This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json) Hash identifier: nnYI0MngWqPNmA+Kqshv0dz3xhVpTaIZBj8K3+JDXck= Subject key identifier: 74:4E:FD:55:C5:09:FF:5B:8B:E8:ED:6B:6A:4F:14:E1:B7:41:D8:53 Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82 Certificate serial: 019B20CFFDECF2F3AB5B9CA7F0106061C537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 07:01:00 +0000 Manifest this update: Mon 15 Dec 2025 07:01:00 +0000 Manifest next update: Tue 16 Dec 2025 07:01:00 +0000 Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=) 2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 404VjrGDVyEK67M8ztf9/56+a0ZQQuwXIRLnzykVKt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:fd:ec:f2:f3:ab:5b:9c:a7:f0:10:60:61:c5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82 Validity Not Before: Dec 15 07:01:00 2025 GMT Not After : Dec 16 07:01:00 2025 GMT Subject: CN=744efd55c509ff5b8be8ed6b6a4f14e1b741d853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:2a:b9:d9:f1:b4:a6:b6:2e:7d:24:21:16: cf:12:0c:f0:79:8c:e6:46:b8:f4:4f:76:80:07:48: 39:18:c1:f8:58:55:8f:5f:f7:3f:b9:1e:54:1a:1a: 09:ed:12:80:06:28:fe:80:cd:98:25:bb:a3:4d:1a: 60:d6:fe:38:b2:22:b7:fe:29:40:62:6f:b8:87:e4: d0:e9:28:da:2c:4b:0a:49:7a:8e:cc:aa:e1:c8:10: 89:86:af:fc:84:9e:23:67:56:64:61:05:05:56:96: 0f:98:8d:c7:c9:86:c9:39:5b:07:89:57:95:78:ab: 9a:5a:60:0f:ac:e8:7b:0a:99:71:d0:85:d4:62:8a: c6:b0:be:49:94:6b:64:fa:3b:9a:f5:66:74:79:76: 83:5a:ce:f0:f4:a8:f8:02:21:99:6b:62:e3:75:60: 52:33:3c:08:a3:9c:d7:e4:31:8a:32:c9:5e:09:1a: 19:4a:64:82:8a:84:8e:ac:0a:5c:8a:ed:9a:d1:10: 23:75:5f:10:81:66:87:ea:15:80:bf:75:46:1f:a8: b5:cf:3f:9c:55:ce:c3:0f:21:05:da:49:5b:1b:d0: ab:97:79:45:35:4f:4f:7e:f3:50:bd:1f:33:6d:55: 34:fd:a3:3a:f5:a4:3d:f0:ad:df:91:35:e5:2b:76: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:FD:55:C5:09:FF:5B:8B:E8:ED:6B:6A:4F:14:E1:B7:41:D8:53 X509v3 Authority Key Identifier: keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7b:50:46:c0:ee:d1:3a:0b:bf:65:da:22:86:c2:5f:fd:d1: 17:96:81:7e:30:25:dc:d9:ee:48:84:da:88:3a:82:0c:65:f8: c9:2c:4a:ad:97:44:be:d0:f5:60:99:df:c8:8a:f0:50:b6:cd: c3:77:80:67:ce:bf:91:0a:bc:1d:96:3f:50:e5:dd:04:54:fd: f5:f0:00:56:01:7f:25:77:dc:63:5b:06:3e:28:31:b8:a3:09: c7:f2:53:36:57:67:c7:21:b1:29:ac:7b:20:ae:d0:33:81:7f: 22:96:eb:00:1b:1e:a1:5b:ca:99:64:98:a9:2b:33:fc:aa:5e: d8:48:8d:66:87:7c:e1:1d:c9:fa:7b:25:02:c3:f0:a5:01:5d: f3:f3:14:3b:fd:30:9b:d4:7a:fc:58:b2:d3:45:25:e7:6b:8d: 37:bf:33:66:e4:93:e6:05:13:67:5a:86:bd:62:70:a7:f1:76: 42:2c:18:46:70:09:9f:9e:49:e1:af:d6:7e:8a:b1:32:fb:45: b4:cf:73:46:29:5c:be:7e:4f:2d:3d:01:09:bb:c5:8f:84:c8: ce:67:41:fb:50:99:36:ee:88:ba:40:f1:43:4b:01:a4:7a:c0: a5:21:5c:4d:58:79:da:c8:10:2f:22:36:7e:36:21:1c:c7:fd: 99:ed:5b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz/3s8vOrW5yn8BBgYcU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw MmFlODIwHhcNMjUxMjE1MDcwMTAwWhcNMjUxMjE2MDcwMTAwWjAzMTEwLwYDVQQD Eyg3NDRlZmQ1NWM1MDlmZjViOGJlOGVkNmI2YTRmMTRlMWI3NDFkODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIqudnxtKa2Ln0kIRbPEgzweYzm Rrj0T3aAB0g5GMH4WFWPX/c/uR5UGhoJ7RKABij+gM2YJbujTRpg1v44siK3/ilA Ym+4h+TQ6SjaLEsKSXqOzKrhyBCJhq/8hJ4jZ1ZkYQUFVpYPmI3HyYbJOVsHiVeV eKuaWmAPrOh7Cplx0IXUYorGsL5JlGtk+jua9WZ0eXaDWs7w9Kj4AiGZa2LjdWBS MzwIo5zX5DGKMsleCRoZSmSCioSOrApciu2a0RAjdV8QgWaH6hWAv3VGH6i1zz+c Vc7DDyEF2klbG9Crl3lFNU9PfvNQvR8zbVU0/aM69aQ98K3fkTXlK3Z++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRO/VXFCf9bi+jta2pPFOG3QdhTMB8GA1UdIwQY MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5 LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3tQRsDu 0ToLv2XaIobCX/3RF5aBfjAl3NnuSITaiDqCDGX4ySxKrZdEvtD1YJnfyIrwULbN w3eAZ86/kQq8HZY/UOXdBFT99fAAVgF/JXfcY1sGPigxuKMJx/JTNldnxyGxKax7 IK7QM4F/IpbrABseoVvKmWSYqSsz/Kpe2EiNZod84R3J+nslAsPwpQFd8/MUO/0w m9R6/Fiy00Ul52uNN78zZuST5gUTZ1qGvWJwp/F2QiwYRnAJn55J4a/WfoqxMvtF tM9zRilcvn5PLT0BCbvFj4TIzmdB+1CZNu6IukDxQ0sBpHrApSFcTVh52sgQLyI2 fjYhHMf9me1blw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:14:58 2025 by rpki-client