This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft File: 19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json) Hash identifier: coB3T99T4MubbkoPpTjmUOAGTGNcM3emEBYDuz/+0t8= Subject key identifier: 3C:88:F2:A3:C7:23:51:7E:F0:A7:1B:95:74:00:A5:4C:BE:34:A0:4B Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Certificate serial: 019AF3897E4FA2C18A9BF1E6CC8FEDCB0B1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft Manifest number: 089F Signing time: Sat 06 Dec 2025 12:01:05 +0000 Manifest this update: Sat 06 Dec 2025 12:01:05 +0000 Manifest next update: Sun 07 Dec 2025 12:01:05 +0000 Files and hashes: 1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: BGWHURjw+rhrjY6f+gpsKIfxALtX7bg24cGt5DyWnxU=) 2: 8iF0TI75PKxA6luqVxe6AcPUdIw.roa (hash: zuZGyASOIUwUAnK/KJcy85MR7JAwFUMnhbd2U54FQPI=) 3: itbVtWP59mCPTrHaDnFdRJMUVew.roa (hash: e0BQXURiCQ3TdcGRBASSre11rKXIoznsycIbHY0QbKM=) 4: ySRDlwFvtMEyAEchCR7IpwI1hOE.roa (hash: Se2FW8a2atFU/DlmDTltY5HULLymwYj0jaibNxe54YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7e:4f:a2:c1:8a:9b:f1:e6:cc:8f:ed:cb:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Validity Not Before: Dec 6 12:01:05 2025 GMT Not After : Dec 7 12:01:05 2025 GMT Subject: CN=3c88f2a3c723517ef0a71b957400a54cbe34a04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:8b:f7:50:e8:66:63:96:52:6f:3b:3c:74: 95:cc:66:02:6f:ed:76:22:51:b2:3f:00:42:73:dc: 56:eb:f0:78:84:5b:1b:ee:e6:72:12:32:df:9d:db: 5e:4a:b8:75:3c:d0:3b:47:de:08:b3:54:8c:f3:93: f2:ad:42:eb:82:b0:4a:38:74:52:66:82:a8:85:cd: ac:73:f4:9c:ae:06:39:6b:17:c6:53:77:85:d8:cc: b4:2a:59:ee:bd:4b:45:ad:1d:3f:dd:b9:0c:ee:dc: 52:ce:60:c5:b9:8a:10:2d:07:46:6f:cf:3e:9f:ca: ba:a2:9b:4d:71:13:a7:bf:d9:e7:11:4b:0d:37:dc: dd:42:d4:e4:73:fc:89:c6:86:13:0a:a9:3c:5d:5d: fc:a5:0b:84:6f:7a:d9:0a:95:d3:46:fd:be:6d:bd: a3:c3:a1:2e:5e:19:c7:d1:01:76:ed:f1:32:20:61: 58:11:69:87:0a:a4:a2:8a:30:ae:22:c8:a7:27:66: 99:34:db:9f:5d:e1:18:74:df:3f:27:00:26:cd:8c: 16:60:a8:1d:63:bb:69:31:d1:a6:0f:d7:3c:38:fb: 91:4f:41:6d:de:61:8b:22:d7:32:0c:c8:0b:6c:46: ce:13:d4:0e:88:cc:0c:77:63:6a:c0:b8:37:71:58: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:F2:A3:C7:23:51:7E:F0:A7:1B:95:74:00:A5:4C:BE:34:A0:4B X509v3 Authority Key Identifier: keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:78:a7:91:3d:aa:59:75:e3:b4:55:7b:63:0e:0f:cf:3d:eb: 04:30:e9:c8:fa:3c:4c:04:cc:6e:90:f1:9d:ae:77:51:ec:ac: 76:dc:15:af:2f:fc:2d:34:2b:fd:fd:03:e4:c0:a8:86:cf:f6: 0d:e3:a9:cb:9c:ff:0d:08:0c:15:24:36:5a:56:11:b3:c6:ef: 14:d4:77:92:b6:7c:39:f4:b4:63:e1:a4:0b:f7:79:7b:39:bf: ee:10:b3:33:2a:51:10:ad:89:88:61:56:d2:7e:02:7b:17:89: 19:b8:ba:f2:7c:c8:b0:a5:fd:c7:84:89:ef:a5:4c:af:98:78: e0:e2:a9:6a:2e:11:75:9c:3a:c0:69:ae:99:1f:35:8a:d6:43: 89:3f:ff:28:1c:da:37:56:30:e9:3a:49:88:d2:c6:7b:7b:ee: d1:96:19:73:24:9d:ac:df:03:94:50:65:ac:12:ee:30:31:9d: e5:f2:56:5d:22:3b:02:6a:7e:45:0e:9c:24:d1:2b:a4:07:36: 5e:5e:19:ad:3d:77:85:0f:9a:97:98:fd:83:8c:c7:81:e9:a2: c0:9a:37:24:20:2c:1d:5d:fa:30:ed:27:9e:67:82:8b:3d:0d: ab:96:ae:24:ef:ab:7d:4f:be:bf:32:b4:b0:c5:dd:35:27:b3: 7a:c7:54:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziX5PosGKm/HmzI/tywsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm NmMwYWYwHhcNMjUxMjA2MTIwMTA1WhcNMjUxMjA3MTIwMTA1WjAzMTEwLwYDVQQD EygzYzg4ZjJhM2M3MjM1MTdlZjBhNzFiOTU3NDAwYTU0Y2JlMzRhMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmReL91DoZmOWUm87PHSVzGYCb+12 IlGyPwBCc9xW6/B4hFsb7uZyEjLfndteSrh1PNA7R94Is1SM85PyrULrgrBKOHRS ZoKohc2sc/ScrgY5axfGU3eF2My0KlnuvUtFrR0/3bkM7txSzmDFuYoQLQdGb88+ n8q6optNcROnv9nnEUsNN9zdQtTkc/yJxoYTCqk8XV38pQuEb3rZCpXTRv2+bb2j w6EuXhnH0QF27fEyIGFYEWmHCqSiijCuIsinJ2aZNNufXeEYdN8/JwAmzYwWYKgd Y7tpMdGmD9c8OPuRT0Ft3mGLItcyDMgLbEbOE9QOiMwMd2NqwLg3cVimaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyI8qPHI1F+8KcblXQApUy+NKBLMB8GA1UdIwQY MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It ODIzMmZhM2U2MjlkLzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXinkT2q WXXjtFV7Yw4Pzz3rBDDpyPo8TATMbpDxna53UeysdtwVry/8LTQr/f0D5MCohs/2 DeOpy5z/DQgMFSQ2WlYRs8bvFNR3krZ8OfS0Y+GkC/d5ezm/7hCzMypREK2JiGFW 0n4CexeJGbi68nzIsKX9x4SJ76VMr5h44OKpai4RdZw6wGmumR81itZDiT//KBza N1Yw6TpJiNLGe3vu0ZYZcySdrN8DlFBlrBLuMDGd5fJWXSI7Amp+RQ6cJNErpAc2 Xl4ZrT13hQ+al5j9g4zHgemiwJo3JCAsHV36MO0nnmeCiz0Nq5auJO+rfU++vzK0 sMXdNSezesdUNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:11 2025 by rpki-client