This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json) Hash identifier: oEj9uYc8uRGuIv5NPvTXuwCnHi9FjkA3ptAL/rG9SAM= Subject key identifier: 3E:80:DB:7C:43:96:A6:E9:48:3C:91:6C:D2:C5:B1:DE:0C:E6:4C:51 Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Certificate serial: 019B3833991849B95004E9C36AC7CF1C9D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft Manifest number: 1314 Signing time: Fri 19 Dec 2025 20:01:04 +0000 Manifest this update: Fri 19 Dec 2025 20:01:04 +0000 Manifest next update: Sat 20 Dec 2025 20:01:04 +0000 Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=) 2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: rgDIcNV6dnZIskOOyrmyrwo0J6WpKRWRaQaayyrB/Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:99:18:49:b9:50:04:e9:c3:6a:c7:cf:1c:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Validity Not Before: Dec 19 20:01:04 2025 GMT Not After : Dec 20 20:01:04 2025 GMT Subject: CN=3e80db7c4396a6e9483c916cd2c5b1de0ce64c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:30:fe:6e:e5:f4:a8:43:cc:66:ab:fc:ea: 2a:86:60:1d:00:1d:f2:ef:c6:f9:0f:44:27:c4:92: 33:15:41:88:1c:14:6b:d1:39:7b:40:12:45:47:fc: b5:e5:c3:ec:37:41:30:c9:9b:61:ae:9c:89:13:f1: 65:9e:fc:be:3d:10:64:df:67:d6:32:6e:a0:3c:7a: 91:a9:fb:c6:56:e8:ee:2f:43:53:5f:6f:b7:de:b2: 50:5b:01:7f:8d:04:ec:25:c9:6d:f2:b1:cd:07:26: 78:99:80:45:73:c3:e8:64:53:34:a1:1b:ae:02:ff: 85:cb:27:10:6b:46:06:9f:b8:83:1a:64:1b:30:93: 9d:62:4f:8e:a8:f7:b2:95:91:89:e5:25:db:66:61: ca:37:90:5e:b4:c6:44:e1:65:82:5b:77:a4:e2:13: 0c:f0:f5:d5:62:dd:a5:72:7d:59:97:b5:2d:b6:a4: 53:e9:dc:07:6b:ef:fd:4f:ca:58:8c:ce:60:63:be: 6d:c0:45:ef:db:a7:cf:4b:26:9d:c4:12:07:8a:da: 47:e7:5e:9d:69:d5:38:08:22:14:64:3e:eb:4d:55: bd:9e:2d:ee:be:21:11:90:1e:43:9f:49:10:88:a4: 86:e9:5b:38:d2:0c:70:f9:48:b0:c7:60:95:4d:64: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:DB:7C:43:96:A6:E9:48:3C:91:6C:D2:C5:B1:DE:0C:E6:4C:51 X509v3 Authority Key Identifier: keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:df:fe:49:a7:f1:1b:dd:df:ad:96:11:c3:1e:b8:44:66:5e: 14:17:aa:51:a1:3b:bc:b3:a3:39:18:7e:a1:49:68:04:0e:3b: 48:3a:33:54:70:17:3e:30:a8:ee:20:1a:31:2c:bf:32:a2:02: ae:74:4d:76:0b:95:08:93:47:45:df:65:4f:f6:1d:7d:af:a9: b2:ac:da:d1:d8:8d:81:e4:15:71:e7:03:ae:1b:90:77:28:b4: 63:e1:36:e1:2e:b6:42:71:ee:c9:f7:d7:53:2a:b8:f0:98:c8: e5:fa:bb:f8:ce:fe:60:c2:de:ad:17:b6:87:76:f5:46:20:99: 27:35:89:06:67:ba:88:19:d2:b9:ae:90:c7:6d:47:0e:05:cf: e3:02:03:4a:27:ce:e3:6b:30:66:62:e5:d8:af:4b:0e:40:7f: 56:9c:f0:e8:c3:14:e8:b0:88:6c:70:87:96:40:bf:31:3b:c1: 0b:28:67:29:44:bc:d7:79:04:29:f7:cc:e2:9b:ba:a9:f4:a2: 00:22:d9:fc:99:61:bf:3c:b8:cf:39:68:93:77:dd:5d:0c:aa: d5:f8:e2:64:ed:5b:75:d3:90:2d:76:5b:af:19:5c:bc:47:5e: 13:9c:74:65:d7:60:cd:ed:3a:0f:5b:1d:54:74:5e:80:a6:33: 31:c1:e2:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5kYSblQBOnDasfPHJ1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk Y2JiODEwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD EygzZTgwZGI3YzQzOTZhNmU5NDgzYzkxNmNkMmM1YjFkZTBjZTY0YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOgw/m7l9KhDzGar/OoqhmAdAB3y 78b5D0QnxJIzFUGIHBRr0Tl7QBJFR/y15cPsN0EwyZthrpyJE/Flnvy+PRBk32fW Mm6gPHqRqfvGVujuL0NTX2+33rJQWwF/jQTsJclt8rHNByZ4mYBFc8PoZFM0oRuu Av+FyycQa0YGn7iDGmQbMJOdYk+OqPeylZGJ5SXbZmHKN5BetMZE4WWCW3ek4hMM 8PXVYt2lcn1Zl7UttqRT6dwHa+/9T8pYjM5gY75twEXv26fPSyadxBIHitpH516d adU4CCIUZD7rTVW9ni3uviERkB5Dn0kQiKSG6Vs40gxw+Uiwx2CVTWSt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6A23xDlqbpSDyRbNLFsd4M5kxRMB8GA1UdIwQY MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt OTg1MTgyMDAxZTkyLzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt/+Safx G93frZYRwx64RGZeFBeqUaE7vLOjORh+oUloBA47SDozVHAXPjCo7iAaMSy/MqIC rnRNdguVCJNHRd9lT/Ydfa+psqza0diNgeQVcecDrhuQdyi0Y+E24S62QnHuyffX Uyq48JjI5fq7+M7+YMLerRe2h3b1RiCZJzWJBme6iBnSua6Qx21HDgXP4wIDSifO 42swZmLl2K9LDkB/Vpzw6MMU6LCIbHCHlkC/MTvBCyhnKUS813kEKffM4pu6qfSi ACLZ/Jlhvzy4zzlok3fdXQyq1fjiZO1bddOQLXZbrxlcvEdeE5x0Zddgze06D1sd VHRegKYzMcHifw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:26 2025 by rpki-client