This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: D/yeBzr8ufmQ2Xiarsw0ACVz0erUMX3dVpGmW9YMNLk= Subject key identifier: 12:8A:57:57:E2:5F:E8:0A:29:0D:4A:18:26:AE:26:CE:19:7F:9D:90 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B1CF3726E57D01F4A923B09EFAAC048B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 12DE Signing time: Sun 14 Dec 2025 13:01:15 +0000 Manifest this update: Sun 14 Dec 2025 13:01:15 +0000 Manifest next update: Mon 15 Dec 2025 13:01:15 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 6: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: nMzrCos6db9IuyztdEYUC9oMJ7Zq2ANG9EOavtFnocE=) 8: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 9: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 10: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 11: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 12: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 13: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 14: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (hash: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:72:6e:57:d0:1f:4a:92:3b:09:ef:aa:c0:48:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Dec 14 13:01:15 2025 GMT Not After : Dec 15 13:01:15 2025 GMT Subject: CN=128a5757e25fe80a290d4a1826ae26ce197f9d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:d9:89:ba:26:27:a2:fc:7d:6a:8f:bd:1d: 8c:b3:09:80:be:67:20:58:49:72:46:28:db:ab:bc: 54:71:61:b7:28:f6:53:d8:17:ce:6b:d8:ce:7b:63: 67:4c:72:30:ff:18:07:64:c7:6a:0f:18:a2:ae:c4: 0c:18:42:23:0a:18:f2:32:6d:4d:93:9c:c3:e0:53: 1e:81:42:7d:d9:20:c1:68:0b:60:bc:47:93:65:99: be:ca:4d:41:87:16:05:50:cb:a4:8c:4a:ba:41:af: 5f:e4:e3:64:a7:27:cd:39:9b:59:c4:58:95:8f:b8: 6a:cc:60:e4:23:3e:41:a2:6a:ee:fe:f1:d0:23:2f: 07:db:ef:d5:bd:91:34:9f:8e:69:49:c2:15:6d:e9: da:d4:1a:2e:9f:9a:a6:fd:c4:46:a2:26:40:4d:c5: a1:30:97:7f:71:bc:78:27:89:44:1f:56:d9:4b:97: 62:95:06:91:92:8a:25:e4:8d:ef:5d:43:ac:6d:e7: 52:e3:2f:b8:4c:b6:55:b9:6f:23:65:19:d9:58:f4: ce:75:8a:3a:96:93:02:78:de:47:96:2c:c0:11:41: 94:2a:2a:c0:16:a7:81:51:4e:af:75:2e:b8:60:17: 54:2b:77:6e:a5:21:b0:8c:8b:5d:77:89:1e:a7:ec: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:57:57:E2:5F:E8:0A:29:0D:4A:18:26:AE:26:CE:19:7F:9D:90 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9a:25:15:7a:8e:2c:7f:c2:ec:76:63:08:49:17:57:55:c8: 81:55:b4:a4:36:c2:20:57:cc:ef:ad:1b:13:a9:6a:0e:86:77: eb:3a:39:e4:85:f3:9e:f0:e9:29:76:82:56:b2:65:35:20:95: 28:8e:7c:fb:2d:f6:6f:99:d2:f0:52:e4:25:2c:c5:6a:fc:7d: 46:9f:db:c0:e0:e7:af:f2:3b:75:3f:2c:46:b9:ea:c1:34:a7: af:e1:19:8e:94:22:72:47:47:09:1d:30:3d:59:48:2d:6a:d6: f4:b8:49:67:d1:1f:60:71:ec:51:01:d1:c0:38:df:e2:1e:0a: b0:dc:54:2e:39:8a:da:3c:11:3b:af:84:74:bc:9a:20:ab:61: 92:7e:43:36:1c:d7:f9:b1:7f:e6:2a:65:55:68:60:f5:8f:99: a5:cb:c3:0f:fe:8d:2a:66:ee:64:36:20:83:40:de:f5:af:25: 90:ca:92:fd:2a:0b:86:9c:5e:ae:f9:3c:f1:86:89:7e:b8:8c: 8a:e5:f4:c0:0e:2e:51:37:db:dc:17:d2:36:f1:b7:af:8c:b5: 2b:f9:dc:20:86:03:cb:9f:32:c4:d9:e4:55:b7:52:f8:0d:9a: 66:a0:59:27:4b:26:0b:c0:c7:db:7e:51:87:ef:f1:00:66:c1: 82:bf:d6:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc83JuV9AfSpI7Ce+qwEizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUxMjE0MTMwMTE1WhcNMjUxMjE1MTMwMTE1WjAzMTEwLwYDVQQD EygxMjhhNTc1N2UyNWZlODBhMjkwZDRhMTgyNmFlMjZjZTE5N2Y5ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V/ZibomJ6L8fWqPvR2MswmAvmcg WElyRijbq7xUcWG3KPZT2BfOa9jOe2NnTHIw/xgHZMdqDxiirsQMGEIjChjyMm1N k5zD4FMegUJ92SDBaAtgvEeTZZm+yk1BhxYFUMukjEq6Qa9f5ONkpyfNOZtZxFiV j7hqzGDkIz5Bomru/vHQIy8H2+/VvZE0n45pScIVbena1Boun5qm/cRGoiZATcWh MJd/cbx4J4lEH1bZS5dilQaRkool5I3vXUOsbedS4y+4TLZVuW8jZRnZWPTOdYo6 lpMCeN5HlizAEUGUKirAFqeBUU6vdS64YBdUK3dupSGwjItdd4kep+wgJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKKV1fiX+gKKQ1KGCauJs4Zf52QMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5olFXqO LH/C7HZjCEkXV1XIgVW0pDbCIFfM760bE6lqDoZ36zo55IXznvDpKXaCVrJlNSCV KI58+y32b5nS8FLkJSzFavx9Rp/bwODnr/I7dT8sRrnqwTSnr+EZjpQickdHCR0w PVlILWrW9LhJZ9EfYHHsUQHRwDjf4h4KsNxULjmK2jwRO6+EdLyaIKthkn5DNhzX +bF/5iplVWhg9Y+ZpcvDD/6NKmbuZDYgg0De9a8lkMqS/SoLhpxervk88YaJfriM iuX0wA4uUTfb3BfSNvG3r4y1K/ncIIYDy58yxNnkVbdS+A2aZqBZJ0smC8DH235R h+/xAGbBgr/W+A== -----END CERTIFICATE-----Generated at Sun Dec 14 15:41:57 2025 by rpki-client