This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json) Hash identifier: 3judS8dA5BQH31aOBPbvt+tgMU2KPf8eyuDT/CmVP+M= Subject key identifier: 38:7C:3E:AA:6C:90:B1:7E:E0:9A:C6:53:67:7D:92:96:B5:A3:64:AC Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Certificate serial: 019B126FDE6201D9A32D9D0187F4F2B2E9F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft Manifest number: 0BA9 Signing time: Fri 12 Dec 2025 12:01:19 +0000 Manifest this update: Fri 12 Dec 2025 12:01:19 +0000 Manifest next update: Sat 13 Dec 2025 12:01:19 +0000 Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: sz6FvJtcWkDX7bDhuq4C2p13jBNTGMjS9TVpnVZ7A3U=) 2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:de:62:01:d9:a3:2d:9d:01:87:f4:f2:b2:e9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Validity Not Before: Dec 12 12:01:19 2025 GMT Not After : Dec 13 12:01:19 2025 GMT Subject: CN=387c3eaa6c90b17ee09ac653677d9296b5a364ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:cc:87:8a:86:ad:75:c4:ae:78:ec:38:46: fb:bc:37:7a:18:9d:cb:4c:29:44:1a:79:99:df:f0: 09:46:b3:1a:7d:5f:23:54:6f:22:78:c5:ce:a5:92: 10:24:03:ff:c0:2e:d1:87:66:8d:be:fc:ce:ac:7f: d0:f5:c1:18:6c:89:46:d4:5b:06:1c:b0:b4:73:15: 59:82:37:eb:50:05:74:61:a0:c3:79:87:e0:2e:35: fa:91:cc:eb:a8:d9:36:bf:b0:da:c1:c5:16:32:e9: 9a:1f:9c:b6:49:63:18:af:f3:db:ea:d8:5d:7d:ce: b2:2c:6c:30:73:4e:34:db:49:25:09:82:78:81:12: 47:10:67:11:06:4e:fc:05:b6:e8:08:83:49:41:d4: 85:0b:04:68:3e:12:11:4c:c4:65:a0:2a:7e:07:d1: bf:ff:7e:82:19:28:66:05:dc:18:12:90:21:2c:e1: 75:c7:04:2e:4e:33:82:9a:db:be:cd:27:99:37:89: 0c:a5:77:2d:0c:d8:e5:db:52:04:3f:b9:24:93:69: 32:de:52:2d:ef:4c:e9:d3:54:32:87:6a:d0:f3:9f: f5:0a:f9:64:b5:8f:94:9d:25:22:c9:9e:ac:1e:37: 91:3c:6a:01:cc:ea:84:45:ef:27:69:ae:d7:24:31: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:3E:AA:6C:90:B1:7E:E0:9A:C6:53:67:7D:92:96:B5:A3:64:AC X509v3 Authority Key Identifier: keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:da:eb:c4:5b:e6:17:59:b7:6b:7d:09:1d:a4:ca:75:a7:2d: 34:72:e9:33:b0:34:be:ab:aa:7e:e9:c3:a2:00:2d:85:21:71: b0:e3:f2:43:99:a6:e4:5f:67:25:eb:ba:2f:fa:dc:20:89:28: 49:e3:c7:b8:9a:4b:d0:86:59:0a:ed:60:22:2e:bf:86:00:32: 3a:3e:2b:ab:fd:db:3b:ae:ca:84:e4:ff:a3:a8:93:bf:64:bf: 07:e2:6a:99:55:96:e5:d9:0b:35:14:6c:c7:67:45:ef:e3:62: 8f:61:16:21:c7:db:f2:e5:0a:0d:e5:0c:51:8a:6b:bd:fc:d5: 3d:3b:29:66:52:46:b2:f5:8c:36:9c:40:be:8f:dd:69:0f:e6: 73:40:03:03:72:d8:4d:88:47:84:5b:0c:82:e5:eb:e6:89:f2: 51:8a:ed:0e:3f:97:7f:15:e3:70:0e:7d:97:fa:74:fe:13:95: 48:03:3e:d1:3a:7c:ba:a6:08:aa:f9:b5:ec:c4:83:14:2d:90: 68:1f:4a:2d:e1:95:83:de:bd:b7:69:dd:a9:0e:79:e9:4c:b4: 13:86:47:4c:aa:4b:1c:83:b1:f4:69:b0:e6:7a:5c:5c:66:b0: 94:79:85:4f:cf:a7:2d:5a:27:11:33:11:67:cf:7d:93:85:be: 62:d6:c1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb95iAdmjLZ0Bh/Tysun2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk NDQ3NTQwHhcNMjUxMjEyMTIwMTE5WhcNMjUxMjEzMTIwMTE5WjAzMTEwLwYDVQQD EygzODdjM2VhYTZjOTBiMTdlZTA5YWM2NTM2NzdkOTI5NmI1YTM2NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyivMh4qGrXXErnjsOEb7vDd6GJ3L TClEGnmZ3/AJRrMafV8jVG8ieMXOpZIQJAP/wC7Rh2aNvvzOrH/Q9cEYbIlG1FsG HLC0cxVZgjfrUAV0YaDDeYfgLjX6kczrqNk2v7DawcUWMumaH5y2SWMYr/Pb6thd fc6yLGwwc04020klCYJ4gRJHEGcRBk78BbboCINJQdSFCwRoPhIRTMRloCp+B9G/ /36CGShmBdwYEpAhLOF1xwQuTjOCmtu+zSeZN4kMpXctDNjl21IEP7kkk2ky3lIt 70zp01Qyh2rQ85/1CvlktY+UnSUiyZ6sHjeRPGoBzOqERe8naa7XJDGpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDh8PqpskLF+4JrGU2d9kpa1o2SsMB8GA1UdIwQY MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3 LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNrrxFvm F1m3a30JHaTKdactNHLpM7A0vquqfunDogAthSFxsOPyQ5mm5F9nJeu6L/rcIIko SePHuJpL0IZZCu1gIi6/hgAyOj4rq/3bO67KhOT/o6iTv2S/B+JqmVWW5dkLNRRs x2dF7+Nij2EWIcfb8uUKDeUMUYprvfzVPTspZlJGsvWMNpxAvo/daQ/mc0ADA3LY TYhHhFsMguXr5onyUYrtDj+XfxXjcA59l/p0/hOVSAM+0Tp8uqYIqvm17MSDFC2Q aB9KLeGVg969t2ndqQ556Uy0E4ZHTKpLHIOx9Gmw5npcXGawlHmFT8+nLVonETMR Z899k4W+YtbBqg== -----END CERTIFICATE-----Generated at Fri Dec 12 17:22:56 2025 by rpki-client