This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json) Hash identifier: oAqZ6mBHq045oVZeyRHuBEKvH298x6SVys34dMbCqqI= Subject key identifier: 79:9D:65:2E:92:18:FC:C6:52:1F:93:EA:50:DE:B2:FA:2A:BB:58:66 Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb Certificate serial: 019B3BD9BBD042BD2D2A0D7C5B31C74A1BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 13:01:23 +0000 Manifest this update: Sat 20 Dec 2025 13:01:23 +0000 Manifest next update: Sun 21 Dec 2025 13:01:23 +0000 Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=) 2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=) 3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: /UbmB3vkE72ea/LADtS6L0eQTcTeOy02FHHUOM5dnhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:bb:d0:42:bd:2d:2a:0d:7c:5b:31:c7:4a:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ad79492e809934d693b11855e75103241569eb Validity Not Before: Dec 20 13:01:23 2025 GMT Not After : Dec 21 13:01:23 2025 GMT Subject: CN=799d652e9218fcc6521f93ea50deb2fa2abb5866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:39:d6:72:99:10:4e:f8:15:89:8c:22:9a: f4:ec:ce:6b:98:4d:ee:01:65:cd:20:c0:55:6e:a3: 0e:06:27:be:97:4c:f9:b0:f1:7f:1d:85:c8:32:8e: f2:e2:cd:24:4c:7c:4d:c0:6a:99:be:25:6a:13:4d: b0:85:e6:37:3f:3a:dd:c6:a4:19:a3:34:c8:0a:81: e1:1d:08:b3:53:9f:97:58:bd:eb:83:91:51:30:87: 90:c5:8d:39:6b:e3:47:66:63:44:45:00:8b:d8:4b: 10:80:ae:37:9c:0f:a9:7b:a9:a4:8a:59:8f:5c:2d: 9b:6f:1d:bf:f4:e7:78:27:e8:26:c2:e9:35:e9:f7: ca:15:05:1e:53:f3:3c:89:01:9e:bf:99:59:ae:fa: 42:68:ee:dc:5b:a9:96:f1:c7:a1:fc:bd:f0:30:e4: 07:bc:bc:43:31:43:8d:bc:5c:10:68:16:c4:a4:f2: cf:c5:35:5a:9a:12:75:42:f9:99:6d:f8:c7:7f:7b: 99:72:c8:6b:73:79:57:9a:7e:9e:58:ca:75:c4:60: 31:2f:14:0d:10:90:16:3c:36:04:6f:f1:dc:d1:0a: 96:a8:10:38:06:38:e0:7b:45:c9:05:9b:a6:8e:01: 1e:2e:d4:24:3a:25:f3:10:c3:43:0c:f0:34:49:dd: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:65:2E:92:18:FC:C6:52:1F:93:EA:50:DE:B2:FA:2A:BB:58:66 X509v3 Authority Key Identifier: keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cd:52:08:4b:d1:9a:be:da:54:1a:d6:d3:17:29:78:12:90: fa:50:fa:4b:21:af:22:b0:75:b2:70:6a:43:2c:6a:49:b8:8e: aa:4d:4e:09:8b:c6:fe:e2:e3:0d:3d:32:6d:9d:b9:72:aa:63: 60:46:d6:a4:08:d1:b5:f5:10:ab:88:8b:91:d9:32:f4:01:96: 14:63:4f:8d:4a:ba:d8:18:03:b3:51:cb:23:85:cc:f9:ac:14: 03:83:b8:f6:19:55:88:94:52:0d:5c:30:84:4b:c2:72:5b:cb: 60:52:72:91:ee:de:49:95:6f:db:c5:b5:20:0d:e2:89:74:97: b8:52:93:2a:0a:2a:55:9e:d8:b5:47:43:d4:76:5e:6e:67:18: 73:7e:e9:0c:65:c4:65:dd:88:a0:a8:55:7f:a4:2c:f0:3e:57: cc:47:95:15:dd:c2:97:0a:ec:02:dd:fe:20:d6:97:aa:e1:6f: 1b:b0:44:ab:cd:3a:8a:e5:03:42:9e:a0:e5:49:ce:a0:aa:ee: e3:9c:21:ef:cd:1c:90:ab:b5:da:6d:67:08:f7:e1:b7:03:7a: 56:ef:47:38:b8:85:66:f0:68:2b:cc:13:54:b4:af:aa:75:d1: 26:5f:19:4a:cd:f8:9a:99:59:06:03:96:3a:43:95:49:5e:4e: f5:ce:d3:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bvQQr0tKg18WzHHShu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx NTY5ZWIwHhcNMjUxMjIwMTMwMTIzWhcNMjUxMjIxMTMwMTIzWjAzMTEwLwYDVQQD Eyg3OTlkNjUyZTkyMThmY2M2NTIxZjkzZWE1MGRlYjJmYTJhYmI1ODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3A51nKZEE74FYmMIpr07M5rmE3u AWXNIMBVbqMOBie+l0z5sPF/HYXIMo7y4s0kTHxNwGqZviVqE02wheY3PzrdxqQZ ozTICoHhHQizU5+XWL3rg5FRMIeQxY05a+NHZmNERQCL2EsQgK43nA+pe6mkilmP XC2bbx2/9Od4J+gmwuk16ffKFQUeU/M8iQGev5lZrvpCaO7cW6mW8ceh/L3wMOQH vLxDMUONvFwQaBbEpPLPxTVamhJ1QvmZbfjHf3uZcshrc3lXmn6eWMp1xGAxLxQN EJAWPDYEb/Hc0QqWqBA4Bjjge0XJBZumjgEeLtQkOiXzEMNDDPA0Sd2OPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmdZS6SGPzGUh+T6lDesvoqu1hmMB8GA1UdIwQY MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt ZjM3OTdlZjM0OGZmLzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM1SCEvR mr7aVBrW0xcpeBKQ+lD6SyGvIrB1snBqQyxqSbiOqk1OCYvG/uLjDT0ybZ25cqpj YEbWpAjRtfUQq4iLkdky9AGWFGNPjUq62BgDs1HLI4XM+awUA4O49hlViJRSDVww hEvCclvLYFJyke7eSZVv28W1IA3iiXSXuFKTKgoqVZ7YtUdD1HZebmcYc37pDGXE Zd2IoKhVf6Qs8D5XzEeVFd3ClwrsAt3+INaXquFvG7BEq806iuUDQp6g5UnOoKru 45wh780ckKu12m1nCPfhtwN6Vu9HOLiFZvBoK8wTVLSvqnXRJl8ZSs34mplZBgOW OkOVSV5O9c7TnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:51 2025 by rpki-client