This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json) Hash identifier: hOVapYQQeAqVtVxWAXFYMo13S+wuGSOJYNlXfOF0Hfc= Subject key identifier: 2C:16:F0:E8:DC:24:E9:C1:15:3B:C6:26:EE:E2:4B:14:9A:C0:BF:BA Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f Certificate serial: 019AF2AD8315EE66D912F826CD354835434A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=) 2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: mXuyqjKPsxFmp6DSNRGyrcTxVrFCVPoUrC674CVwIOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:83:15:ee:66:d9:12:f8:26:cd:35:48:35:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=2c16f0e8dc24e9c1153bc626eee24b149ac0bfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:cd:fd:49:98:1a:6f:64:65:a6:09:96:82: 38:de:b4:8f:bc:eb:99:9b:95:41:ad:e4:65:7d:e5: 34:29:d7:e7:76:25:a1:cb:16:bb:ac:5e:69:87:5a: f0:c7:1c:4c:56:7e:97:6c:fc:a7:59:7b:1a:bc:16: 84:49:a3:07:e9:e5:cf:48:cc:bc:0f:6b:35:5f:55: 72:e9:ce:4f:d7:d3:6e:4f:0f:35:62:60:f5:40:0a: 0c:f6:86:30:c3:e8:8f:8e:07:54:3a:c0:89:ff:7c: 1e:a0:2c:c8:98:2e:6f:ac:db:30:46:e5:d0:b3:be: a6:d9:71:95:25:81:15:5f:d8:10:0e:54:3f:c0:8a: e3:37:dc:59:fb:d3:4e:39:e5:80:59:75:bd:cb:af: 6c:85:fd:cd:91:04:20:66:16:24:6a:56:12:37:c3: be:b4:d8:02:3f:a2:de:8e:6c:a2:8b:1a:20:5d:a3: 70:e2:ac:42:96:0b:19:bc:f4:4f:39:f1:56:94:9d: 81:7c:d8:74:30:9a:c1:ed:f8:7b:dc:2a:97:93:3f: 2c:3b:06:4f:b7:09:41:c4:10:c9:e3:a1:99:e1:2b: fa:f7:01:3b:8e:53:a6:63:96:5f:c3:b2:0c:6d:ce: 5b:b5:cb:0e:cd:ea:89:59:52:20:84:08:5c:82:6f: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:F0:E8:DC:24:E9:C1:15:3B:C6:26:EE:E2:4B:14:9A:C0:BF:BA X509v3 Authority Key Identifier: keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fe:d2:3a:d1:b6:81:bc:36:f9:a0:86:21:87:e5:30:4f:a0: 7a:8b:94:3f:90:f9:e4:1c:79:93:a1:e9:37:d9:37:f1:40:19: 31:99:d3:b7:6a:8a:3d:25:e0:4f:e5:fd:a9:c0:d9:78:16:e2: ac:43:b5:aa:40:fc:a2:85:7a:be:83:8b:97:6e:de:41:e5:1d: dc:9b:da:dc:09:f1:3d:3e:d4:95:67:22:09:d8:b5:7e:5f:8f: 97:9d:d0:96:6e:c7:72:d6:61:7b:db:b8:c0:0f:f9:5b:58:09: 4a:a2:76:e8:3a:1b:00:e5:ff:ac:b5:0d:22:36:01:6b:44:db: 81:be:08:48:e2:d9:51:c8:2d:46:2a:9d:51:20:c0:82:c3:e6: 53:b5:40:ad:6d:0a:af:29:c9:c6:86:62:38:27:e0:1f:bb:42: 6d:66:fc:d7:74:0d:3a:37:72:a0:78:2a:02:76:0d:0c:57:8c: 04:26:4d:b4:2b:9f:de:57:38:1e:fc:14:a3:05:1e:d2:79:8a: 94:e6:3e:e4:d6:92:c8:68:f6:53:0e:1b:d7:5a:5a:09:8c:e5: ca:fe:55:f9:d6:2c:01:e6:b1:ea:80:3c:87:f3:e6:39:bf:75: 4e:96:23:4a:34:e1:f1:af:b2:58:21:89:9f:75:c7:34:48:9e: 48:94:7a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYMV7mbZEvgmzTVINUNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTEyYmI1OWIwNjI3ZGEyM2FmOTBjMGYwNTg0YjcxYjUw Zjc3OGYwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EygyYzE2ZjBlOGRjMjRlOWMxMTUzYmM2MjZlZWUyNGIxNDlhYzBiZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujjN/UmYGm9kZaYJloI43rSPvOuZ m5VBreRlfeU0KdfndiWhyxa7rF5ph1rwxxxMVn6XbPynWXsavBaESaMH6eXPSMy8 D2s1X1Vy6c5P19NuTw81YmD1QAoM9oYww+iPjgdUOsCJ/3weoCzImC5vrNswRuXQ s76m2XGVJYEVX9gQDlQ/wIrjN9xZ+9NOOeWAWXW9y69shf3NkQQgZhYkalYSN8O+ tNgCP6LejmyiixogXaNw4qxClgsZvPRPOfFWlJ2BfNh0MJrB7fh73CqXkz8sOwZP twlBxBDJ46GZ4Sv69wE7jlOmY5Zfw7IMbc5btcsOzeqJWVIghAhcgm9QRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwW8OjcJOnBFTvGJu7iSxSawL+6MB8GA1UdIwQY MBaAFLQRK7WbBifaI6+QwPBYS3G1D3ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQt ODdhMTBiYzY4YTM3LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQtODdhMTBiYzY4YTM3 LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv7SOtG2 gbw2+aCGIYflME+geouUP5D55Bx5k6HpN9k38UAZMZnTt2qKPSXgT+X9qcDZeBbi rEO1qkD8ooV6voOLl27eQeUd3Jva3AnxPT7UlWciCdi1fl+Pl53Qlm7HctZhe9u4 wA/5W1gJSqJ26DobAOX/rLUNIjYBa0Tbgb4ISOLZUcgtRiqdUSDAgsPmU7VArW0K rynJxoZiOCfgH7tCbWb813QNOjdyoHgqAnYNDFeMBCZNtCuf3lc4HvwUowUe0nmK lOY+5NaSyGj2Uw4b11paCYzlyv5V+dYsAeax6oA8h/PmOb91TpYjSjTh8a+yWCGJ n3XHNEieSJR6Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:18 2025 by rpki-client