This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json) Hash identifier: 5otxb0/GtwGnaThP6SlR6DsDvf9clouODQc4Gs7zpvs= Subject key identifier: 6C:FA:BD:62:84:27:81:E7:8D:54:4B:31:E9:7E:BD:18:99:C8:AF:D6 Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019B3079EBBA0C093091939AF176371A73FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 08:00:55 +0000 Manifest this update: Thu 18 Dec 2025 08:00:55 +0000 Manifest next update: Fri 19 Dec 2025 08:00:55 +0000 Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=) 2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: YPiGNA4aNLd96LWTKWvoXgrhG6WTkftkj8hQQjjF+ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:eb:ba:0c:09:30:91:93:9a:f1:76:37:1a:73:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Dec 18 08:00:55 2025 GMT Not After : Dec 19 08:00:55 2025 GMT Subject: CN=6cfabd62842781e78d544b31e97ebd1899c8afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:22:fc:c1:35:56:90:e3:8a:60:68:af:06: b0:06:b1:80:b9:c9:21:ac:e7:70:33:2e:21:8b:aa: 0c:21:3d:79:0d:3b:50:3e:f5:3f:42:66:c7:fd:d9: 82:14:30:e2:1a:83:5f:d6:5e:50:7a:5b:d6:ac:5c: e2:ea:98:42:94:25:8c:cd:33:b2:20:0f:47:b2:7c: c3:96:fd:e5:21:71:95:79:0d:5b:a4:be:6e:50:6c: 62:60:3f:42:7a:7d:68:f6:eb:c5:5b:20:7a:f2:81: 10:4a:9f:1e:61:b8:74:32:21:34:32:14:26:a2:bd: c1:c5:60:e5:2c:96:78:5f:ca:35:16:4f:f5:79:ea: c1:75:e2:e6:f5:c9:5d:92:d7:9e:1b:08:8b:60:3b: e6:7f:75:d9:ae:d9:24:a3:e8:e6:81:9b:ff:37:6b: b0:e7:0f:e7:9d:88:52:3f:78:f6:6a:e3:4d:0f:6a: 7a:8e:6d:97:c5:4a:19:ed:87:7f:a5:85:86:8e:97: a7:b3:cc:e2:25:de:86:f6:78:8d:96:e1:0c:89:24: d4:55:b6:9f:60:5f:64:f6:02:a0:c2:d8:c6:e6:3c: f0:55:9d:8d:3e:85:c7:08:dd:fc:2b:6e:26:a7:bd: 47:65:ea:ca:d6:b5:cd:b6:b5:e7:40:c8:79:2b:f8: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:BD:62:84:27:81:E7:8D:54:4B:31:E9:7E:BD:18:99:C8:AF:D6 X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fe:72:50:be:41:aa:68:e6:d4:67:1a:5c:da:47:a3:82:77: fb:6c:68:f2:e4:55:05:0c:d0:14:4e:49:4f:87:61:94:32:42: 43:15:e4:44:de:91:2a:51:ab:b3:e8:ac:29:7a:df:0b:b4:c7: 72:12:93:03:df:ee:53:40:3e:ef:c3:bc:f4:fa:92:cb:a0:ed: 4f:84:2b:69:5b:4f:48:55:4d:fe:5d:ae:3b:b3:e8:74:a6:6c: 0d:8b:d6:a6:65:51:c8:e9:25:48:36:af:48:9c:ad:40:5c:4a: 3d:a4:cb:23:18:fa:07:4a:63:31:8a:e8:1d:ed:58:fd:d4:d5: 77:b1:29:76:15:3f:69:52:85:c3:ff:14:c5:74:d3:03:81:fb: 85:ee:8d:b9:59:f1:6a:01:04:43:0c:54:7b:b8:37:5d:46:40: 89:8e:9c:43:8c:1a:fc:e6:57:b9:ef:8d:d4:99:38:09:a0:96: 77:26:0b:73:ac:48:30:71:ae:24:82:b8:32:cd:49:3d:58:4b: c5:0c:c0:5b:70:45:a6:e2:a2:cd:5b:bb:f9:07:b5:1c:ca:39: bf:bf:4f:4a:c7:f1:b3:a3:14:8c:8b:62:da:32:06:7c:94:c2: 08:bd:6b:9f:08:63:97:0b:65:41:28:f9:ad:87:79:1d:68:27: 78:28:ec:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweeu6DAkwkZOa8XY3GnP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjUxMjE4MDgwMDU1WhcNMjUxMjE5MDgwMDU1WjAzMTEwLwYDVQQD Eyg2Y2ZhYmQ2Mjg0Mjc4MWU3OGQ1NDRiMzFlOTdlYmQxODk5YzhhZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E0i/ME1VpDjimBorwawBrGAuckh rOdwMy4hi6oMIT15DTtQPvU/QmbH/dmCFDDiGoNf1l5QelvWrFzi6phClCWMzTOy IA9HsnzDlv3lIXGVeQ1bpL5uUGxiYD9Cen1o9uvFWyB68oEQSp8eYbh0MiE0MhQm or3BxWDlLJZ4X8o1Fk/1eerBdeLm9cldkteeGwiLYDvmf3XZrtkko+jmgZv/N2uw 5w/nnYhSP3j2auNND2p6jm2XxUoZ7Yd/pYWGjpens8ziJd6G9niNluEMiSTUVbaf YF9k9gKgwtjG5jzwVZ2NPoXHCN38K24mp71HZerK1rXNtrXnQMh5K/jjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz6vWKEJ4HnjVRLMel+vRiZyK/WMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf5yUL5B qmjm1GcaXNpHo4J3+2xo8uRVBQzQFE5JT4dhlDJCQxXkRN6RKlGrs+isKXrfC7TH chKTA9/uU0A+78O89PqSy6DtT4QraVtPSFVN/l2uO7PodKZsDYvWpmVRyOklSDav SJytQFxKPaTLIxj6B0pjMYroHe1Y/dTVd7EpdhU/aVKFw/8UxXTTA4H7he6NuVnx agEEQwxUe7g3XUZAiY6cQ4wa/OZXue+N1Jk4CaCWdyYLc6xIMHGuJIK4Ms1JPVhL xQzAW3BFpuKizVu7+Qe1HMo5v79PSsfxs6MUjIti2jIGfJTCCL1rnwhjlwtlQSj5 rYd5HWgneCjsgg== -----END CERTIFICATE-----Generated at Thu Dec 18 10:44:52 2025 by rpki-client