This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json) Hash identifier: +K9S8/dxZtD2hgMj52zZLJw/x3QE5JvvBn3ZS93ZiEw= Subject key identifier: 65:0B:89:18:78:1B:2D:FE:4D:09:FB:84:00:75:26:EB:B5:E4:62:06 Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa Certificate serial: 019B59772719FFF95A79E989FB63A3AE2B57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:02:19 +0000 Manifest this update: Fri 26 Dec 2025 07:02:19 +0000 Manifest next update: Sat 27 Dec 2025 07:02:19 +0000 Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=) 2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: VOlGEmUuAqPzk53XJhs9hwAJT4iYhoLC0aHLVYo2FLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:27:19:ff:f9:5a:79:e9:89:fb:63:a3:ae:2b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Validity Not Before: Dec 26 07:02:19 2025 GMT Not After : Dec 27 07:02:19 2025 GMT Subject: CN=650b8918781b2dfe4d09fb84007526ebb5e46206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:69:67:85:f1:f9:d2:ad:94:f1:8a:b1:54: 20:fb:eb:57:81:a8:59:20:20:98:2f:a5:18:04:62: 97:b0:a0:94:76:85:91:42:5b:e9:40:c1:59:b4:28: c1:c9:36:27:0f:79:9e:4e:e6:19:6c:69:ca:c7:98: 4f:f1:20:b9:3c:0c:72:44:7e:63:7c:d0:a8:b1:88: e2:7e:be:f7:f3:b9:34:c6:26:01:23:bc:0f:5b:43: 90:8f:ff:d8:02:5b:be:72:c5:30:9a:aa:6c:c0:a8: 58:ea:39:18:37:bb:5b:c5:e2:93:d3:b2:ce:f1:e0: 4c:4b:c9:9b:00:76:e2:1e:34:0e:44:ac:06:a2:51: 9f:40:a2:80:42:92:bd:7f:71:b3:69:53:1c:6d:23: 8a:8f:d1:16:77:11:a9:a3:77:4d:f0:05:44:1f:1b: f8:ae:cc:92:f9:6b:41:e9:58:d7:26:c5:c8:00:6b: 6e:86:d6:1f:35:eb:68:0a:5f:05:c9:d0:a5:01:ca: 12:c2:46:7f:1e:0f:bd:5b:13:60:98:18:e2:30:9c: 32:a6:45:1e:f3:2c:0c:2b:f8:62:aa:fe:d9:fd:89: 2f:d6:81:fe:a8:b6:28:78:23:41:e4:98:37:61:1a: e3:52:dc:d1:6e:08:f2:4d:55:52:a4:6f:07:4e:2f: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:89:18:78:1B:2D:FE:4D:09:FB:84:00:75:26:EB:B5:E4:62:06 X509v3 Authority Key Identifier: keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e7:0c:75:b6:41:2d:3c:a5:cf:ae:6e:73:61:8d:fa:94:89: b2:f8:b1:cf:15:d1:71:07:8b:79:2f:9c:8a:d8:3b:04:c0:58: fc:dd:5c:81:3a:bf:04:3c:a9:fe:a4:9e:b9:68:2d:2a:9b:11: 5b:58:24:2d:d0:8f:ca:8b:e5:1c:1d:0c:92:c9:b7:0f:16:3b: e7:b6:9c:4d:1b:05:1b:01:36:d5:b5:8f:9f:2e:37:0e:c1:c9: 9f:7e:de:0c:1d:68:17:ff:c5:6f:88:1a:7f:1d:cd:7e:68:a3: b1:9f:6b:44:97:7e:4f:02:45:78:c0:24:52:d2:1c:08:06:1c: 85:f6:36:9c:ac:53:ea:a8:bf:8e:e1:bd:65:52:bc:04:fd:a9: 30:3a:f8:59:33:90:cc:32:b9:33:01:4f:f1:9f:03:ab:10:9d: ca:01:74:ac:f7:6e:13:cf:b5:3e:2d:ea:a5:af:50:b8:3f:fb: a2:37:0d:6f:4a:28:57:78:ae:b3:06:72:f1:35:64:42:ee:da: d5:cc:66:e9:d5:9c:00:b4:87:1e:b6:90:3d:ab:ee:f4:41:d7: ea:dc:5b:c7:30:40:4f:05:5f:4e:60:0b:03:03:be:83:03:c2: 84:6c:da:90:d4:27:c3:00:ae:bb:70:9d:1e:fa:27:9d:54:50: 81:9a:f5:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdycZ//laeemJ+2OjritXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy MDU3ZmEwHhcNMjUxMjI2MDcwMjE5WhcNMjUxMjI3MDcwMjE5WjAzMTEwLwYDVQQD Eyg2NTBiODkxODc4MWIyZGZlNGQwOWZiODQwMDc1MjZlYmI1ZTQ2MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6JpZ4Xx+dKtlPGKsVQg++tXgahZ ICCYL6UYBGKXsKCUdoWRQlvpQMFZtCjByTYnD3meTuYZbGnKx5hP8SC5PAxyRH5j fNCosYjifr7387k0xiYBI7wPW0OQj//YAlu+csUwmqpswKhY6jkYN7tbxeKT07LO 8eBMS8mbAHbiHjQORKwGolGfQKKAQpK9f3GzaVMcbSOKj9EWdxGpo3dN8AVEHxv4 rsyS+WtB6VjXJsXIAGtuhtYfNetoCl8FydClAcoSwkZ/Hg+9WxNgmBjiMJwypkUe 8ywMK/hiqv7Z/Ykv1oH+qLYoeCNB5Jg3YRrjUtzRbgjyTVVSpG8HTi+ktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGULiRh4Gy3+TQn7hAB1Juu15GIGMB8GA1UdIwQY MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt MDhmMDk0ZGFmMjQ3LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3 LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvecMdbZB LTylz65uc2GN+pSJsvixzxXRcQeLeS+citg7BMBY/N1cgTq/BDyp/qSeuWgtKpsR W1gkLdCPyovlHB0Mksm3DxY757acTRsFGwE21bWPny43DsHJn37eDB1oF//Fb4ga fx3NfmijsZ9rRJd+TwJFeMAkUtIcCAYchfY2nKxT6qi/juG9ZVK8BP2pMDr4WTOQ zDK5MwFP8Z8DqxCdygF0rPduE8+1Pi3qpa9QuD/7ojcNb0ooV3iuswZy8TVkQu7a 1cxm6dWcALSHHraQPavu9EHX6txbxzBATwVfTmALAwO+gwPChGzakNQnwwCuu3Cd HvonnVRQgZr11g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:20 2025 by rpki-client