This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json) Hash identifier: YKFEDGz/68DynGg8+eldsp9CE1ykp2fqEc1AkUcPVug= Subject key identifier: 5F:2E:87:85:88:B7:C4:94:7D:C1:E2:13:13:45:06:67:CE:63:64:08 Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Certificate serial: 019B24758F620F0EC44B5876E0A9127C703B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft Manifest number: 022E Signing time: Tue 16 Dec 2025 00:00:42 +0000 Manifest this update: Tue 16 Dec 2025 00:00:42 +0000 Manifest next update: Wed 17 Dec 2025 00:00:42 +0000 Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=) 2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=) 3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: 307lFA/ZNJLq5xOanrVl3qXfk1LER6yN54a0mKkqTL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:8f:62:0f:0e:c4:4b:58:76:e0:a9:12:7c:70:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Validity Not Before: Dec 16 00:00:42 2025 GMT Not After : Dec 17 00:00:42 2025 GMT Subject: CN=5f2e878588b7c4947dc1e21313450667ce636408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:8c:5e:d6:c9:51:66:fa:a9:c7:15:c3:2f: 63:0d:a0:7e:98:62:a4:86:58:ea:0e:31:16:e5:50: a1:98:fc:1d:27:b4:1f:e2:fd:56:81:17:2b:1a:1f: 8f:13:a1:0a:a2:d9:74:ad:37:70:45:7d:8e:bc:1f: fb:c6:8d:a2:2b:a7:36:90:6b:8d:b0:a3:77:b2:7c: b4:14:29:a2:a6:5f:f3:3b:c3:2f:59:d9:c3:f5:82: c4:d8:22:b8:3f:a5:8b:7b:88:2e:7f:f3:cc:bb:f4: 32:11:59:99:36:ad:14:49:e7:9f:61:4e:c6:73:7b: fa:e2:26:bc:5f:97:ce:3b:35:e7:7d:de:53:61:88: d1:30:cf:df:b8:60:f3:89:05:39:c0:d3:81:e7:6c: 52:33:ae:39:cc:fd:4b:93:00:60:e2:c6:24:85:3c: 8e:f9:c5:46:94:ca:24:25:26:3d:3e:3b:86:3a:44: 83:db:9b:2b:44:83:20:a7:72:18:04:b6:2c:ce:52: b8:13:57:7e:08:48:63:f8:80:c3:a0:f9:3f:3a:62: 4d:ba:5f:32:e9:63:d3:9e:06:ef:7b:8e:30:91:7d: 88:e5:86:99:a7:0c:81:00:9a:04:93:c2:69:b2:6c: 2f:98:9a:0a:98:74:f7:67:46:71:bf:6a:7a:23:8a: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:87:85:88:B7:C4:94:7D:C1:E2:13:13:45:06:67:CE:63:64:08 X509v3 Authority Key Identifier: keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ac:89:00:4e:cf:37:b5:70:a7:f4:f5:2b:3e:e6:0f:5d:1a: 47:e1:d6:1d:c9:ae:7e:a9:09:ae:65:31:10:f8:6c:f9:21:88: 8f:f9:9a:1b:14:f2:56:e8:88:dd:27:eb:33:e1:33:1f:c1:85: ec:19:7c:ad:54:08:74:e4:c4:8f:b8:c2:34:4d:da:db:46:b7: 13:6a:3c:a9:11:3f:af:2a:07:9c:31:f1:f9:f8:01:7a:a7:f8: da:55:77:ce:7d:a6:ce:6d:e0:f1:24:9b:e0:f1:55:f7:10:85: d9:48:95:8d:19:7a:46:c7:5e:74:69:03:4d:7b:bf:fe:fe:d3: 6c:69:85:d7:07:4d:bd:92:15:3a:07:94:a1:1b:63:1d:e9:e2: 06:9a:05:3a:65:42:7d:91:c5:1b:b4:06:8f:da:b8:05:a6:f4: c2:1d:ea:4f:b2:61:f7:62:07:39:bb:0d:28:c1:92:00:08:36: 7b:62:f9:89:c1:78:a4:57:ce:9e:11:11:7c:ba:40:c9:f4:6b: ae:c2:19:4d:0c:61:8d:27:b8:bd:76:71:0e:05:76:68:70:84: 18:0e:0e:a8:43:cc:66:4a:85:00:f0:50:3c:33:5a:bf:2f:b6: ad:f5:ff:e9:d3:1b:b1:2c:76:ff:46:64:74:4a:ee:0b:2f:25: cb:d6:2e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdY9iDw7ES1h24KkSfHA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw YzliM2UwHhcNMjUxMjE2MDAwMDQyWhcNMjUxMjE3MDAwMDQyWjAzMTEwLwYDVQQD Eyg1ZjJlODc4NTg4YjdjNDk0N2RjMWUyMTMxMzQ1MDY2N2NlNjM2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsKMXtbJUWb6qccVwy9jDaB+mGKk hljqDjEW5VChmPwdJ7Qf4v1WgRcrGh+PE6EKotl0rTdwRX2OvB/7xo2iK6c2kGuN sKN3sny0FCmipl/zO8MvWdnD9YLE2CK4P6WLe4guf/PMu/QyEVmZNq0USeefYU7G c3v64ia8X5fOOzXnfd5TYYjRMM/fuGDziQU5wNOB52xSM645zP1LkwBg4sYkhTyO +cVGlMokJSY9PjuGOkSD25srRIMgp3IYBLYszlK4E1d+CEhj+IDDoPk/OmJNul8y 6WPTngbve44wkX2I5YaZpwyBAJoEk8JpsmwvmJoKmHT3Z0Zxv2p6I4rZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8uh4WIt8SUfcHiExNFBmfOY2QIMB8GA1UdIwQY MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt OThmMWEyZGZjMzljLzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqyJAE7P N7Vwp/T1Kz7mD10aR+HWHcmufqkJrmUxEPhs+SGIj/maGxTyVuiI3SfrM+EzH8GF 7Bl8rVQIdOTEj7jCNE3a20a3E2o8qRE/ryoHnDHx+fgBeqf42lV3zn2mzm3g8SSb 4PFV9xCF2UiVjRl6RsdedGkDTXu//v7TbGmF1wdNvZIVOgeUoRtjHeniBpoFOmVC fZHFG7QGj9q4Bab0wh3qT7Jh92IHObsNKMGSAAg2e2L5icF4pFfOnhERfLpAyfRr rsIZTQxhjSe4vXZxDgV2aHCEGA4OqEPMZkqFAPBQPDNavy+2rfX/6dMbsSx2/0Zk dEruCy8ly9YueA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:08:44 2025 by rpki-client