This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json) Hash identifier: 6gGuScWhEw1x+6it7M04fxfay4bbmJNm7xm4N+Lfyw8= Subject key identifier: 81:96:C2:19:C6:BF:EE:E5:4A:28:FF:D4:92:37:FC:1B:F7:85:9F:C9 Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e Certificate serial: 019B5977523A78ED60B6FA60E5D17734CEC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft Manifest number: 0394 Signing time: Fri 26 Dec 2025 07:02:30 +0000 Manifest this update: Fri 26 Dec 2025 07:02:30 +0000 Manifest next update: Sat 27 Dec 2025 07:02:30 +0000 Files and hashes: 1: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: jBQhyQVsFv9qiowvt8qPMQGEHrbAea7d+Y/3lKkLWr4=) 2: ldaG2ZtwFXa0D8MT2zJfF9j3gsg.roa (hash: Iho31engw2p2ICkoCri0OTvpMAFdFfQ9ZJ+brUIBG2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:52:3a:78:ed:60:b6:fa:60:e5:d1:77:34:ce:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e Validity Not Before: Dec 26 07:02:30 2025 GMT Not After : Dec 27 07:02:30 2025 GMT Subject: CN=8196c219c6bfeee54a28ffd49237fc1bf7859fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:40:de:f1:ae:41:08:55:1f:8d:e2:97:13: 0b:24:ac:b3:b9:0c:1d:58:02:03:5a:da:e1:4a:97: 1c:6f:61:18:48:f6:6c:de:20:48:f0:57:07:5e:e3: e0:59:9c:1d:57:41:bd:e6:42:07:ac:ff:b5:4d:48: 83:a0:2a:f1:e1:3b:b6:4e:ec:bf:31:6d:8f:65:3c: c2:7b:14:9c:dc:67:68:cf:9c:88:f8:12:56:57:64: 6d:4f:a3:0b:5e:14:d9:a2:d3:35:4c:81:61:5e:7e: a8:df:72:08:d7:69:19:7f:94:92:78:68:8d:54:5f: d2:a4:f3:15:dc:02:af:a2:6b:5d:a6:3f:14:85:b2: 1f:b3:7b:20:af:f0:1b:34:9c:4e:83:c5:cd:c1:68: 22:83:1e:4a:58:8e:11:b4:2c:fa:dc:cb:a0:52:1c: b1:47:57:24:94:c3:fb:48:ea:bb:6e:de:f1:bb:8a: 8c:10:fe:e7:80:49:3c:e0:0d:d9:d8:aa:08:52:dd: be:e0:47:10:9c:35:46:c3:17:98:ef:ec:de:44:1c: da:fd:2d:a1:81:f3:c1:53:97:5f:3d:36:74:18:9e: 6c:d0:f3:75:ad:c8:0e:41:f1:f5:49:bc:0a:ba:6e: bd:94:13:75:f1:f4:ac:5c:5d:3a:c7:9f:22:92:92: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:96:C2:19:C6:BF:EE:E5:4A:28:FF:D4:92:37:FC:1B:F7:85:9F:C9 X509v3 Authority Key Identifier: keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c3:f8:09:15:0e:1f:1e:f2:fd:5a:53:ee:87:b6:61:1a:dc: 70:22:c4:72:ef:11:a5:cd:14:69:35:3f:72:bd:30:61:2b:6a: 0e:96:0a:e8:c5:a2:a4:ec:12:0c:0e:5d:66:c1:a6:6e:c9:d0: 85:5c:5b:42:78:ea:99:71:28:7a:96:48:6c:ff:4c:05:6d:18: 05:09:c4:c1:c4:ad:e8:23:7a:c6:60:f2:d5:b8:1d:86:ca:22: 98:6b:c3:ad:48:f1:3d:97:f3:42:b9:f2:c7:f6:2a:e1:6e:58: 8e:75:11:55:5b:25:0f:a4:21:fd:68:be:d6:d2:39:3b:20:6f: 45:f1:b6:cf:02:0d:20:0b:e8:db:f1:a1:21:10:f2:04:5b:9a: 33:65:b3:c2:30:70:c7:b9:a1:5b:41:e9:3e:91:25:24:d0:fb: 18:96:f1:6d:01:97:76:54:bf:1b:c7:17:cc:76:30:60:89:b2: d3:d6:c9:9b:1a:82:16:1a:36:4f:4d:3b:57:46:91:df:e4:2f: a3:41:1a:cf:f0:d8:6b:5d:85:5e:c7:8e:d8:80:d7:0f:6c:f5: d4:a1:d2:07:ed:8f:59:91:f7:12:2b:9c:bd:c9:9b:9b:68:16: 2f:e6:92:c7:a6:14:5a:eb:5c:8c:67:60:e7:25:75:51:06:61: 8c:0b:e8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1I6eO1gtvpg5dF3NM7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1 Yzc5MWUwHhcNMjUxMjI2MDcwMjMwWhcNMjUxMjI3MDcwMjMwWjAzMTEwLwYDVQQD Eyg4MTk2YzIxOWM2YmZlZWU1NGEyOGZmZDQ5MjM3ZmMxYmY3ODU5ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRFA3vGuQQhVH43ilxMLJKyzuQwd WAIDWtrhSpccb2EYSPZs3iBI8FcHXuPgWZwdV0G95kIHrP+1TUiDoCrx4Tu2Tuy/ MW2PZTzCexSc3Gdoz5yI+BJWV2RtT6MLXhTZotM1TIFhXn6o33II12kZf5SSeGiN VF/SpPMV3AKvomtdpj8UhbIfs3sgr/AbNJxOg8XNwWgigx5KWI4RtCz63MugUhyx R1cklMP7SOq7bt7xu4qMEP7ngEk84A3Z2KoIUt2+4EcQnDVGwxeY7+zeRBza/S2h gfPBU5dfPTZ0GJ5s0PN1rcgOQfH1SbwKum69lBN18fSsXF06x58ikpLnaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGWwhnGv+7lSij/1JI3/Bv3hZ/JMB8GA1UdIwQY MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt OWRmNzI1MzBiNjY5LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5 LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMP4CRUO Hx7y/VpT7oe2YRrccCLEcu8Rpc0UaTU/cr0wYStqDpYK6MWipOwSDA5dZsGmbsnQ hVxbQnjqmXEoepZIbP9MBW0YBQnEwcSt6CN6xmDy1bgdhsoimGvDrUjxPZfzQrny x/Yq4W5YjnURVVslD6Qh/Wi+1tI5OyBvRfG2zwINIAvo2/GhIRDyBFuaM2WzwjBw x7mhW0HpPpElJND7GJbxbQGXdlS/G8cXzHYwYImy09bJmxqCFho2T007V0aR3+Qv o0Eaz/DYa12FXseO2IDXD2z11KHSB+2PWZH3Eiucvcmbm2gWL+aSx6YUWutcjGdg 5yV1UQZhjAvotw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client