This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json) Hash identifier: hEb/KlnWJLevoFYtiK2qaQi6Vt53CLqM33hx0fu3U6g= Subject key identifier: 68:B4:D3:E6:EA:09:18:9D:38:34:16:82:0A:8B:D5:8F:58:38:B5:C0 Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Certificate serial: 019B0E92924AE4F4CFD3236B0156A644D3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft Manifest number: 0BF0 Signing time: Thu 11 Dec 2025 18:00:45 +0000 Manifest this update: Thu 11 Dec 2025 18:00:45 +0000 Manifest next update: Fri 12 Dec 2025 18:00:45 +0000 Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=) 2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: 5RZz0sXayXm/1xQmKkbJuNA8gatMKL6nwGyRvGofyA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:92:4a:e4:f4:cf:d3:23:6b:01:56:a6:44:d3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Validity Not Before: Dec 11 18:00:45 2025 GMT Not After : Dec 12 18:00:45 2025 GMT Subject: CN=68b4d3e6ea09189d383416820a8bd58f5838b5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:7d:cd:83:59:ab:c4:c2:96:ba:2d:b6:4f: f8:a1:a0:90:64:72:38:eb:bc:9b:95:6b:84:54:8e: 6d:87:24:45:f8:8d:6e:31:ca:65:ac:55:53:38:5c: d9:c5:de:7f:70:dd:e2:ad:88:44:b3:2a:10:83:40: a9:b3:a4:54:99:56:de:ac:42:b6:07:69:4c:5e:0f: a9:56:8c:cd:0e:cc:07:9d:e0:b1:f1:4b:28:d4:ec: 99:93:ff:30:4b:68:a1:03:29:35:2d:61:01:6d:30: 62:4a:ef:a4:a4:5a:fc:ac:41:3a:a5:5d:ec:8b:ab: 9c:a0:3b:ed:f0:77:35:43:0e:5d:84:bb:84:d3:ea: 8a:5d:86:97:0b:16:bb:b5:39:8a:22:30:bf:69:a3: 57:a7:9b:e3:3c:ea:dc:f5:29:15:c5:93:92:39:a0: a6:0c:cc:01:04:75:3a:81:53:fe:f6:89:b1:7c:51: 60:65:6b:10:1e:4c:9f:db:f7:50:ca:68:1c:d8:58: 46:b1:5b:78:34:5a:b4:5b:59:21:66:c5:b1:78:b7: 64:bb:f2:4f:dc:c5:d6:26:29:eb:78:10:79:18:8a: 79:42:a2:77:a2:8a:57:7b:eb:f4:6c:a1:58:75:75: 78:87:f3:0a:19:43:f1:28:f6:c8:88:c5:4d:ab:aa: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:D3:E6:EA:09:18:9D:38:34:16:82:0A:8B:D5:8F:58:38:B5:C0 X509v3 Authority Key Identifier: keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9a:51:50:2a:c1:31:e6:85:57:3d:75:8e:81:58:53:4b:29: 95:e7:bb:6e:d5:0a:a7:76:f1:0e:82:67:0f:fa:51:ae:17:a8: 66:be:99:e5:35:35:86:5b:ce:d5:d7:39:c1:4e:9c:0b:7f:f4: 73:4f:80:4f:90:a6:4f:1f:6c:1f:88:f7:2e:b6:f1:82:ae:5c: 8e:97:1a:f1:cb:cb:39:8e:24:be:ab:1a:85:33:4d:8e:a0:07: 50:80:97:d1:55:5a:c3:4e:a1:76:30:75:f3:5d:f7:9b:83:ca: d5:30:da:08:2d:33:86:f5:7e:96:02:63:13:84:7a:b7:64:e2: ea:a7:a5:23:8c:81:10:3d:00:90:64:13:f9:1a:7d:84:3f:4d: 62:fb:91:51:2a:02:9c:0b:34:b9:1f:7c:0e:cc:7b:a2:5b:24: 10:5c:c8:34:57:b7:63:81:c5:fe:7f:90:08:ac:55:88:c2:6a: d0:60:3d:47:2a:0c:26:bc:c3:9c:8e:d0:38:9a:60:98:c1:aa: 1e:c6:72:b4:00:49:8a:e0:48:d0:3a:54:09:10:65:43:61:b6: f0:55:6b:a4:b4:7f:40:66:de:28:f8:de:75:42:89:69:b5:3c: e5:65:1b:31:ae:0d:6b:6c:08:2c:31:3a:5e:74:bf:d7:d2:2d: 41:f8:37:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpJK5PTP0yNrAVamRNPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1 MzBiMzAwHhcNMjUxMjExMTgwMDQ1WhcNMjUxMjEyMTgwMDQ1WjAzMTEwLwYDVQQD Eyg2OGI0ZDNlNmVhMDkxODlkMzgzNDE2ODIwYThiZDU4ZjU4MzhiNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5l9zYNZq8TClrottk/4oaCQZHI4 67yblWuEVI5thyRF+I1uMcplrFVTOFzZxd5/cN3irYhEsyoQg0Cps6RUmVberEK2 B2lMXg+pVozNDswHneCx8Uso1OyZk/8wS2ihAyk1LWEBbTBiSu+kpFr8rEE6pV3s i6ucoDvt8Hc1Qw5dhLuE0+qKXYaXCxa7tTmKIjC/aaNXp5vjPOrc9SkVxZOSOaCm DMwBBHU6gVP+9omxfFFgZWsQHkyf2/dQymgc2FhGsVt4NFq0W1khZsWxeLdku/JP 3MXWJinreBB5GIp5QqJ3oopXe+v0bKFYdXV4h/MKGUPxKPbIiMVNq6q5NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi00+bqCRidODQWggqL1Y9YOLXAMB8GA1UdIwQY MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZpRUCrB MeaFVz11joFYU0splee7btUKp3bxDoJnD/pRrheoZr6Z5TU1hlvO1dc5wU6cC3/0 c0+AT5CmTx9sH4j3Lrbxgq5cjpca8cvLOY4kvqsahTNNjqAHUICX0VVaw06hdjB1 8133m4PK1TDaCC0zhvV+lgJjE4R6t2Ti6qelI4yBED0AkGQT+Rp9hD9NYvuRUSoC nAs0uR98Dsx7olskEFzINFe3Y4HF/n+QCKxViMJq0GA9RyoMJrzDnI7QOJpgmMGq HsZytABJiuBI0DpUCRBlQ2G28FVrpLR/QGbeKPjedUKJabU85WUbMa4Na2wILDE6 XnS/19ItQfg3jA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:14 2025 by rpki-client