This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json) Hash identifier: bk4Lm71ueUOPyXaHpHhmOZM0e+Boc6Xb0U8INV8hiA4= Subject key identifier: 1D:81:D3:BC:57:D9:6E:14:B9:43:C3:D2:ED:4E:7C:98:D4:55:F6:67 Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f Certificate serial: 019B4B834714FD25520FEC224A8AF8C327CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 14:00:53 +0000 Manifest this update: Tue 23 Dec 2025 14:00:53 +0000 Manifest next update: Wed 24 Dec 2025 14:00:53 +0000 Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=) 2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: mLXaIrvLod+YX2hZbhvSyiBtkrmIRuwL/nISpIqsZgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:47:14:fd:25:52:0f:ec:22:4a:8a:f8:c3:27:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f Validity Not Before: Dec 23 14:00:53 2025 GMT Not After : Dec 24 14:00:53 2025 GMT Subject: CN=1d81d3bc57d96e14b943c3d2ed4e7c98d455f667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:54:09:0b:bf:31:c0:3a:c8:76:1c:a4:0e: 3f:20:8d:7c:cc:5c:8a:42:4d:b2:16:f6:1c:d4:3f: 13:14:e9:05:14:35:68:75:29:00:54:45:46:09:52: 65:db:23:e9:61:67:f2:e0:d8:55:48:e7:6e:63:a2: 2f:61:30:07:36:3d:62:d1:0b:25:b6:9b:0f:06:6a: 14:c6:0c:10:3f:53:73:51:44:c2:04:37:c9:21:db: df:02:9e:e2:f0:37:3e:15:72:7e:e0:cd:91:9a:2e: 0b:76:1a:27:66:c6:5c:78:e0:66:03:e7:74:02:a0: 1d:20:cb:99:eb:f0:60:fb:cf:34:ba:aa:7a:ea:4a: fa:8a:1d:93:80:82:f0:60:c3:74:12:aa:ce:49:b9: 2e:df:1b:57:a5:c1:f0:83:5f:8d:51:88:e7:e5:ad: db:e2:8a:12:72:07:62:5d:de:64:8e:63:71:35:e1: 92:75:96:5f:ea:09:9e:5e:b7:8b:10:8f:88:8c:9a: 74:2c:a2:5f:53:7e:cc:ad:11:1d:51:2d:ae:7c:b6: 76:13:27:83:00:ce:0f:14:0c:b3:24:a8:a3:4a:aa: bb:59:ac:32:5b:94:3a:47:ed:2b:bc:31:e8:14:35: a1:3e:95:44:1c:4b:26:24:fd:75:10:e4:4f:6a:f4: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:D3:BC:57:D9:6E:14:B9:43:C3:D2:ED:4E:7C:98:D4:55:F6:67 X509v3 Authority Key Identifier: keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:44:b4:1d:a8:d5:93:51:88:1f:79:99:38:3c:b4:8d:21:db: e3:84:ad:f9:1a:9f:d6:2c:13:f5:93:2e:6b:33:f5:9c:8a:91: 03:d4:3c:dc:a4:a1:ff:7f:93:0d:cf:b3:5d:6e:8c:45:ab:76: c1:85:bf:0f:7b:1e:99:fc:a8:32:ad:3f:2c:61:41:9a:1a:39: f2:9d:cd:2f:ed:62:f8:f0:f3:23:75:33:94:f1:66:0c:bf:3c: 22:fe:f9:58:28:8c:38:48:10:d4:be:e4:3f:08:f7:98:15:d5: 72:33:7e:b1:a3:62:9b:6b:66:a3:f7:5a:ff:00:85:a6:3b:52: 47:6b:cf:fa:d5:80:f1:1a:23:00:28:d8:11:20:a1:8e:23:07: cd:cc:8e:62:b5:97:b5:6f:44:5c:93:cb:22:c4:99:10:3d:22: 93:ea:3e:da:51:aa:af:89:fc:86:ff:cc:2e:95:7f:82:60:e8: eb:12:e0:34:a1:33:35:2c:bd:a2:86:73:af:64:6b:27:e4:a0: 25:14:0a:a5:a3:51:79:a7:8e:ec:23:19:80:9c:0b:89:92:e8: c9:05:6f:84:f0:05:8c:f2:de:f8:49:47:bb:7d:04:8a:44:c8: a0:23:cb:1e:96:3f:8b:16:93:01:53:f7:2f:8a:5f:d6:61:d8: 9f:22:e0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg0cU/SVSD+wiSor4wyfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTEyYmI1OWIwNjI3ZGEyM2FmOTBjMGYwNTg0YjcxYjUw Zjc3OGYwHhcNMjUxMjIzMTQwMDUzWhcNMjUxMjI0MTQwMDUzWjAzMTEwLwYDVQQD EygxZDgxZDNiYzU3ZDk2ZTE0Yjk0M2MzZDJlZDRlN2M5OGQ0NTVmNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44RUCQu/McA6yHYcpA4/II18zFyK Qk2yFvYc1D8TFOkFFDVodSkAVEVGCVJl2yPpYWfy4NhVSOduY6IvYTAHNj1i0Qsl tpsPBmoUxgwQP1NzUUTCBDfJIdvfAp7i8Dc+FXJ+4M2Rmi4LdhonZsZceOBmA+d0 AqAdIMuZ6/Bg+880uqp66kr6ih2TgILwYMN0EqrOSbku3xtXpcHwg1+NUYjn5a3b 4ooScgdiXd5kjmNxNeGSdZZf6gmeXreLEI+IjJp0LKJfU37MrREdUS2ufLZ2EyeD AM4PFAyzJKijSqq7WawyW5Q6R+0rvDHoFDWhPpVEHEsmJP11EORPavSlsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2B07xX2W4UuUPD0u1OfJjUVfZnMB8GA1UdIwQY MBaAFLQRK7WbBifaI6+QwPBYS3G1D3ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQt ODdhMTBiYzY4YTM3LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQtODdhMTBiYzY4YTM3 LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakS0HajV k1GIH3mZODy0jSHb44St+Rqf1iwT9ZMuazP1nIqRA9Q83KSh/3+TDc+zXW6MRat2 wYW/D3semfyoMq0/LGFBmho58p3NL+1i+PDzI3UzlPFmDL88Iv75WCiMOEgQ1L7k Pwj3mBXVcjN+saNim2tmo/da/wCFpjtSR2vP+tWA8RojACjYESChjiMHzcyOYrWX tW9EXJPLIsSZED0ik+o+2lGqr4n8hv/MLpV/gmDo6xLgNKEzNSy9ooZzr2RrJ+Sg JRQKpaNReaeO7CMZgJwLiZLoyQVvhPAFjPLe+ElHu30EikTIoCPLHpY/ixaTAVP3 L4pf1mHYnyLg4w== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:22 2025 by rpki-client