This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: 4UMjTPbe+yPfY0JfWfxFrrw0W2ZodSyqyG/ZkYXDsD4= Subject key identifier: 41:AC:00:9D:A1:36:CF:CB:E0:C9:05:87:E7:6B:2A:2F:07:DA:5A:D9 Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019AF209BFA129BF50313A7B6DC57583E5D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:56 +0000 Manifest this update: Sat 06 Dec 2025 05:01:56 +0000 Manifest next update: Sun 07 Dec 2025 05:01:56 +0000 Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=) 2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=) 3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: mhRAW1Te7ADIgXRWN7B1n07Q2OuayOXdoev6PUSNYc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:bf:a1:29:bf:50:31:3a:7b:6d:c5:75:83:e5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Dec 6 05:01:56 2025 GMT Not After : Dec 7 05:01:56 2025 GMT Subject: CN=41ac009da136cfcbe0c90587e76b2a2f07da5ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:d2:4d:df:61:74:8a:ce:52:bc:50:87:3c: 25:b5:a1:49:79:09:2c:af:e6:6e:41:fa:94:0e:54: 96:b1:bc:07:64:0f:25:72:75:95:93:87:55:14:5a: f9:fb:f1:cd:ab:ee:3e:4a:0f:46:0b:54:4a:db:c8: b7:e9:a5:b8:3c:cf:fe:f4:f9:5a:6a:c0:80:9c:11: 5c:6b:38:e9:bb:fb:cd:8b:ab:be:e6:14:9b:e2:ea: 85:91:e7:4c:dd:bd:28:a2:11:c3:db:f9:b3:60:55: d3:41:8f:3f:cd:5e:99:58:cf:2d:b5:cf:25:74:45: 5c:fe:6a:8b:e4:22:c4:92:41:ac:75:fa:18:6c:3f: 03:26:ca:d4:4a:d3:9e:a3:33:a9:48:09:b5:31:45: 77:71:30:42:e5:2a:c7:71:ad:a5:57:da:8d:dc:ab: 69:da:0a:b1:02:a7:4a:8f:97:54:a8:4f:6a:fe:df: df:a7:4f:32:ea:40:1b:6b:db:d1:5b:f7:2c:05:55: bb:de:42:ca:54:0f:03:ce:7b:21:24:02:bc:c6:d7: 5e:d2:f6:29:37:4a:04:bf:a1:89:5b:e9:04:ee:3c: 85:c9:49:d6:35:3c:fa:c5:75:66:5f:33:63:4e:f7: 37:9a:8b:02:33:95:e8:26:0c:2d:54:0f:10:bd:4e: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AC:00:9D:A1:36:CF:CB:E0:C9:05:87:E7:6B:2A:2F:07:DA:5A:D9 X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:90:13:98:b1:cd:62:96:7b:95:04:ce:40:96:a1:f8:6a: 01:d5:68:55:39:8e:e4:35:7d:bb:f2:02:57:32:2e:46:4f:a5: f6:2d:d5:67:bd:11:c6:be:03:0e:b9:37:51:3a:0e:e2:a4:a9: 90:24:7e:a8:ad:a2:42:47:89:99:f6:de:4a:1a:20:f1:23:25: dd:4f:27:4f:fd:19:01:2f:0c:4f:62:79:f4:8b:93:84:ac:99: 92:2d:8a:b3:42:0e:a1:44:c5:5a:f5:9d:54:77:2f:24:d4:76: 6b:48:09:ef:50:96:e5:7b:b1:ed:bd:72:56:fe:ba:9d:7d:19: 12:7a:3e:a2:22:f1:ff:27:12:97:89:1b:36:f8:51:c6:a0:65: ad:cd:c5:db:cc:6a:2f:3a:ec:43:7c:ee:3e:ae:db:53:77:e3: cd:b5:53:95:08:21:57:87:4f:2a:ac:29:c2:5a:72:f0:f7:cd: c1:28:21:14:8d:8a:c8:a3:bc:1a:63:0c:d4:de:d2:54:96:f5: 03:0e:61:81:03:3f:a8:a8:f3:f5:26:aa:29:0b:5b:f7:ba:a4: 1c:a7:3e:4c:ce:c0:7e:78:01:27:1e:96:c9:4c:20:c0:40:d5: ea:af:87:8c:b0:8d:93:2e:cf:f4:10:5b:16:f3:c5:3a:09:f7: 33:c6:51:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCb+hKb9QMTp7bcV1g+XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjUxMjA2MDUwMTU2WhcNMjUxMjA3MDUwMTU2WjAzMTEwLwYDVQQD Eyg0MWFjMDA5ZGExMzZjZmNiZTBjOTA1ODdlNzZiMmEyZjA3ZGE1YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwfSTd9hdIrOUrxQhzwltaFJeQks r+ZuQfqUDlSWsbwHZA8lcnWVk4dVFFr5+/HNq+4+Sg9GC1RK28i36aW4PM/+9Pla asCAnBFcazjpu/vNi6u+5hSb4uqFkedM3b0oohHD2/mzYFXTQY8/zV6ZWM8ttc8l dEVc/mqL5CLEkkGsdfoYbD8DJsrUStOeozOpSAm1MUV3cTBC5SrHca2lV9qN3Ktp 2gqxAqdKj5dUqE9q/t/fp08y6kAba9vRW/csBVW73kLKVA8DznshJAK8xtde0vYp N0oEv6GJW+kE7jyFyUnWNTz6xXVmXzNjTvc3mosCM5XoJgwtVA8QvU50KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGsAJ2hNs/L4MkFh+drKi8H2lrZMB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8mQE5ix zWKWe5UEzkCWofhqAdVoVTmO5DV9u/ICVzIuRk+l9i3VZ70Rxr4DDrk3UToO4qSp kCR+qK2iQkeJmfbeShog8SMl3U8nT/0ZAS8MT2J59IuThKyZki2Ks0IOoUTFWvWd VHcvJNR2a0gJ71CW5Xux7b1yVv66nX0ZEno+oiLx/ycSl4kbNvhRxqBlrc3F28xq LzrsQ3zuPq7bU3fjzbVTlQghV4dPKqwpwlpy8PfNwSghFI2KyKO8GmMM1N7SVJb1 Aw5hgQM/qKjz9SaqKQtb97qkHKc+TM7AfngBJx6WyUwgwEDV6q+HjLCNky7P9BBb FvPFOgn3M8ZRzw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:01 2025 by rpki-client