This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json) Hash identifier: ePaWS5BJ4DY/wFMAe1ixHq3pEMMzgTS3GRo0HwP0uEE= Subject key identifier: D8:2D:8D:E3:A6:E2:2A:C0:DA:C0:CB:50:B3:F5:39:43:01:56:CD:4C Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Certificate serial: 019AF23FF84C606D3F4EF670606D45813131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft Manifest number: 0BA6 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=) 2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=) 3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=) 4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: txajgdjV979VfTxBtVT9dfci1hQ/nLIgZjCPwucPmN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f8:4c:60:6d:3f:4e:f6:70:60:6d:45:81:31:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=d82d8de3a6e22ac0dac0cb50b3f539430156cd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:39:54:2e:aa:11:38:ce:34:4e:b5:f9:47: e6:08:d5:e8:ef:88:50:50:f4:8c:46:f0:3d:51:56: 12:e0:63:d3:cb:e0:ff:78:ac:6a:41:a5:b3:cd:6d: 9b:5f:24:1e:80:8f:d1:55:b2:0a:72:21:6a:33:4f: ec:cd:31:71:62:7a:59:64:b7:59:d7:0c:93:b1:d5: a1:cf:2f:6d:19:cd:60:83:13:35:21:69:9e:2b:4e: 3c:a7:b0:d1:50:b9:a3:3a:c8:2f:55:1f:6d:45:d4: 8a:79:64:ee:6c:99:67:df:56:56:1b:67:5a:d2:cc: af:7d:6c:5e:62:1d:0e:a4:87:0c:e8:2b:ad:a7:7d: 34:c7:bb:ce:47:50:13:23:c6:b5:39:79:ce:d8:42: 6b:92:a9:f4:4e:89:a8:f3:f8:8c:7f:de:e5:62:30: 5d:b8:d4:75:27:ea:01:21:a5:32:cd:01:ac:61:68: 07:5a:df:e7:f7:83:14:74:21:8a:18:3c:b4:66:ea: ab:1b:cb:96:6b:02:b7:f2:7b:27:1f:b4:58:e9:f9: 84:d5:f1:99:13:36:e1:5f:78:b2:d2:cd:ae:60:88: c4:85:63:74:93:a8:af:80:92:65:6a:75:85:14:79: df:cb:4c:06:1c:57:f7:89:03:2a:04:d3:e3:f9:01: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2D:8D:E3:A6:E2:2A:C0:DA:C0:CB:50:B3:F5:39:43:01:56:CD:4C X509v3 Authority Key Identifier: keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:dc:68:77:de:0e:42:87:19:2f:f9:56:18:d2:3f:aa:c8:49: e5:54:f5:04:51:b1:5b:5c:e9:e3:d9:2d:23:d7:bf:96:4c:28: 06:bf:ba:34:ae:1c:54:55:29:cc:de:0d:46:cf:27:0c:f9:fd: 4e:51:60:34:1b:df:90:b6:74:b0:9d:80:26:f6:38:93:b2:34: 32:46:57:d7:20:4d:45:b7:ad:5c:bc:a4:90:b6:d5:66:72:03: 94:75:31:2e:7f:b8:3b:e6:41:85:c5:83:45:ca:17:46:71:7c: 01:0c:4c:91:3d:bf:28:65:86:93:18:7b:70:99:e5:6d:11:af: 0f:e8:f1:df:57:75:c5:9d:7f:0b:80:fa:35:a5:00:79:1d:0f: 62:e3:23:c6:d5:ac:5e:88:89:3f:65:2c:0d:1d:5e:37:a8:30: 8c:69:5b:9b:13:1f:e4:e0:1d:87:df:6e:f2:16:18:7f:7f:1b: 90:ab:de:5e:c9:39:d6:b0:cd:49:54:5c:32:67:78:67:ce:be: c5:29:17:eb:4f:46:f7:a3:80:32:73:00:94:7d:db:58:f1:b1: a2:5b:b4:14:df:70:4d:01:a9:bd:85:19:86:fd:a2:ba:a5:8e: 12:3a:73:6b:75:e9:fb:53:ab:89:63:d4:ec:5a:20:22:50:db: b2:7f:76:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/hMYG0/TvZwYG1FgTExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz OTg3ZDgwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EyhkODJkOGRlM2E2ZTIyYWMwZGFjMGNiNTBiM2Y1Mzk0MzAxNTZjZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZg5VC6qETjONE61+UfmCNXo74hQ UPSMRvA9UVYS4GPTy+D/eKxqQaWzzW2bXyQegI/RVbIKciFqM0/szTFxYnpZZLdZ 1wyTsdWhzy9tGc1ggxM1IWmeK048p7DRULmjOsgvVR9tRdSKeWTubJln31ZWG2da 0syvfWxeYh0OpIcM6Cutp300x7vOR1ATI8a1OXnO2EJrkqn0Tomo8/iMf97lYjBd uNR1J+oBIaUyzQGsYWgHWt/n94MUdCGKGDy0ZuqrG8uWawK38nsnH7RY6fmE1fGZ EzbhX3iy0s2uYIjEhWN0k6ivgJJlanWFFHnfy0wGHFf3iQMqBNPj+QFxNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgtjeOm4irA2sDLULP1OUMBVs1MMB8GA1UdIwQY MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdxod94O QocZL/lWGNI/qshJ5VT1BFGxW1zp49ktI9e/lkwoBr+6NK4cVFUpzN4NRs8nDPn9 TlFgNBvfkLZ0sJ2AJvY4k7I0MkZX1yBNRbetXLykkLbVZnIDlHUxLn+4O+ZBhcWD RcoXRnF8AQxMkT2/KGWGkxh7cJnlbRGvD+jx31d1xZ1/C4D6NaUAeR0PYuMjxtWs XoiJP2UsDR1eN6gwjGlbmxMf5OAdh99u8hYYf38bkKveXsk51rDNSVRcMmd4Z86+ xSkX609G96OAMnMAlH3bWPGxolu0FN9wTQGpvYUZhv2iuqWOEjpza3Xp+1OriWPU 7FogIlDbsn92Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:11 2025 by rpki-client