This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json) Hash identifier: 4ctHPb/eUgayrQo6ST8fk5Zp+d+U70ePL8f/fyqrlOE= Subject key identifier: 5D:87:0E:ED:BF:B7:B6:7E:0A:67:5D:57:3A:63:E9:25:CA:36:0D:92 Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d Certificate serial: 019AF19B0F48378F7303EBBCBE982FC16A90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft Manifest number: 1030 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=) 2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=) 3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: ZZaWTwro6Z2huGTAlTQJibwULjrLFjGo3uIfpn+ZE9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0f:48:37:8f:73:03:eb:bc:be:98:2f:c1:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=5d870eedbfb7b67e0a675d573a63e925ca360d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:88:cd:55:b3:0d:09:2f:b1:42:f9:b5:fd: 53:a9:21:00:ac:3e:d3:e3:f6:14:87:79:46:5a:00: 98:20:6c:03:d0:7d:74:8e:ef:e8:82:f1:97:45:c4: 44:e3:88:b4:72:db:86:79:c1:c4:34:b1:61:bd:78: d9:df:e3:61:92:fd:d7:c3:35:f5:db:96:bc:d0:8a: fc:6b:a1:ca:71:cf:e8:07:99:e6:14:b9:42:3d:09: c9:e0:15:f3:ce:24:3c:d6:52:bb:ba:09:53:76:5f: f5:7f:3d:8c:86:6e:24:86:43:68:f3:49:88:58:00: ef:85:87:a8:fe:a4:2b:12:d0:81:d5:64:18:81:16: 63:8f:3c:b9:93:c7:3b:ca:8e:c1:31:48:bf:43:1c: a7:31:e2:02:18:e6:91:38:a2:e6:07:7e:4a:c0:f1: 10:f2:4e:66:28:70:f6:1c:7e:18:aa:c6:91:49:42: 30:b5:e1:d5:75:8a:b1:f8:df:6e:88:0c:55:62:3f: a6:bb:3d:13:b4:b3:aa:1f:56:19:6e:4a:42:8b:fc: 93:7f:31:c7:74:cb:07:b1:2a:57:5f:b7:25:93:5c: 99:fd:46:f8:af:bc:0b:9f:38:df:d4:6d:29:f8:6d: 8e:82:ce:54:0a:22:00:14:9d:c9:02:61:f5:ce:e1: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:87:0E:ED:BF:B7:B6:7E:0A:67:5D:57:3A:63:E9:25:CA:36:0D:92 X509v3 Authority Key Identifier: keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a4:75:99:9f:35:d1:e9:70:8b:c8:77:2c:17:46:9e:82:37: e3:f7:64:64:d1:d9:2a:46:e7:74:7d:d4:a6:3d:72:1a:17:db: d1:0c:0d:14:63:74:b0:ed:b9:66:07:61:3d:80:3c:56:d1:4f: 5b:99:29:7b:73:43:5c:0e:ab:48:29:96:bc:92:2c:18:3c:c2: 28:ae:28:c1:c2:e3:35:89:b9:b3:36:d8:4b:a2:38:5c:97:ae: d8:57:e2:ae:6f:44:c5:92:eb:4c:8f:a2:b6:0c:96:f4:d4:98: a4:bb:3a:95:28:84:7a:fd:45:2d:44:ec:75:26:49:38:f2:a1: e3:39:50:09:c5:14:00:d1:cb:02:f6:19:c8:d3:93:cc:aa:ce: 11:16:c9:77:a4:af:41:12:ec:f6:ed:d9:e8:76:65:cc:72:f9: ae:0d:aa:48:36:1d:2e:99:50:30:64:ff:6f:26:85:03:8f:cd: b5:f1:30:e3:5e:dd:ef:a7:64:4f:7f:2f:ac:b2:0f:30:d5:f4: 02:64:6a:39:5c:24:14:21:3b:31:49:2c:27:6a:0e:2b:ed:94: 07:b0:5c:36:47:f1:6b:b7:68:a2:0d:5d:75:77:b6:59:d1:25: 03:2e:50:c8:b6:0b:d4:7d:0e:1a:ac:bc:d2:0a:e1:25:79:e1: b5:6e:c8:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw9IN49zA+u8vpgvwWqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk ZTRjNmQwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD Eyg1ZDg3MGVlZGJmYjdiNjdlMGE2NzVkNTczYTYzZTkyNWNhMzYwZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHCIzVWzDQkvsUL5tf1TqSEArD7T 4/YUh3lGWgCYIGwD0H10ju/ogvGXRcRE44i0ctuGecHENLFhvXjZ3+Nhkv3XwzX1 25a80Ir8a6HKcc/oB5nmFLlCPQnJ4BXzziQ81lK7uglTdl/1fz2Mhm4khkNo80mI WADvhYeo/qQrEtCB1WQYgRZjjzy5k8c7yo7BMUi/QxynMeICGOaROKLmB35KwPEQ 8k5mKHD2HH4YqsaRSUIwteHVdYqx+N9uiAxVYj+muz0TtLOqH1YZbkpCi/yTfzHH dMsHsSpXX7clk1yZ/Ub4r7wLnzjf1G0p+G2Ogs5UCiIAFJ3JAmH1zuFdtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2HDu2/t7Z+CmddVzpj6SXKNg2SMB8GA1UdIwQY MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6R1mZ81 0elwi8h3LBdGnoI34/dkZNHZKkbndH3Upj1yGhfb0QwNFGN0sO25ZgdhPYA8VtFP W5kpe3NDXA6rSCmWvJIsGDzCKK4owcLjNYm5szbYS6I4XJeu2Ffirm9ExZLrTI+i tgyW9NSYpLs6lSiEev1FLUTsdSZJOPKh4zlQCcUUANHLAvYZyNOTzKrOERbJd6Sv QRLs9u3Z6HZlzHL5rg2qSDYdLplQMGT/byaFA4/NtfEw417d76dkT38vrLIPMNX0 AmRqOVwkFCE7MUksJ2oOK+2UB7BcNkfxa7doog1ddXe2WdElAy5QyLYL1H0OGqy8 0grhJXnhtW7IdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:33 2025 by rpki-client