This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json) Hash identifier: T2Qg44rK5OgwAK7jWm9sq+GtbrSWPLF1yYL8ZeLQgvI= Subject key identifier: 2D:9D:90:0A:B2:61:5B:13:44:30:53:57:39:C6:F1:74:46:86:C2:0C Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96 Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96 Certificate serial: 019B36B30D4ECDD7C55733BA74969932A968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft Manifest number: 15F2 Signing time: Fri 19 Dec 2025 13:01:02 +0000 Manifest this update: Fri 19 Dec 2025 13:01:02 +0000 Manifest next update: Sat 20 Dec 2025 13:01:02 +0000 Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=) 2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=) 3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: oTkgKoKcu+tn+VP/6cAiDgZm2pdn2citjj21BjFvU2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:0d:4e:cd:d7:c5:57:33:ba:74:96:99:32:a9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96 Validity Not Before: Dec 19 13:01:02 2025 GMT Not After : Dec 20 13:01:02 2025 GMT Subject: CN=2d9d900ab2615b134430535739c6f1744686c20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:dc:fe:df:45:a4:23:ef:5f:7c:57:ee:2e: d3:c1:6b:af:f3:ad:d6:d7:51:f5:96:7a:ac:a6:b2: 15:e4:96:63:0b:66:bc:c1:8e:3f:f1:7a:cc:1e:62: 27:0a:6b:ae:e4:96:75:e6:3d:30:65:ad:5d:97:50: 6a:6c:7c:f2:38:e1:d7:07:ba:cd:48:c5:e0:a6:6f: f4:9e:e5:f8:c7:66:89:44:31:fe:08:ae:75:80:16: 80:6d:ca:ed:ea:98:24:0c:61:03:35:80:14:23:eb: 22:07:7b:e6:35:a4:ed:27:ed:91:bb:21:9c:36:b2: cd:58:22:52:74:f9:f6:42:78:6d:71:c4:92:cb:dc: fc:ca:b0:eb:08:a2:a1:1b:3b:cd:cc:e8:6d:e5:e5: 04:20:b5:46:7b:66:fa:13:cb:9e:a5:1e:b2:ba:8e: a9:c0:78:76:01:fe:d1:01:cb:e3:5d:8e:9f:69:39: df:10:ce:e0:dc:95:e6:51:37:89:1d:db:42:3b:60: 89:ea:90:17:7e:cb:9a:b5:ae:3e:7b:a6:6a:3c:d3: 68:30:1e:98:ec:6e:dd:6f:cd:2f:34:32:59:a2:2a: 15:c9:41:9d:b4:03:dc:9c:f8:45:47:da:5e:b4:15: 02:66:fe:c9:dd:10:d1:e0:3a:32:c3:9b:4e:b7:2c: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:90:0A:B2:61:5B:13:44:30:53:57:39:C6:F1:74:46:86:C2:0C X509v3 Authority Key Identifier: keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e6:1b:a2:62:64:a9:67:c2:db:68:60:f8:f1:19:eb:94:e9: ae:fa:1a:69:d9:66:84:c9:60:bc:e0:5c:30:ff:ea:dc:c2:f3: 7b:b8:c8:33:36:8a:a1:79:3d:5a:82:bf:b0:ae:65:5c:bf:2a: a3:29:d9:b5:ed:74:fa:7d:ba:e0:35:19:d2:2a:be:68:9e:3f: 0d:8f:7a:5d:df:ce:8c:cc:79:e2:c5:44:db:d6:02:fa:e5:b4: a8:a3:3c:f3:48:02:ea:c1:eb:c5:5d:e5:f9:57:e4:56:1a:8b: 65:d8:53:47:77:16:ba:c9:fc:32:01:7c:cc:26:92:45:19:d0: 80:2a:98:72:39:71:57:00:d7:24:da:7d:f5:53:b4:0b:56:dd: 02:87:14:81:aa:ef:62:6c:2a:98:c9:ae:3c:97:f4:bd:70:14: 53:3a:8c:b0:b0:3b:a3:d8:c8:0a:f3:92:57:8a:43:bf:19:d9: a7:de:a9:36:96:3a:ac:53:65:01:a1:e9:ce:56:62:56:bf:c8: 78:23:12:fb:41:a3:1d:07:97:f7:f9:50:2d:a8:45:ad:d6:92: fe:21:d2:e9:af:2f:0b:55:da:79:35:c7:3a:29:1c:9b:54:66: d7:e0:9c:85:de:88:8c:a2:1b:3f:9c:cd:e4:81:6c:3e:64:b3: 6b:8b:f6:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sw1OzdfFVzO6dJaZMqloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzcwMWQ1ODUwNDkxZjUwMjk5ZWY5M2YyZDc0MDliNzhj ZDZjOTYwHhcNMjUxMjE5MTMwMTAyWhcNMjUxMjIwMTMwMTAyWjAzMTEwLwYDVQQD EygyZDlkOTAwYWIyNjE1YjEzNDQzMDUzNTczOWM2ZjE3NDQ2ODZjMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNrc/t9FpCPvX3xX7i7TwWuv863W 11H1lnqsprIV5JZjC2a8wY4/8XrMHmInCmuu5JZ15j0wZa1dl1BqbHzyOOHXB7rN SMXgpm/0nuX4x2aJRDH+CK51gBaAbcrt6pgkDGEDNYAUI+siB3vmNaTtJ+2RuyGc NrLNWCJSdPn2QnhtccSSy9z8yrDrCKKhGzvNzOht5eUEILVGe2b6E8uepR6yuo6p wHh2Af7RAcvjXY6faTnfEM7g3JXmUTeJHdtCO2CJ6pAXfsuata4+e6ZqPNNoMB6Y 7G7db80vNDJZoioVyUGdtAPcnPhFR9petBUCZv7J3RDR4Doyw5tOtywZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2dkAqyYVsTRDBTVznG8XRGhsIMMB8GA1UdIwQY MBaAFG13AdWFBJH1Apnvk/LXQJt4zWyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAt NjZhMzI5YjZhZmFkLzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAtNjZhMzI5YjZhZmFk LzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+YbomJk qWfC22hg+PEZ65TprvoaadlmhMlgvOBcMP/q3MLze7jIMzaKoXk9WoK/sK5lXL8q oynZte10+n264DUZ0iq+aJ4/DY96Xd/OjMx54sVE29YC+uW0qKM880gC6sHrxV3l +VfkVhqLZdhTR3cWusn8MgF8zCaSRRnQgCqYcjlxVwDXJNp99VO0C1bdAocUgarv YmwqmMmuPJf0vXAUUzqMsLA7o9jICvOSV4pDvxnZp96pNpY6rFNlAaHpzlZiVr/I eCMS+0GjHQeX9/lQLahFrdaS/iHS6a8vC1XaeTXHOikcm1Rm1+Cchd6IjKIbP5zN 5IFsPmSza4v2JA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:58:30 2025 by rpki-client