This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json) Hash identifier: i64vLMBD9YrkfGTFL+p9J8Dipc+BcVogQMk9+QfaRRY= Subject key identifier: C1:EF:CF:18:7F:BB:B4:6A:88:41:88:2C:59:E9:00:5C:D4:2B:5F:08 Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Certificate serial: 019B39B3E07BB7D227B4DA93F02955BACE9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 03:00:48 +0000 Manifest this update: Sat 20 Dec 2025 03:00:48 +0000 Manifest next update: Sun 21 Dec 2025 03:00:48 +0000 Files and hashes: 1: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: OqOfZJovCGf/HbMHXBOb8NM8IvkZ/u1OcCXyKBsqV98=) 2: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=) 3: w8XXySwPtjghOPNGiAj3MbN-wUU.roa (hash: l+mxQRaZBxV5LuGvSkos7MnnKo1PALRzoIewlr/Bc3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e0:7b:b7:d2:27:b4:da:93:f0:29:55:ba:ce:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Validity Not Before: Dec 20 03:00:48 2025 GMT Not After : Dec 21 03:00:48 2025 GMT Subject: CN=c1efcf187fbbb46a8841882c59e9005cd42b5f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:49:e3:bf:f4:95:38:0f:9b:0d:d9:b3:a4: 57:4a:a9:b2:d9:e6:c9:39:fa:80:34:d0:32:7c:9d: ad:ec:7e:fd:35:0b:df:03:ab:af:39:b8:e0:a1:a2: ee:86:e7:43:cf:44:4a:6a:5f:4c:bc:65:05:b5:19: 2c:8e:e5:98:20:3a:10:63:b3:1c:a4:a0:36:eb:d7: 48:7a:c2:78:b4:94:25:85:51:38:e1:4b:8d:db:67: bf:3b:07:e1:80:81:55:21:05:e0:34:56:94:e1:a1: 1a:00:2f:3a:fe:70:d7:c0:85:c5:c8:f0:b3:be:4c: 7e:57:19:8f:d5:8c:54:15:83:5d:2a:43:16:9b:27: b3:b9:d6:e7:80:3f:f0:81:b2:81:5c:16:73:23:1f: 9c:03:ca:77:e4:36:e1:86:67:92:0a:4e:ec:44:4a: 22:5f:54:79:90:8d:c3:3e:61:c0:24:43:c9:90:12: d9:05:24:21:99:41:af:cf:42:84:0f:9d:b8:ae:07: c7:27:27:73:e4:c9:16:a0:e4:d6:c5:23:f1:17:91: 99:b1:4b:e4:0d:43:13:c9:2b:8f:44:4b:19:bb:e8: b7:01:cb:ff:54:74:5e:13:ca:4d:41:bd:0c:ca:21: 76:6f:08:55:f0:a7:f9:f2:ea:c1:fd:a0:11:f2:85: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:CF:18:7F:BB:B4:6A:88:41:88:2C:59:E9:00:5C:D4:2B:5F:08 X509v3 Authority Key Identifier: keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:dd:1a:bf:91:66:64:35:f7:3a:6f:ad:7f:17:11:d1:0d:d6: 85:72:86:9e:e1:49:e3:52:ea:9a:e8:bf:b8:3d:0e:f1:d4:df: 0e:96:c8:f0:17:5c:06:04:11:03:a1:81:f5:5e:98:c1:78:b6: 1f:9a:73:13:72:61:83:db:3a:35:d5:42:fc:d3:49:fa:14:06: 51:93:c7:87:b3:66:92:a9:e0:50:15:8a:e7:c8:d1:db:74:0f: b3:b7:e7:44:01:eb:36:50:67:48:ad:c8:a2:2b:d7:f6:4e:a2: de:c3:e1:6e:31:31:d2:92:e0:02:5b:aa:4a:67:85:cb:a3:c5: de:08:57:d5:22:ca:d4:6e:41:c4:3f:d2:a7:1b:2f:19:1e:01: 27:75:f5:bb:b4:c9:f7:50:74:92:5f:06:ef:53:07:35:2e:fe: ba:54:b6:29:79:88:89:1a:28:85:df:0f:8e:47:ac:a5:98:a1: dc:f7:70:84:b6:7d:9c:dd:1e:0b:bf:02:81:b1:70:5b:cc:c0: fc:09:f8:39:05:8d:20:ad:7b:69:8d:fc:51:77:b4:07:7e:41: 4e:62:fd:49:83:c0:56:40:c1:4f:3d:7c:62:c0:e5:0c:d8:73: a5:1a:01:da:db:5e:50:81:cb:35:67:9b:1b:8f:dc:6c:c2:24: 34:d8:65:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+B7t9IntNqT8ClVus6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi YjdhOWIwHhcNMjUxMjIwMDMwMDQ4WhcNMjUxMjIxMDMwMDQ4WjAzMTEwLwYDVQQD EyhjMWVmY2YxODdmYmJiNDZhODg0MTg4MmM1OWU5MDA1Y2Q0MmI1ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB9J47/0lTgPmw3Zs6RXSqmy2ebJ OfqANNAyfJ2t7H79NQvfA6uvObjgoaLuhudDz0RKal9MvGUFtRksjuWYIDoQY7Mc pKA269dIesJ4tJQlhVE44UuN22e/OwfhgIFVIQXgNFaU4aEaAC86/nDXwIXFyPCz vkx+VxmP1YxUFYNdKkMWmyezudbngD/wgbKBXBZzIx+cA8p35DbhhmeSCk7sREoi X1R5kI3DPmHAJEPJkBLZBSQhmUGvz0KED524rgfHJydz5MkWoOTWxSPxF5GZsUvk DUMTySuPREsZu+i3Acv/VHReE8pNQb0MyiF2bwhV8Kf58urB/aAR8oXxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHvzxh/u7RqiEGILFnpAFzUK18IMB8GA1UdIwQY MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARN0av5Fm ZDX3Om+tfxcR0Q3WhXKGnuFJ41Lqmui/uD0O8dTfDpbI8BdcBgQRA6GB9V6YwXi2 H5pzE3Jhg9s6NdVC/NNJ+hQGUZPHh7NmkqngUBWK58jR23QPs7fnRAHrNlBnSK3I oivX9k6i3sPhbjEx0pLgAluqSmeFy6PF3ghX1SLK1G5BxD/SpxsvGR4BJ3X1u7TJ 91B0kl8G71MHNS7+ulS2KXmIiRoohd8PjkespZih3PdwhLZ9nN0eC78CgbFwW8zA /An4OQWNIK17aY38UXe0B35BTmL9SYPAVkDBTz18YsDlDNhzpRoB2tteUIHLNWeb G4/cbMIkNNhlfw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:35:01 2025 by rpki-client