This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json) Hash identifier: ydhbYKmsPw+IHgKViyhRmhwVrFEZOFYew0Cyh9rWXeI= Subject key identifier: 3F:A0:51:F4:70:28:8B:4E:B4:33:B3:1F:20:2F:81:4D:A2:66:E6:FE Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Certificate serial: 019B35D73BA6A224A76254D09D29E55D8B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft Manifest number: 012D Signing time: Fri 19 Dec 2025 09:00:56 +0000 Manifest this update: Fri 19 Dec 2025 09:00:56 +0000 Manifest next update: Sat 20 Dec 2025 09:00:56 +0000 Files and hashes: 1: Bp5u105cLnSyMkxh7KOR948iXRI.roa (hash: dXsxv8eIa/K3JwhNWYfSnstzHLowcvi/gCcrVvFubck=) 2: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: drWa/6/EyyY/f3MGTdTDz+2l0AZZ5rPOqRs0JoL76yY=) 3: uV6CiH9RzWt5YUGpNh9FxYDFKYI.roa (hash: G9nfDlMeM6Uq7b6uMDp3Lfko/1kG3ozVNwr5u9FMz8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:3b:a6:a2:24:a7:62:54:d0:9d:29:e5:5d:8b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Validity Not Before: Dec 19 09:00:56 2025 GMT Not After : Dec 20 09:00:56 2025 GMT Subject: CN=3fa051f470288b4eb433b31f202f814da266e6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:83:28:2e:f5:ea:4c:3d:4e:01:f9:e5:7e: 9c:5a:f3:e5:e1:0c:de:21:d9:d1:79:7b:ac:86:06: 63:4f:24:23:03:d1:16:f5:bb:5b:61:a3:18:cd:ed: fd:15:be:31:7f:27:94:2f:f5:28:21:07:13:ca:4f: 0e:a2:24:0e:6d:29:ef:c6:76:64:82:7f:3d:9a:ed: ad:68:cb:67:18:34:e1:d4:d2:95:c8:99:d2:7d:e8: eb:cc:42:ce:9c:4a:3e:3e:14:ad:3d:a4:b1:9d:8c: c5:66:1c:5b:68:d4:b7:ef:6f:6f:90:ac:ef:40:7f: 6b:8e:fd:ca:95:fb:70:57:11:6e:72:00:c9:70:33: ba:eb:e5:8a:80:ae:63:17:6b:46:80:aa:e3:7f:d6: f8:d5:ed:d8:df:fc:8e:77:2a:b2:33:c5:f6:32:b6: 9a:ca:da:9f:7b:35:5e:5e:48:fa:9d:91:43:0e:dc: b8:61:9e:d3:2e:b5:29:9a:87:04:22:12:75:e2:35: 0c:10:86:c6:e4:9d:b2:c3:71:9e:88:f9:f1:bc:ad: e9:0c:c7:ef:16:ca:aa:07:53:81:5b:16:51:3d:bf: 99:db:7c:71:d3:02:5c:f7:a2:f1:f2:ed:0b:69:bd: 0b:d4:f6:0a:0d:d9:0b:e6:ca:d9:2f:ff:6d:c6:2d: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A0:51:F4:70:28:8B:4E:B4:33:B3:1F:20:2F:81:4D:A2:66:E6:FE X509v3 Authority Key Identifier: keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:a7:eb:a7:c7:68:16:61:f5:9d:8b:c2:23:68:3f:4c:85: 22:99:07:ef:1c:c8:6d:f5:c4:9f:93:10:ef:d5:fc:b0:4c:64: 1a:ed:a4:7d:81:cc:97:2e:ba:23:dd:d5:4b:d1:97:48:fc:43: 52:b1:7b:de:27:e2:a2:07:59:74:3f:83:f5:fa:74:d7:82:27: f0:9b:b6:00:45:d2:1a:e3:62:cd:0e:b6:74:f2:da:3f:5d:e7: be:c3:33:52:b1:65:f4:3d:a7:ec:5e:57:5e:d0:ba:cc:8d:30: 2b:0d:60:3c:1c:23:56:f0:ed:ec:09:c3:8b:84:c9:f4:85:e1: 2c:59:56:3e:e4:ec:58:df:28:1d:f0:02:0c:42:cd:bc:4a:00: ee:4a:b5:46:c5:3c:95:e5:b2:24:a0:e0:55:da:32:1b:14:81: 7d:36:be:92:b2:47:55:ca:26:14:22:5a:8e:de:50:67:bc:a4: 67:5b:63:6e:c0:d2:6e:85:19:8a:40:00:1c:2e:6a:b7:ab:0b: 43:03:69:02:a3:50:79:1a:50:15:9d:bb:2b:83:7c:9f:e1:2f: ec:ca:b0:58:15:d6:57:f1:6e:35:c1:16:2c:77:29:84:e6:7f: 78:3d:09:f9:e7:51:cb:31:db:99:09:47:49:38:3c:ae:34:67: b3:99:b2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11zumoiSnYlTQnSnlXYsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjJmNTgzZjg4OWRkNGIxMzRkYTU2ZGI0NWEzZTI1NTgw YjFiMWQwHhcNMjUxMjE5MDkwMDU2WhcNMjUxMjIwMDkwMDU2WjAzMTEwLwYDVQQD EygzZmEwNTFmNDcwMjg4YjRlYjQzM2IzMWYyMDJmODE0ZGEyNjZlNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yODKC716kw9TgH55X6cWvPl4Qze IdnReXushgZjTyQjA9EW9btbYaMYze39Fb4xfyeUL/UoIQcTyk8OoiQObSnvxnZk gn89mu2taMtnGDTh1NKVyJnSfejrzELOnEo+PhStPaSxnYzFZhxbaNS3729vkKzv QH9rjv3KlftwVxFucgDJcDO66+WKgK5jF2tGgKrjf9b41e3Y3/yOdyqyM8X2Mraa ytqfezVeXkj6nZFDDty4YZ7TLrUpmocEIhJ14jUMEIbG5J2yw3GeiPnxvK3pDMfv FsqqB1OBWxZRPb+Z23xx0wJc96Lx8u0Lab0L1PYKDdkL5srZL/9txi2f2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+gUfRwKItOtDOzHyAvgU2iZub+MB8GA1UdIwQY MBaAFK2y9YP4id1LE02lbbRaPiVYCxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEt YWRkMTUxNjY2ZTJhLzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEtYWRkMTUxNjY2ZTJh LzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3Wn66fH aBZh9Z2LwiNoP0yFIpkH7xzIbfXEn5MQ79X8sExkGu2kfYHMly66I93VS9GXSPxD UrF73ifiogdZdD+D9fp014In8Ju2AEXSGuNizQ62dPLaP13nvsMzUrFl9D2n7F5X XtC6zI0wKw1gPBwjVvDt7AnDi4TJ9IXhLFlWPuTsWN8oHfACDELNvEoA7kq1RsU8 leWyJKDgVdoyGxSBfTa+krJHVcomFCJajt5QZ7ykZ1tjbsDSboUZikAAHC5qt6sL QwNpAqNQeRpQFZ27K4N8n+Ev7MqwWBXWV/FuNcEWLHcphOZ/eD0J+edRyzHbmQlH STg8rjRns5mySQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:11 2025 by rpki-client