This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json) Hash identifier: XQbhVYj/pgZ+FV+ZBWGDQdKYDl9nTrAWrN+OsmtuMxM= Subject key identifier: A0:57:BA:B7:7A:38:17:BE:6A:B9:92:82:D2:78:2C:B3:38:54:51:83 Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Certificate serial: 019B3C7E36FAE780E537FE65A94636704A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:03 +0000 Manifest this update: Sat 20 Dec 2025 16:01:03 +0000 Manifest next update: Sun 21 Dec 2025 16:01:03 +0000 Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=) 2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=) 3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: zEzEIkGTSOx1is9AklQ4W3nwyJwy8TRcYzgbniB63yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:36:fa:e7:80:e5:37:fe:65:a9:46:36:70:4a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Validity Not Before: Dec 20 16:01:03 2025 GMT Not After : Dec 21 16:01:03 2025 GMT Subject: CN=a057bab77a3817be6ab99282d2782cb338545183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:62:21:c7:42:69:5a:4f:76:d7:26:90:6c: 09:98:4f:0f:a9:69:8b:db:cf:96:ed:16:f4:72:27: 07:6b:e5:6f:0f:02:77:f5:ec:2f:63:b1:75:d4:7d: de:cf:d1:3c:ae:68:07:97:79:93:36:3d:67:08:81: ec:7f:c9:e9:3f:1c:77:60:27:2e:f3:24:23:99:af: eb:f0:78:72:8b:ca:7c:8b:4a:49:b2:6e:ed:34:48: 83:69:93:9f:a0:21:9a:4b:c3:41:2c:78:0d:00:e4: 06:85:3e:b5:54:60:37:c6:73:42:a8:6d:4d:29:1a: 19:4d:7a:98:e4:d6:77:b0:e4:de:e2:d5:62:80:ef: 17:0b:aa:8a:21:bb:e6:21:e7:b1:2c:8b:21:f4:ec: aa:fb:16:e5:ca:46:bf:7d:68:b0:b6:00:29:0d:ee: b2:73:7f:a4:2a:df:cf:aa:36:ea:c3:01:53:c7:22: e9:07:fd:57:8f:54:83:91:89:fa:3c:d8:41:aa:7e: 1a:63:a1:7f:62:a5:1b:99:e2:0a:1c:19:fe:0d:10: aa:89:89:dd:24:ca:ca:aa:00:a8:bf:96:24:7e:c4: a6:d9:05:6e:9d:e7:0a:e9:f4:68:1c:d2:ee:28:ec: 53:b4:93:5c:e7:3b:2e:5f:c2:82:f3:d3:0a:db:55: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:57:BA:B7:7A:38:17:BE:6A:B9:92:82:D2:78:2C:B3:38:54:51:83 X509v3 Authority Key Identifier: keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d8:f3:db:61:6b:9d:ac:dd:4a:e6:ff:55:b6:00:05:c3:36: 4b:01:91:84:05:fb:74:2a:c0:cb:96:9e:d8:38:32:69:a2:79: 6f:1e:df:a7:f5:6b:1f:b9:6e:c5:53:3d:98:fd:b5:23:6a:8c: 64:02:95:5b:94:b4:27:2e:71:6b:ba:1a:c0:37:1e:55:e0:12: e6:38:87:2c:75:c7:ab:99:2c:b9:6c:a1:87:f2:da:b4:f5:dd: 31:ea:7a:88:5f:93:42:82:4c:03:74:3b:2f:bc:f5:1d:a5:70: 45:b8:30:08:a8:2a:1b:e9:da:6f:b3:7e:cd:3a:4d:85:9e:0a: 72:b9:a7:02:54:a5:c4:5f:08:fe:60:9b:c6:c3:76:e5:e4:19: 73:ba:ad:ad:6b:4e:f2:4d:3c:a9:39:af:c9:0f:ad:c8:c7:12: f1:df:91:26:e2:6e:1c:72:d6:15:e1:58:35:18:99:28:f0:0b: ee:65:5b:31:bc:18:3d:0f:28:86:78:0b:95:c4:a6:a7:47:c2: e4:b3:04:6d:ba:19:b7:ca:1b:16:31:ba:d2:04:e2:1b:63:71: e2:3b:d0:5e:10:55:e2:f6:05:58:59:90:04:38:20:67:72:87: 8e:0c:0a:07:d6:d7:e3:2a:8e:6a:b0:35:5b:c3:2d:49:b7:79: 87:1e:68:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjb654DlN/5lqUY2cEosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw YjI1OTgwHhcNMjUxMjIwMTYwMTAzWhcNMjUxMjIxMTYwMTAzWjAzMTEwLwYDVQQD EyhhMDU3YmFiNzdhMzgxN2JlNmFiOTkyODJkMjc4MmNiMzM4NTQ1MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk29iIcdCaVpPdtcmkGwJmE8PqWmL 28+W7Rb0cicHa+VvDwJ39ewvY7F11H3ez9E8rmgHl3mTNj1nCIHsf8npPxx3YCcu 8yQjma/r8Hhyi8p8i0pJsm7tNEiDaZOfoCGaS8NBLHgNAOQGhT61VGA3xnNCqG1N KRoZTXqY5NZ3sOTe4tVigO8XC6qKIbvmIeexLIsh9Oyq+xblyka/fWiwtgApDe6y c3+kKt/PqjbqwwFTxyLpB/1Xj1SDkYn6PNhBqn4aY6F/YqUbmeIKHBn+DRCqiYnd JMrKqgCov5YkfsSm2QVunecK6fRoHNLuKOxTtJNc5zsuX8KC89MK21XkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBXurd6OBe+armSgtJ4LLM4VFGDMB8GA1UdIwQY MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt NzU2ZjNjYzNlYzMzLzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtjz22Fr nazdSub/VbYABcM2SwGRhAX7dCrAy5ae2DgyaaJ5bx7fp/VrH7luxVM9mP21I2qM ZAKVW5S0Jy5xa7oawDceVeAS5jiHLHXHq5ksuWyhh/LatPXdMep6iF+TQoJMA3Q7 L7z1HaVwRbgwCKgqG+nab7N+zTpNhZ4KcrmnAlSlxF8I/mCbxsN25eQZc7qtrWtO 8k08qTmvyQ+tyMcS8d+RJuJuHHLWFeFYNRiZKPAL7mVbMbwYPQ8ohngLlcSmp0fC 5LMEbboZt8obFjG60gTiG2Nx4jvQXhBV4vYFWFmQBDggZ3KHjgwKB9bX4yqOarA1 W8MtSbd5hx5oog== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:21 2025 by rpki-client