This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json) Hash identifier: 5ElcYhuz0QdaxIfnfF5807aKjICdXvsBfnRo9DBNPhY= Subject key identifier: 19:11:2C:6D:14:31:CF:55:BD:F3:27:90:79:6F:17:9E:6C:03:DF:EA Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Certificate serial: 019B5A883ED53285ABCC14FCA837A2068B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft Manifest number: 0888 Signing time: Fri 26 Dec 2025 12:00:36 +0000 Manifest this update: Fri 26 Dec 2025 12:00:36 +0000 Manifest next update: Sat 27 Dec 2025 12:00:36 +0000 Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=) 2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: Qo1YYefVxOb6CNgxT8nnmJl+ZriYIq/r2j7O8hbJaqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:3e:d5:32:85:ab:cc:14:fc:a8:37:a2:06:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Validity Not Before: Dec 26 12:00:36 2025 GMT Not After : Dec 27 12:00:36 2025 GMT Subject: CN=19112c6d1431cf55bdf32790796f179e6c03dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:09:bf:99:a2:6a:ce:02:f9:f1:0f:b2:d8: 23:e6:5b:12:f5:e7:d7:f6:ac:24:79:aa:12:b6:19: b7:42:ef:1c:fe:1d:31:8c:b5:46:6a:fe:6e:5e:09: 8b:cd:2f:90:45:52:ce:f7:0f:96:5f:0b:40:42:8b: 1e:1c:c0:aa:85:ec:4f:31:ce:71:2f:03:06:18:3a: 4c:a6:12:8e:54:11:ef:02:2f:52:86:02:b5:14:11: 25:b9:3b:98:2e:83:30:ea:03:b5:e3:d9:a7:78:bc: 33:f2:71:41:65:2e:d1:58:c0:c7:c4:25:7f:3a:d8: 37:fc:2c:f5:55:f6:fc:cc:f8:75:6f:61:35:22:6e: 95:4c:55:6f:d1:de:78:74:d6:89:fe:8b:74:7b:29: e0:57:79:97:0e:52:3a:37:7c:2e:ea:eb:98:9d:c7: a6:52:b3:3f:70:7a:42:ab:da:66:94:e2:21:b6:81: 6b:c5:54:9e:3e:bf:ba:71:37:33:1c:57:29:24:01: 8a:0b:01:d4:96:26:f7:c5:5d:7e:22:5e:69:db:f3: df:1b:40:1f:e9:c8:73:e1:2b:2f:ec:c0:1d:92:7d: ab:0d:b4:0f:f7:31:24:c8:3e:7c:19:b7:2c:42:71: a2:8b:4f:95:2c:31:fe:86:eb:58:95:bb:7e:e4:18: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:2C:6D:14:31:CF:55:BD:F3:27:90:79:6F:17:9E:6C:03:DF:EA X509v3 Authority Key Identifier: keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b4:5d:93:eb:d3:85:e6:7f:13:a9:8a:91:a0:80:52:15:8d: e4:b2:0a:34:17:cd:9c:be:6d:d5:a8:61:d7:09:15:48:e9:e5: 21:61:83:d1:93:75:73:bc:64:c1:bc:9a:c2:f9:06:97:9c:ee: 3f:b6:9e:dd:5a:01:ae:ff:ac:77:62:cc:e0:9e:bf:71:37:9e: 47:4e:ef:e7:40:1e:df:6b:07:66:4c:10:1b:fc:6b:db:4d:4b: ea:58:b9:82:18:6e:ee:52:6e:d5:56:7d:0d:fd:de:c5:a4:a3: 57:7e:a1:ff:35:ca:cb:16:5e:9d:10:5a:82:d4:4a:e9:96:17: 73:32:3b:d6:88:de:b6:0f:50:20:08:8f:5c:dd:98:a2:60:92: 2f:b3:9e:d0:58:e9:47:50:e8:d6:09:4b:54:8f:3c:03:52:ca: 1d:bc:88:7b:c7:1f:d9:8e:b6:7d:6c:56:50:8e:f5:6f:bc:09: a9:e0:61:b2:24:31:02:b6:6a:fa:32:dd:a2:85:ff:ef:24:bf: e1:fc:e1:11:82:7c:ed:ef:09:85:14:99:0d:25:d0:d7:eb:9f: 53:08:74:7d:83:b6:86:45:01:8b:63:88:54:04:ae:94:fe:b6: b0:69:31:c0:c5:c7:a7:7b:01:36:b5:b1:70:ba:7e:3e:6e:3b: 8e:50:13:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiD7VMoWrzBT8qDeiBotgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTkyNTM2Y2UwNmZkYWE1YWMyZWU0ODExN2NmNTdhYTNi NGM4ZDAwHhcNMjUxMjI2MTIwMDM2WhcNMjUxMjI3MTIwMDM2WjAzMTEwLwYDVQQD EygxOTExMmM2ZDE0MzFjZjU1YmRmMzI3OTA3OTZmMTc5ZTZjMDNkZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH0Jv5mias4C+fEPstgj5lsS9efX 9qwkeaoSthm3Qu8c/h0xjLVGav5uXgmLzS+QRVLO9w+WXwtAQoseHMCqhexPMc5x LwMGGDpMphKOVBHvAi9ShgK1FBEluTuYLoMw6gO149mneLwz8nFBZS7RWMDHxCV/ Otg3/Cz1Vfb8zPh1b2E1Im6VTFVv0d54dNaJ/ot0eyngV3mXDlI6N3wu6uuYncem UrM/cHpCq9pmlOIhtoFrxVSePr+6cTczHFcpJAGKCwHUlib3xV1+Il5p2/PfG0Af 6chz4Ssv7MAdkn2rDbQP9zEkyD58GbcsQnGii0+VLDH+hutYlbt+5BjLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkRLG0UMc9VvfMnkHlvF55sA9/qMB8GA1UdIwQY MBaAFGxZJTbOBv2qWsLuSBF89XqjtMjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWIt MGEyZWM1YTIzYjk4LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWItMGEyZWM1YTIzYjk4 LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLRdk+vT heZ/E6mKkaCAUhWN5LIKNBfNnL5t1ahh1wkVSOnlIWGD0ZN1c7xkwbyawvkGl5zu P7ae3VoBrv+sd2LM4J6/cTeeR07v50Ae32sHZkwQG/xr201L6li5ghhu7lJu1VZ9 Df3exaSjV36h/zXKyxZenRBagtRK6ZYXczI71ojetg9QIAiPXN2YomCSL7Oe0Fjp R1Do1glLVI88A1LKHbyIe8cf2Y62fWxWUI71b7wJqeBhsiQxArZq+jLdooX/7yS/ 4fzhEYJ87e8JhRSZDSXQ1+ufUwh0fYO2hkUBi2OIVASulP62sGkxwMXHp3sBNrWx cLp+Pm47jlATdw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:42 2025 by rpki-client