This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json) Hash identifier: HFnJoBa0X4YMhv50P9WCeQv4MezChXrSpZmSkj0KD4U= Subject key identifier: F7:A4:F0:91:67:B8:DF:E0:9B:3A:D4:F6:89:07:D7:7E:7E:24:3F:51 Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Certificate serial: 019B1ACDE278996CA816AB9346F2B9970FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft Manifest number: 08DF Signing time: Sun 14 Dec 2025 03:00:59 +0000 Manifest this update: Sun 14 Dec 2025 03:00:59 +0000 Manifest next update: Mon 15 Dec 2025 03:00:59 +0000 Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=) 2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: Dckb73ip3BjmGcxOsVLFKOi5RrI0JSvcq0vwjtrROqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:e2:78:99:6c:a8:16:ab:93:46:f2:b9:97:0f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Validity Not Before: Dec 14 03:00:59 2025 GMT Not After : Dec 15 03:00:59 2025 GMT Subject: CN=f7a4f09167b8dfe09b3ad4f68907d77e7e243f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:77:23:c4:e7:c8:27:0e:41:12:f2:2c:a8: 90:0d:89:ba:75:ee:08:d1:16:5e:30:20:20:ee:5e: d0:0d:b7:86:d1:44:d1:5b:c8:f9:68:4d:a5:39:7c: d2:c2:d7:f9:17:b9:d0:62:71:7f:b1:1a:9c:90:9e: 04:32:a8:df:2b:e5:c0:6b:ad:00:d0:7f:68:79:77: 29:0b:20:4e:17:0c:26:34:0f:9f:0b:cf:1f:c4:97: ff:9c:97:1f:36:e9:bb:8d:39:d2:da:0e:dd:14:51: b2:40:2a:cf:30:cf:07:0d:b9:84:a6:e8:56:4d:d8: 21:3d:74:5d:2f:1c:a4:29:b3:e4:9b:7f:a3:9d:5a: 40:21:4c:63:8e:64:2e:3d:48:0a:26:95:e8:60:3c: b9:be:ed:9a:47:9a:ba:ae:de:6a:60:78:f4:f7:e6: 2f:39:33:ef:a8:9e:cd:d9:6a:6c:55:0a:69:88:3c: d5:2d:8f:f6:c6:9e:e9:52:50:4f:36:0d:23:91:d4: 8c:b3:7b:0f:c0:db:f3:b6:29:40:59:72:f5:a4:48: c0:74:68:de:29:c2:94:e7:4f:ce:c0:d0:0c:6d:c3: 39:0a:f4:03:10:cb:e2:0f:fb:5a:2c:f0:82:6d:37: 7b:a9:fc:9a:c1:4f:be:91:22:d8:98:30:77:90:2f: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A4:F0:91:67:B8:DF:E0:9B:3A:D4:F6:89:07:D7:7E:7E:24:3F:51 X509v3 Authority Key Identifier: keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0a:d1:49:51:1a:4f:13:b4:c4:89:1c:70:e7:ce:a9:9c:cf: 01:a6:be:b6:5d:67:56:df:3f:30:47:b3:86:55:d8:76:eb:95: ec:0b:35:f7:4a:4c:0b:27:44:79:20:30:e2:6d:a6:3d:87:06: 8a:4c:c7:e1:89:23:73:80:e1:75:d3:86:d0:32:15:0f:70:5e: 75:54:75:6c:b2:b7:d1:3f:6b:6f:3b:3b:af:ca:43:95:b4:ea: c4:ac:d5:a1:fb:c4:7d:e2:bb:a4:2e:d9:f7:80:8a:af:f6:e2: 3e:33:ca:c4:34:6e:e5:f7:fe:e4:6c:39:28:40:e8:dc:10:28: 37:54:a5:ac:d1:65:dc:05:5f:b7:10:b3:ee:74:8a:5a:7e:d0: aa:28:b2:13:a0:9b:b5:20:ec:d7:c5:f2:30:e1:ec:55:6d:8c: 04:9d:04:11:20:09:3f:98:3f:cd:ac:33:93:54:22:3a:81:0d: 18:23:cf:0c:e3:dd:1f:0f:e0:23:25:a5:cd:83:5a:52:d4:26: 60:c8:4f:2a:39:c3:27:76:d0:c6:a9:33:34:3c:8e:cc:05:05: a5:6a:65:d0:ae:33:e4:b0:10:60:64:cd:25:c3:ff:d7:1c:d6: 05:dc:de:74:8a:58:53:c6:31:ed:6c:e7:59:85:64:39:d6:ea: b4:61:88:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazeJ4mWyoFquTRvK5lw/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx YjNlMjYwHhcNMjUxMjE0MDMwMDU5WhcNMjUxMjE1MDMwMDU5WjAzMTEwLwYDVQQD EyhmN2E0ZjA5MTY3YjhkZmUwOWIzYWQ0ZjY4OTA3ZDc3ZTdlMjQzZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQp3I8TnyCcOQRLyLKiQDYm6de4I 0RZeMCAg7l7QDbeG0UTRW8j5aE2lOXzSwtf5F7nQYnF/sRqckJ4EMqjfK+XAa60A 0H9oeXcpCyBOFwwmNA+fC88fxJf/nJcfNum7jTnS2g7dFFGyQCrPMM8HDbmEpuhW TdghPXRdLxykKbPkm3+jnVpAIUxjjmQuPUgKJpXoYDy5vu2aR5q6rt5qYHj09+Yv OTPvqJ7N2WpsVQppiDzVLY/2xp7pUlBPNg0jkdSMs3sPwNvztilAWXL1pEjAdGje KcKU50/OwNAMbcM5CvQDEMviD/taLPCCbTd7qfyawU++kSLYmDB3kC+ykwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPek8JFnuN/gmzrU9okH135+JD9RMB8GA1UdIwQY MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgrRSVEa TxO0xIkccOfOqZzPAaa+tl1nVt8/MEezhlXYduuV7As190pMCydEeSAw4m2mPYcG ikzH4Ykjc4DhddOG0DIVD3BedVR1bLK30T9rbzs7r8pDlbTqxKzVofvEfeK7pC7Z 94CKr/biPjPKxDRu5ff+5Gw5KEDo3BAoN1SlrNFl3AVftxCz7nSKWn7QqiiyE6Cb tSDs18XyMOHsVW2MBJ0EESAJP5g/zawzk1QiOoENGCPPDOPdHw/gIyWlzYNaUtQm YMhPKjnDJ3bQxqkzNDyOzAUFpWpl0K4z5LAQYGTNJcP/1xzWBdzedIpYU8Yx7Wzn WYVkOdbqtGGInA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:39:55 2025 by rpki-client