This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json) Hash identifier: ubNvYhKbaVca0TcFF7/iiGpKlmnJM0Wk7PewY2Hlucs= Subject key identifier: 95:13:43:7F:79:0E:2D:BD:3C:5B:25:BB:C0:49:41:B9:52:DD:18:81 Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f Certificate serial: 019B3343EBF4FC94D24F40899B77AB124A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 21:00:47 +0000 Manifest this update: Thu 18 Dec 2025 21:00:47 +0000 Manifest next update: Fri 19 Dec 2025 21:00:47 +0000 Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=) 2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: lFAxLg/L0mfNbf3Jzd7sTcyyhm6q7vJbGhIe+M/kCLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:eb:f4:fc:94:d2:4f:40:89:9b:77:ab:12:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f Validity Not Before: Dec 18 21:00:47 2025 GMT Not After : Dec 19 21:00:47 2025 GMT Subject: CN=9513437f790e2dbd3c5b25bbc04941b952dd1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:93:fe:83:93:35:31:cd:19:b0:85:97:01: be:49:3e:61:e4:4a:af:2c:19:96:63:63:fc:13:50: ec:3c:f4:7e:51:b4:7b:60:2f:cd:e3:d8:b6:8f:98: c2:ba:18:3d:ca:25:71:e9:ab:85:b6:64:18:f4:95: 9a:34:77:7b:07:bc:68:34:c4:84:db:e7:f6:82:57: a3:52:38:57:32:5a:3f:88:2c:21:9a:c5:76:77:b0: 64:fb:98:f1:51:f5:9d:35:76:46:35:ff:b2:01:84: 89:e8:bc:82:23:45:1d:2e:4d:7a:c0:9a:23:36:d4: 51:72:b8:71:71:7d:3c:f5:2f:e4:95:ac:57:9d:61: 35:1f:9c:e3:49:0a:de:d6:5d:18:98:27:c3:50:97: 83:2f:22:49:98:2c:9d:60:69:6e:ff:9c:03:35:17: 24:23:d6:c7:4a:9b:48:76:59:b8:d5:00:6c:0a:c9: d7:46:f4:86:0f:1d:1a:10:d9:52:68:5c:65:05:57: 23:04:f5:f4:d6:01:dc:a1:90:d9:00:82:b4:bb:cf: c1:98:51:cd:63:e1:c4:cd:fe:d9:a6:4f:53:9e:69: d3:4c:33:64:43:b6:02:6c:c1:c7:2b:18:86:2f:78: b8:84:07:0b:6e:17:a9:b9:05:76:94:8f:bb:9f:e7: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:13:43:7F:79:0E:2D:BD:3C:5B:25:BB:C0:49:41:B9:52:DD:18:81 X509v3 Authority Key Identifier: keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:96:c2:b1:36:62:18:3b:e3:e9:d4:b6:16:bf:0f:3c:30:7f: 7b:a6:ce:b3:46:7a:0c:80:36:58:6e:bb:d8:4f:63:0c:7c:1f: 89:68:a7:aa:e4:3f:02:a0:84:40:b5:ad:89:9d:44:ec:a1:75: 75:8d:2f:7f:c5:e2:99:b6:4c:d0:88:34:41:bf:a2:58:35:5d: 53:58:7b:13:7f:88:91:52:01:fb:b1:41:de:1e:0a:73:32:1f: 98:5f:a3:a3:28:c2:3f:50:88:b0:53:32:27:e5:b0:eb:ef:d8: e3:ae:d2:d3:22:b8:83:d6:46:e6:90:19:6b:66:60:c4:6c:3b: 46:fc:f3:70:e0:51:7a:a3:8d:d6:a2:de:1a:98:51:95:50:e2: e2:96:ee:26:42:9d:cc:6c:d9:ed:19:8b:0b:f6:26:13:fd:4a: 22:e4:74:7f:6a:0a:e6:73:e0:06:cf:72:fb:3a:1c:6d:7b:cc: 6c:83:2e:0a:49:c4:cd:65:3b:9b:94:15:1b:70:3b:20:06:f3: e5:0b:77:fc:c2:00:bb:e2:ca:a0:ef:c1:44:34:5a:d2:f8:1d: 63:c8:96:fc:8a:d5:59:8d:b2:2e:e5:30:d1:63:1f:41:fb:89: 5e:71:ea:c9:a7:bd:be:3a:69:20:af:97:22:01:10:39:20:de: 33:e4:e4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+v0/JTST0CJm3erEkoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj NWVhM2YwHhcNMjUxMjE4MjEwMDQ3WhcNMjUxMjE5MjEwMDQ3WjAzMTEwLwYDVQQD Eyg5NTEzNDM3Zjc5MGUyZGJkM2M1YjI1YmJjMDQ5NDFiOTUyZGQxODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng+T/oOTNTHNGbCFlwG+ST5h5Eqv LBmWY2P8E1DsPPR+UbR7YC/N49i2j5jCuhg9yiVx6auFtmQY9JWaNHd7B7xoNMSE 2+f2glejUjhXMlo/iCwhmsV2d7Bk+5jxUfWdNXZGNf+yAYSJ6LyCI0UdLk16wJoj NtRRcrhxcX089S/klaxXnWE1H5zjSQre1l0YmCfDUJeDLyJJmCydYGlu/5wDNRck I9bHSptIdlm41QBsCsnXRvSGDx0aENlSaFxlBVcjBPX01gHcoZDZAIK0u8/BmFHN Y+HEzf7Zpk9TnmnTTDNkQ7YCbMHHKxiGL3i4hAcLbhepuQV2lI+7n+cNgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUTQ395Di29PFslu8BJQblS3RiBMB8GA1UdIwQY MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct ZThlZGU1YTJmODc1LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1 LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJbCsTZi GDvj6dS2Fr8PPDB/e6bOs0Z6DIA2WG672E9jDHwfiWinquQ/AqCEQLWtiZ1E7KF1 dY0vf8XimbZM0Ig0Qb+iWDVdU1h7E3+IkVIB+7FB3h4KczIfmF+joyjCP1CIsFMy J+Ww6+/Y467S0yK4g9ZG5pAZa2ZgxGw7RvzzcOBReqON1qLeGphRlVDi4pbuJkKd zGzZ7RmLC/YmE/1KIuR0f2oK5nPgBs9y+zocbXvMbIMuCknEzWU7m5QVG3A7IAbz 5Qt3/MIAu+LKoO/BRDRa0vgdY8iW/IrVWY2yLuUw0WMfQfuJXnHqyae9vjppIK+X IgEQOSDeM+TkSQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:39 2025 by rpki-client