This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json) Hash identifier: iTr46eJ4YdYAvXPy2DF/TJ2DvCTwH1FOmNw+SL5d0/Q= Subject key identifier: 14:D9:33:1D:88:0A:C9:F9:91:DB:3A:BC:07:E5:24:7E:B4:FD:E2:75 Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399 Certificate serial: 019B2AAEAB4ED05EDA80DA8CC7D178AF5ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft Manifest number: 13 Signing time: Wed 17 Dec 2025 05:00:48 +0000 Manifest this update: Wed 17 Dec 2025 05:00:48 +0000 Manifest next update: Thu 18 Dec 2025 05:00:48 +0000 Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: XKvYFQrtQqnFk4bEMVyRdfuvg+IJnREn5wHKXxVmwQo=) 2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=) 3: hYmSi25XUGnjWR73oqXMhHs3evw.roa (hash: E/NTf9mHDmz6rv/YaAtOrx9G+CXju60gRbX5A1kuIbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:ab:4e:d0:5e:da:80:da:8c:c7:d1:78:af:5e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399 Validity Not Before: Dec 17 05:00:48 2025 GMT Not After : Dec 18 05:00:48 2025 GMT Subject: CN=14d9331d880ac9f991db3abc07e5247eb4fde275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:26:ce:2a:9c:29:9c:aa:ec:07:15:e6:6a:b8: 97:8b:06:e8:73:a8:1d:2a:f0:d0:fb:00:cb:58:11: 99:22:91:f4:25:e3:7e:26:25:2f:dc:17:0d:9c:c4: b1:21:db:c7:7e:ec:eb:c2:1e:1a:28:40:9b:60:a0: dc:18:c0:9d:5d:7a:68:a2:72:31:09:21:01:9a:17: a7:8e:3c:06:97:07:de:7d:36:86:95:2b:09:6e:ad: 74:14:ab:f1:b1:d4:08:ce:a2:e2:63:11:40:d6:04: 6d:84:be:be:c8:b2:fa:1e:a9:74:b6:65:3a:75:4f: aa:a9:cf:89:a5:27:11:a9:00:69:d3:8e:41:8e:e9: 8a:50:1f:c9:a0:23:73:91:17:c6:34:de:f8:d4:4a: 72:ea:49:ff:77:72:3c:3b:8c:95:52:81:7d:7f:39: af:70:89:53:09:32:7f:64:7b:18:18:97:52:1e:89: ce:df:69:95:d1:cb:7d:71:4d:17:ad:7e:9d:3f:9d: 44:de:c5:08:e6:69:e3:23:34:ae:fc:70:09:a5:1c: 2b:38:13:fe:dd:0e:90:7a:64:64:89:97:ba:23:04: 80:35:a7:ac:8a:00:93:5d:a8:9c:f0:4f:8b:68:70: 0c:8a:e4:99:a3:db:ab:0b:a7:37:51:e5:5a:d7:b5: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:33:1D:88:0A:C9:F9:91:DB:3A:BC:07:E5:24:7E:B4:FD:E2:75 X509v3 Authority Key Identifier: keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e7:64:21:06:2f:73:57:67:36:b3:94:74:8b:ac:cc:fb:2b: 7c:17:aa:b3:74:18:74:1b:c5:e9:12:9f:2d:27:66:8c:e1:20: 9a:62:9e:50:24:f9:5a:30:6d:44:f8:e3:23:dd:a3:4f:0c:fa: 33:3b:c7:fd:8c:8d:97:af:80:3d:a5:ba:80:87:42:cb:fc:f4: 72:66:6d:4e:44:f7:0f:21:da:ab:51:fd:29:ef:6b:fc:dd:51: bf:da:fe:e5:ae:35:de:37:99:f3:d7:1c:a6:fb:33:0e:76:9a: e8:a0:e8:be:f9:4b:e8:12:8b:e9:d7:a3:a1:76:3c:78:a1:89: cc:6c:57:0d:f6:34:8d:4d:72:79:6e:4a:f0:f8:ea:1f:a3:1f: b8:ac:66:ba:f0:8b:b3:72:d1:b1:75:9a:26:de:a3:a0:5f:81: 85:d1:1b:d2:25:2f:71:a9:1b:19:dd:7a:2a:cb:f9:ee:b4:30: b1:a8:8e:83:d0:d5:7b:d6:b2:98:9a:2e:d8:0f:7e:fe:58:46: 19:41:64:5e:bb:35:7c:70:7c:86:c1:20:2c:39:7f:94:f5:36: f9:53:a9:d4:2a:37:93:c3:7f:4a:0f:02:ee:7e:88:20:b7:d0: 3b:60:09:7b:fb:3a:7b:bb:d9:46:da:90:94:a7:91:e3:57:ad: eb:16:1e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrqtO0F7agNqMx9F4r17UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2IzZjg0MjE4NDhmMTEzOTUxZTkwNzBiM2Y3NjM5NTkz MzEzOTkwHhcNMjUxMjE3MDUwMDQ4WhcNMjUxMjE4MDUwMDQ4WjAzMTEwLwYDVQQD EygxNGQ5MzMxZDg4MGFjOWY5OTFkYjNhYmMwN2U1MjQ3ZWI0ZmRlMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhybOKpwpnKrsBxXmariXiwboc6gd KvDQ+wDLWBGZIpH0JeN+JiUv3BcNnMSxIdvHfuzrwh4aKECbYKDcGMCdXXpoonIx CSEBmhenjjwGlwfefTaGlSsJbq10FKvxsdQIzqLiYxFA1gRthL6+yLL6Hql0tmU6 dU+qqc+JpScRqQBp045BjumKUB/JoCNzkRfGNN741Epy6kn/d3I8O4yVUoF9fzmv cIlTCTJ/ZHsYGJdSHonO32mV0ct9cU0XrX6dP51E3sUI5mnjIzSu/HAJpRwrOBP+ 3Q6QemRkiZe6IwSANaesigCTXaic8E+LaHAMiuSZo9urC6c3UeVa17WgmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTZMx2ICsn5kds6vAflJH60/eJ1MB8GA1UdIwQY MBaAFGzLP4QhhI8ROVHpBws/djlZMxOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQt NDU5ZTM0ZTZmZjIwLzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQtNDU5ZTM0ZTZmZjIw LzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+dkIQYv c1dnNrOUdIuszPsrfBeqs3QYdBvF6RKfLSdmjOEgmmKeUCT5WjBtRPjjI92jTwz6 MzvH/YyNl6+APaW6gIdCy/z0cmZtTkT3DyHaq1H9Ke9r/N1Rv9r+5a413jeZ89cc pvszDnaa6KDovvlL6BKL6dejoXY8eKGJzGxXDfY0jU1yeW5K8PjqH6MfuKxmuvCL s3LRsXWaJt6joF+BhdEb0iUvcakbGd16Ksv57rQwsaiOg9DVe9aymJou2A9+/lhG GUFkXrs1fHB8hsEgLDl/lPU2+VOp1Co3k8N/Sg8C7n6IILfQO2AJe/s6e7vZRtqQ lKeR41et6xYePg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:34:58 2025 by rpki-client