This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json) Hash identifier: ci0BB9ug1Z6Rdm7n7rLkSKturijOTOFDP0WlLc83zsA= Subject key identifier: 24:71:1A:8D:51:00:FF:8F:5D:13:53:C0:D6:8E:5E:4A:55:EA:E2:D4 Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844 Certificate serial: 019B4437FCF7A6CFC6D878AE1863D0F1EB91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft Manifest number: 14CB Signing time: Mon 22 Dec 2025 04:01:18 +0000 Manifest this update: Mon 22 Dec 2025 04:01:18 +0000 Manifest next update: Tue 23 Dec 2025 04:01:18 +0000 Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: YePXYQwcWgzQISaNHkY336gdx28WO59MDsuRI9dlYW0=) 2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:fc:f7:a6:cf:c6:d8:78:ae:18:63:d0:f1:eb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844 Validity Not Before: Dec 22 04:01:18 2025 GMT Not After : Dec 23 04:01:18 2025 GMT Subject: CN=24711a8d5100ff8f5d1353c0d68e5e4a55eae2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:b7:08:46:0c:3b:b6:f0:40:aa:d0:61:74: a0:c9:cb:36:23:fb:13:cc:19:9e:06:7c:64:a4:d6: 79:a4:3b:a3:0d:9f:d1:59:80:4f:b2:89:7a:9f:7f: 04:b3:e7:db:ff:b8:50:68:85:1f:f1:11:50:02:f1: 05:85:af:e4:04:73:a0:43:6f:a2:99:10:57:d7:53: 8d:fb:e6:22:99:32:fa:7a:38:3e:8e:6b:c9:35:37: 63:a1:8d:1a:41:d3:37:d9:3e:cf:cb:fc:a5:6e:a3: 2d:db:57:34:6a:01:56:e7:d6:83:29:a3:a1:6f:99: f2:27:b8:c6:23:55:fd:e3:53:d6:3e:3b:ce:fb:33: 62:1c:4e:8e:ce:a6:ec:19:d5:22:f1:dd:18:f1:ff: 14:12:57:7c:79:ca:55:60:c4:12:a5:e5:b3:58:7b: bb:a2:16:f4:19:86:bf:58:4c:c7:0c:a4:51:77:26: 32:2a:4a:48:22:a5:6c:5d:f5:ef:59:34:cf:a2:70: a6:f7:85:51:ce:77:e0:0b:78:f2:8b:77:db:d6:3d: 4c:3e:a1:ed:f6:b6:c2:aa:6a:1e:b0:59:16:93:d5: 16:ad:5a:73:16:fe:af:26:f2:75:12:fb:a3:83:4a: 27:00:2e:73:e5:76:af:ea:b0:24:d2:6c:44:e7:94: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:71:1A:8D:51:00:FF:8F:5D:13:53:C0:D6:8E:5E:4A:55:EA:E2:D4 X509v3 Authority Key Identifier: keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:3f:79:4f:26:09:fb:4a:bb:70:a2:8f:87:28:74:ad:8d: cc:7d:e8:eb:ea:21:e5:98:9e:49:b4:b4:b0:8f:ca:e7:60:d0: 53:92:c8:05:e8:ff:a2:a5:59:1e:d5:7e:9e:f9:6a:cd:57:ea: dc:f7:e8:27:ba:06:a3:3f:a4:05:a5:f5:59:9d:c8:30:51:5c: 50:70:91:44:d7:28:30:b8:58:68:60:9e:1b:e8:f6:ad:9e:f6: fb:8f:2e:0c:c7:e5:25:9e:08:fc:d0:28:05:9a:7a:39:aa:3f: cb:2b:30:4b:47:5e:93:7a:32:20:f5:01:2d:e6:1c:8c:90:19: f2:0c:91:e0:03:f6:66:a2:47:b5:7f:52:b3:1b:a6:1d:ed:8d: b5:a7:6c:14:88:2b:17:e2:98:5a:2c:af:ff:49:bd:f9:80:a2: dd:9d:9b:ff:69:3c:d0:92:ef:03:21:c3:91:6a:a6:cd:55:1b: db:d2:a3:fc:36:bc:a2:b2:e2:7a:66:5e:96:0c:be:d4:24:00: 68:8f:e1:d7:c4:aa:61:d1:9a:d3:a6:46:2a:3d:1f:37:eb:85: d6:24:fc:1a:ea:b3:d8:b0:e9:c5:87:f9:1c:42:a8:29:d6:96: 72:73:90:2f:7b:4c:80:2e:3b:e4:db:69:a1:2f:ee:4a:cc:3f: 17:f5:8b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/z3ps/G2HiuGGPQ8euRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2U1YjI4NDY2YjkyNzQyNTI2MDMxMzkyZDk0YmYxYTU1 OGU4NDQwHhcNMjUxMjIyMDQwMTE4WhcNMjUxMjIzMDQwMTE4WjAzMTEwLwYDVQQD EygyNDcxMWE4ZDUxMDBmZjhmNWQxMzUzYzBkNjhlNWU0YTU1ZWFlMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAova3CEYMO7bwQKrQYXSgycs2I/sT zBmeBnxkpNZ5pDujDZ/RWYBPsol6n38Es+fb/7hQaIUf8RFQAvEFha/kBHOgQ2+i mRBX11ON++YimTL6ejg+jmvJNTdjoY0aQdM32T7Py/ylbqMt21c0agFW59aDKaOh b5nyJ7jGI1X941PWPjvO+zNiHE6OzqbsGdUi8d0Y8f8UEld8ecpVYMQSpeWzWHu7 ohb0GYa/WEzHDKRRdyYyKkpIIqVsXfXvWTTPonCm94VRznfgC3jyi3fb1j1MPqHt 9rbCqmoesFkWk9UWrVpzFv6vJvJ1Evujg0onAC5z5Xav6rAk0mxE55SZ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRxGo1RAP+PXRNTwNaOXkpV6uLUMB8GA1UdIwQY MBaAFAbOWyhGa5J0JSYDE5LZS/GlWOhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGIt NDg1YjIwOTUyZDkzLzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGItNDg1YjIwOTUyZDkz LzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfo/eU8m CftKu3Cij4codK2NzH3o6+oh5ZieSbS0sI/K52DQU5LIBej/oqVZHtV+nvlqzVfq 3PfoJ7oGoz+kBaX1WZ3IMFFcUHCRRNcoMLhYaGCeG+j2rZ72+48uDMflJZ4I/NAo BZp6Oao/yyswS0dek3oyIPUBLeYcjJAZ8gyR4AP2ZqJHtX9SsxumHe2NtadsFIgr F+KYWiyv/0m9+YCi3Z2b/2k80JLvAyHDkWqmzVUb29Kj/Da8orLiemZelgy+1CQA aI/h18SqYdGa06ZGKj0fN+uF1iT8Guqz2LDpxYf5HEKoKdaWcnOQL3tMgC475Ntp oS/uSsw/F/WLzA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:01 2025 by rpki-client