This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json) Hash identifier: 4q8ceVZ38VPcPEpnV7lpBMOydQYCt5uKEawWzm8zWQY= Subject key identifier: 80:55:88:3E:97:36:CB:6F:4E:CD:8E:41:7D:22:58:05:D8:03:34:2C Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Certificate serial: 019B24AD06720C0F1B81469803EB284EB8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft Manifest number: A5 Signing time: Tue 16 Dec 2025 01:01:17 +0000 Manifest this update: Tue 16 Dec 2025 01:01:17 +0000 Manifest next update: Wed 17 Dec 2025 01:01:17 +0000 Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=) 2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: h5ie1RKqnzBJL3hqiBmaMG4OnF/godfH5q9WihXQ8xo=) 3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ad:06:72:0c:0f:1b:81:46:98:03:eb:28:4e:b8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Validity Not Before: Dec 16 01:01:17 2025 GMT Not After : Dec 17 01:01:17 2025 GMT Subject: CN=8055883e9736cb6f4ecd8e417d225805d803342c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e5:59:01:63:50:39:43:c1:0c:d9:51:b9:88: 6b:38:3e:90:22:bd:07:fc:a7:af:53:4a:40:d8:c1: b5:a2:b2:7c:ca:d3:97:c0:46:c9:cc:6e:da:86:10: 03:bd:4a:55:0d:f0:84:01:df:f1:51:c9:4c:01:a3: 21:d7:69:e5:a1:ab:c0:fb:45:6b:9f:c7:a7:05:3d: 71:3e:fa:a1:e5:73:e6:e9:88:ca:89:82:f3:52:d7: be:2f:e4:61:e6:7a:a4:ce:8e:84:10:70:93:f8:86: d0:05:3f:1c:92:3b:aa:92:47:74:ca:98:7d:4c:ab: 9f:32:9f:02:b3:1f:04:aa:00:2a:5e:2c:3e:5b:86: 5a:58:38:cc:4c:92:f7:04:a2:f3:c1:40:ea:a8:b4: 3d:bd:b3:33:83:cc:ff:41:ce:e7:57:97:fd:71:dc: 90:92:c5:24:13:66:50:67:57:6f:bd:93:4e:0b:ba: c9:9b:09:71:e2:0a:0c:76:da:43:19:3f:ae:7c:23: c7:78:ed:a0:cb:87:4a:5b:8d:8c:b7:1d:b4:53:79: 14:8f:0a:f2:f8:07:c6:71:07:d7:ff:62:5b:67:24: cd:26:db:7b:ee:66:ce:23:86:4d:b3:aa:40:68:a6: 41:c2:de:ac:39:18:62:68:35:46:51:da:95:e3:59: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:55:88:3E:97:36:CB:6F:4E:CD:8E:41:7D:22:58:05:D8:03:34:2C X509v3 Authority Key Identifier: keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:af:82:9a:27:d7:87:00:aa:a1:1a:a4:92:0d:f5:86:89:7b: 70:b8:74:02:68:58:29:32:15:51:33:19:5f:c1:af:93:79:4f: f7:73:fe:ff:bf:75:07:31:e7:2a:10:4f:45:96:45:a6:94:db: 03:ad:0d:c4:cd:3a:b7:d2:b0:c0:44:cd:bd:c9:7b:00:6e:27: d1:bd:b0:09:2f:6b:e9:8e:1c:9a:88:09:15:be:10:ed:ad:b4: 18:ba:5f:c1:66:7a:9f:d7:02:b1:3f:04:5a:1c:b7:c5:5e:72: ce:13:87:37:80:b4:22:a3:5a:61:bb:73:74:32:fa:db:75:01: e1:5b:b2:a2:a3:36:ca:cc:22:c3:71:f8:1b:3d:4d:fc:64:2b: b9:48:e4:04:49:3b:45:1b:e0:5d:9d:e6:fe:3d:6a:64:63:0b: 76:f6:99:31:1c:f5:37:4f:45:ad:e4:d0:85:b4:2a:80:99:51: c8:65:27:db:81:62:fa:7f:84:09:b1:eb:bd:87:fa:20:ca:df: 38:85:ee:8e:99:09:0f:88:a7:43:d5:03:16:12:93:20:de:a8: 67:c3:65:7e:a0:53:a2:5d:09:7f:69:67:de:a3:a1:9a:a1:81: 34:94:ca:50:06:19:43:e4:1f:28:a1:c6:1a:67:3d:8d:02:1e: e5:98:7c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrQZyDA8bgUaYA+soTrj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNkMjI0NzhlYzg2Yjg1NDRkZmI5OGFkZGVhYzIyNmY4 ZjA3ZTAwHhcNMjUxMjE2MDEwMTE3WhcNMjUxMjE3MDEwMTE3WjAzMTEwLwYDVQQD Eyg4MDU1ODgzZTk3MzZjYjZmNGVjZDhlNDE3ZDIyNTgwNWQ4MDMzNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uVZAWNQOUPBDNlRuYhrOD6QIr0H /KevU0pA2MG1orJ8ytOXwEbJzG7ahhADvUpVDfCEAd/xUclMAaMh12nloavA+0Vr n8enBT1xPvqh5XPm6YjKiYLzUte+L+Rh5nqkzo6EEHCT+IbQBT8ckjuqkkd0yph9 TKufMp8Csx8EqgAqXiw+W4ZaWDjMTJL3BKLzwUDqqLQ9vbMzg8z/Qc7nV5f9cdyQ ksUkE2ZQZ1dvvZNOC7rJmwlx4goMdtpDGT+ufCPHeO2gy4dKW42Mtx20U3kUjwry +AfGcQfX/2JbZyTNJtt77mbOI4ZNs6pAaKZBwt6sORhiaDVGUdqV41nxKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBViD6XNstvTs2OQX0iWAXYAzQsMB8GA1UdIwQY MBaAFGwD0iR47Ia4VE37mK3erCJvjwfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTIt ZWI2ZWU1MzU2NjEzLzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTItZWI2ZWU1MzU2NjEz LzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq+CmifX hwCqoRqkkg31hol7cLh0AmhYKTIVUTMZX8Gvk3lP93P+/791BzHnKhBPRZZFppTb A60NxM06t9KwwETNvcl7AG4n0b2wCS9r6Y4cmogJFb4Q7a20GLpfwWZ6n9cCsT8E Why3xV5yzhOHN4C0IqNaYbtzdDL623UB4VuyoqM2yswiw3H4Gz1N/GQruUjkBEk7 RRvgXZ3m/j1qZGMLdvaZMRz1N09FreTQhbQqgJlRyGUn24Fi+n+ECbHrvYf6IMrf OIXujpkJD4inQ9UDFhKTIN6oZ8NlfqBTol0Jf2ln3qOhmqGBNJTKUAYZQ+QfKKHG Gmc9jQIe5Zh8yA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:27:33 2025 by rpki-client