This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json) Hash identifier: hEGW7KZSF+uVho1z8Jb+aWj2jhspjTlSsEFejKStM1I= Subject key identifier: 2A:3E:FA:8C:39:53:A0:1D:C9:AE:FB:4D:F1:77:11:FF:32:0A:DC:81 Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Certificate serial: 019AF12CF50806FAB8BC152CFD714A33659A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft Manifest number: 0299 Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=) 2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: luwzLV13VAloBiXgiL32lLaIaAy7DTdi0q4yBZ4uzTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f5:08:06:fa:b8:bc:15:2c:fd:71:4a:33:65:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2 Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=2a3efa8c3953a01dc9aefb4df17711ff320adc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:0e:a0:e4:75:68:82:59:68:1e:79:e7:f8: a7:41:2d:3b:6a:36:ec:25:7b:50:8d:58:5a:32:8d: 01:de:a6:37:ba:f9:8b:09:de:74:0b:7a:96:1f:41: 94:3d:ae:d6:87:b9:d2:05:f9:c8:4e:2c:40:99:4a: 8d:5f:1c:3b:61:0f:58:e6:dc:01:9f:13:9a:07:43: f2:4c:63:5d:e3:15:27:ae:20:b5:69:84:a9:25:b4: b5:0f:fb:c7:90:46:e7:58:46:a1:77:33:87:b3:6d: a0:89:1e:ef:59:cc:20:8b:b5:ad:3c:99:a5:6b:11: 86:f9:18:09:54:51:01:bf:ac:3f:a3:35:1e:e0:d7: 7c:04:78:09:7d:4e:85:b7:ed:63:9a:87:e4:8f:c8: 71:6b:f4:e0:12:a5:38:6e:1d:82:16:c1:f7:9d:8f: cf:6c:9e:2f:62:4a:39:fa:0a:d4:4d:95:53:bd:30: 9b:53:88:9c:d0:bd:c2:9c:f6:08:e0:c2:d2:01:91: f1:e6:2a:ff:c1:e6:c7:eb:4c:ba:63:95:09:dc:f6: a9:b7:4d:63:30:f4:b0:dc:66:ca:54:f7:56:4f:80: 7f:64:be:1e:9b:d3:2e:19:35:9d:53:ba:26:63:8c: 10:4a:a3:41:7f:dc:a2:b7:47:21:99:d2:39:2d:a8: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:FA:8C:39:53:A0:1D:C9:AE:FB:4D:F1:77:11:FF:32:0A:DC:81 X509v3 Authority Key Identifier: keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c9:78:3a:89:8b:b3:07:0b:97:c4:55:7a:65:56:9b:01:15: 8d:eb:48:ca:82:a6:17:de:21:ab:7c:87:56:ee:c0:aa:e5:8c: ad:2e:48:21:df:e0:74:5a:c3:97:0a:ad:cf:37:cc:84:b2:57: c9:a7:ca:d5:1a:f2:d8:71:1e:fd:32:d0:2b:18:ea:25:b8:ef: b5:e6:13:dd:46:19:08:31:ae:4f:70:31:4f:8e:62:80:55:f3: 3a:ee:d6:c0:02:af:29:5f:47:20:e8:af:5d:8a:1f:1a:b3:92: 7c:a6:d7:f5:c4:b4:d9:2d:73:12:77:e1:48:57:14:65:03:b8: 40:ba:d9:06:11:eb:2d:38:7d:91:cf:11:c1:be:ad:7e:d9:2e: ce:14:b4:97:f0:9a:b9:d4:81:83:78:d0:90:30:10:26:02:72: b6:41:9e:4f:3f:ac:7f:3f:50:2c:11:67:b0:15:9c:3b:e2:9c: 2b:83:46:f5:58:75:bf:3a:54:11:48:fc:59:a9:e1:a2:6e:cf: f1:30:fb:7d:02:db:37:9e:79:0e:42:7a:01:bc:87:81:20:3c: 6e:1f:98:06:1b:91:4c:b3:0e:ef:fa:4e:c8:cc:39:97:a1:08: 0d:87:de:6a:37:8b:10:46:68:aa:25:78:1f:39:e7:73:66:d1: a9:6a:1c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPUIBvq4vBUs/XFKM2WaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjZkZmE3ZjllMjg4NGZiMjFkMTA3M2U0OGMwYmQ1ODg2 YWRlZTIwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EygyYTNlZmE4YzM5NTNhMDFkYzlhZWZiNGRmMTc3MTFmZjMyMGFkYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJUOoOR1aIJZaB555/inQS07ajbs JXtQjVhaMo0B3qY3uvmLCd50C3qWH0GUPa7Wh7nSBfnITixAmUqNXxw7YQ9Y5twB nxOaB0PyTGNd4xUnriC1aYSpJbS1D/vHkEbnWEahdzOHs22giR7vWcwgi7WtPJml axGG+RgJVFEBv6w/ozUe4Nd8BHgJfU6Ft+1jmofkj8hxa/TgEqU4bh2CFsH3nY/P bJ4vYko5+grUTZVTvTCbU4ic0L3CnPYI4MLSAZHx5ir/webH60y6Y5UJ3Papt01j MPSw3GbKVPdWT4B/ZL4em9MuGTWdU7omY4wQSqNBf9yit0chmdI5LagZ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo++ow5U6Adya77TfF3Ef8yCtyBMB8GA1UdIwQY MBaAFLUm36f54ohPsh0Qc+SMC9WIat7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2It ZDFjZDA5NTY4ZTgyLzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2ItZDFjZDA5NTY4ZTgy LzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8l4OomL swcLl8RVemVWmwEVjetIyoKmF94hq3yHVu7AquWMrS5IId/gdFrDlwqtzzfMhLJX yafK1Rry2HEe/TLQKxjqJbjvteYT3UYZCDGuT3AxT45igFXzOu7WwAKvKV9HIOiv XYofGrOSfKbX9cS02S1zEnfhSFcUZQO4QLrZBhHrLTh9kc8Rwb6tftkuzhS0l/Ca udSBg3jQkDAQJgJytkGeTz+sfz9QLBFnsBWcO+KcK4NG9Vh1vzpUEUj8Wanhom7P 8TD7fQLbN555DkJ6AbyHgSA8bh+YBhuRTLMO7/pOyMw5l6EIDYfeajeLEEZoqiV4 Hznnc2bRqWocbA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:33 2025 by rpki-client