This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json) Hash identifier: A3mu5D5BLB6HI2hfEfiOJDbZn+jAt1zAkEwLhmHIsq0= Subject key identifier: 7A:72:0C:C1:DE:0D:89:F0:B9:C0:76:3A:10:A2:BA:4D:F7:3D:B1:E9 Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Certificate serial: 019AF19B6B11D71B24F645C45B1009666CB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: MB347QceobwPUIq5vH38/yT383VJiMttJTJZ91MRC7M=) 2: e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa (hash: nilHfeTYPJt56v6fPn3HSV0r3VH6M1R/PsNJkl8uQHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6b:11:d7:1b:24:f6:45:c4:5b:10:09:66:6c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=7a720cc1de0d89f0b9c0763a10a2ba4df73db1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:4d:4f:2c:d4:d5:6a:ec:b0:6a:d3:aa:2b: 22:78:47:bd:62:15:93:49:cf:cb:10:df:0f:31:68: 9a:fc:da:6b:6c:3e:d1:54:09:ba:ad:75:2c:fa:e3: f7:0b:0f:00:18:4f:ad:2f:24:ae:4c:7e:e5:f9:5f: 08:d9:32:aa:d3:3b:0c:67:7f:53:0b:e4:9f:77:ae: d7:ae:a5:92:c9:fe:c8:e9:7e:df:ec:ff:f0:fa:d4: 4b:8f:f8:d3:0c:19:2b:97:df:3a:2c:c3:37:53:82: df:0a:ce:fa:1f:b9:f5:2b:4f:17:92:78:71:22:d7: 94:09:92:9e:b3:c4:73:76:2f:01:59:6c:eb:ef:fc: 86:15:07:89:6a:2c:d1:33:34:8a:0f:59:26:96:86: 82:c5:39:1b:f2:87:70:16:5a:7d:54:ee:58:91:29: 3b:1f:64:50:e8:8b:05:ee:52:57:07:45:b5:e1:9b: 3b:2f:c2:01:e7:36:97:99:32:ef:d9:9c:2e:6d:37: 0c:60:91:13:d5:77:bf:c3:1d:87:8f:c0:b4:f7:e8: 95:91:45:64:39:32:be:24:3d:99:ad:db:ab:0e:8e: df:7b:5e:5e:ea:6b:aa:e1:4b:52:8c:a8:dc:a1:fe: 58:83:7a:fb:30:2c:d2:1b:4c:78:8f:ac:d1:a0:c0: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:72:0C:C1:DE:0D:89:F0:B9:C0:76:3A:10:A2:BA:4D:F7:3D:B1:E9 X509v3 Authority Key Identifier: keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d8:8c:76:28:47:f2:92:d9:23:3b:7e:72:9b:7b:41:09:70: 6b:09:8b:81:9f:41:9c:87:22:94:9a:ca:f3:2d:81:7c:6e:60: 6a:ad:c2:a5:ab:30:37:f7:6c:ed:6c:89:f2:22:60:25:86:cb: 62:a7:77:f5:0d:ce:b2:72:ef:08:9d:8e:2f:df:c1:0a:f8:f0: ee:0d:ff:80:d2:de:3e:85:d3:17:af:1d:5b:64:1e:af:4c:24: 36:55:e1:e8:0d:fe:81:d5:3b:c0:59:34:48:11:61:21:4a:86: e2:ba:65:b2:93:02:8d:70:89:d9:aa:90:e4:24:6f:73:3d:6e: c5:c9:88:c9:8b:89:19:9e:15:46:f8:2d:1e:7a:b6:e7:2e:26: da:eb:f1:7f:c6:e1:7b:25:e6:b1:a5:04:8a:99:64:7e:4b:ef: 63:b6:9b:26:1d:c1:c3:a2:c8:ce:17:6b:9b:98:84:84:45:5e: 8c:0f:f0:db:88:59:f4:e4:fa:af:3f:a1:01:2f:f4:fe:11:06: 0f:5c:a8:d4:89:12:06:63:95:fd:71:3f:67:05:e3:77:6d:9a: 2b:78:f8:70:af:a5:9e:16:77:9a:1f:11:20:8f:4f:90:cc:27: 07:87:5d:eb:f7:83:6b:dd:cb:cd:28:87:4f:3f:17:8c:f7:a4: 3d:dd:ea:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2sR1xsk9kXEWxAJZmy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5 ZGRlYjYwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg3YTcyMGNjMWRlMGQ4OWYwYjljMDc2M2ExMGEyYmE0ZGY3M2RiMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX5NTyzU1WrssGrTqisieEe9YhWT Sc/LEN8PMWia/NprbD7RVAm6rXUs+uP3Cw8AGE+tLySuTH7l+V8I2TKq0zsMZ39T C+Sfd67XrqWSyf7I6X7f7P/w+tRLj/jTDBkrl986LMM3U4LfCs76H7n1K08Xknhx IteUCZKes8Rzdi8BWWzr7/yGFQeJaizRMzSKD1kmloaCxTkb8odwFlp9VO5YkSk7 H2RQ6IsF7lJXB0W14Zs7L8IB5zaXmTLv2ZwubTcMYJET1Xe/wx2Hj8C09+iVkUVk OTK+JD2ZrdurDo7fe15e6muq4UtSjKjcof5Yg3r7MCzSG0x4j6zRoMAjeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpyDMHeDYnwucB2OhCiuk33PbHpMB8GA1UdIwQY MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt NWM5OWI2ODNkYjBkLzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutiMdihH 8pLZIzt+cpt7QQlwawmLgZ9BnIcilJrK8y2BfG5gaq3CpaswN/ds7WyJ8iJgJYbL Yqd39Q3OsnLvCJ2OL9/BCvjw7g3/gNLePoXTF68dW2Qer0wkNlXh6A3+gdU7wFk0 SBFhIUqG4rplspMCjXCJ2aqQ5CRvcz1uxcmIyYuJGZ4VRvgtHnq25y4m2uvxf8bh eyXmsaUEiplkfkvvY7abJh3Bw6LIzhdrm5iEhEVejA/w24hZ9OT6rz+hAS/0/hEG D1yo1IkSBmOV/XE/ZwXjd22aK3j4cK+lnhZ3mh8RII9PkMwnB4dd6/eDa93LzSiH Tz8XjPekPd3qaw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:53 2025 by rpki-client