This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: VI+mmwzA9B86l3AvNr1AByLYJ/fbZVRI4fZmD0PEkjA= Subject key identifier: 67:BA:51:74:C2:E9:FD:48:81:42:44:9C:43:57:9F:FC:DA:32:4D:D3 Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019B3B6BEBEE90C8DB63404734BA4B6CBA4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:01:27 +0000 Manifest this update: Sat 20 Dec 2025 11:01:27 +0000 Manifest next update: Sun 21 Dec 2025 11:01:27 +0000 Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=) 2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=) 3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: EVni6cmEL1W9S9sfitjMfnNMgCwq7p5+IZjwghZS2xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:eb:ee:90:c8:db:63:40:47:34:ba:4b:6c:ba:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Dec 20 11:01:27 2025 GMT Not After : Dec 21 11:01:27 2025 GMT Subject: CN=67ba5174c2e9fd488142449c43579ffcda324dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:59:47:71:ec:94:ab:5f:96:bf:08:46:ee: 47:8d:d2:82:d2:fe:e2:0f:1b:a0:a9:d0:22:83:99: 85:48:e2:fe:b1:93:92:10:ae:37:5d:eb:dc:b6:d8: 97:4a:f9:30:61:d4:96:ff:07:b3:de:aa:bc:47:fc: 08:2b:20:69:76:4e:ae:6c:d5:7a:2b:01:2a:33:84: c1:1d:bc:f3:45:24:bf:01:ff:5f:61:35:6b:a6:18: e3:2a:21:0a:e5:b7:03:42:04:35:85:a8:f2:85:e1: 7d:e7:11:f4:b6:f6:30:f1:c4:01:a3:92:9d:32:7c: 75:a9:3f:bd:34:14:ae:da:61:81:16:e6:87:99:81: 86:bb:49:64:bb:27:5e:4b:ac:09:33:bd:a6:82:29: c1:b4:03:d1:a2:77:c6:74:00:d1:6f:7c:51:18:27: ef:df:2d:97:bf:a8:58:c1:09:9f:c5:06:09:4e:fb: 56:d9:54:c7:ad:b6:3d:ea:d1:3a:3d:ec:6c:7e:ea: e0:ff:96:70:f3:2c:54:72:23:a7:8b:f2:da:d7:f7: 38:fd:c0:c7:b3:5f:09:ee:73:6d:79:40:70:e0:a6: dc:56:f9:c0:ca:a7:f8:8d:37:6e:25:ad:d3:df:35: 1b:83:10:59:02:38:b9:40:25:ab:d7:73:ee:3a:01: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:51:74:C2:E9:FD:48:81:42:44:9C:43:57:9F:FC:DA:32:4D:D3 X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:97:3a:bd:1d:1b:3f:cf:f7:17:e0:3b:e1:4c:7c:f7:33: b3:c5:23:57:6b:13:2d:02:fe:0d:8e:7d:aa:51:b4:a9:01:76: 2b:56:10:43:eb:ae:ea:d5:54:05:02:bf:de:c4:1b:da:7e:f2: 5e:2f:ec:8e:ec:82:f6:3d:12:3f:03:1b:cf:c6:ba:09:4e:a3: 06:ba:98:d9:2e:7c:2a:9e:e1:4a:00:86:2a:d2:4b:af:84:a5: 95:10:e1:76:ca:ee:04:5b:22:f5:28:e8:ef:ae:02:83:a7:19: 9b:db:ee:2c:d3:61:73:b6:66:5c:68:92:cd:89:47:5f:22:7b: 06:5c:e4:73:70:23:82:c9:b3:37:d4:d3:4b:56:c8:04:eb:f5: c4:89:e2:22:92:e2:0d:92:31:1a:17:65:ed:50:97:ce:96:29: 35:af:d8:48:b3:19:33:78:2b:c0:4c:dc:da:95:87:30:14:fc: 4c:35:0c:b6:91:f3:9f:70:3b:61:19:ba:02:0d:3a:7c:65:f0: 28:03:7f:1e:45:e3:db:ea:e0:94:46:f4:0e:82:69:1c:7d:b1: 0d:09:c3:ff:0a:56:3b:f5:99:e4:ac:90:12:d4:26:4a:3a:ea: 73:59:14:38:11:da:34:d6:fc:08:34:4e:90:24:5f:58:68:74: 96:37:f0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+vukMjbY0BHNLpLbLpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjUxMjIwMTEwMTI3WhcNMjUxMjIxMTEwMTI3WjAzMTEwLwYDVQQD Eyg2N2JhNTE3NGMyZTlmZDQ4ODE0MjQ0OWM0MzU3OWZmY2RhMzI0ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz5ZR3HslKtflr8IRu5HjdKC0v7i DxugqdAig5mFSOL+sZOSEK43XevcttiXSvkwYdSW/wez3qq8R/wIKyBpdk6ubNV6 KwEqM4TBHbzzRSS/Af9fYTVrphjjKiEK5bcDQgQ1hajyheF95xH0tvYw8cQBo5Kd Mnx1qT+9NBSu2mGBFuaHmYGGu0lkuydeS6wJM72mginBtAPRonfGdADRb3xRGCfv 3y2Xv6hYwQmfxQYJTvtW2VTHrbY96tE6Pexsfurg/5Zw8yxUciOni/La1/c4/cDH s18J7nNteUBw4KbcVvnAyqf4jTduJa3T3zUbgxBZAji5QCWr13PuOgEglQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe6UXTC6f1IgUJEnENXn/zaMk3TMB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCKXOr0d Gz/P9xfgO+FMfPczs8UjV2sTLQL+DY59qlG0qQF2K1YQQ+uu6tVUBQK/3sQb2n7y Xi/sjuyC9j0SPwMbz8a6CU6jBrqY2S58Kp7hSgCGKtJLr4SllRDhdsruBFsi9Sjo 764Cg6cZm9vuLNNhc7ZmXGiSzYlHXyJ7Blzkc3AjgsmzN9TTS1bIBOv1xIniIpLi DZIxGhdl7VCXzpYpNa/YSLMZM3grwEzc2pWHMBT8TDUMtpHzn3A7YRm6Ag06fGXw KAN/HkXj2+rglEb0DoJpHH2xDQnD/wpWO/WZ5KyQEtQmSjrqc1kUOBHaNNb8CDRO kCRfWGh0ljfwUw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:46:15 2025 by rpki-client