This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json) Hash identifier: Yz+5c6iHiQHfD6UdlkE6soqRlAgsuLjAc9kBiNUrdb4= Subject key identifier: 25:40:15:C9:BA:2A:A9:94:8D:60:F6:D6:02:01:4A:E7:8B:48:D6:DB Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Certificate serial: 019B11260F5952DC30CFF5E6906636A1C940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft Manifest number: 0BB6 Signing time: Fri 12 Dec 2025 06:01:05 +0000 Manifest this update: Fri 12 Dec 2025 06:01:05 +0000 Manifest next update: Sat 13 Dec 2025 06:01:05 +0000 Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=) 2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=) 3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=) 4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: 4liux3K5bmHeJ7js69QV4DelU/rP1q2eUyKL0PuQVwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:0f:59:52:dc:30:cf:f5:e6:90:66:36:a1:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Validity Not Before: Dec 12 06:01:05 2025 GMT Not After : Dec 13 06:01:05 2025 GMT Subject: CN=254015c9ba2aa9948d60f6d602014ae78b48d6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:35:98:c3:2f:79:18:82:b9:e8:38:77:f2: bb:00:10:94:60:3a:7b:08:cd:a2:bc:bd:3f:b1:8c: 4a:92:1f:77:b8:3b:72:7a:47:0e:c9:0b:22:65:9d: c0:55:16:7b:a0:98:a8:ca:44:18:f5:72:6d:e0:be: be:a1:63:41:b5:49:81:f7:54:37:6c:1b:59:a6:27: 7b:6e:cf:9f:c7:dc:06:e8:25:ef:89:6a:c3:9b:72: 52:16:53:30:0b:cb:04:16:e5:bb:2b:28:11:03:02: ce:d6:8e:dd:cb:1b:bb:1d:5d:4c:ac:ce:81:6f:0d: dc:c9:ae:0c:c5:07:ec:b1:c5:8c:0c:0a:03:54:31: fc:82:53:0c:07:d4:89:d8:3a:d7:6d:f7:b1:d7:10: 88:46:be:7f:ed:6a:99:3c:c0:98:ce:96:f4:37:3f: 71:62:f8:4a:2e:4f:5f:6a:3f:10:78:22:11:5c:aa: 7f:7f:ca:17:f8:3b:c4:1d:ad:a1:13:a7:85:70:ce: 7a:35:e0:ae:d1:d9:4e:ee:64:a4:83:63:05:21:29: 88:15:1f:d0:61:fe:1c:15:60:15:3f:b4:c3:7d:b9: b8:1c:5f:75:89:25:ca:6a:7d:ae:18:39:88:e0:9e: 07:fc:6a:fe:03:09:bf:38:12:67:08:70:4f:2b:00: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:15:C9:BA:2A:A9:94:8D:60:F6:D6:02:01:4A:E7:8B:48:D6:DB X509v3 Authority Key Identifier: keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bf:ef:26:6e:fa:54:c8:f5:20:8a:e8:ba:b3:1c:4d:bd:23: 3f:76:a6:a6:fa:c5:e4:34:4a:1b:9a:40:0c:13:a8:57:63:12: b4:33:6b:ac:61:17:b7:15:1a:1c:a4:dd:b1:82:a7:d3:5b:d5: ab:47:f7:d9:f1:f3:f1:11:02:d4:d2:32:ad:f8:78:7c:ba:54: c7:8a:4d:86:c4:3a:f3:60:d6:dc:95:dd:3d:d9:9c:7c:54:6c: 74:49:69:70:b2:48:d0:c0:1a:a6:f3:07:3e:e5:0a:c7:04:22: e3:19:53:14:35:e9:a3:74:30:97:1b:59:12:5e:4d:0a:08:2f: ce:7c:01:e0:4e:34:d1:08:da:6c:79:70:67:4c:aa:2e:31:c4: ca:df:8c:5a:9d:7f:c0:1b:59:77:b2:7d:ae:dc:13:c9:4b:b9: a5:ec:11:81:34:53:16:b2:26:cf:b0:2f:5b:e2:31:c0:5b:42: 6d:5f:41:04:4c:d6:f2:26:e5:19:92:a2:39:cf:fa:b8:f4:41: 3c:6b:76:52:6f:43:8c:1a:47:46:44:0c:26:d4:cb:8a:e5:7d: 8b:30:0d:f4:59:c2:ad:68:5a:83:a7:07:b5:1f:e4:4f:3b:9e: 78:af:5f:5f:ec:2c:83:57:dc:e5:a9:f0:b3:2b:3b:1e:89:80: 4d:2b:97:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJg9ZUtwwz/XmkGY2oclAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz OTg3ZDgwHhcNMjUxMjEyMDYwMTA1WhcNMjUxMjEzMDYwMTA1WjAzMTEwLwYDVQQD EygyNTQwMTVjOWJhMmFhOTk0OGQ2MGY2ZDYwMjAxNGFlNzhiNDhkNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqE1mMMveRiCueg4d/K7ABCUYDp7 CM2ivL0/sYxKkh93uDtyekcOyQsiZZ3AVRZ7oJioykQY9XJt4L6+oWNBtUmB91Q3 bBtZpid7bs+fx9wG6CXviWrDm3JSFlMwC8sEFuW7KygRAwLO1o7dyxu7HV1MrM6B bw3cya4MxQfsscWMDAoDVDH8glMMB9SJ2DrXbfex1xCIRr5/7WqZPMCYzpb0Nz9x YvhKLk9faj8QeCIRXKp/f8oX+DvEHa2hE6eFcM56NeCu0dlO7mSkg2MFISmIFR/Q Yf4cFWAVP7TDfbm4HF91iSXKan2uGDmI4J4H/Gr+Awm/OBJnCHBPKwD+zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVAFcm6KqmUjWD21gIBSueLSNbbMB8GA1UdIwQY MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIL/vJm76 VMj1IIrourMcTb0jP3ampvrF5DRKG5pADBOoV2MStDNrrGEXtxUaHKTdsYKn01vV q0f32fHz8REC1NIyrfh4fLpUx4pNhsQ682DW3JXdPdmcfFRsdElpcLJI0MAapvMH PuUKxwQi4xlTFDXpo3QwlxtZEl5NCggvznwB4E400QjabHlwZ0yqLjHEyt+MWp1/ wBtZd7J9rtwTyUu5pewRgTRTFrImz7AvW+IxwFtCbV9BBEzW8iblGZKiOc/6uPRB PGt2Um9DjBpHRkQMJtTLiuV9izAN9FnCrWhag6cHtR/kTzueeK9fX+wsg1fc5anw sys7HomATSuX+w== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:35 2025 by rpki-client