This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json) Hash identifier: PCF5/40klD2cXqXoBUis/G/+9CFm7YXpGeM0dkb/jnk= Subject key identifier: C3:04:92:24:D2:5D:F7:54:DF:EF:75:E1:5E:52:0B:A0:82:48:F3:67 Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Certificate serial: 019B2175935B228F4B8FF224B45D92717A8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft Manifest number: 0EEC Signing time: Mon 15 Dec 2025 10:01:52 +0000 Manifest this update: Mon 15 Dec 2025 10:01:52 +0000 Manifest next update: Tue 16 Dec 2025 10:01:52 +0000 Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=) 2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: YL0y50hRIW9V/VOk6wdWDcQYJUQZHdYk/zkMKEv2nHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:93:5b:22:8f:4b:8f:f2:24:b4:5d:92:71:7a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Validity Not Before: Dec 15 10:01:52 2025 GMT Not After : Dec 16 10:01:52 2025 GMT Subject: CN=c3049224d25df754dfef75e15e520ba08248f367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:9b:3f:99:84:f4:86:c6:8c:cb:27:cb:6f: 52:fc:c8:9f:24:ff:87:32:a9:96:57:34:f9:ad:63: 24:00:b7:48:10:0a:d0:a0:64:8f:a9:8f:f5:c2:3e: db:00:97:4d:ed:22:fa:6d:a2:ca:1b:1d:ae:f8:cc: f3:2f:75:3d:1f:3a:41:cc:79:bb:ab:87:0b:24:c8: 5b:7e:56:c4:48:6e:47:c0:2a:5f:b1:9e:e5:b7:a0: b3:5b:90:f8:32:38:2d:d8:d7:4c:a1:6d:6c:af:8c: ed:3e:e9:1f:5b:a6:93:95:3a:6c:37:ab:0f:13:11: 06:c1:6f:67:92:ce:41:75:77:45:b9:e6:32:92:2a: 32:3a:85:83:7c:d9:b7:2d:17:10:42:5d:fb:9f:8b: c6:0d:26:8e:31:57:4b:73:15:03:34:c2:b8:26:7d: 78:dd:3e:96:c9:53:ef:43:41:b8:7e:34:a3:61:d0: 5e:9a:f7:fe:9b:c0:6a:10:44:e9:83:33:1a:9f:8f: 4f:fc:19:7c:4a:15:b8:4c:c5:40:9b:74:89:6f:e1: ba:05:39:45:ef:93:f0:3d:df:01:f4:4c:ab:9d:f6: cc:6d:e4:a0:21:60:50:9a:30:d4:77:ba:44:bc:91: 3b:10:d1:66:49:65:b1:2d:1d:56:15:09:22:27:f4: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:04:92:24:D2:5D:F7:54:DF:EF:75:E1:5E:52:0B:A0:82:48:F3:67 X509v3 Authority Key Identifier: keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:77:bf:3e:32:d9:e6:15:48:55:bb:8b:3d:56:df:aa:a2:36: 82:c2:cb:ab:01:b1:d8:da:e7:71:b9:92:ef:0f:7e:db:45:60: be:6a:54:fe:b4:d0:23:eb:78:89:ec:8f:6c:76:96:8f:d5:1a: 3a:0e:18:2e:cd:f1:c7:4c:be:cb:8e:83:0e:06:9e:1f:80:21: 12:ae:b9:77:cb:f8:9f:df:24:f7:bb:62:11:18:f5:df:19:35: 11:80:1a:1b:71:02:d8:56:f2:45:e1:49:a3:6e:71:51:6f:5f: 06:da:d0:47:ad:76:20:f9:79:5b:b6:0b:78:8b:b9:73:ea:a5: 7d:2c:9b:78:68:0a:f1:8a:53:d2:6d:54:14:7b:4e:1c:47:ee: bb:bd:ca:57:60:ea:bd:b9:34:8b:ae:a8:08:b1:6c:38:6e:a3: 96:b4:3b:06:74:9b:42:24:4c:58:50:33:cb:90:69:8d:25:9c: 4b:d4:36:f3:c8:4b:43:83:d9:62:33:5a:b8:3d:b6:c9:f6:11: 96:4f:d6:57:fd:a4:ac:5f:f1:33:f5:83:47:96:39:50:9c:9f: f8:b5:72:c5:62:22:17:0b:8a:52:24:15:53:18:52:b2:62:a0: 07:39:4b:7a:61:c3:36:45:2a:1d:5c:66:22:ca:a5:95:b0:85: cf:30:64:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdZNbIo9Lj/IktF2ScXqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw YTdmNmUwHhcNMjUxMjE1MTAwMTUyWhcNMjUxMjE2MTAwMTUyWjAzMTEwLwYDVQQD EyhjMzA0OTIyNGQyNWRmNzU0ZGZlZjc1ZTE1ZTUyMGJhMDgyNDhmMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA6bP5mE9IbGjMsny29S/MifJP+H MqmWVzT5rWMkALdIEArQoGSPqY/1wj7bAJdN7SL6baLKGx2u+MzzL3U9HzpBzHm7 q4cLJMhbflbESG5HwCpfsZ7lt6CzW5D4Mjgt2NdMoW1sr4ztPukfW6aTlTpsN6sP ExEGwW9nks5BdXdFueYykioyOoWDfNm3LRcQQl37n4vGDSaOMVdLcxUDNMK4Jn14 3T6WyVPvQ0G4fjSjYdBemvf+m8BqEETpgzMan49P/Bl8ShW4TMVAm3SJb+G6BTlF 75PwPd8B9EyrnfbMbeSgIWBQmjDUd7pEvJE7ENFmSWWxLR1WFQkiJ/SZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMEkiTSXfdU3+914V5SC6CCSPNnMB8GA1UdIwQY MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3e/PjLZ 5hVIVbuLPVbfqqI2gsLLqwGx2NrncbmS7w9+20VgvmpU/rTQI+t4ieyPbHaWj9Ua Og4YLs3xx0y+y46DDgaeH4AhEq65d8v4n98k97tiERj13xk1EYAaG3EC2FbyReFJ o25xUW9fBtrQR612IPl5W7YLeIu5c+qlfSybeGgK8YpT0m1UFHtOHEfuu73KV2Dq vbk0i66oCLFsOG6jlrQ7BnSbQiRMWFAzy5BpjSWcS9Q288hLQ4PZYjNauD22yfYR lk/WV/2krF/xM/WDR5Y5UJyf+LVyxWIiFwuKUiQVUxhSsmKgBzlLemHDNkUqHVxm IsqllbCFzzBkpw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:03 2025 by rpki-client