This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json) Hash identifier: LDeepgmlRwxVZuLV06NFulgwR6C2Sg5ktmeX8bfqwls= Subject key identifier: 72:3B:67:2B:84:76:E9:1C:1E:23:58:56:4A:62:E1:B5:1A:E5:59:DD Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Certificate serial: 019B5907BDD7227D31FD11D44C6B2A2F71B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft Manifest number: 0ED3 Signing time: Fri 26 Dec 2025 05:00:38 +0000 Manifest this update: Fri 26 Dec 2025 05:00:38 +0000 Manifest next update: Sat 27 Dec 2025 05:00:38 +0000 Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=) 2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: gW4UZfmdTIeL4bx9P8WOj80E8ygS01WT1nDGB+qqiVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bd:d7:22:7d:31:fd:11:d4:4c:6b:2a:2f:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Validity Not Before: Dec 26 05:00:38 2025 GMT Not After : Dec 27 05:00:38 2025 GMT Subject: CN=723b672b8476e91c1e2358564a62e1b51ae559dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:06:d0:25:a0:6b:b0:14:e3:c0:6d:1d:93: 76:3f:cd:cb:57:78:5b:e7:d5:c1:da:f2:7c:de:36: 34:7d:a5:5d:d2:73:92:75:2c:31:e2:28:d1:fe:f2: d3:5b:0e:0c:3b:4a:81:a2:f9:cd:89:af:84:91:c7: c2:77:03:67:59:72:48:e8:0a:32:83:1f:f5:f1:f9: 5f:ed:ab:ef:6a:09:12:ad:bc:6c:95:31:37:b7:c7: ff:c6:4d:9a:37:aa:35:da:6a:a3:2a:82:3d:5b:09: 9b:73:e4:c5:d1:ba:a7:6c:d2:21:a4:51:b1:4b:2f: 60:f3:aa:a9:6a:24:db:9c:c0:9f:fc:44:3b:ac:f6: 36:e5:e1:05:15:da:f5:bc:eb:f7:70:45:3c:c4:fb: c9:3a:a3:87:fc:9c:53:a9:97:8d:7e:9d:13:7b:f9: f1:82:41:d7:e4:07:97:8a:be:92:ca:3e:f5:bd:82: 11:c8:5f:03:10:fe:c0:4b:27:79:a0:f1:4f:e9:59: 83:f3:8e:d5:cf:d8:46:27:a6:a2:15:dc:36:f1:76: 96:d5:86:c5:d1:e7:9f:26:15:33:cb:0c:fd:1a:6c: ab:15:0d:42:e0:99:19:70:a2:97:6e:d8:d5:25:c2: eb:81:b3:f7:57:af:08:20:7d:1a:cd:d9:22:5e:90: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:67:2B:84:76:E9:1C:1E:23:58:56:4A:62:E1:B5:1A:E5:59:DD X509v3 Authority Key Identifier: keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:25:5d:ac:c5:df:71:c8:e2:2b:9c:42:68:dd:4f:c0:fb: a5:8e:37:e8:c2:03:21:ac:58:5d:6d:f1:72:f8:d6:51:0a:8a: 92:6b:0d:52:10:54:ec:01:73:4b:42:78:fa:d4:cf:82:50:1b: 89:f3:d9:5b:ca:42:a3:de:36:6d:e6:97:44:05:d2:75:47:0d: 1f:ce:15:69:7c:ad:12:18:eb:e0:90:ac:62:04:40:c8:8a:d6: 86:c5:fc:ac:54:c5:c6:7e:fb:fb:66:b1:0c:ae:2e:76:d8:b0: b8:2b:c7:6f:de:69:09:72:33:c5:69:ae:9b:7e:2f:3e:49:99: dd:9d:9f:11:68:8e:ae:8f:c2:08:cb:67:0b:e8:91:7b:0d:98: d9:3f:a1:f5:47:10:39:64:7a:44:ab:84:e5:37:9e:00:5f:60: d4:d6:21:3a:dd:01:53:c4:0b:fc:3d:20:5f:f9:64:c7:9f:82: 73:4d:99:90:3a:0e:b9:9b:2a:2d:97:88:10:df:94:83:ef:9e: 8e:5a:49:0e:d9:59:9a:da:67:f4:b3:ab:38:7e:06:45:d5:27: f6:b8:fc:0f:f4:4c:ef:f7:61:b8:18:8a:17:87:de:2d:0d:11: 62:99:2a:c6:10:9a:d2:c3:55:7b:6c:a7:28:46:8d:94:75:df: d9:16:0e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB73XIn0x/RHUTGsqL3G5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VlMmI4NDAwMjA4YTdlZWE0NTA2MGY0YjdhODNjNDNl OGRlN2MwHhcNMjUxMjI2MDUwMDM4WhcNMjUxMjI3MDUwMDM4WjAzMTEwLwYDVQQD Eyg3MjNiNjcyYjg0NzZlOTFjMWUyMzU4NTY0YTYyZTFiNTFhZTU1OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5kG0CWga7AU48BtHZN2P83LV3hb 59XB2vJ83jY0faVd0nOSdSwx4ijR/vLTWw4MO0qBovnNia+EkcfCdwNnWXJI6Aoy gx/18flf7avvagkSrbxslTE3t8f/xk2aN6o12mqjKoI9Wwmbc+TF0bqnbNIhpFGx Sy9g86qpaiTbnMCf/EQ7rPY25eEFFdr1vOv3cEU8xPvJOqOH/JxTqZeNfp0Te/nx gkHX5AeXir6Syj71vYIRyF8DEP7ASyd5oPFP6VmD847Vz9hGJ6aiFdw28XaW1YbF 0eefJhUzywz9GmyrFQ1C4JkZcKKXbtjVJcLrgbP3V68IIH0azdkiXpCXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI7ZyuEdukcHiNYVkpi4bUa5VndMB8GA1UdIwQY MBaAFG4+4rhAAgin7qRQYPS3qDxD6N58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUt NzMyN2RmNmJkZDEwLzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUtNzMyN2RmNmJkZDEw LzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPklXazF 33HI4iucQmjdT8D7pY436MIDIaxYXW3xcvjWUQqKkmsNUhBU7AFzS0J4+tTPglAb ifPZW8pCo942beaXRAXSdUcNH84VaXytEhjr4JCsYgRAyIrWhsX8rFTFxn77+2ax DK4udtiwuCvHb95pCXIzxWmum34vPkmZ3Z2fEWiOro/CCMtnC+iRew2Y2T+h9UcQ OWR6RKuE5TeeAF9g1NYhOt0BU8QL/D0gX/lkx5+Cc02ZkDoOuZsqLZeIEN+Ug++e jlpJDtlZmtpn9LOrOH4GRdUn9rj8D/RM7/dhuBiKF4feLQ0RYpkqxhCa0sNVe2yn KEaNlHXf2RYOTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client