This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json) Hash identifier: WY6lrHNSyoPYelH0BzFq7iMtYiqk1DuBf3Rd4Odc3gI= Subject key identifier: E4:B3:1F:55:BF:F0:0F:6B:60:64:24:98:20:B9:60:D5:33:44:55:E4 Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Certificate serial: 019B2287A2CEEB6308E2E315E7B2E4DD16F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft Manifest number: 08E3 Signing time: Mon 15 Dec 2025 15:01:12 +0000 Manifest this update: Mon 15 Dec 2025 15:01:12 +0000 Manifest next update: Tue 16 Dec 2025 15:01:12 +0000 Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=) 2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: Kgm2nSU507FFc9GQXk7U5IIwnT9HHKxclxuIPR5GGoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:a2:ce:eb:63:08:e2:e3:15:e7:b2:e4:dd:16:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Validity Not Before: Dec 15 15:01:12 2025 GMT Not After : Dec 16 15:01:12 2025 GMT Subject: CN=e4b31f55bff00f6b6064249820b960d5334455e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:01:55:49:41:f8:6c:93:20:f0:69:d1:8f: 85:de:9a:f8:43:c6:71:70:b7:ba:e2:ff:7a:d3:2d: 38:1a:96:f9:e6:c2:d3:c9:b7:67:d8:d0:62:4c:bc: 51:30:ec:c7:47:5a:55:12:4e:d1:e1:71:68:66:be: df:0f:9e:b5:20:b3:5d:97:47:12:0e:e7:eb:d0:e6: ec:1b:21:9b:4d:b9:02:f6:84:0b:3d:0a:51:5e:8f: 0b:cf:d7:1c:15:50:f4:79:37:65:6c:58:4a:c4:a4: 33:c6:4a:6c:86:78:35:2d:e3:9b:64:e6:9e:3b:5b: 7f:86:9d:5a:4a:92:a4:84:78:b1:b8:7d:db:74:24: 11:ee:3f:85:cd:a9:9a:bc:83:f9:e9:3d:8d:74:a9: f9:56:bc:f5:55:d9:46:56:35:30:13:3b:bd:ff:1e: 1d:a8:e6:47:65:d7:8c:64:12:cb:f3:03:71:55:a9: ba:d2:0d:1a:34:85:89:f3:33:b0:c8:88:b1:9b:16: ca:df:4f:da:10:be:38:ab:ed:2e:0c:58:ea:7c:ee: 83:0f:b0:19:fc:9c:fc:c9:65:6c:94:f2:d9:85:db: 78:97:84:67:f7:c1:99:73:02:5b:b0:e4:97:8f:48: ac:fd:6a:50:55:5b:44:ce:c4:4f:c4:86:1c:20:48: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:1F:55:BF:F0:0F:6B:60:64:24:98:20:B9:60:D5:33:44:55:E4 X509v3 Authority Key Identifier: keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:79:d2:80:8a:22:e6:0c:b1:b9:96:a5:df:e8:4c:71:25:ed: db:8e:c5:90:ac:64:28:03:e8:0a:62:91:ff:6a:da:04:df:36: dd:57:9f:47:05:99:d6:74:5e:f2:d1:3c:9b:47:06:7e:6c:c6: 8e:e0:cd:ee:e8:1c:18:46:66:2d:d5:09:e8:b1:15:95:42:44: a9:21:63:c2:ac:9b:55:f3:54:44:94:08:95:3b:7b:77:95:de: a5:c1:ab:cf:b5:5f:20:a6:31:41:8a:f6:30:bb:2c:80:5b:df: bb:be:4c:db:e9:de:da:30:f5:bd:bd:de:61:f1:bf:ff:62:ef: 82:03:41:b8:30:a8:ff:b3:d7:94:55:59:eb:cb:63:e5:20:9b: b1:38:a8:22:b8:a7:ba:0e:2b:23:f7:2d:a4:03:62:01:f1:ff: fb:3e:69:40:cb:fd:0d:1d:d8:bd:9f:7b:78:a8:d9:31:73:8e: 27:d6:86:4d:ec:e8:44:1a:1a:c4:2a:e9:eb:43:4f:a1:41:4f: a7:14:0a:bc:6b:97:47:82:c4:47:0d:24:aa:28:f1:2a:cf:9f: f9:31:4a:23:d9:b3:c4:42:a2:cd:2b:87:92:4b:3e:94:cd:44: 95:64:2f:ac:28:8b:a0:b6:fd:c9:fc:aa:d5:c7:20:61:2c:5c: 67:27:8f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih6LO62MI4uMV57Lk3RbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx YjNlMjYwHhcNMjUxMjE1MTUwMTEyWhcNMjUxMjE2MTUwMTEyWjAzMTEwLwYDVQQD EyhlNGIzMWY1NWJmZjAwZjZiNjA2NDI0OTgyMGI5NjBkNTMzNDQ1NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueQBVUlB+GyTIPBp0Y+F3pr4Q8Zx cLe64v960y04Gpb55sLTybdn2NBiTLxRMOzHR1pVEk7R4XFoZr7fD561ILNdl0cS Dufr0ObsGyGbTbkC9oQLPQpRXo8Lz9ccFVD0eTdlbFhKxKQzxkpshng1LeObZOae O1t/hp1aSpKkhHixuH3bdCQR7j+FzamavIP56T2NdKn5Vrz1VdlGVjUwEzu9/x4d qOZHZdeMZBLL8wNxVam60g0aNIWJ8zOwyIixmxbK30/aEL44q+0uDFjqfO6DD7AZ /Jz8yWVslPLZhdt4l4Rn98GZcwJbsOSXj0is/WpQVVtEzsRPxIYcIEjuXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSzH1W/8A9rYGQkmCC5YNUzRFXkMB8GA1UdIwQY MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnnSgIoi 5gyxuZal3+hMcSXt247FkKxkKAPoCmKR/2raBN823VefRwWZ1nRe8tE8m0cGfmzG juDN7ugcGEZmLdUJ6LEVlUJEqSFjwqybVfNURJQIlTt7d5XepcGrz7VfIKYxQYr2 MLssgFvfu75M2+ne2jD1vb3eYfG//2LvggNBuDCo/7PXlFVZ68tj5SCbsTioIrin ug4rI/ctpANiAfH/+z5pQMv9DR3YvZ97eKjZMXOOJ9aGTezoRBoaxCrp60NPoUFP pxQKvGuXR4LERw0kqijxKs+f+TFKI9mzxEKizSuHkks+lM1ElWQvrCiLoLb9yfyq 1ccgYSxcZyePHw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:43 2025 by rpki-client