This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json) Hash identifier: Q33XXX6Yq7LjKUlzxTiTmxY2iPhupcv3DyIbB8DDRe4= Subject key identifier: AB:50:67:AF:F8:7E:F2:DB:D6:56:F4:62:BD:F5:25:B8:DE:9E:3F:A2 Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb Certificate serial: 019B41A4DFCE1B5B52E522E8A0A8C47AEB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 16:01:22 +0000 Manifest this update: Sun 21 Dec 2025 16:01:22 +0000 Manifest next update: Mon 22 Dec 2025 16:01:22 +0000 Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=) 2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=) 3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: L2GZ4Zk+dROlHqUIAjyfo1i2SETTZLuuCfaWIawx1ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:df:ce:1b:5b:52:e5:22:e8:a0:a8:c4:7a:eb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ad79492e809934d693b11855e75103241569eb Validity Not Before: Dec 21 16:01:22 2025 GMT Not After : Dec 22 16:01:22 2025 GMT Subject: CN=ab5067aff87ef2dbd656f462bdf525b8de9e3fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:2c:86:e8:4a:e9:66:a0:71:13:b1:7e:f5: 37:0e:40:3f:bd:07:9d:73:a3:ee:8d:41:4f:c1:83: 57:e1:fe:56:ae:3c:ae:67:a4:cf:cb:38:78:b5:88: 37:dd:93:18:9e:dc:9f:44:27:9a:44:d6:d2:2e:78: e4:99:9c:80:cf:2a:82:75:7f:16:5f:15:29:d2:b2: ec:ff:9a:d4:b5:37:c7:2e:d5:14:0b:1e:7e:72:36: f4:4b:43:c8:7d:2d:16:c0:ba:c4:e7:d7:2a:40:09: 38:8f:4e:ff:ae:5e:45:3e:76:a5:22:d3:95:2a:c4: 9e:82:f5:ff:d8:c0:c9:2a:ca:83:ca:6f:65:56:50: 2e:08:f5:0d:20:b5:93:6c:e0:0d:89:5c:60:ad:f4: d1:0a:74:81:07:29:5e:9e:05:63:65:b7:e1:79:49: b4:81:1b:c5:39:1d:39:f9:1c:4a:23:c5:9a:dd:0d: b4:cf:64:2a:c7:f3:97:e0:dc:ac:e1:34:05:43:79: d4:6f:7c:2c:41:6d:c9:87:98:1c:1e:02:57:e2:e9: 87:c9:4d:75:00:53:54:88:b2:f1:e4:78:60:75:65: 1f:74:28:34:52:bb:b7:93:fb:99:53:c1:c1:4d:1a: 38:e2:2d:df:e2:c0:43:ef:35:93:29:89:ac:e8:79: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:50:67:AF:F8:7E:F2:DB:D6:56:F4:62:BD:F5:25:B8:DE:9E:3F:A2 X509v3 Authority Key Identifier: keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:8e:e2:26:24:68:66:a6:fb:6d:4c:75:a7:4a:59:c3:48: 3c:d5:a0:60:d4:f4:2e:84:63:71:81:a7:cf:cf:c3:cb:ce:9f: 6e:4a:9e:e3:20:cd:98:72:2e:d6:15:76:01:ce:ae:d0:fc:f5: 1a:6c:9c:24:f9:bc:56:c1:94:0f:84:03:fa:dc:f3:ff:f6:61: b7:fe:d1:2b:5f:90:9f:d7:ec:ff:c3:3a:5a:1a:9a:4f:19:df: 58:a9:ee:ac:97:ef:6f:a8:8a:a8:e3:99:ff:4e:c9:75:5b:3a: de:34:8f:86:03:fc:a3:2e:33:ec:d8:91:29:a9:e2:df:68:66: 67:40:44:94:f4:38:9a:04:c9:4a:83:17:a7:cc:5b:c4:aa:da: 76:a0:57:f4:b7:6b:9a:9a:5a:57:64:8f:39:ff:6c:b0:ad:1d: 9d:af:90:28:b5:ea:aa:7c:0a:f8:0b:1b:d0:c5:1d:d5:b4:ad: f8:a3:ae:28:f9:c8:a1:9d:14:cd:a8:a8:6d:79:d1:15:0e:98: ae:9c:2f:bc:2f:8f:bf:b5:5a:50:3c:1a:6a:f5:d6:fb:02:a6: 6d:a6:0e:39:25:de:1d:c4:70:eb:84:52:53:cc:e6:de:34:52: a8:3a:50:a4:d2:ab:ea:9d:04:58:b9:39:68:e3:08:e0:70:52: bc:e0:2b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpN/OG1tS5SLooKjEeuuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx NTY5ZWIwHhcNMjUxMjIxMTYwMTIyWhcNMjUxMjIyMTYwMTIyWjAzMTEwLwYDVQQD EyhhYjUwNjdhZmY4N2VmMmRiZDY1NmY0NjJiZGY1MjViOGRlOWUzZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwshuhK6WagcROxfvU3DkA/vQed c6PujUFPwYNX4f5WrjyuZ6TPyzh4tYg33ZMYntyfRCeaRNbSLnjkmZyAzyqCdX8W XxUp0rLs/5rUtTfHLtUUCx5+cjb0S0PIfS0WwLrE59cqQAk4j07/rl5FPnalItOV KsSegvX/2MDJKsqDym9lVlAuCPUNILWTbOANiVxgrfTRCnSBBylengVjZbfheUm0 gRvFOR05+RxKI8Wa3Q20z2Qqx/OX4Nys4TQFQ3nUb3wsQW3Jh5gcHgJX4umHyU11 AFNUiLLx5HhgdWUfdCg0Uru3k/uZU8HBTRo44i3f4sBD7zWTKYms6HnZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtQZ6/4fvLb1lb0Yr31Jbjenj+iMB8GA1UdIwQY MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt ZjM3OTdlZjM0OGZmLzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/OO4iYk aGam+21MdadKWcNIPNWgYNT0LoRjcYGnz8/Dy86fbkqe4yDNmHIu1hV2Ac6u0Pz1 GmycJPm8VsGUD4QD+tzz//Zht/7RK1+Qn9fs/8M6WhqaTxnfWKnurJfvb6iKqOOZ /07JdVs63jSPhgP8oy4z7NiRKani32hmZ0BElPQ4mgTJSoMXp8xbxKradqBX9Ldr mppaV2SPOf9ssK0dna+QKLXqqnwK+Asb0MUd1bSt+KOuKPnIoZ0UzaiobXnRFQ6Y rpwvvC+Pv7VaUDwaavXW+wKmbaYOOSXeHcRw64RSU8zm3jRSqDpQpNKr6p0EWLk5 aOMI4HBSvOAroQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:17:52 2025 by rpki-client