This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json) Hash identifier: WUjc3W+OngXPBU/FXaJtyBycI40uEb68u1DYrVuIQ5Q= Subject key identifier: 62:7C:B4:7A:A2:BA:CA:26:4C:6C:63:B5:FE:FC:4E:FD:7C:9E:EE:E0 Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7 Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7 Certificate serial: 019B5975E105098B971DBE8BB2EDE0558058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft Manifest number: 0919 Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=) 2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: eojldq5F2fWeCQFMdeAahND3TFAQnZQxiZfWsNPb0J4=) 3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e1:05:09:8b:97:1d:be:8b:b2:ed:e0:55:80:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7 Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=627cb47aa2baca264c6c63b5fefc4efd7c9eeee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:99:e9:87:2e:3b:fa:61:52:25:14:ca:b0: bd:79:40:59:76:5b:bd:76:f4:2d:a5:72:7f:ef:cc: 72:a9:52:af:51:f6:b5:f7:b0:e1:02:2a:96:42:ab: 20:1f:18:2c:55:38:e4:5e:c1:9b:2b:33:97:d5:37: 24:e6:50:64:70:48:4b:c3:7d:1a:25:c0:da:d6:e1: fb:ba:fc:ca:38:14:c9:fb:c5:79:41:db:16:f9:ba: c1:32:92:26:1a:40:20:b3:43:de:47:c4:3b:3c:a2: a7:64:16:7e:40:52:b0:1e:76:b1:a7:85:96:91:b0: d7:c0:6f:f2:e3:78:f6:a5:02:b2:84:be:da:8c:c9: 33:aa:e4:be:68:db:10:7b:b2:76:da:6a:c5:d7:b2: f7:48:a0:f7:e7:d2:d3:8c:56:eb:7f:8c:dd:e7:04: 67:e0:68:1f:39:23:b3:85:d2:ac:c4:2f:33:eb:ce: 29:de:5a:99:8a:5b:63:2d:fa:f2:d8:78:ee:bd:08: dc:93:1c:ad:37:03:71:22:3b:a4:8d:dc:a1:58:ef: da:00:63:29:66:d8:5a:73:ae:06:4f:e1:1f:f9:5d: 7f:16:48:9c:90:27:af:b7:07:f7:83:5b:36:0b:b6: eb:32:40:37:03:25:a9:a6:23:69:c6:44:97:78:95: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7C:B4:7A:A2:BA:CA:26:4C:6C:63:B5:FE:FC:4E:FD:7C:9E:EE:E0 X509v3 Authority Key Identifier: keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:30:34:db:9d:33:cf:ee:e5:9f:33:1d:79:7f:ba:d0:32: f2:f0:6a:b7:2f:79:de:69:2e:9a:e0:cf:1f:65:f5:39:7f:24: 66:88:60:6d:b8:ef:ef:28:d4:ff:80:53:73:c3:25:d9:79:0b: 57:80:4b:1e:77:d4:39:d6:aa:0c:79:8d:d2:bc:fd:70:c2:50: 1d:35:51:3d:bc:2e:91:60:20:b5:af:38:e7:68:a0:d2:46:80: 53:f9:8e:99:2e:0c:74:a5:2b:1a:1c:de:50:a6:7a:8c:8e:a3: 02:6b:82:12:db:f0:02:5e:a9:9e:95:15:1a:b8:dd:f5:38:00: 42:3f:e6:91:96:73:9f:bc:66:7b:4a:8d:d3:55:ec:2d:27:a0: 2f:76:08:99:f5:53:3d:5f:b4:5c:bf:28:0d:8a:8c:81:8e:34: f1:a8:18:cc:8b:48:47:e3:74:91:b7:e9:4b:4c:3c:30:81:8d: 8d:05:f8:21:10:a9:b8:9d:69:ba:bb:5c:46:8f:f2:5d:b1:1e: 67:9f:e6:46:4a:39:86:61:f9:ec:5e:8a:cb:82:ce:6b:2a:71: f4:61:ef:52:e7:1c:57:e8:05:37:ab:12:33:b1:ab:f1:9a:54: 88:4e:72:92:11:23:fa:ff:e2:ea:9a:b7:d3:b6:16:5e:dd:52: f3:4d:45:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeEFCYuXHb6Lsu3gVYBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTA4YmQ1YWRkZmFiZjE1MWQ5MDc5ZTNkM2QzNDEyNjk2 NjZmYTcwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD Eyg2MjdjYjQ3YWEyYmFjYTI2NGM2YzYzYjVmZWZjNGVmZDdjOWVlZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0iZ6YcuO/phUiUUyrC9eUBZdlu9 dvQtpXJ/78xyqVKvUfa197DhAiqWQqsgHxgsVTjkXsGbKzOX1Tck5lBkcEhLw30a JcDa1uH7uvzKOBTJ+8V5QdsW+brBMpImGkAgs0PeR8Q7PKKnZBZ+QFKwHnaxp4WW kbDXwG/y43j2pQKyhL7ajMkzquS+aNsQe7J22mrF17L3SKD359LTjFbrf4zd5wRn 4GgfOSOzhdKsxC8z684p3lqZiltjLfry2HjuvQjckxytNwNxIjukjdyhWO/aAGMp Zthac64GT+Ef+V1/FkickCevtwf3g1s2C7brMkA3AyWppiNpxkSXeJWqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ8tHqiusomTGxjtf78Tv18nu7gMB8GA1UdIwQY MBaAFG8Qi9Wt36vxUdkHnj09NBJpZm+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4Nzgt MDk3YjRkNmQ4MWU0LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4NzgtMDk3YjRkNmQ4MWU0 LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo8wNNud M8/u5Z8zHXl/utAy8vBqty953mkumuDPH2X1OX8kZohgbbjv7yjU/4BTc8Ml2XkL V4BLHnfUOdaqDHmN0rz9cMJQHTVRPbwukWAgta8452ig0kaAU/mOmS4MdKUrGhze UKZ6jI6jAmuCEtvwAl6pnpUVGrjd9TgAQj/mkZZzn7xme0qN01XsLSegL3YImfVT PV+0XL8oDYqMgY408agYzItIR+N0kbfpS0w8MIGNjQX4IRCpuJ1purtcRo/yXbEe Z5/mRko5hmH57F6Ky4LOaypx9GHvUuccV+gFN6sSM7Gr8ZpUiE5ykhEj+v/i6pq3 07YWXt1S801F4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:09 2025 by rpki-client