This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json) Hash identifier: 7++UzAOX46Uc00s4zEn4OzAk4JL7pOhGtUEpMu38yic= Subject key identifier: DE:B1:04:38:86:6C:C4:F3:D6:AC:FF:23:01:B5:63:7B:35:17:C9:F2 Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Certificate serial: 019AF16480E91F5D3F2F0EB18121A0673D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft Manifest number: 042F Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=) 2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: OZLu0qOfxKz5jy2xNC0MBIUy8/WWTRR6JJyVGSHtS+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:80:e9:1f:5d:3f:2f:0e:b1:81:21:a0:67:3d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=deb10438866cc4f3d6acff2301b5637b3517c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:49:d8:00:6f:6e:8b:bb:82:a1:b0:a7:b5: e5:c5:9f:60:ea:72:5d:54:59:ec:da:9e:ea:88:91: de:7e:a6:63:d9:41:75:2d:fb:5a:7e:32:eb:88:b9: 04:11:85:e0:01:25:c2:34:f9:98:a6:9f:8d:aa:bd: 4e:97:b8:a1:5d:2a:43:b6:f7:b9:3b:fe:fe:04:7a: 50:37:15:83:b5:bd:98:50:4f:85:6d:67:9b:74:81: d3:7d:a6:bd:13:7c:c0:26:3b:be:6f:22:bf:61:c5: 10:cc:3b:60:3e:7d:cd:02:8e:98:e9:30:7f:ad:83: 9b:ce:1c:8b:25:d1:02:af:4d:11:6e:63:5f:90:c2: 82:69:27:c6:27:0b:c6:d9:82:16:ad:df:53:c8:fd: ad:72:39:fc:2a:c0:77:ac:2f:79:0f:74:55:d2:da: 85:d3:35:99:c5:8f:6a:1a:2c:06:e4:bf:e1:23:68: 92:f0:a1:2a:c0:c0:e0:0a:57:f5:f0:6c:8c:ad:84: 7c:e0:24:41:62:99:20:54:49:d8:e3:cd:46:4e:2f: 99:5a:5b:5e:2d:dd:4e:11:f1:85:5f:1b:a0:82:ba: 2c:fd:b0:5e:c8:c6:c4:94:17:f2:a8:67:ea:82:98: 4c:9a:6d:8e:dd:95:ba:4c:4a:6e:ae:9a:b9:cb:9a: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:04:38:86:6C:C4:F3:D6:AC:FF:23:01:B5:63:7B:35:17:C9:F2 X509v3 Authority Key Identifier: keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1b:32:0e:82:f1:57:7b:28:4a:7a:2e:c8:f4:d6:53:7c:a3: d4:aa:70:28:01:f4:04:13:b6:6e:2c:25:a4:66:35:ac:3b:75: 9e:f3:08:b4:b6:1d:06:63:43:ca:f0:86:1b:6f:5c:78:e7:a9: 02:dd:08:4e:80:ee:33:0a:ef:77:e1:42:52:fc:f2:44:c7:cf: af:52:93:02:1d:eb:e7:43:65:6b:51:5c:33:21:eb:47:f7:2e: 6a:af:9b:b9:12:e4:40:05:9a:66:25:d4:80:a5:64:78:81:9b: 48:c3:8d:14:d0:51:75:f6:64:83:e3:25:32:ea:fe:30:4b:b9: ea:22:a7:a2:12:0d:34:40:0c:91:f4:0f:09:5a:90:7c:fc:71: 0c:3f:b3:a0:48:84:08:79:df:a1:64:42:5e:e0:38:bc:c0:ec: 47:b9:38:19:2a:b9:0b:81:a0:6e:53:fa:19:60:b0:19:e8:d1: 09:1e:dd:87:c8:4c:f3:a8:06:d8:ec:ca:d0:fe:46:13:0c:6e: 92:dc:31:2e:e4:43:33:f9:0b:61:22:d7:86:32:4f:05:cf:46: 39:53:8d:55:65:07:6f:f7:43:e1:e6:11:c0:fe:67:b7:36:59: ac:22:ca:7e:bc:cc:11:fc:8f:00:b9:b9:bf:8b:36:06:43:f8: 08:fb:da:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIDpH10/Lw6xgSGgZz1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My N2IyMjUwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EyhkZWIxMDQzODg2NmNjNGYzZDZhY2ZmMjMwMWI1NjM3YjM1MTdjOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BtJ2ABvbou7gqGwp7XlxZ9g6nJd VFns2p7qiJHefqZj2UF1LftafjLriLkEEYXgASXCNPmYpp+Nqr1Ol7ihXSpDtve5 O/7+BHpQNxWDtb2YUE+FbWebdIHTfaa9E3zAJju+byK/YcUQzDtgPn3NAo6Y6TB/ rYObzhyLJdECr00RbmNfkMKCaSfGJwvG2YIWrd9TyP2tcjn8KsB3rC95D3RV0tqF 0zWZxY9qGiwG5L/hI2iS8KEqwMDgClf18GyMrYR84CRBYpkgVEnY481GTi+ZWlte Ld1OEfGFXxuggros/bBeyMbElBfyqGfqgphMmm2O3ZW6TEpurpq5y5oSVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6xBDiGbMTz1qz/IwG1Y3s1F8nyMB8GA1UdIwQY MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt ZGM0ZTc5ODhhMjhhLzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBsyDoLx V3soSnouyPTWU3yj1KpwKAH0BBO2biwlpGY1rDt1nvMItLYdBmNDyvCGG29ceOep At0IToDuMwrvd+FCUvzyRMfPr1KTAh3r50Nla1FcMyHrR/cuaq+buRLkQAWaZiXU gKVkeIGbSMONFNBRdfZkg+MlMur+MEu56iKnohINNEAMkfQPCVqQfPxxDD+zoEiE CHnfoWRCXuA4vMDsR7k4GSq5C4GgblP6GWCwGejRCR7dh8hM86gG2OzK0P5GEwxu ktwxLuRDM/kLYSLXhjJPBc9GOVONVWUHb/dD4eYRwP5ntzZZrCLKfrzMEfyPALm5 v4s2BkP4CPvabQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:27 2025 by rpki-client