This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json) Hash identifier: xbB8LzdiG6/VkRkXFMbCQuH0BEHSCsa7BaW6rNdjzpI= Subject key identifier: 82:63:68:80:8A:DE:7E:05:5A:49:8F:C8:97:95:B3:21:5A:C9:9E:E7 Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Certificate serial: 019B37C54947F1AE1164E55E70B477D43016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft Manifest number: 1791 Signing time: Fri 19 Dec 2025 18:00:34 +0000 Manifest this update: Fri 19 Dec 2025 18:00:34 +0000 Manifest next update: Sat 20 Dec 2025 18:00:34 +0000 Files and hashes: 1: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: AOQnu7RYPVw3DwcEyX+GKfiKk9Bjso4jVs6Iu3NJ5VA=) 2: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=) 3: w8XXySwPtjghOPNGiAj3MbN-wUU.roa (hash: l+mxQRaZBxV5LuGvSkos7MnnKo1PALRzoIewlr/Bc3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:49:47:f1:ae:11:64:e5:5e:70:b4:77:d4:30:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Validity Not Before: Dec 19 18:00:34 2025 GMT Not After : Dec 20 18:00:34 2025 GMT Subject: CN=826368808ade7e055a498fc89795b3215ac99ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:17:e0:34:18:57:7a:c8:30:65:ae:18:a3: bd:c6:dd:5c:19:9b:7c:ae:df:53:d5:06:14:d0:ca: a8:26:5f:e8:2b:96:d7:c9:ca:28:91:c1:f1:a6:07: 93:cd:a3:6a:39:07:33:e4:67:aa:5f:34:a5:95:2a: 94:bf:28:ca:d5:2c:8d:41:7b:10:1e:cd:2d:54:3d: c3:80:ca:8f:91:f6:bf:0b:ce:9c:46:c8:a6:20:7a: 62:94:24:6c:df:ac:62:6d:05:5f:e8:d4:46:ce:68: d9:d8:73:b3:be:a7:d4:0a:f9:d0:ca:04:ca:a8:90: df:39:63:7f:59:8c:e5:53:39:2c:00:02:95:b9:1b: 64:89:60:6d:0e:b4:27:9e:bc:c5:d6:5e:3f:31:db: be:8c:76:a7:6d:29:64:82:4c:be:95:33:12:91:51: 38:b9:71:fd:de:39:8e:7e:b5:d1:7a:ad:cb:9d:d0: ec:55:7c:90:0c:76:b3:33:28:1f:c0:84:a2:6c:57: ec:07:e5:bc:e3:d0:25:ff:ba:4e:54:5b:b3:80:50: 01:21:64:0b:a3:9c:e0:23:d2:7f:f6:e7:6a:c8:93: 44:8a:2e:bf:20:bf:44:65:38:72:29:7f:7b:4c:14: 2c:52:2e:91:7a:6d:4a:47:73:fb:5f:bf:c4:7f:78: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:68:80:8A:DE:7E:05:5A:49:8F:C8:97:95:B3:21:5A:C9:9E:E7 X509v3 Authority Key Identifier: keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:05:19:49:8f:2f:2a:26:80:59:a2:b8:32:ac:73:09:5f:c4: eb:27:af:20:45:01:1e:ad:cc:bb:b8:67:ac:73:22:6e:ab:92: cf:30:dd:3f:92:4f:d4:35:99:86:8a:9f:06:89:be:ab:be:c6: a9:17:3c:fc:38:0f:df:ed:9e:55:3b:d4:bb:0a:9e:fe:b9:ac: cd:d3:e3:96:6b:18:e0:e1:64:8b:e4:4b:69:ba:40:c8:09:3f: 62:91:84:ec:5e:da:30:46:51:ba:61:36:10:1e:73:56:f4:40: b9:e8:88:95:7a:e4:7b:27:0f:66:a2:25:40:5b:3d:4b:d3:87: da:61:5f:04:37:90:68:32:81:32:b0:34:00:40:80:61:9c:a5: 0c:b8:d8:0b:6c:4d:c8:d9:12:58:e6:4d:49:5b:f5:89:ef:fb: 3b:17:e8:6f:73:6b:02:5f:94:75:d6:c5:d2:82:6d:d0:25:83: 63:3a:ce:66:7b:83:9b:1f:96:b0:8f:36:7a:66:3f:5b:88:bb: fe:a1:4a:09:08:c1:5b:34:38:72:54:15:46:aa:5e:51:e4:43: d1:52:07:b5:06:08:4d:04:71:fa:4d:41:fc:8b:aa:2f:7a:14: 51:22:74:c7:1c:b9:66:d3:22:d5:69:c0:38:28:e2:15:35:b5: fc:c8:e1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xUlH8a4RZOVecLR31DAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi YjdhOWIwHhcNMjUxMjE5MTgwMDM0WhcNMjUxMjIwMTgwMDM0WjAzMTEwLwYDVQQD Eyg4MjYzNjg4MDhhZGU3ZTA1NWE0OThmYzg5Nzk1YjMyMTVhYzk5ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/kX4DQYV3rIMGWuGKO9xt1cGZt8 rt9T1QYU0MqoJl/oK5bXycookcHxpgeTzaNqOQcz5GeqXzSllSqUvyjK1SyNQXsQ Hs0tVD3DgMqPkfa/C86cRsimIHpilCRs36xibQVf6NRGzmjZ2HOzvqfUCvnQygTK qJDfOWN/WYzlUzksAAKVuRtkiWBtDrQnnrzF1l4/Mdu+jHanbSlkgky+lTMSkVE4 uXH93jmOfrXReq3LndDsVXyQDHazMygfwISibFfsB+W849Al/7pOVFuzgFABIWQL o5zgI9J/9udqyJNEii6/IL9EZThyKX97TBQsUi6Rem1KR3P7X7/Ef3huwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJjaICK3n4FWkmPyJeVsyFayZ7nMB8GA1UdIwQY MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwUZSY8v KiaAWaK4MqxzCV/E6yevIEUBHq3Mu7hnrHMibquSzzDdP5JP1DWZhoqfBom+q77G qRc8/DgP3+2eVTvUuwqe/rmszdPjlmsY4OFki+RLabpAyAk/YpGE7F7aMEZRumE2 EB5zVvRAueiIlXrkeycPZqIlQFs9S9OH2mFfBDeQaDKBMrA0AECAYZylDLjYC2xN yNkSWOZNSVv1ie/7Oxfob3NrAl+UddbF0oJt0CWDYzrOZnuDmx+WsI82emY/W4i7 /qFKCQjBWzQ4clQVRqpeUeRD0VIHtQYITQRx+k1B/IuqL3oUUSJ0xxy5ZtMi1WnA OCjiFTW1/Mjh7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 03:14:28 2025 by rpki-client