This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json) Hash identifier: O8AdxgYhF3MkHXZtpXePxxktfv7gSnm3AeUF98LqHgE= Subject key identifier: E9:09:24:9D:7E:64:BF:7D:53:35:E1:3D:76:8B:89:88:A4:74:B5:45 Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Certificate serial: 019AF23F7969170F784DD099F08BA6DF68A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft Manifest number: 0214 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=) 2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=) 3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: yd2yr6gwxh0uA70QxIzGGViq9FHUJkHLIixdpie6tpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:69:17:0f:78:4d:d0:99:f0:8b:a6:df:68:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=e909249d7e64bf7d5335e13d768b8988a474b545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:ec:e8:0b:60:59:10:5c:4c:c7:c1:aa:bd: 36:f5:06:5a:fc:99:70:52:24:3f:15:f6:f6:4c:0b: 06:6c:cd:ed:f8:2a:0f:58:df:79:02:9d:1f:83:2b: 07:5e:26:8c:a0:b2:25:5f:63:d3:9b:f0:7b:6f:64: f9:aa:15:61:9b:8e:ea:2b:3e:85:d0:c2:3b:e7:3f: a0:36:d0:60:4b:28:7d:2e:1d:5a:4d:61:37:b6:90: b2:d4:a4:3c:10:77:fb:b7:bb:81:91:7c:68:e7:9e: 65:b9:54:53:7f:81:41:42:8f:a5:cf:04:29:a9:46: 17:be:fc:76:45:0a:98:32:c8:b2:18:d7:a8:91:6b: c8:20:fa:19:72:c9:c6:07:1e:5d:b7:7f:72:60:36: f5:59:4e:58:04:50:11:da:36:87:ca:08:e3:15:4c: 2c:09:b6:68:0d:f5:18:29:d1:34:40:bc:5a:2e:af: 9a:35:12:d9:42:b1:9f:0d:c0:bc:91:15:5a:21:90: 63:98:0f:82:cb:85:a1:ac:81:c1:b4:31:2b:d6:69: f6:2b:5e:93:b1:c8:e7:5d:b8:c0:2d:b3:b0:bc:91: 41:0a:fd:fc:76:83:6a:9c:37:48:00:d0:d8:34:eb: cf:e1:20:18:31:52:f8:af:02:55:19:65:25:8f:95: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:24:9D:7E:64:BF:7D:53:35:E1:3D:76:8B:89:88:A4:74:B5:45 X509v3 Authority Key Identifier: keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0c:73:6c:bc:52:79:7a:dc:e3:2c:4f:63:e3:80:56:4b:59: 57:c0:cd:6c:92:d6:63:77:de:17:60:c2:2a:8f:90:27:a5:f6: 33:86:b9:b5:64:3f:67:4b:5c:19:f4:99:6e:16:6e:db:d9:25: 3c:ed:c5:9a:32:5d:fb:f0:61:41:92:d1:c7:01:bd:0e:2a:70: e4:60:23:28:31:7a:07:d7:e4:96:3d:c3:9d:41:df:17:fd:d7: d6:d2:d7:b4:f6:e7:d2:e7:00:60:79:91:1a:26:ab:50:f3:d4: 77:83:f4:75:4e:71:d4:c9:25:dd:9d:7a:46:6a:6b:a2:10:3a: ff:dc:03:98:80:68:c6:9d:16:39:9d:45:f4:c6:e4:68:e1:d0: 62:0c:f0:b9:85:84:ef:3a:b1:b7:ce:34:74:66:48:24:09:db: d7:8d:64:fe:99:fc:ac:56:f8:e9:70:78:aa:76:93:4b:80:2b: 4f:6b:3a:39:c2:f2:ac:e2:6c:c5:a6:16:14:48:ee:11:15:ba: bb:be:4e:a8:92:24:b4:f8:70:e5:85:4a:77:14:4f:91:e3:2f: 75:54:1c:5a:75:ab:c2:22:2c:5e:aa:1c:2d:5f:dc:5b:0a:d0: 02:8f:4d:83:fe:dd:78:5d:d8:4c:6e:a1:03:64:ff:a4:db:fd: 28:67:39:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3lpFw94TdCZ8Ium32iiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw YzliM2UwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhlOTA5MjQ5ZDdlNjRiZjdkNTMzNWUxM2Q3NjhiODk4OGE0NzRiNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfTs6AtgWRBcTMfBqr029QZa/Jlw UiQ/Ffb2TAsGbM3t+CoPWN95Ap0fgysHXiaMoLIlX2PTm/B7b2T5qhVhm47qKz6F 0MI75z+gNtBgSyh9Lh1aTWE3tpCy1KQ8EHf7t7uBkXxo555luVRTf4FBQo+lzwQp qUYXvvx2RQqYMsiyGNeokWvIIPoZcsnGBx5dt39yYDb1WU5YBFAR2jaHygjjFUws CbZoDfUYKdE0QLxaLq+aNRLZQrGfDcC8kRVaIZBjmA+Cy4WhrIHBtDEr1mn2K16T scjnXbjALbOwvJFBCv38doNqnDdIANDYNOvP4SAYMVL4rwJVGWUlj5X3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkJJJ1+ZL99UzXhPXaLiYikdLVFMB8GA1UdIwQY MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt OThmMWEyZGZjMzljLzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgxzbLxS eXrc4yxPY+OAVktZV8DNbJLWY3feF2DCKo+QJ6X2M4a5tWQ/Z0tcGfSZbhZu29kl PO3FmjJd+/BhQZLRxwG9Dipw5GAjKDF6B9fklj3DnUHfF/3X1tLXtPbn0ucAYHmR GiarUPPUd4P0dU5x1Mkl3Z16RmprohA6/9wDmIBoxp0WOZ1F9MbkaOHQYgzwuYWE 7zqxt840dGZIJAnb141k/pn8rFb46XB4qnaTS4ArT2s6OcLyrOJsxaYWFEjuERW6 u75OqJIktPhw5YVKdxRPkeMvdVQcWnWrwiIsXqocLV/cWwrQAo9Ng/7deF3YTG6h A2T/pNv9KGc5xA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:35 2025 by rpki-client