This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json) Hash identifier: 6qVf5nr/NlGDzueKq6p/GlNEBgvocBvzH0a9YyqKbfo= Subject key identifier: E5:E3:F8:FA:73:1D:1E:65:A2:16:B6:14:6C:AA:42:BF:DA:20:20:24 Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Certificate serial: 019AF19AD2ABA6905D223ED7DFB155F8077A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft Manifest number: 0BEC Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=) 2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=) 3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=) 4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=) 5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=) 6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=) 7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: boGDzeqPGur0j7Im5McnOJeNzJWyrIsoLmUFPMeLySQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d2:ab:a6:90:5d:22:3e:d7:df:b1:55:f8:07:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=e5e3f8fa731d1e65a216b6146caa42bfda202024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:af:2c:b5:2f:ce:1c:01:b0:47:10:b8:bd: 36:81:5a:78:12:f7:b4:28:13:6d:3f:98:99:57:23: 9f:0c:54:8d:18:d9:e2:d0:97:39:3f:75:0f:b4:c7: 30:c8:cf:4e:e3:e0:71:23:4e:49:cc:aa:a8:0e:d5: 16:a0:9f:21:5f:76:a8:95:8c:af:e0:c9:3c:7f:a1: ab:f4:9a:a3:c7:c8:92:22:d1:f0:96:20:63:3e:24: 44:8e:f7:56:7b:b4:f0:8c:98:17:e3:1b:1d:8e:3a: f7:d1:ff:7d:f5:d2:95:b7:40:09:5a:1c:27:d7:37: 8e:9d:62:64:ad:be:88:50:e1:63:e3:6b:24:e1:92: 19:53:ea:f5:d9:79:e3:2d:11:f9:f8:7b:44:8b:c7: ba:dd:a9:25:91:4c:02:0b:f9:66:bc:25:6b:a9:d1: 5a:6a:1a:eb:b6:8a:fc:79:b4:eb:d7:ef:3b:ae:17: 2d:8c:f3:f3:d8:db:92:c2:77:35:0a:eb:8d:28:b1: 16:d0:81:9c:e5:fc:30:9b:77:86:d5:a6:41:fc:7a: 54:23:93:65:46:a7:77:ff:98:19:a1:e6:86:87:43: a5:a0:89:2b:a6:01:87:2a:ef:66:26:e6:0b:7a:c4: ca:37:33:81:ed:e7:1b:3b:72:0f:8a:91:8b:e1:86: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:F8:FA:73:1D:1E:65:A2:16:B6:14:6C:AA:42:BF:DA:20:20:24 X509v3 Authority Key Identifier: keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:78:38:07:b6:fe:39:a0:b3:9a:1c:a0:86:a2:fa:6a:25:c5: 17:76:ce:c2:79:46:1d:9c:c2:67:d1:99:d8:44:f6:04:05:0e: 1c:01:d9:23:eb:ee:5f:18:22:e5:7d:e5:ab:19:85:aa:2c:3e: 64:a4:bd:2e:6f:61:2b:57:d5:1c:42:72:9f:61:63:86:4f:34: bc:99:85:e8:70:20:74:11:a2:f3:a9:0b:22:6b:90:1e:95:68: 08:3f:2b:5f:53:66:b8:b3:43:84:dc:ed:f2:be:e9:1d:e0:70: a4:85:a7:c5:ae:20:e2:55:c0:58:03:fa:1b:0f:b4:7e:05:b4: 33:33:88:79:55:10:64:76:73:d9:59:ed:d2:bf:35:81:96:98: fc:f7:2e:8b:75:c5:b9:65:93:ce:54:15:8b:66:07:1f:1c:36: a9:12:bc:6c:f5:9d:1b:83:77:66:fa:7f:b6:1d:d9:e9:f0:45: 25:7d:f8:a3:52:70:6d:c6:ab:7c:a4:0f:39:5f:8e:71:57:e3: 8b:a5:52:68:e0:0a:f5:a0:e6:dc:e6:7b:93:65:d7:2b:89:8e: bc:24:45:e9:25:64:f5:73:18:b2:d5:8d:de:a6:60:44:51:d1: 4f:f8:3e:e7:ea:2c:60:2c:6c:b1:06:7e:5d:ed:f6:f9:ef:b1: e2:68:06:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtKrppBdIj7X37FV+Ad6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey NTY4MTMwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhlNWUzZjhmYTczMWQxZTY1YTIxNmI2MTQ2Y2FhNDJiZmRhMjAyMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s+vLLUvzhwBsEcQuL02gVp4Eve0 KBNtP5iZVyOfDFSNGNni0Jc5P3UPtMcwyM9O4+BxI05JzKqoDtUWoJ8hX3aolYyv 4Mk8f6Gr9Jqjx8iSItHwliBjPiREjvdWe7TwjJgX4xsdjjr30f999dKVt0AJWhwn 1zeOnWJkrb6IUOFj42sk4ZIZU+r12XnjLRH5+HtEi8e63aklkUwCC/lmvCVrqdFa ahrrtor8ebTr1+87rhctjPPz2NuSwnc1CuuNKLEW0IGc5fwwm3eG1aZB/HpUI5Nl Rqd3/5gZoeaGh0OloIkrpgGHKu9mJuYLesTKNzOB7ecbO3IPipGL4Yb4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXj+PpzHR5loha2FGyqQr/aICAkMB8GA1UdIwQY MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt NjRkMjljODZiZjNlLzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXg4B7b+ OaCzmhyghqL6aiXFF3bOwnlGHZzCZ9GZ2ET2BAUOHAHZI+vuXxgi5X3lqxmFqiw+ ZKS9Lm9hK1fVHEJyn2Fjhk80vJmF6HAgdBGi86kLImuQHpVoCD8rX1NmuLNDhNzt 8r7pHeBwpIWnxa4g4lXAWAP6Gw+0fgW0MzOIeVUQZHZz2Vnt0r81gZaY/Pcui3XF uWWTzlQVi2YHHxw2qRK8bPWdG4N3Zvp/th3Z6fBFJX34o1JwbcarfKQPOV+OcVfj i6VSaOAK9aDm3OZ7k2XXK4mOvCRF6SVk9XMYstWN3qZgRFHRT/g+5+osYCxssQZ+ Xe32+e+x4mgGJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:40 2025 by rpki-client