53UwGLoVqmEW9w2KRREJOvMB8GA1UdIwQY MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0RY+Z3O RQs3O6gGuHj2AbiujggVKoY4OFwRZK+djY/MU2ggww1SBROhjoMkYnaS8CniY1rA UgOqsYj9TNT9QxmHm3/cOAD+g4x8KH8QLoEdqSQye31jXAPpL/xV/tPR+R7bZYju e4hBypIrHKYlALlYPAZWYX+ZM9/T3auZD5YywGZNjFO1LOgfCJpZ40U9o4tHV+vr 6WQK2Cij1N5R0YAcOAaa3lI0Z1pSjHjKDG/9lQ1G+NXjmBqIU1ZUaJzGLgIgQhp8 QRgrdh5rl4Y+7S8m+NexRegzf2ucPldjdAKjmRmiEqkLsrSpE7wqNBnXZmelefe0 Pa4VWOH58NdWCg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:58:38 2025 by rpki-client