This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft File: bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json) Hash identifier: aq4yZbpvtOrUapMpZzRTj2b904nC82EsrMTKpPqQaAY= Subject key identifier: 6F:A0:23:FB:72:97:19:3C:CD:F7:A1:04:E3:5B:B0:D8:C4:D8:56:ED Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5 Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5 Certificate serial: 019B39EA8EB0A4E8FC9964290391AAD0DECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft Manifest number: 0F9B Signing time: Sat 20 Dec 2025 04:00:31 +0000 Manifest this update: Sat 20 Dec 2025 04:00:31 +0000 Manifest next update: Sun 21 Dec 2025 04:00:31 +0000 Files and hashes: 1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=) 2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: M5/D2qZyLQKWl7LG/hTS9VPotOy+0hrM5goSfyee5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:8e:b0:a4:e8:fc:99:64:29:03:91:aa:d0:de:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5 Validity Not Before: Dec 20 04:00:31 2025 GMT Not After : Dec 21 04:00:31 2025 GMT Subject: CN=6fa023fb7297193ccdf7a104e35bb0d8c4d856ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:25:2a:c0:80:f7:fe:f9:d2:41:a3:d8:b9: c5:5a:ab:2a:31:ed:85:f5:49:6d:70:9b:99:4d:d8: 72:15:61:8e:77:28:1a:38:46:df:37:de:c8:9f:6e: a6:16:fe:9f:03:7d:99:1c:a8:a1:bd:86:31:3a:6c: 2d:6d:41:a2:37:db:a7:be:8d:c8:90:0c:5b:a0:b5: e3:73:f2:02:8d:32:c6:11:c5:36:ba:e7:f3:e4:63: 68:43:09:36:c5:3f:57:20:03:fa:31:8d:7b:6d:c9: 04:19:bf:6c:58:ac:26:23:e5:25:f6:e8:a8:1f:26: 28:64:49:2b:94:12:e2:85:b3:24:fd:cd:c3:94:18: 60:aa:d5:92:d4:af:67:7d:34:4e:64:4d:b5:f0:a3: 44:0c:75:75:57:00:19:b9:a3:70:ea:06:34:24:fc: 3f:ef:16:f6:c5:02:13:ea:37:85:6e:df:7e:2f:35: 6c:a6:01:06:9a:d7:13:e6:24:16:2e:c8:ac:04:6f: fb:a5:0a:d4:96:98:2c:0f:26:06:c6:c0:ef:9f:fe: 59:3a:a0:b3:d6:2c:94:b8:f3:6c:d9:c5:5d:14:d0: 14:00:bf:01:df:31:1a:67:7b:e6:ea:07:71:af:d1: fa:ae:85:ec:84:d3:11:b4:79:a9:6c:27:28:bd:f6: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A0:23:FB:72:97:19:3C:CD:F7:A1:04:E3:5B:B0:D8:C4:D8:56:ED X509v3 Authority Key Identifier: keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:60:05:cb:8b:bc:a6:6b:a9:8c:cf:46:3a:f9:d9:a5:c9:22: e7:e0:c8:2f:78:eb:af:45:92:30:b5:43:ff:29:ac:34:ab:0d: 6a:98:d6:90:a4:3a:7c:f0:5e:29:79:50:52:d9:ab:23:3d:29: 35:fc:d0:ae:cb:c3:4d:b4:db:83:32:b0:e8:01:a2:ef:8f:1c: cc:cb:f3:db:25:97:44:1c:60:9e:1f:35:39:80:68:e6:36:61: c5:d3:5c:7f:0c:4a:dc:8c:ed:a1:f3:82:01:f1:21:fa:7c:22: 79:00:95:f9:c4:2e:ed:ea:14:13:31:63:67:b5:83:d9:d5:8d: 27:be:b0:0c:22:f2:78:ae:5f:bc:a2:59:6c:aa:13:5d:1b:14: 40:70:bd:d4:55:17:09:bf:51:12:e2:86:17:b0:29:10:fe:71: a4:14:55:19:2f:8f:70:cf:67:32:67:16:1d:4e:09:54:82:3a: 48:64:b0:ef:cf:67:56:d9:82:9e:e5:3f:dd:d5:c5:2c:fa:4a: d6:17:20:f8:cf:05:0c:97:ef:cc:81:59:d3:bc:71:09:4c:37: 81:80:a6:c2:c4:d0:00:db:a0:25:ed:77:fb:16:66:f5:bb:5b: ea:33:aa:40:fe:70:26:8f:17:35:4a:79:a0:2e:b8:ac:3b:bc: 7b:26:00:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56o6wpOj8mWQpA5Gq0N7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2MzNjNhODgwZmM3MWYzMjJkMTcwZjc0N2VjNTJhMmE5 Y2MwZDUwHhcNMjUxMjIwMDQwMDMxWhcNMjUxMjIxMDQwMDMxWjAzMTEwLwYDVQQD Eyg2ZmEwMjNmYjcyOTcxOTNjY2RmN2ExMDRlMzViYjBkOGM0ZDg1NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+MlKsCA9/750kGj2LnFWqsqMe2F 9UltcJuZTdhyFWGOdygaOEbfN97In26mFv6fA32ZHKihvYYxOmwtbUGiN9unvo3I kAxboLXjc/ICjTLGEcU2uufz5GNoQwk2xT9XIAP6MY17bckEGb9sWKwmI+Ul9uio HyYoZEkrlBLihbMk/c3DlBhgqtWS1K9nfTROZE218KNEDHV1VwAZuaNw6gY0JPw/ 7xb2xQIT6jeFbt9+LzVspgEGmtcT5iQWLsisBG/7pQrUlpgsDyYGxsDvn/5ZOqCz 1iyUuPNs2cVdFNAUAL8B3zEaZ3vm6gdxr9H6roXshNMRtHmpbCcovfak1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+gI/tylxk8zfehBONbsNjE2FbtMB8GA1UdIwQY MBaAFG48NjqID8cfMi0XD3R+xSoqnMDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAt MjAyMjJhMDRkMzUzLzEvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAtMjAyMjJhMDRkMzUz LzEvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGAFy4u8 pmupjM9GOvnZpcki5+DIL3jrr0WSMLVD/ymsNKsNapjWkKQ6fPBeKXlQUtmrIz0p NfzQrsvDTbTbgzKw6AGi748czMvz2yWXRBxgnh81OYBo5jZhxdNcfwxK3IztofOC AfEh+nwieQCV+cQu7eoUEzFjZ7WD2dWNJ76wDCLyeK5fvKJZbKoTXRsUQHC91FUX Cb9REuKGF7ApEP5xpBRVGS+PcM9nMmcWHU4JVII6SGSw789nVtmCnuU/3dXFLPpK 1hcg+M8FDJfvzIFZ07xxCUw3gYCmwsTQANugJe13+xZm9btb6jOqQP5wJo8XNUp5 oC64rDu8eyYAVw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:06 2025 by rpki-client