This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json) Hash identifier: CS+6FFqVssHjNaPB+Z0vTlsoGhsZf22V+ej9kbpKBbw= Subject key identifier: 27:6C:40:D7:F0:29:F9:37:F9:85:3B:F8:99:8E:85:E1:B9:A1:9D:63 Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb Certificate serial: 019AF465452FF84CE8BD57C931E99DDC6D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 16:01:08 +0000 Manifest this update: Sat 06 Dec 2025 16:01:08 +0000 Manifest next update: Sun 07 Dec 2025 16:01:08 +0000 Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=) 2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=) 3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: V+YD/DlGKKcrTGdwRtUTOnt3sJGGIomGRg/QzIegLXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:45:2f:f8:4c:e8:bd:57:c9:31:e9:9d:dc:6d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ad79492e809934d693b11855e75103241569eb Validity Not Before: Dec 6 16:01:08 2025 GMT Not After : Dec 7 16:01:08 2025 GMT Subject: CN=276c40d7f029f937f9853bf8998e85e1b9a19d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:f1:0b:e8:a2:bc:15:f5:5e:37:0b:79:46: 41:1a:b8:68:96:2e:61:a6:9c:ba:6e:e9:26:07:52: d3:07:c0:87:e5:8a:0d:55:b9:50:c2:86:aa:11:65: 85:63:64:7c:96:ee:b5:10:60:63:3b:8f:fd:be:9a: 47:4a:3f:5e:88:d4:28:23:eb:e5:bc:fb:e5:0f:a8: 5b:a1:cd:e7:70:1f:62:62:47:28:c0:b7:17:eb:ff: 64:85:fe:ce:3c:86:33:5e:41:ec:bf:32:e3:e9:38: a3:9e:51:39:68:72:87:03:bb:f0:02:a0:21:cd:e8: 2c:67:d1:63:84:0b:c8:10:97:69:a8:55:61:8e:91: eb:d1:79:34:a8:41:e6:6b:db:ce:7f:79:03:41:fa: 59:aa:67:f6:2d:b2:27:b5:58:fb:20:d9:7f:80:54: 95:66:34:ce:49:ad:0a:6f:0f:a3:c7:85:5c:d0:b7: c0:84:b2:61:3a:d8:76:64:f5:83:22:69:d3:9d:ac: 59:61:74:92:72:1f:d4:74:20:27:63:b8:bb:b3:d5: cf:d6:85:7c:42:97:df:2b:e7:97:c5:d3:6e:20:d0: 90:36:8f:29:5e:00:5e:d7:0e:05:9e:d6:6a:11:28: f2:9d:a3:12:3d:20:01:8e:e6:f9:14:07:d9:9f:70: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6C:40:D7:F0:29:F9:37:F9:85:3B:F8:99:8E:85:E1:B9:A1:9D:63 X509v3 Authority Key Identifier: keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:23:bf:1d:3b:31:74:1f:f5:99:d3:ce:e0:ae:31:78:1d:7e: 30:77:ee:87:29:9d:29:e8:49:de:e5:55:26:d9:e2:0c:66:42: 79:56:be:8e:9f:de:08:b4:da:9c:79:70:34:de:1e:4a:d2:f5: d2:b9:5d:5a:cb:4b:a8:58:0a:1b:6b:be:60:aa:04:ec:37:33: 25:ed:55:45:9a:5b:bd:14:20:dc:21:ab:55:31:57:5b:cd:12: 0b:61:ad:93:a3:67:f1:bb:f1:84:92:9e:2e:13:52:ee:47:01: dd:55:18:5f:0f:c1:ca:13:ee:d0:00:fc:5e:a8:cf:bd:67:5b: 18:b7:42:32:a3:b4:51:9a:3f:e7:6c:6c:fa:d2:8a:ca:5e:37: 69:9c:3a:e9:cd:88:41:1a:fd:73:d0:9a:e9:7c:07:b9:b5:86: be:fe:4a:07:d6:e2:5b:9a:b5:fe:f7:66:2d:f5:08:72:d1:38: c4:12:a2:5a:8e:f3:e3:d4:be:84:9d:d6:05:50:03:d3:1d:70: 38:b9:ab:f3:a2:3f:d2:d1:63:be:fc:66:df:de:31:42:95:e1: 3c:40:bb:44:7a:dd:4e:86:33:c2:c0:f3:fb:0d:be:68:b6:ad: 25:c9:5e:83:f2:e5:41:01:0e:f9:52:7b:5e:f9:42:c4:53:87: d9:2b:29:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUUv+EzovVfJMemd3G0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx NTY5ZWIwHhcNMjUxMjA2MTYwMTA4WhcNMjUxMjA3MTYwMTA4WjAzMTEwLwYDVQQD EygyNzZjNDBkN2YwMjlmOTM3Zjk4NTNiZjg5OThlODVlMWI5YTE5ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YzxC+iivBX1XjcLeUZBGrholi5h ppy6bukmB1LTB8CH5YoNVblQwoaqEWWFY2R8lu61EGBjO4/9vppHSj9eiNQoI+vl vPvlD6hboc3ncB9iYkcowLcX6/9khf7OPIYzXkHsvzLj6TijnlE5aHKHA7vwAqAh zegsZ9FjhAvIEJdpqFVhjpHr0Xk0qEHma9vOf3kDQfpZqmf2LbIntVj7INl/gFSV ZjTOSa0Kbw+jx4Vc0LfAhLJhOth2ZPWDImnTnaxZYXSSch/UdCAnY7i7s9XP1oV8 QpffK+eXxdNuINCQNo8pXgBe1w4FntZqESjynaMSPSABjub5FAfZn3AfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdsQNfwKfk3+YU7+JmOheG5oZ1jMB8GA1UdIwQY MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt ZjM3OTdlZjM0OGZmLzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCO/HTsx dB/1mdPO4K4xeB1+MHfuhymdKehJ3uVVJtniDGZCeVa+jp/eCLTanHlwNN4eStL1 0rldWstLqFgKG2u+YKoE7DczJe1VRZpbvRQg3CGrVTFXW80SC2Gtk6Nn8bvxhJKe LhNS7kcB3VUYXw/ByhPu0AD8XqjPvWdbGLdCMqO0UZo/52xs+tKKyl43aZw66c2I QRr9c9Ca6XwHubWGvv5KB9biW5q1/vdmLfUIctE4xBKiWo7z49S+hJ3WBVAD0x1w OLmr86I/0tFjvvxm394xQpXhPEC7RHrdToYzwsDz+w2+aLatJcleg/LlQQEO+VJ7 XvlCxFOH2SspUA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:30 2025 by rpki-client