This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json) Hash identifier: BeTmMBXxp0TieIEeB8nlVWhwDZH3fG4nY9Ct+99Mco4= Subject key identifier: 00:37:7F:EE:24:9D:BA:25:9D:61:AD:F4:E5:91:85:D3:72:2B:90:74 Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844 Certificate serial: 019B4BF1BAC565E4F3D20A3C4A34777CC3BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft Manifest number: 14CF Signing time: Tue 23 Dec 2025 16:01:31 +0000 Manifest this update: Tue 23 Dec 2025 16:01:31 +0000 Manifest next update: Wed 24 Dec 2025 16:01:31 +0000 Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: obqiOKYaLMESpctb2vMQtvP0IK2+tZVWMkTxW7jtYEs=) 2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:ba:c5:65:e4:f3:d2:0a:3c:4a:34:77:7c:c3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844 Validity Not Before: Dec 23 16:01:31 2025 GMT Not After : Dec 24 16:01:31 2025 GMT Subject: CN=00377fee249dba259d61adf4e59185d3722b9074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:04:d5:8d:ba:c7:78:72:d2:fe:8b:6b:92: 08:72:cd:0f:ac:7a:de:a6:8d:46:b7:23:d5:8d:59: bd:86:c0:9e:c3:bc:64:91:79:27:85:c6:51:c2:7d: a9:3a:62:7f:f1:ab:3b:72:0b:c8:9c:f9:f3:18:93: bf:f8:f6:21:14:e7:f5:62:9f:45:69:ec:c1:4d:e7: 24:d0:76:bc:b6:7b:6b:5f:fd:87:50:15:ad:d5:c3: 06:b2:47:b6:6b:a6:f1:62:cb:68:f7:bd:ea:32:d9: c3:c5:4a:cf:23:5c:00:ee:9f:8a:3e:99:53:16:dd: 29:1c:49:c6:32:ce:9c:8b:df:da:0e:53:3f:2c:cb: cd:bb:29:93:dd:9c:d2:80:f4:b2:a1:10:51:47:ad: fb:21:f7:76:75:d5:0d:60:8f:67:0d:88:5f:9d:8d: 67:34:08:7a:79:51:86:38:49:9c:2e:ed:a0:60:39: 20:e1:38:6c:4d:10:dd:75:b3:b2:3a:4c:44:67:d2: 6e:dc:2b:a9:13:11:2b:b7:a8:75:6f:bc:7c:b6:03: 34:05:12:cc:e9:37:55:68:c1:fe:93:67:17:d2:bb: 85:07:1f:70:9d:0e:14:31:61:8f:15:a2:99:58:42: 5f:95:26:21:83:0b:ab:ad:7e:f4:2e:a8:4d:c5:1c: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:7F:EE:24:9D:BA:25:9D:61:AD:F4:E5:91:85:D3:72:2B:90:74 X509v3 Authority Key Identifier: keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0a:f6:2f:52:e3:c5:1a:11:72:c7:a1:e1:7c:a6:e5:fd:04: cb:76:1b:be:78:22:d0:cb:69:8f:d1:90:c4:2a:be:69:db:52: 20:12:2b:c1:ea:a0:cc:df:b0:e2:92:78:20:c1:28:85:d0:4d: 83:ea:a9:0d:4d:a7:24:4f:64:9c:e0:c8:96:5f:5e:86:c0:19: 2b:b0:bc:63:cb:7a:01:17:fe:85:06:69:d7:7f:c8:4a:b7:bb: 7c:51:ee:ec:82:65:64:7f:4b:16:93:27:56:10:6a:e4:76:ea: d2:72:16:a2:44:05:d5:77:aa:9d:46:6e:60:2d:a4:a6:45:0d: 58:ce:ec:26:12:6c:74:e9:79:49:92:8f:9e:ed:2d:0f:2b:9d: 75:de:06:7b:4e:b2:84:78:36:43:35:ed:92:01:39:ed:77:21: e8:f4:03:a6:5f:fd:fb:03:fc:50:6b:20:11:40:87:43:f9:8f: c3:c9:a5:43:f5:e4:84:05:6c:04:89:76:46:73:9c:ad:22:ad: a3:46:46:b0:22:41:7b:a4:0f:be:3f:69:46:ce:38:75:fb:88: b0:15:02:e4:40:6b:e2:13:eb:25:dd:e4:86:85:68:a7:c3:bd: e0:31:45:bd:e5:5f:72:c9:20:eb:99:a5:52:af:66:4e:4b:3f: 1f:90:a5:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8brFZeTz0go8SjR3fMO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2U1YjI4NDY2YjkyNzQyNTI2MDMxMzkyZDk0YmYxYTU1 OGU4NDQwHhcNMjUxMjIzMTYwMTMxWhcNMjUxMjI0MTYwMTMxWjAzMTEwLwYDVQQD EygwMDM3N2ZlZTI0OWRiYTI1OWQ2MWFkZjRlNTkxODVkMzcyMmI5MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT0E1Y26x3hy0v6La5IIcs0PrHre po1GtyPVjVm9hsCew7xkkXknhcZRwn2pOmJ/8as7cgvInPnzGJO/+PYhFOf1Yp9F aezBTeck0Ha8tntrX/2HUBWt1cMGske2a6bxYsto973qMtnDxUrPI1wA7p+KPplT Ft0pHEnGMs6ci9/aDlM/LMvNuymT3ZzSgPSyoRBRR637Ifd2ddUNYI9nDYhfnY1n NAh6eVGGOEmcLu2gYDkg4ThsTRDddbOyOkxEZ9Ju3CupExErt6h1b7x8tgM0BRLM 6TdVaMH+k2cX0ruFBx9wnQ4UMWGPFaKZWEJflSYhgwurrX70LqhNxRyenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA3f+4knbolnWGt9OWRhdNyK5B0MB8GA1UdIwQY MBaAFAbOWyhGa5J0JSYDE5LZS/GlWOhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGIt NDg1YjIwOTUyZDkzLzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGItNDg1YjIwOTUyZDkz LzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAr2L1Lj xRoRcseh4Xym5f0Ey3Ybvngi0Mtpj9GQxCq+adtSIBIrweqgzN+w4pJ4IMEohdBN g+qpDU2nJE9knODIll9ehsAZK7C8Y8t6ARf+hQZp13/ISre7fFHu7IJlZH9LFpMn VhBq5Hbq0nIWokQF1XeqnUZuYC2kpkUNWM7sJhJsdOl5SZKPnu0tDyuddd4Ge06y hHg2QzXtkgE57Xch6PQDpl/9+wP8UGsgEUCHQ/mPw8mlQ/XkhAVsBIl2RnOcrSKt o0ZGsCJBe6QPvj9pRs44dfuIsBUC5EBr4hPrJd3khoVop8O94DFFveVfcskg65ml Uq9mTks/H5ClZA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:01:07 2025 by rpki-client