This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json) Hash identifier: VFcZxf3J16P4z02oH7hu/Hwyr6AzGaugc146el9tIn8= Subject key identifier: 69:70:99:B7:B1:C2:90:B7:3B:94:B9:40:2D:56:46:2B:EE:AC:9F:29 Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f Certificate serial: 019B619D245466378D15E84B30E5E56C7ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft Manifest number: 179D Signing time: Sat 27 Dec 2025 21:00:46 +0000 Manifest this update: Sat 27 Dec 2025 21:00:46 +0000 Manifest next update: Sun 28 Dec 2025 21:00:46 +0000 Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=) 2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: 6WiQOouAFNqkuvXr2X5GoV50Ak0pLZeNSWLkBZY2Vxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:24:54:66:37:8d:15:e8:4b:30:e5:e5:6c:7e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f Validity Not Before: Dec 27 21:00:46 2025 GMT Not After : Dec 28 21:00:46 2025 GMT Subject: CN=697099b7b1c290b73b94b9402d56462beeac9f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:42:46:33:7f:78:de:ac:a9:27:9e:62:19: 05:10:e5:78:d0:a0:76:66:d0:4e:f1:74:0b:cd:fe: d9:1f:9a:26:56:57:c1:61:cf:45:9e:73:97:cf:f9: bd:9b:45:d0:28:28:45:45:72:07:37:84:c1:0c:dc: e7:56:6b:10:5c:c0:f6:9e:4c:d8:22:16:35:f0:61: 5a:57:0a:f1:db:08:a1:e2:47:75:95:65:f4:4f:45: 07:0b:4e:6a:1b:d6:d9:31:55:b4:95:2f:f0:d6:51: ab:5c:ae:22:06:76:f7:dc:76:fc:74:e6:2b:f9:be: 8f:db:21:b6:79:fb:08:22:4d:ab:40:9d:7b:0f:dc: 9f:d2:89:36:71:10:02:34:3d:72:46:36:4e:b8:0d: 42:19:2d:e8:ff:31:e4:0d:a7:01:53:40:58:e2:b0: d7:cc:bf:02:69:43:33:76:56:cf:0b:b1:34:dc:16: aa:9d:66:c5:56:3a:50:27:6a:82:dc:73:71:75:c4: 97:23:dd:73:b8:bb:1e:4a:24:c2:64:e8:f3:cb:ad: 56:4d:cc:6f:d1:76:2a:c6:44:22:9f:6f:98:8f:74: 30:f7:a6:1d:8d:7c:18:c1:35:58:e9:49:06:00:66: 3d:ce:27:ad:14:5c:21:65:be:0e:ae:62:aa:bd:05: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:70:99:B7:B1:C2:90:B7:3B:94:B9:40:2D:56:46:2B:EE:AC:9F:29 X509v3 Authority Key Identifier: keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:78:4c:83:f7:d4:48:fc:93:c5:f4:dc:85:97:12:88:30:91: b9:56:55:04:53:d7:7f:a6:e6:a5:11:fb:fc:fc:4b:37:6c:9c: 83:38:9e:b0:37:1e:0b:0c:6c:5e:77:50:b1:a6:56:4c:94:3c: 63:52:8b:8a:81:aa:2b:ac:f1:0e:07:82:e3:1f:52:26:3f:88: 72:8c:82:7e:d8:e2:5f:37:11:f0:7e:85:a0:8a:00:36:47:d2: 59:78:63:8e:fc:4f:01:36:dc:25:41:b0:5c:f8:7b:23:0f:11: b7:2e:14:cd:61:66:3a:16:9e:15:0e:a2:93:4c:5b:ea:ff:50: bd:fd:07:ed:41:55:75:a3:bf:5b:95:05:a1:fa:18:19:17:d2: f6:3e:a9:c5:89:87:a4:ef:0e:f5:af:8c:a6:82:83:20:80:62: 9c:e8:de:5e:8b:f7:7c:b1:8d:df:79:50:e7:8a:04:18:60:28: cb:87:af:3d:a9:9c:06:f1:77:31:29:33:a7:6a:72:68:cc:ab: ab:c9:f8:53:05:1a:85:e8:5d:fb:07:19:7a:20:64:b7:2a:50: ea:60:59:68:8a:ee:31:c3:fc:4e:b2:fc:99:b1:3d:24:ad:3c: a4:ea:09:6a:41:81:d5:c7:6a:62:2c:6e:16:13:49:d5:75:c7: e2:27:3f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnSRUZjeNFehLMOXlbH7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj NWVhM2YwHhcNMjUxMjI3MjEwMDQ2WhcNMjUxMjI4MjEwMDQ2WjAzMTEwLwYDVQQD Eyg2OTcwOTliN2IxYzI5MGI3M2I5NGI5NDAyZDU2NDYyYmVlYWM5ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwNCRjN/eN6sqSeeYhkFEOV40KB2 ZtBO8XQLzf7ZH5omVlfBYc9FnnOXz/m9m0XQKChFRXIHN4TBDNznVmsQXMD2nkzY IhY18GFaVwrx2wih4kd1lWX0T0UHC05qG9bZMVW0lS/w1lGrXK4iBnb33Hb8dOYr +b6P2yG2efsIIk2rQJ17D9yf0ok2cRACND1yRjZOuA1CGS3o/zHkDacBU0BY4rDX zL8CaUMzdlbPC7E03BaqnWbFVjpQJ2qC3HNxdcSXI91zuLseSiTCZOjzy61WTcxv 0XYqxkQin2+Yj3Qw96YdjXwYwTVY6UkGAGY9zietFFwhZb4OrmKqvQWiNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlwmbexwpC3O5S5QC1WRivurJ8pMB8GA1UdIwQY MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct ZThlZGU1YTJmODc1LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1 LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnhMg/fU SPyTxfTchZcSiDCRuVZVBFPXf6bmpRH7/PxLN2ycgziesDceCwxsXndQsaZWTJQ8 Y1KLioGqK6zxDgeC4x9SJj+IcoyCftjiXzcR8H6FoIoANkfSWXhjjvxPATbcJUGw XPh7Iw8Rty4UzWFmOhaeFQ6ik0xb6v9Qvf0H7UFVdaO/W5UFofoYGRfS9j6pxYmH pO8O9a+MpoKDIIBinOjeXov3fLGN33lQ54oEGGAoy4evPamcBvF3MSkzp2pyaMyr q8n4UwUahehd+wcZeiBktypQ6mBZaIruMcP8TrL8mbE9JK08pOoJakGB1cdqYixu FhNJ1XXH4ic/Aw== -----END CERTIFICATE-----Generated at Sun Dec 28 05:51:46 2025 by rpki-client