This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json) Hash identifier: LxFB5P+yTG/cISRQv6+YIC3jqjtp4oXZsQfM+HgBPK0= Subject key identifier: 19:00:B1:FC:26:7A:26:50:8D:CB:92:0D:84:2F:F2:9A:68:61:D0:1A Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Certificate serial: 019B299CC45793514315A1DFBE87F7D384E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft Manifest number: 01E9 Signing time: Wed 17 Dec 2025 00:01:38 +0000 Manifest this update: Wed 17 Dec 2025 00:01:38 +0000 Manifest next update: Thu 18 Dec 2025 00:01:38 +0000 Files and hashes: 1: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (hash: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=) 2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: NFw0O/c5UkehMQCjlGvpDpafrfxyLsc/A1DBfeXr1Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:c4:57:93:51:43:15:a1:df:be:87:f7:d3:84:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Validity Not Before: Dec 17 00:01:38 2025 GMT Not After : Dec 18 00:01:38 2025 GMT Subject: CN=1900b1fc267a26508dcb920d842ff29a6861d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:e5:da:38:ee:ad:c4:74:e2:7b:fa:cc:f2: 85:c8:1a:6f:33:a5:68:d2:ba:5c:6f:ec:67:56:29: 86:1a:18:03:74:dc:a2:d8:34:e1:33:02:ff:7e:60: 39:14:b4:86:ea:65:e9:95:c6:2b:a4:27:75:88:8d: 0e:d5:ab:7a:6b:95:cf:43:c2:32:dd:1b:19:c2:be: 8f:47:ba:62:7f:d7:6e:16:53:a0:6a:1a:13:f2:56: 26:0c:a0:02:44:18:d7:4c:52:62:05:42:63:e2:46: c6:2a:44:e5:90:27:a5:c1:9d:a4:55:fd:96:11:60: ac:81:9f:d4:43:60:9a:af:88:fb:5a:9a:5c:32:25: 7d:da:ce:9d:05:8d:79:77:91:df:db:8c:48:f9:c7: 42:a6:9b:90:3e:fa:2e:aa:cb:b9:b9:e9:8f:5e:0c: 64:a0:13:de:4b:66:40:b3:0a:df:32:ef:f0:0e:23: eb:e1:22:bd:5c:f0:d0:46:4a:ae:cd:2a:65:5d:f9: d9:7d:9a:23:67:86:f6:17:f7:b9:ee:d6:67:9d:03: f5:05:09:f7:8b:f1:5c:75:a9:2b:2a:15:6b:fc:51: b0:4e:07:0c:c6:56:4a:29:97:db:3a:8e:17:31:fb: 1e:4e:55:cf:21:89:93:67:45:cd:6a:c5:28:49:4d: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:B1:FC:26:7A:26:50:8D:CB:92:0D:84:2F:F2:9A:68:61:D0:1A X509v3 Authority Key Identifier: keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:86:c5:be:39:42:ee:4a:69:8d:c2:ad:dd:d0:2e:66:a5:58: 24:f1:27:12:91:69:c1:50:de:47:c5:29:1d:5b:e3:9c:8b:45: 78:86:80:83:96:e7:7b:2d:9f:7e:48:66:f2:aa:00:71:0d:c4: d5:64:7c:78:43:b9:3e:fc:ba:a3:7b:d4:94:47:0f:cd:e4:30: 87:4d:b2:5a:c1:ac:5a:06:78:8f:44:57:ed:0b:76:1b:fa:30: 5e:0d:be:b2:1a:28:af:5c:0e:95:8e:33:cf:ea:39:7a:9a:dd: f1:33:b0:ff:1c:18:42:d0:cf:fe:b8:bd:e4:f1:7a:92:1f:9f: d5:b2:7a:ef:1b:72:4d:d0:66:86:5c:28:fb:f7:98:8f:0d:28: 99:c0:69:ce:0c:43:9f:5d:b9:68:8f:9b:16:55:45:bb:3d:5c: 19:73:db:a3:83:32:c7:c6:6d:66:4a:36:84:c7:f6:c0:e7:91: 09:67:83:ee:9a:c3:15:cf:d8:c5:b9:c0:ba:89:ab:e3:06:fb: f6:5c:ef:91:5e:3f:2f:8d:31:0c:dc:48:b1:51:3d:5a:95:1c: db:d9:ac:75:18:b6:a4:32:03:67:f1:9b:fe:54:da:26:f7:60: c9:4a:0e:58:ff:6a:a1:fe:30:de:9a:eb:21:e4:57:0d:dd:51: a9:5b:b1:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnMRXk1FDFaHfvof304TjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3 NzQ2ZDkwHhcNMjUxMjE3MDAwMTM4WhcNMjUxMjE4MDAwMTM4WjAzMTEwLwYDVQQD EygxOTAwYjFmYzI2N2EyNjUwOGRjYjkyMGQ4NDJmZjI5YTY4NjFkMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWjl2jjurcR04nv6zPKFyBpvM6Vo 0rpcb+xnVimGGhgDdNyi2DThMwL/fmA5FLSG6mXplcYrpCd1iI0O1at6a5XPQ8Iy 3RsZwr6PR7pif9duFlOgahoT8lYmDKACRBjXTFJiBUJj4kbGKkTlkCelwZ2kVf2W EWCsgZ/UQ2Car4j7WppcMiV92s6dBY15d5Hf24xI+cdCppuQPvouqsu5uemPXgxk oBPeS2ZAswrfMu/wDiPr4SK9XPDQRkquzSplXfnZfZojZ4b2F/e57tZnnQP1BQn3 i/FcdakrKhVr/FGwTgcMxlZKKZfbOo4XMfseTlXPIYmTZ0XNasUoSU1oVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkAsfwmeiZQjcuSDYQv8ppoYdAaMB8GA1UdIwQY MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIbFvjlC 7kppjcKt3dAuZqVYJPEnEpFpwVDeR8UpHVvjnItFeIaAg5bney2ffkhm8qoAcQ3E 1WR8eEO5Pvy6o3vUlEcPzeQwh02yWsGsWgZ4j0RX7Qt2G/owXg2+shoor1wOlY4z z+o5eprd8TOw/xwYQtDP/ri95PF6kh+f1bJ67xtyTdBmhlwo+/eYjw0omcBpzgxD n125aI+bFlVFuz1cGXPbo4Myx8ZtZko2hMf2wOeRCWeD7prDFc/YxbnAuomr4wb7 9lzvkV4/L40xDNxIsVE9WpUc29msdRi2pDIDZ/Gb/lTaJvdgyUoOWP9qof4w3prr IeRXDd1RqVuxHA== -----END CERTIFICATE-----Generated at Wed Dec 17 05:55:25 2025 by rpki-client