This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json) Hash identifier: XZBF1pW3g4Lre/nhJVKzw0NcH8lGU16quqVuYDflRR0= Subject key identifier: 4D:F8:A4:E3:B0:CE:8F:89:EE:8F:6E:2A:28:C2:58:B1:62:C7:5E:0A Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Certificate serial: 019B5A1AB35EF5BDC8D4986013C898A3DAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft Manifest number: 0CB3 Signing time: Fri 26 Dec 2025 10:00:57 +0000 Manifest this update: Fri 26 Dec 2025 10:00:57 +0000 Manifest next update: Sat 27 Dec 2025 10:00:57 +0000 Files and hashes: 1: 1R6uhc2wPnqKxnOesvRg3wWNwhk.roa (hash: Vk3vRGCge4uXoZ+eQOPQfiJoFgTM6J3DonWOQ6myT5g=) 2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: RUmvqzYcGS5ltDWiY1zlvgZnaCkQr1wIG8SXsYFxMOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b3:5e:f5:bd:c8:d4:98:60:13:c8:98:a3:da:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Validity Not Before: Dec 26 10:00:57 2025 GMT Not After : Dec 27 10:00:57 2025 GMT Subject: CN=4df8a4e3b0ce8f89ee8f6e2a28c258b162c75e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:43:19:75:23:20:c5:60:2e:51:00:62:1b: a7:2d:a2:3e:f9:59:bc:97:01:89:45:19:17:b6:13: 77:41:c3:78:6b:f5:2a:74:30:44:24:fc:83:bf:d4: d9:60:08:56:b8:78:79:e5:1e:93:d4:9e:e8:38:ee: 31:da:47:fd:ee:c4:40:f5:c1:65:20:82:d3:2e:ac: 49:11:cf:22:05:e6:02:ae:20:4a:2f:70:58:4a:ac: bc:5c:87:ea:95:a5:d3:27:07:5a:e1:d1:83:0d:a4: 87:b8:3c:ac:f9:92:19:0b:7f:1c:a2:30:4e:d9:c9: 20:8d:e4:58:7a:a6:dc:06:63:f9:1c:84:62:cd:35: e5:32:b1:a1:21:d6:af:b5:cd:ea:3c:04:ac:dc:d4: 08:a7:b3:50:98:1f:3a:70:16:5b:c7:29:98:b7:f3: 72:7d:77:be:20:f0:95:41:b7:04:7b:2d:12:6b:6d: 62:85:b7:10:69:5d:f3:a3:71:03:e8:db:89:aa:86: 86:24:90:03:98:09:97:98:83:9d:3c:7b:b6:81:09: 5f:05:0e:bc:5f:f6:bf:65:b2:90:98:21:e9:a1:46: cd:ad:0d:62:8b:84:b4:dc:a0:44:c1:bc:41:59:1e: 3a:fe:6a:5f:04:02:df:f1:f2:a9:7b:e3:c7:87:22: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F8:A4:E3:B0:CE:8F:89:EE:8F:6E:2A:28:C2:58:B1:62:C7:5E:0A X509v3 Authority Key Identifier: keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:0b:2c:33:f0:0a:72:a9:e0:2f:94:af:b0:9a:61:89:df: d0:f4:d0:bf:3a:54:4e:5f:59:e1:f8:aa:bf:fd:1f:ed:e0:ec: 94:72:f9:5b:f5:aa:b6:1e:c0:b3:54:17:3d:65:89:c4:b8:19: 0f:fd:11:ea:c7:e0:89:27:d7:0d:f5:40:a7:4b:38:07:91:ed: c8:91:b8:04:8e:a1:09:d8:58:f4:b9:13:d5:0a:38:2b:8f:cd: ab:a4:80:e4:be:d0:33:ef:1a:3c:12:fb:3c:34:95:dc:b4:4a: 32:04:3b:12:1d:43:63:32:23:99:4c:b9:42:ce:c1:a9:16:e5: 1d:a0:cf:35:11:df:c2:79:8e:e3:b9:fb:cc:80:25:1a:7d:f1: e3:be:41:84:19:62:06:71:ee:c1:4d:c5:d4:c0:a7:6b:6a:f1: 7b:32:78:9a:60:d6:d4:da:5c:79:f9:3d:25:e0:6c:06:4e:49: ca:9e:1e:5b:2b:f4:95:cf:8d:3c:28:69:10:90:4c:81:21:13: 56:09:cb:7c:a5:18:d2:34:59:ae:91:1b:16:09:d6:57:5f:f8: d0:26:f0:42:4d:2c:17:e2:a8:e9:2f:1a:50:29:54:d9:c7:34: 27:b7:63:eb:df:cf:16:c3:da:ff:21:e5:30:5e:d6:ae:3c:e7: bf:d3:66:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrNe9b3I1JhgE8iYo9rRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4 ZDVjYTUwHhcNMjUxMjI2MTAwMDU3WhcNMjUxMjI3MTAwMDU3WjAzMTEwLwYDVQQD Eyg0ZGY4YTRlM2IwY2U4Zjg5ZWU4ZjZlMmEyOGMyNThiMTYyYzc1ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC9DGXUjIMVgLlEAYhunLaI++Vm8 lwGJRRkXthN3QcN4a/UqdDBEJPyDv9TZYAhWuHh55R6T1J7oOO4x2kf97sRA9cFl IILTLqxJEc8iBeYCriBKL3BYSqy8XIfqlaXTJwda4dGDDaSHuDys+ZIZC38cojBO 2ckgjeRYeqbcBmP5HIRizTXlMrGhIdavtc3qPASs3NQIp7NQmB86cBZbxymYt/Ny fXe+IPCVQbcEey0Sa21ihbcQaV3zo3ED6NuJqoaGJJADmAmXmIOdPHu2gQlfBQ68 X/a/ZbKQmCHpoUbNrQ1ii4S03KBEwbxBWR46/mpfBALf8fKpe+PHhyL1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE34pOOwzo+J7o9uKijCWLFix14KMB8GA1UdIwQY MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2 LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqywLLDPw CnKp4C+Ur7CaYYnf0PTQvzpUTl9Z4fiqv/0f7eDslHL5W/Wqth7As1QXPWWJxLgZ D/0R6sfgiSfXDfVAp0s4B5HtyJG4BI6hCdhY9LkT1Qo4K4/Nq6SA5L7QM+8aPBL7 PDSV3LRKMgQ7Eh1DYzIjmUy5Qs7BqRblHaDPNRHfwnmO47n7zIAlGn3x475BhBli BnHuwU3F1MCna2rxezJ4mmDW1Npcefk9JeBsBk5Jyp4eWyv0lc+NPChpEJBMgSET VgnLfKUY0jRZrpEbFgnWV1/40CbwQk0sF+Ko6S8aUClU2cc0J7dj69/PFsPa/yHl MF7Wrjznv9Nmug== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client