This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json) Hash identifier: ztXnSwjAyEtPR2//JdsDhwMfnM0nZlDdvuju5GxgzWg= Subject key identifier: 10:54:46:8A:AB:D3:3B:F8:16:AE:56:82:8F:54:BA:ED:FE:B9:E5:04 Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019B19BB2ACBC19DBFD8C79E7A8FFFEB2752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft Manifest number: 16DD Signing time: Sat 13 Dec 2025 22:00:54 +0000 Manifest this update: Sat 13 Dec 2025 22:00:54 +0000 Manifest next update: Sun 14 Dec 2025 22:00:54 +0000 Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=) 2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=) 3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=) 4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: vpGNXmmufDLBeswj/CcXzd1nOYBE6yrpetouUIHLSGM=) 5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:2a:cb:c1:9d:bf:d8:c7:9e:7a:8f:ff:eb:27:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Dec 13 22:00:54 2025 GMT Not After : Dec 14 22:00:54 2025 GMT Subject: CN=1054468aabd33bf816ae56828f54baedfeb9e504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:18:fc:e3:75:6e:97:04:3e:0e:8d:46:7f: 31:0b:05:49:65:fe:6e:e2:e4:0f:a8:c7:72:d5:5d: 66:37:aa:d3:37:05:3b:d1:f0:98:b2:90:47:2f:bd: 01:7f:80:7d:e7:cc:ae:06:6e:66:eb:77:32:4d:db: 18:d2:df:eb:c7:2e:57:93:7c:aa:ae:17:9b:69:94: a0:50:dc:41:ff:79:c9:8d:53:35:49:9e:fc:97:e1: 6f:07:b8:e5:70:26:3a:da:92:d9:a3:70:d1:97:3e: 3f:13:f4:55:01:32:51:71:62:3d:25:71:64:26:21: cc:c9:b3:60:ef:47:ec:50:74:cc:c7:43:c8:16:b9: c7:41:38:95:0f:7c:05:40:57:ee:71:e9:86:bd:36: fc:6e:57:89:8d:1a:82:c7:c7:20:59:e2:9f:55:ad: 84:af:8e:c2:56:54:a4:32:38:75:c1:90:89:0a:25: a9:0d:39:0d:ae:74:0e:4b:ec:9d:d4:6f:1e:c1:8f: b2:0f:6f:cb:97:d0:6d:6d:88:c5:6c:1a:ea:e9:3f: 2e:e6:25:9d:d7:0f:91:01:c0:a7:6a:b7:be:46:6f: 6c:82:87:d5:ad:39:a8:97:86:b0:b5:d1:4a:ae:ee: d6:d3:71:8f:99:87:03:1b:8c:da:1c:8e:c1:b8:c7: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:54:46:8A:AB:D3:3B:F8:16:AE:56:82:8F:54:BA:ED:FE:B9:E5:04 X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:df:5c:66:3c:e3:5d:e8:f1:84:7d:c8:40:ba:6c:cd:5f: 7a:4f:fb:9c:0a:77:a7:7f:64:dc:35:11:a8:09:be:7f:a4:58: d8:34:94:0e:2a:12:23:d0:ed:74:74:8d:2a:30:52:15:5d:54: f1:21:fc:44:17:63:e8:33:f9:4b:95:c0:1a:0c:00:b0:fe:51: 8b:cc:2b:ce:d7:7d:3f:de:d5:d7:d3:3f:e2:91:c9:8f:28:75: b8:7c:8e:9f:8e:d8:5f:24:e4:80:e5:d0:85:49:58:56:9f:f5: ea:81:22:c9:44:57:c5:f8:76:92:05:ca:ac:9a:59:fc:3b:33: 38:70:e3:23:84:b5:99:b7:70:bd:3d:95:9d:ee:d8:ef:88:3c: 9a:7b:6e:bd:9b:47:ee:4f:a0:c7:5e:23:52:d8:d0:f2:6a:69: 1e:b9:a4:27:9e:73:a0:4e:a3:c9:8d:ca:af:11:b9:df:99:4c: 6d:b1:9b:3e:55:c3:1c:91:ea:25:90:bf:26:9c:4f:83:45:12: 18:4a:56:2e:d6:6f:64:9b:bd:4c:af:43:4d:7a:08:41:a6:c0: 2f:fb:5e:5a:d0:07:90:76:af:b8:08:5d:c0:e4:68:cf:7e:b3: 28:ca:40:24:bd:e1:c6:24:d5:87:19:4a:e7:de:2d:0b:7e:46: 7d:ec:b5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuyrLwZ2/2Meeeo//6ydSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjUxMjEzMjIwMDU0WhcNMjUxMjE0MjIwMDU0WjAzMTEwLwYDVQQD EygxMDU0NDY4YWFiZDMzYmY4MTZhZTU2ODI4ZjU0YmFlZGZlYjllNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0Y/ON1bpcEPg6NRn8xCwVJZf5u 4uQPqMdy1V1mN6rTNwU70fCYspBHL70Bf4B958yuBm5m63cyTdsY0t/rxy5Xk3yq rhebaZSgUNxB/3nJjVM1SZ78l+FvB7jlcCY62pLZo3DRlz4/E/RVATJRcWI9JXFk JiHMybNg70fsUHTMx0PIFrnHQTiVD3wFQFfucemGvTb8bleJjRqCx8cgWeKfVa2E r47CVlSkMjh1wZCJCiWpDTkNrnQOS+yd1G8ewY+yD2/Ll9BtbYjFbBrq6T8u5iWd 1w+RAcCnare+Rm9sgofVrTmol4awtdFKru7W03GPmYcDG4zaHI7BuMey+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBURoqr0zv4Fq5Wgo9Uuu3+ueUEMB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTvfXGY8 413o8YR9yEC6bM1fek/7nAp3p39k3DURqAm+f6RY2DSUDioSI9DtdHSNKjBSFV1U 8SH8RBdj6DP5S5XAGgwAsP5Ri8wrztd9P97V19M/4pHJjyh1uHyOn47YXyTkgOXQ hUlYVp/16oEiyURXxfh2kgXKrJpZ/DszOHDjI4S1mbdwvT2Vne7Y74g8mntuvZtH 7k+gx14jUtjQ8mppHrmkJ55zoE6jyY3KrxG535lMbbGbPlXDHJHqJZC/JpxPg0US GEpWLtZvZJu9TK9DTXoIQabAL/teWtAHkHavuAhdwORoz36zKMpAJL3hxiTVhxlK 594tC35Gfey1Sg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:42 2025 by rpki-client