This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json) Hash identifier: Aw0Sj+EblG0ybUOfBfzv/URGGOHmSiQ+Cj8YJJlzs5k= Subject key identifier: B9:47:FF:4E:69:99:BF:49:4B:FB:E6:EE:1B:32:6F:AC:55:1C:14:AB Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Certificate serial: 019B1727BC0899A745AB017E6D7E74A26682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft Manifest number: 177B Signing time: Sat 13 Dec 2025 10:00:38 +0000 Manifest this update: Sat 13 Dec 2025 10:00:38 +0000 Manifest next update: Sun 14 Dec 2025 10:00:38 +0000 Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=) 2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: v3oSwbNwusyuYtHNmHbzzdBi8YC53TA92/lh51ZIkFQ=) 3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=) 4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:27:bc:08:99:a7:45:ab:01:7e:6d:7e:74:a2:66:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Validity Not Before: Dec 13 10:00:38 2025 GMT Not After : Dec 14 10:00:38 2025 GMT Subject: CN=b947ff4e6999bf494bfbe6ee1b326fac551c14ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:13:23:88:b2:ed:b5:02:5b:ff:8e:26:34: 3d:7c:39:54:6a:b8:c8:19:49:ab:13:6a:18:bd:ec: 19:cf:29:4a:12:22:20:ae:a2:b0:14:d2:64:05:90: 19:60:c4:e4:93:0e:06:a1:c5:f8:8e:9f:69:ee:96: 4f:54:0e:5f:d3:f7:96:64:9e:f5:8b:6e:bb:32:e4: 45:c4:36:3c:81:58:76:32:99:73:93:fd:d6:f8:2e: c8:3c:30:62:cc:e6:9a:87:78:1e:fb:f5:9f:f5:e3: 27:ff:d7:dd:d8:c7:6d:54:07:79:5e:81:a6:3e:6f: f6:f8:07:35:aa:dd:3a:0e:c4:a4:75:f8:b3:91:16: 20:44:87:6a:17:47:5c:de:7a:ca:f1:dd:50:ba:5b: 6a:bc:2f:cb:2e:2a:7e:e3:e1:7f:8f:cc:89:3c:eb: 31:8f:7d:f0:e3:61:03:83:01:ab:3e:aa:1a:b7:17: 4b:02:fc:54:e1:f3:e2:97:9a:59:14:bc:b1:26:c7: 57:4d:46:4a:cc:a1:7a:2c:4f:26:2d:65:30:51:0d: 06:1b:49:88:d4:a0:6a:28:37:90:2d:8b:78:46:46: 5c:d9:0d:5d:1c:99:eb:06:ac:c2:32:d0:81:df:a4: c2:eb:fe:1e:08:f4:c9:f5:5e:c2:40:5e:a2:c6:8f: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:FF:4E:69:99:BF:49:4B:FB:E6:EE:1B:32:6F:AC:55:1C:14:AB X509v3 Authority Key Identifier: keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:53:64:cb:fc:0b:40:e7:a9:63:4e:a6:74:6a:87:a9:71: ef:9b:97:c4:31:11:d1:dc:a1:60:b7:aa:b0:f3:13:66:ca:d9: 78:e8:c6:c8:96:0d:70:29:b9:d7:b8:b8:c3:68:ae:ec:e7:79: e3:1f:3a:e7:6d:d9:ff:9e:11:e2:46:a2:b5:30:d2:b9:4a:aa: 44:e4:53:43:05:f3:1a:41:61:d3:ce:9b:37:41:b8:03:f5:d9: 0e:db:96:39:86:d9:bf:36:02:75:4b:1b:2a:ba:03:6c:16:b8: 35:da:c6:9f:e4:40:8c:42:e8:f4:bb:55:87:76:6e:35:d2:05: 8c:4f:69:14:4c:40:f1:e3:85:c3:5f:83:43:fb:37:d2:09:2f: 88:6a:2e:80:e6:6c:19:b1:08:9b:54:70:d8:c6:8f:e2:df:19: d3:5b:aa:23:3b:f1:4d:66:2e:fc:db:6c:43:5c:10:31:0d:e4: 3f:d9:df:13:31:d6:c6:ee:f8:12:f3:3b:6e:85:7b:32:c6:df: 6e:c6:02:b7:cd:1a:b9:7f:b1:54:a8:a4:21:bb:71:1d:b6:d6: c2:7d:a8:d5:35:08:00:87:3e:60:94:02:21:e9:94:24:db:5d: 33:bc:d9:5e:57:6c:93:3a:cc:89:50:31:82:3f:06:a5:a4:af: 98:3b:e1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXJ7wImadFqwF+bX50omaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4 MDE0Y2YwHhcNMjUxMjEzMTAwMDM4WhcNMjUxMjE0MTAwMDM4WjAzMTEwLwYDVQQD EyhiOTQ3ZmY0ZTY5OTliZjQ5NGJmYmU2ZWUxYjMyNmZhYzU1MWMxNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPgTI4iy7bUCW/+OJjQ9fDlUarjI GUmrE2oYvewZzylKEiIgrqKwFNJkBZAZYMTkkw4GocX4jp9p7pZPVA5f0/eWZJ71 i267MuRFxDY8gVh2Mplzk/3W+C7IPDBizOaah3ge+/Wf9eMn/9fd2MdtVAd5XoGm Pm/2+Ac1qt06DsSkdfizkRYgRIdqF0dc3nrK8d1QultqvC/LLip+4+F/j8yJPOsx j33w42EDgwGrPqoatxdLAvxU4fPil5pZFLyxJsdXTUZKzKF6LE8mLWUwUQ0GG0mI 1KBqKDeQLYt4RkZc2Q1dHJnrBqzCMtCB36TC6/4eCPTJ9V7CQF6ixo/j/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlH/05pmb9JS/vm7hsyb6xVHBSrMB8GA1UdIwQY MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5 LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADO1TZMv8 C0DnqWNOpnRqh6lx75uXxDER0dyhYLeqsPMTZsrZeOjGyJYNcCm517i4w2iu7Od5 4x86523Z/54R4kaitTDSuUqqRORTQwXzGkFh086bN0G4A/XZDtuWOYbZvzYCdUsb KroDbBa4NdrGn+RAjELo9LtVh3ZuNdIFjE9pFExA8eOFw1+DQ/s30gkviGougOZs GbEIm1Rw2MaP4t8Z01uqIzvxTWYu/NtsQ1wQMQ3kP9nfEzHWxu74EvM7boV7Msbf bsYCt80auX+xVKikIbtxHbbWwn2o1TUIAIc+YJQCIemUJNtdM7zZXldskzrMiVAx gj8GpaSvmDvhvA== -----END CERTIFICATE-----Generated at Sat Dec 13 12:01:06 2025 by rpki-client