This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json) Hash identifier: fteq9Hu20Bsrd1dKNxkoo9z02wwUcgHG3nMqrccHz5k= Subject key identifier: A8:A8:14:CE:06:A6:E2:A3:0C:75:65:05:5F:B4:3D:64:42:4E:E2:78 Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Certificate serial: 019B386A02A1E7A557A87299F799EFF9C722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft Manifest number: 02BE Signing time: Fri 19 Dec 2025 21:00:30 +0000 Manifest this update: Fri 19 Dec 2025 21:00:30 +0000 Manifest next update: Sat 20 Dec 2025 21:00:30 +0000 Files and hashes: 1: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: WPJ5HqIl1yWsgNOQ2AgqAXKj35womr/Gi0syIXJkm94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:02:a1:e7:a5:57:a8:72:99:f7:99:ef:f9:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Validity Not Before: Dec 19 21:00:30 2025 GMT Not After : Dec 20 21:00:30 2025 GMT Subject: CN=a8a814ce06a6e2a30c7565055fb43d64424ee278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:01:d6:07:bc:39:b6:d8:49:38:ad:64:c4:4e: c7:d0:32:8d:74:a9:46:03:35:e1:c6:f8:54:e4:7f: ca:1f:81:ef:87:37:48:e9:b7:8e:9d:f9:2a:e0:76: 9a:09:b7:0f:eb:63:0e:25:49:47:16:f1:b9:8f:0e: 7b:64:66:aa:72:8a:39:88:58:f6:9e:96:aa:0a:f4: d7:91:5c:be:19:82:a5:de:ea:29:66:30:5a:1f:f1: 8b:0c:43:88:a0:11:6a:66:1c:8d:25:56:05:1a:0d: dc:18:c8:7d:ad:06:03:72:c3:65:27:8c:56:56:00: eb:70:e5:a3:39:4a:08:3c:98:67:2a:62:62:59:f6: 54:e6:7e:19:72:f2:1c:b5:86:8c:e3:c6:20:2c:62: 3d:1e:08:55:f2:de:fa:9f:b8:e4:26:73:51:7c:1d: fb:52:50:3c:e4:ee:3c:4c:a2:a2:a3:68:c9:6f:5f: ff:f0:d8:75:3c:a8:a8:be:dc:77:05:60:ce:84:fd: 35:56:39:12:1e:f6:f5:82:49:6a:18:26:8b:36:b9: 3d:63:5e:82:04:a9:d4:6b:37:6b:0b:d0:7f:76:51: 19:b6:62:c0:08:99:34:eb:82:50:08:98:a7:58:71: 53:a7:a1:23:63:9e:10:b4:ff:89:2b:83:da:86:39: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A8:14:CE:06:A6:E2:A3:0C:75:65:05:5F:B4:3D:64:42:4E:E2:78 X509v3 Authority Key Identifier: keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2d:78:e3:36:1e:35:16:db:d3:c5:bb:c1:5e:5a:95:5c:53: 32:5a:af:ba:d1:94:c6:52:37:fd:5d:e2:e1:ed:8f:3e:91:0c: f6:72:f2:0a:7a:17:f2:fe:ed:7f:c6:c0:6b:f1:1c:58:f0:dc: 7d:ab:ed:3b:d0:fa:01:b2:47:6a:71:9f:f8:30:76:ed:c2:9b: cb:8b:89:5b:bd:3c:7e:7a:eb:29:6b:ca:9c:97:10:73:90:19: 33:ff:91:5f:a5:3a:40:c3:26:fe:f8:af:48:26:9b:0a:3e:14: 43:b7:75:5e:bc:c1:d9:74:9c:52:f5:27:e0:1b:6f:83:5d:02: 17:03:71:4c:a2:58:b9:55:e6:a0:68:0d:cd:f5:11:ff:f0:85: 14:cf:e3:e0:1c:75:4a:8e:2c:7a:af:7a:ab:cf:c1:1e:31:3c: c0:42:8b:da:b2:60:f0:49:0b:70:d5:f0:ab:a9:cc:53:a5:d3: 86:b1:8c:fd:ee:2d:f6:cb:ad:2c:70:30:60:ae:e6:26:a1:ee: 3b:b2:e5:92:f9:e5:1d:dc:2e:7a:b9:47:83:97:fa:6f:ec:58: 1c:15:c7:33:bb:d0:ea:b7:2f:f4:9b:a9:e4:56:f1:58:21:d4: 6b:55:14:4e:3b:ae:51:f4:e6:35:c4:8e:c4:de:d9:d2:65:2b: 53:14:6d:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agKh56VXqHKZ95nv+cciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjZkZmE3ZjllMjg4NGZiMjFkMTA3M2U0OGMwYmQ1ODg2 YWRlZTIwHhcNMjUxMjE5MjEwMDMwWhcNMjUxMjIwMjEwMDMwWjAzMTEwLwYDVQQD EyhhOGE4MTRjZTA2YTZlMmEzMGM3NTY1MDU1ZmI0M2Q2NDQyNGVlMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwHWB7w5tthJOK1kxE7H0DKNdKlG AzXhxvhU5H/KH4HvhzdI6beOnfkq4HaaCbcP62MOJUlHFvG5jw57ZGaqcoo5iFj2 npaqCvTXkVy+GYKl3uopZjBaH/GLDEOIoBFqZhyNJVYFGg3cGMh9rQYDcsNlJ4xW VgDrcOWjOUoIPJhnKmJiWfZU5n4ZcvIctYaM48YgLGI9HghV8t76n7jkJnNRfB37 UlA85O48TKKio2jJb1//8Nh1PKiovtx3BWDOhP01VjkSHvb1gklqGCaLNrk9Y16C BKnUazdrC9B/dlEZtmLACJk064JQCJinWHFTp6EjY54QtP+JK4PahjnhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKioFM4GpuKjDHVlBV+0PWRCTuJ4MB8GA1UdIwQY MBaAFLUm36f54ohPsh0Qc+SMC9WIat7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2It ZDFjZDA5NTY4ZTgyLzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2ItZDFjZDA5NTY4ZTgy LzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay144zYe NRbb08W7wV5alVxTMlqvutGUxlI3/V3i4e2PPpEM9nLyCnoX8v7tf8bAa/EcWPDc favtO9D6AbJHanGf+DB27cKby4uJW708fnrrKWvKnJcQc5AZM/+RX6U6QMMm/viv SCabCj4UQ7d1XrzB2XScUvUn4Btvg10CFwNxTKJYuVXmoGgNzfUR//CFFM/j4Bx1 So4seq96q8/BHjE8wEKL2rJg8EkLcNXwq6nMU6XThrGM/e4t9sutLHAwYK7mJqHu O7LlkvnlHdwuerlHg5f6b+xYHBXHM7vQ6rcv9Jup5FbxWCHUa1UUTjuuUfTmNcSO xN7Z0mUrUxRtVg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:36 2025 by rpki-client