This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json) Hash identifier: Um9zbIfW7xUM+FAJr3OP+T6UJwt2QwEv5ivSBF8Zztk= Subject key identifier: 0F:D9:38:02:8E:2F:31:DB:D3:5A:B4:99:02:70:E9:E2:C3:89:3B:29 Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019B07EC1446A76CF93419345693C87C2196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 11:01:10 +0000 Manifest this update: Wed 10 Dec 2025 11:01:10 +0000 Manifest next update: Thu 11 Dec 2025 11:01:10 +0000 Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=) 2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: MvUJxXmKrM1pI7CCLxEczDHQUtxDnNGe4AS0PrIT+SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:14:46:a7:6c:f9:34:19:34:56:93:c8:7c:21:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Dec 10 11:01:10 2025 GMT Not After : Dec 11 11:01:10 2025 GMT Subject: CN=0fd938028e2f31dbd35ab4990270e9e2c3893b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:b3:9c:8d:23:af:30:a4:21:60:41:fe:95: 37:98:7d:a4:23:bb:12:f2:ea:e0:75:06:66:de:6d: 54:75:8e:60:eb:3f:86:35:ab:3e:b4:32:c3:5f:7a: ea:44:fd:2d:5f:73:65:6a:cd:38:4f:7c:ca:1d:8d: b2:74:6d:99:fa:f9:00:00:36:0c:b4:2e:3d:0e:f2: 15:be:b6:24:97:53:51:aa:4f:00:5b:76:ff:9c:c6: 37:e9:af:e7:e8:2f:38:a3:37:77:27:ea:3e:ab:3a: 90:17:a2:02:52:33:8b:45:75:63:8d:94:e5:41:da: 82:04:45:ff:9d:c8:41:0f:d2:a9:84:71:40:11:77: 79:38:42:e3:c5:b7:fc:73:1d:05:19:b3:ee:8e:78: d1:a2:e0:bd:b3:44:f2:0d:5d:b8:86:21:5f:03:9a: 59:3c:5f:12:2c:78:30:c8:b6:b3:33:29:08:7d:77: df:10:2b:72:af:36:e7:67:fb:c5:73:a8:23:4f:a0: e1:a5:95:d3:5b:c4:2f:8e:ca:08:4c:a0:33:41:25: 1d:ca:49:6b:ba:46:c1:94:63:b0:43:fa:c0:fa:e2: 26:1c:dd:d4:ff:02:14:9a:63:d9:d6:e6:37:a0:a5: 7e:a1:34:69:ff:71:66:fd:f5:20:db:c7:5b:c0:05: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D9:38:02:8E:2F:31:DB:D3:5A:B4:99:02:70:E9:E2:C3:89:3B:29 X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d3:94:92:6b:0f:e0:0b:36:9b:71:ba:cc:04:67:cf:69:24: 3d:f0:11:2b:3c:7a:30:db:ee:4f:af:d8:5f:81:53:af:5c:45: 97:cf:07:ae:9c:8f:db:2e:4d:c1:de:0a:6e:ab:11:5a:89:fe: 4a:56:89:c2:b1:c0:a2:d9:fe:9b:4c:a9:80:00:86:75:9f:90: 90:af:72:88:41:b0:e8:23:36:6e:de:42:3b:91:94:79:19:09: 4e:c6:de:26:a3:f5:3a:27:07:e2:2c:3e:55:c5:c1:f5:c1:df: 0e:db:a7:21:72:ed:82:0c:07:86:c5:0d:5a:0f:65:42:27:18: 03:2a:1e:c4:56:6e:12:00:01:b2:ec:e4:85:a5:ce:d2:bd:47: be:26:6d:5b:bd:f0:24:61:94:f6:d3:09:4e:d5:95:c7:4c:96: aa:ee:5c:f9:c1:5c:6a:dd:72:4e:f6:47:0a:26:82:28:b9:c5: db:b3:0a:83:4b:f8:73:19:54:69:d5:85:24:b4:67:49:46:c4: 0d:69:a6:1d:40:53:5c:e5:d0:85:75:78:76:e2:d2:fd:ee:4d: 83:7a:3f:52:c5:7a:b7:d1:d4:f8:67:92:49:32:20:aa:20:9c: d2:94:f2:c0:35:19:b3:a9:24:95:06:af:a4:2c:c7:ad:79:62: fa:c9:d6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7BRGp2z5NBk0VpPIfCGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjUxMjEwMTEwMTEwWhcNMjUxMjExMTEwMTEwWjAzMTEwLwYDVQQD EygwZmQ5MzgwMjhlMmYzMWRiZDM1YWI0OTkwMjcwZTllMmMzODkzYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rWznI0jrzCkIWBB/pU3mH2kI7sS 8urgdQZm3m1UdY5g6z+GNas+tDLDX3rqRP0tX3Nlas04T3zKHY2ydG2Z+vkAADYM tC49DvIVvrYkl1NRqk8AW3b/nMY36a/n6C84ozd3J+o+qzqQF6ICUjOLRXVjjZTl QdqCBEX/nchBD9KphHFAEXd5OELjxbf8cx0FGbPujnjRouC9s0TyDV24hiFfA5pZ PF8SLHgwyLazMykIfXffECtyrzbnZ/vFc6gjT6DhpZXTW8QvjsoITKAzQSUdyklr ukbBlGOwQ/rA+uImHN3U/wIUmmPZ1uY3oKV+oTRp/3Fm/fUg28dbwAVJPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/ZOAKOLzHb01q0mQJw6eLDiTspMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtOUkmsP 4As2m3G6zARnz2kkPfARKzx6MNvuT6/YX4FTr1xFl88HrpyP2y5Nwd4KbqsRWon+ SlaJwrHAotn+m0ypgACGdZ+QkK9yiEGw6CM2bt5CO5GUeRkJTsbeJqP1OicH4iw+ VcXB9cHfDtunIXLtggwHhsUNWg9lQicYAyoexFZuEgABsuzkhaXO0r1HviZtW73w JGGU9tMJTtWVx0yWqu5c+cFcat1yTvZHCiaCKLnF27MKg0v4cxlUadWFJLRnSUbE DWmmHUBTXOXQhXV4duLS/e5Ng3o/UsV6t9HU+GeSSTIgqiCc0pTywDUZs6kklQav pCzHrXli+snWEg== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:22 2025 by rpki-client