This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json) Hash identifier: C25HUdCFSZEPnrVH4m1UhM/rYVPbgx+2tc+Ci6OeZf8= Subject key identifier: FE:58:90:8C:CF:2A:5C:F2:D8:1B:1C:9C:92:2F:59:05:FC:72:D1:DB Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Certificate serial: 019AF50A1A05495B16B9DFAD58F3CA506EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=) 2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=) 3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: 2klwwcCHHutGJwmpfUFGzVSylKkHDN1Cea69REWzJh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1a:05:49:5b:16:b9:df:ad:58:f3:ca:50:6e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=fe58908ccf2a5cf2d81b1c9c922f5905fc72d1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:4b:d3:17:ec:6d:c2:74:e9:ee:2f:84:de: 2e:e3:7e:54:5a:bd:44:f5:2d:6f:b5:38:1c:65:3c: 9c:d6:ba:14:2b:ca:27:0f:53:38:10:01:62:95:7f: 21:3f:9f:51:c2:d5:f1:cf:24:b7:a0:6f:d6:99:84: af:50:22:5a:32:62:54:53:df:9a:8a:a7:de:32:fd: 81:14:e8:50:8c:82:8c:4f:c3:03:6d:1b:ed:96:8f: 7e:3d:08:93:e7:82:ac:3e:10:05:c3:3e:8c:8f:ac: c2:29:4c:d4:36:b1:b4:18:88:d3:b4:9e:96:e8:c3: 3a:67:25:fe:45:7d:84:8b:c8:30:02:fe:d8:1d:f5: f7:31:fe:de:94:1f:8d:9d:76:0b:4d:1f:3c:b1:05: 87:44:d3:bf:ae:89:41:4b:24:ae:c0:57:00:0e:e8: ec:40:32:f0:26:ba:1b:31:b2:56:12:de:7a:18:b3: 8b:ca:ca:ac:50:2a:e3:9a:7c:ae:12:0d:a9:41:43: 28:aa:40:9c:9d:14:1f:f6:11:06:8b:a2:dc:41:26: b5:8c:37:ed:be:b0:e0:e8:7b:0a:e3:46:b6:c6:6b: e7:fd:9b:80:80:4f:24:3e:a2:48:46:aa:ed:4c:ec: 39:cf:6a:c3:ee:5e:d2:04:65:71:0b:0d:ae:85:bd: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:58:90:8C:CF:2A:5C:F2:D8:1B:1C:9C:92:2F:59:05:FC:72:D1:DB X509v3 Authority Key Identifier: keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c4:1c:b6:a4:cd:ba:aa:3d:a2:66:46:be:0e:a3:6a:c4:70: a4:5f:79:01:76:1b:7e:ff:62:f5:be:c9:e0:da:26:67:39:05: 9a:60:b3:14:dd:a0:35:31:18:03:9a:e7:f5:13:96:9a:48:58: 37:5a:13:15:a4:51:01:1e:7a:9e:c2:92:03:24:28:55:8a:c0: c4:cd:7e:c8:f3:b3:31:d3:98:6d:15:62:2a:93:30:9b:51:df: 7c:a2:16:65:cb:f9:0d:a3:ce:93:a0:a3:49:53:88:59:9b:19: 95:dd:09:8f:7f:b6:47:18:26:f6:f2:3e:57:b8:33:b8:44:1d: dd:1f:64:2d:1c:2b:4e:87:8f:86:4e:f9:6c:5f:2c:e3:7d:05: f0:e2:25:7d:8d:4b:96:75:0d:ea:b3:3c:c6:e2:b0:9c:60:70: b8:89:52:97:0f:b9:03:c7:b3:27:a0:fd:dc:8d:4f:55:7b:d4: 37:ca:14:a7:21:36:0c:b5:d7:82:70:80:5c:c4:7c:04:9e:ff: b7:9e:42:90:01:af:3a:02:0f:2b:3c:9f:39:0e:33:51:e8:75: d4:ee:a5:0b:1f:fa:7d:26:f1:c9:e8:b7:23:7b:ff:97:bb:3a: 02:ba:32:d3:da:e9:06:7e:82:29:97:51:ea:e3:fa:17:a6:df: 36:2a:10:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChoFSVsWud+tWPPKUG7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw YjI1OTgwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD EyhmZTU4OTA4Y2NmMmE1Y2YyZDgxYjFjOWM5MjJmNTkwNWZjNzJkMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGJL0xfsbcJ06e4vhN4u435UWr1E 9S1vtTgcZTyc1roUK8onD1M4EAFilX8hP59RwtXxzyS3oG/WmYSvUCJaMmJUU9+a iqfeMv2BFOhQjIKMT8MDbRvtlo9+PQiT54KsPhAFwz6Mj6zCKUzUNrG0GIjTtJ6W 6MM6ZyX+RX2Ei8gwAv7YHfX3Mf7elB+NnXYLTR88sQWHRNO/rolBSySuwFcADujs QDLwJrobMbJWEt56GLOLysqsUCrjmnyuEg2pQUMoqkCcnRQf9hEGi6LcQSa1jDft vrDg6HsK40a2xmvn/ZuAgE8kPqJIRqrtTOw5z2rD7l7SBGVxCw2uhb061wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5YkIzPKlzy2BscnJIvWQX8ctHbMB8GA1UdIwQY MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt NzU2ZjNjYzNlYzMzLzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8QctqTN uqo9omZGvg6jasRwpF95AXYbfv9i9b7J4NomZzkFmmCzFN2gNTEYA5rn9ROWmkhY N1oTFaRRAR56nsKSAyQoVYrAxM1+yPOzMdOYbRViKpMwm1HffKIWZcv5DaPOk6Cj SVOIWZsZld0Jj3+2Rxgm9vI+V7gzuEQd3R9kLRwrToePhk75bF8s430F8OIlfY1L lnUN6rM8xuKwnGBwuIlSlw+5A8ezJ6D93I1PVXvUN8oUpyE2DLXXgnCAXMR8BJ7/ t55CkAGvOgIPKzyfOQ4zUeh11O6lCx/6fSbxyei3I3v/l7s6Aroy09rpBn6CKZdR 6uP6F6bfNioQPw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:13 2025 by rpki-client