This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json) Hash identifier: 4AJPKVDEy6N7Wq9vdsGOsxk2W+yTme5lf2gKvG/O2rU= Subject key identifier: E9:C1:C2:12:FC:8A:9A:35:87:D3:AA:8E:2E:81:9C:34:86:4D:11:CA Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Certificate serial: 019B2362FD198D05ABD1E4AB396F3F488692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft Manifest number: 02B3 Signing time: Mon 15 Dec 2025 19:00:48 +0000 Manifest this update: Mon 15 Dec 2025 19:00:48 +0000 Manifest next update: Tue 16 Dec 2025 19:00:48 +0000 Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=) 2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: MaBwu8pVs50LerYfDxWtTZmMuVvo7MkNHwV1MiF55wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:fd:19:8d:05:ab:d1:e4:ab:39:6f:3f:48:86:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Validity Not Before: Dec 15 19:00:48 2025 GMT Not After : Dec 16 19:00:48 2025 GMT Subject: CN=e9c1c212fc8a9a3587d3aa8e2e819c34864d11ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:36:6c:bc:ee:4e:e5:25:1e:7d:b5:63:e3: 55:52:32:fc:6c:b1:79:68:b5:ad:49:d3:64:8b:86: 95:71:59:14:6c:cf:12:8c:09:91:67:c5:35:59:6c: b4:5c:20:25:76:00:e0:b9:e6:6d:67:c4:3c:07:1e: 5b:ad:e4:9c:26:6c:ac:55:32:a7:db:06:68:0c:fb: f2:03:47:11:74:5b:23:0d:a3:b3:03:86:86:05:37: 71:8e:ea:e2:8f:86:5f:75:b5:c3:72:13:cf:13:3a: bb:f4:41:7c:ea:6c:60:6b:40:31:e0:dd:20:46:a6: ec:c4:32:03:12:9c:42:45:03:37:be:9d:5d:58:3b: a6:07:34:5f:83:a0:0c:75:c4:d8:ec:4f:02:1b:e8: e7:0e:66:fb:4a:7c:25:60:08:01:bd:58:65:f1:4d: 43:62:d4:0c:13:34:34:ee:86:4b:a9:3b:3c:0a:e2: 99:d5:6f:5c:97:f8:76:53:4c:14:fc:ac:b5:3d:fa: 35:cd:30:fd:f1:1e:ba:80:4d:55:19:ff:10:ad:4e: 20:90:4a:95:6a:de:a0:82:2c:6e:9d:9b:2d:77:52: 84:3b:41:c7:8a:c1:df:58:c8:05:66:c1:cd:41:da: 32:d9:9d:f6:30:ef:8f:50:a0:db:4b:16:6a:c4:52: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:C2:12:FC:8A:9A:35:87:D3:AA:8E:2E:81:9C:34:86:4D:11:CA X509v3 Authority Key Identifier: keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:66:1b:35:ea:8d:40:9e:49:42:bd:d6:ca:c7:11:34:12:e9: d3:e8:15:50:10:3b:ef:e0:78:c1:1f:39:de:36:12:f8:b1:a4: 83:03:98:7f:0b:ea:86:4c:60:3a:19:97:67:54:94:9e:09:42: 58:6d:65:31:42:84:1e:be:db:73:7d:5b:e8:1c:13:7d:53:3f: 61:5a:73:66:1a:c2:30:e6:9a:3f:e7:77:e7:1f:cd:a5:42:46: a3:4f:fb:7a:a8:41:80:6e:ed:8a:14:0c:c1:66:54:46:cc:be: 92:a6:3a:84:b0:d3:56:4d:8a:2d:a0:52:b8:dc:36:c1:cc:51: d5:86:a5:29:f1:86:be:d6:7e:10:b6:c9:7c:7f:97:a6:87:90: 5a:5a:83:9e:a4:03:fc:51:05:a5:80:88:32:78:89:8d:dc:11: 06:a3:2d:04:f0:b7:69:22:c1:3b:be:32:4f:90:22:90:de:25: 7e:6f:0c:4f:da:83:a4:8b:81:f7:4e:ce:e1:ba:45:f3:f9:e4: 86:53:71:ca:13:aa:25:21:97:11:8f:77:fd:f6:ee:c8:1c:ff: 84:1d:af:bc:89:0f:51:4a:f3:90:62:51:b2:82:e9:fa:f6:bf: d6:40:a2:0c:07:6f:69:74:94:d7:b9:22:8c:f0:5e:50:56:d8: e6:01:b2:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYv0ZjQWr0eSrOW8/SIaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjZkZmE3ZjllMjg4NGZiMjFkMTA3M2U0OGMwYmQ1ODg2 YWRlZTIwHhcNMjUxMjE1MTkwMDQ4WhcNMjUxMjE2MTkwMDQ4WjAzMTEwLwYDVQQD EyhlOWMxYzIxMmZjOGE5YTM1ODdkM2FhOGUyZTgxOWMzNDg2NGQxMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA42bLzuTuUlHn21Y+NVUjL8bLF5 aLWtSdNki4aVcVkUbM8SjAmRZ8U1WWy0XCAldgDgueZtZ8Q8Bx5breScJmysVTKn 2wZoDPvyA0cRdFsjDaOzA4aGBTdxjurij4ZfdbXDchPPEzq79EF86mxga0Ax4N0g RqbsxDIDEpxCRQM3vp1dWDumBzRfg6AMdcTY7E8CG+jnDmb7SnwlYAgBvVhl8U1D YtQMEzQ07oZLqTs8CuKZ1W9cl/h2U0wU/Ky1Pfo1zTD98R66gE1VGf8QrU4gkEqV at6ggixunZstd1KEO0HHisHfWMgFZsHNQdoy2Z32MO+PUKDbSxZqxFLkcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnBwhL8ipo1h9Oqji6BnDSGTRHKMB8GA1UdIwQY MBaAFLUm36f54ohPsh0Qc+SMC9WIat7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2It ZDFjZDA5NTY4ZTgyLzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2ItZDFjZDA5NTY4ZTgy LzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWYbNeqN QJ5JQr3WyscRNBLp0+gVUBA77+B4wR853jYS+LGkgwOYfwvqhkxgOhmXZ1SUnglC WG1lMUKEHr7bc31b6BwTfVM/YVpzZhrCMOaaP+d35x/NpUJGo0/7eqhBgG7tihQM wWZURsy+kqY6hLDTVk2KLaBSuNw2wcxR1YalKfGGvtZ+ELbJfH+XpoeQWlqDnqQD /FEFpYCIMniJjdwRBqMtBPC3aSLBO74yT5AikN4lfm8MT9qDpIuB907O4bpF8/nk hlNxyhOqJSGXEY93/fbuyBz/hB2vvIkPUUrzkGJRsoLp+va/1kCiDAdvaXSU17ki jPBeUFbY5gGyww== -----END CERTIFICATE-----Generated at Mon Dec 15 20:46:29 2025 by rpki-client