This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft File: 19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json) Hash identifier: BTf888Xat+9xJ9x4bDim7Zqy91Mh4QPpJzPnZqBLU5E= Subject key identifier: C9:96:A6:B7:D6:47:0C:64:C3:9C:1F:08:8F:00:E8:89:DC:47:E1:AA Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Certificate serial: 019B3AFDBEA5F1E07CADEB732B7EEDC41199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft Manifest number: 08C4 Signing time: Sat 20 Dec 2025 09:01:06 +0000 Manifest this update: Sat 20 Dec 2025 09:01:06 +0000 Manifest next update: Sun 21 Dec 2025 09:01:06 +0000 Files and hashes: 1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: 04dNsAXYekovjC1PbznHFIhYFe+b+DWBPJ1kXB+U8Kg=) 2: 8iF0TI75PKxA6luqVxe6AcPUdIw.roa (hash: zuZGyASOIUwUAnK/KJcy85MR7JAwFUMnhbd2U54FQPI=) 3: itbVtWP59mCPTrHaDnFdRJMUVew.roa (hash: e0BQXURiCQ3TdcGRBASSre11rKXIoznsycIbHY0QbKM=) 4: ySRDlwFvtMEyAEchCR7IpwI1hOE.roa (hash: Se2FW8a2atFU/DlmDTltY5HULLymwYj0jaibNxe54YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:be:a5:f1:e0:7c:ad:eb:73:2b:7e:ed:c4:11:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Validity Not Before: Dec 20 09:01:06 2025 GMT Not After : Dec 21 09:01:06 2025 GMT Subject: CN=c996a6b7d6470c64c39c1f088f00e889dc47e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:09:e0:01:20:df:81:fc:8a:70:4f:d4:18: 13:3c:d4:54:02:fa:a8:46:f5:b9:8e:f1:e4:46:13: 40:aa:83:6e:0a:cb:d2:65:6d:28:7a:d9:35:c6:07: cb:8d:16:60:72:b5:d9:34:0c:b5:3b:b3:e7:46:ad: ec:bc:77:f0:ca:cd:c5:ca:c1:63:f6:f9:ac:bd:29: d9:76:cc:3e:85:47:6f:72:fc:61:3a:7c:77:01:53: 25:7f:ef:50:b3:5b:2d:36:b3:b8:de:82:d9:4b:7d: f9:13:34:3b:d4:bc:2e:fe:6c:7c:18:9c:34:34:f6: ec:9c:2d:30:12:59:ae:ba:3c:77:86:ef:1c:6f:7c: 3f:d8:98:98:1c:ec:8f:fd:61:ce:f8:16:43:d4:1e: 80:46:0d:f5:34:be:a8:d9:fd:4c:65:d8:3c:76:46: 1d:9e:6f:25:8e:e3:f2:20:d3:25:20:11:40:b4:76: ab:86:60:0b:cd:f5:5b:59:ce:3c:b3:72:79:ec:d1: 1c:fc:89:fb:b7:85:80:1e:d2:ee:3b:cb:cc:51:98: 57:ba:47:b8:22:a5:38:1a:cd:b5:fd:58:ee:28:de: 8d:e1:80:13:58:92:45:d7:e2:88:46:55:41:35:50: 93:9a:60:2b:d7:fb:21:b8:df:e9:32:ed:1f:bd:4a: 31:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:96:A6:B7:D6:47:0C:64:C3:9C:1F:08:8F:00:E8:89:DC:47:E1:AA X509v3 Authority Key Identifier: keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:99:7f:66:42:59:8b:81:da:a8:c6:c8:54:cb:2d:ed:b2:1d: a9:1e:67:31:77:9b:86:c3:27:82:dc:97:67:f1:0a:30:53:cb: a7:7a:dc:c5:89:4b:2c:57:fd:a3:12:53:ef:d0:c8:d4:cb:2b: aa:4b:c4:eb:f6:03:cb:41:ca:bb:57:c8:91:70:55:b4:1d:93: 85:b9:9d:04:cf:de:f3:72:e2:c0:93:df:6b:93:cf:7a:fe:24: 64:91:0d:8d:62:ee:8c:33:51:85:59:e4:88:0a:5b:10:e6:47: 9d:97:b0:59:69:8e:d3:ae:a6:c3:03:ca:5d:b3:74:0a:fb:9e: b1:4d:db:d8:64:a1:5d:04:98:1c:c0:ea:40:25:71:53:8b:3e: 51:20:7a:c9:a0:42:93:b3:ec:38:2b:ce:71:8c:84:7e:31:c8: c4:29:c3:d2:b1:2a:6e:39:60:67:30:93:37:19:9f:02:ef:5a: 6b:8c:19:0d:cc:2d:f9:f6:63:12:78:c1:42:fd:c6:03:55:67: 26:77:b9:87:24:5c:65:3c:70:fd:9d:71:0a:25:e4:b6:63:a5: 4d:35:20:85:2c:5e:de:b1:73:a8:1e:cd:c7:98:1d:65:86:6e: 77:7f:38:14:c0:11:c5:df:3f:b3:ae:b2:a9:bd:f0:24:dc:ec: 62:34:3c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/b6l8eB8retzK37txBGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm NmMwYWYwHhcNMjUxMjIwMDkwMTA2WhcNMjUxMjIxMDkwMTA2WjAzMTEwLwYDVQQD EyhjOTk2YTZiN2Q2NDcwYzY0YzM5YzFmMDg4ZjAwZTg4OWRjNDdlMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYcJ4AEg34H8inBP1BgTPNRUAvqo RvW5jvHkRhNAqoNuCsvSZW0oetk1xgfLjRZgcrXZNAy1O7PnRq3svHfwys3FysFj 9vmsvSnZdsw+hUdvcvxhOnx3AVMlf+9Qs1stNrO43oLZS335EzQ71Lwu/mx8GJw0 NPbsnC0wElmuujx3hu8cb3w/2JiYHOyP/WHO+BZD1B6ARg31NL6o2f1MZdg8dkYd nm8ljuPyINMlIBFAtHarhmALzfVbWc48s3J57NEc/In7t4WAHtLuO8vMUZhXuke4 IqU4Gs21/VjuKN6N4YATWJJF1+KIRlVBNVCTmmAr1/shuN/pMu0fvUoxgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmWprfWRwxkw5wfCI8A6IncR+GqMB8GA1UdIwQY MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It ODIzMmZhM2U2MjlkLzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5l/ZkJZ i4HaqMbIVMst7bIdqR5nMXebhsMngtyXZ/EKMFPLp3rcxYlLLFf9oxJT79DI1Msr qkvE6/YDy0HKu1fIkXBVtB2ThbmdBM/e83LiwJPfa5PPev4kZJENjWLujDNRhVnk iApbEOZHnZewWWmO066mwwPKXbN0CvuesU3b2GShXQSYHMDqQCVxU4s+USB6yaBC k7PsOCvOcYyEfjHIxCnD0rEqbjlgZzCTNxmfAu9aa4wZDcwt+fZjEnjBQv3GA1Vn Jne5hyRcZTxw/Z1xCiXktmOlTTUghSxe3rFzqB7Nx5gdZYZud384FMARxd8/s66y qb3wJNzsYjQ8QA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:37 2025 by rpki-client