This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft File: bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft (raw, json) Hash identifier: 0xyL5QxD6b0ceD7TOnUCJiAM3AoprcOK9QqjdYSxwQg= Subject key identifier: 6F:32:F0:DE:CD:B1:0E:19:FB:0B:A9:38:36:D7:09:5F:35:76:DA:24 Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Certificate serial: 019B593ED66E6FA73B0B895E39746886A1C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft Manifest number: 74 Signing time: Fri 26 Dec 2025 06:00:48 +0000 Manifest this update: Fri 26 Dec 2025 06:00:48 +0000 Manifest next update: Sat 27 Dec 2025 06:00:48 +0000 Files and hashes: 1: WcW1TLN1FcXWXE9VINsN3CfkGhc.roa (hash: yl9aMxUKV+0rM9piy+9fYY3ixIa7X94FbqyTuSYrSf0=) 2: bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl (hash: xyRoKitYg1YDkaWWSsCTbjkJKvrseepJi7Kb2llXbCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d6:6e:6f:a7:3b:0b:89:5e:39:74:68:86:a1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Validity Not Before: Dec 26 06:00:48 2025 GMT Not After : Dec 27 06:00:48 2025 GMT Subject: CN=6f32f0decdb10e19fb0ba93836d7095f3576da24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:81:86:3e:68:6a:1d:49:ed:92:7c:0e:a1: 23:3c:27:eb:4a:49:cd:07:4f:7b:77:97:9c:88:0b: 99:81:cd:94:de:db:1b:c6:43:92:eb:ed:8d:df:90: 69:49:53:89:2d:a3:9f:59:80:04:27:20:64:95:fe: 11:75:59:9c:ae:81:21:bf:87:00:8b:b7:73:c4:a1: c8:79:df:bb:7e:a5:6c:93:6c:15:f7:1a:91:db:5d: 2d:97:00:fd:7f:81:e6:15:2d:5a:89:f0:fe:95:fc: d0:53:94:7b:94:69:0e:2d:36:28:35:de:ef:39:e4: e7:fc:bd:34:d9:a6:2d:18:ef:04:44:9a:b2:57:b7: dd:6c:40:9b:9f:5d:a8:73:e5:c3:58:f8:41:19:8b: d6:ec:4a:b6:6a:85:4f:65:2c:e9:41:3d:63:19:5a: 7a:2b:95:df:84:8a:08:f5:9e:27:78:1b:6a:12:f9: 80:07:5d:b9:85:d3:68:fa:fa:ee:0b:36:35:88:c3: 41:e1:94:05:85:c0:4d:e8:c1:09:cd:48:56:c7:3c: 3d:8c:44:7b:cd:ac:a9:af:42:9a:a7:0d:33:04:e2: 56:ca:67:d6:dc:50:49:94:b8:71:d2:af:7a:55:c8: 9d:d0:5b:cf:c4:82:8b:32:9d:77:38:9c:9a:a5:f8: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:32:F0:DE:CD:B1:0E:19:FB:0B:A9:38:36:D7:09:5F:35:76:DA:24 X509v3 Authority Key Identifier: keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9a:af:0c:f2:07:33:ed:dc:6d:13:40:da:93:22:89:31:6a: f1:39:61:94:0b:7a:2f:72:11:ec:8e:5c:d5:f8:4f:d1:d8:28: d8:69:ea:de:6f:a2:d2:39:0b:72:ef:76:e7:a7:3d:5d:35:2c: 48:9e:fb:ed:58:f7:6d:09:15:42:5a:e1:b6:b1:4f:fd:f7:47: f9:c8:fd:fe:92:f8:be:29:bf:6f:6d:54:31:5e:39:3a:21:60: dd:bd:e9:74:01:b5:91:b7:3f:bb:d3:55:b3:a4:39:c6:e1:ac: f1:3c:03:99:9c:96:a7:73:f9:fa:55:3c:27:4b:80:e1:74:e0: fd:6b:61:51:64:d8:ac:ba:7b:bf:ce:f9:2b:56:91:4d:6a:18: 24:e6:95:c8:de:42:f8:01:10:45:68:e1:da:d0:dd:46:43:3a: ce:89:91:26:ed:c5:6d:be:80:c0:01:98:4d:6a:03:e0:3d:f8: ce:b9:8d:a2:c9:66:eb:a6:35:d8:05:e2:2d:ed:bb:60:0a:3f: e1:ea:30:d2:87:8a:ae:85:04:4f:41:ca:ff:72:66:8c:f6:c4: 99:26:0d:16:b7:0e:a8:7e:ee:64:a5:95:19:e0:c1:62:24:24: a7:31:67:0c:71:95:7c:db:12:03:28:4e:eb:73:5b:64:26:61: fb:8e:37:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtZub6c7C4leOXRohqHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTc5YTYxNjdhYTNmY2JmZDQ0MDcwMTM0YzlkOTNhNmNl Mzk4YmMwHhcNMjUxMjI2MDYwMDQ4WhcNMjUxMjI3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg2ZjMyZjBkZWNkYjEwZTE5ZmIwYmE5MzgzNmQ3MDk1ZjM1NzZkYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukCBhj5oah1J7ZJ8DqEjPCfrSknN B097d5eciAuZgc2U3tsbxkOS6+2N35BpSVOJLaOfWYAEJyBklf4RdVmcroEhv4cA i7dzxKHIed+7fqVsk2wV9xqR210tlwD9f4HmFS1aifD+lfzQU5R7lGkOLTYoNd7v OeTn/L002aYtGO8ERJqyV7fdbECbn12oc+XDWPhBGYvW7Eq2aoVPZSzpQT1jGVp6 K5XfhIoI9Z4neBtqEvmAB125hdNo+vruCzY1iMNB4ZQFhcBN6MEJzUhWxzw9jER7 zaypr0Kapw0zBOJWymfW3FBJlLhx0q96Vcid0FvPxIKLMp13OJyapfgzkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8y8N7NsQ4Z+wupODbXCV81dtokMB8GA1UdIwQY MBaAFGznmmFnqj/L/UQHATTJ2Tps45i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAt NGY0MDE4NTA0OTYwLzEvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAtNGY0MDE4NTA0OTYw LzEvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpqvDPIH M+3cbRNA2pMiiTFq8TlhlAt6L3IR7I5c1fhP0dgo2Gnq3m+i0jkLcu9256c9XTUs SJ777Vj3bQkVQlrhtrFP/fdH+cj9/pL4vim/b21UMV45OiFg3b3pdAG1kbc/u9NV s6Q5xuGs8TwDmZyWp3P5+lU8J0uA4XTg/WthUWTYrLp7v875K1aRTWoYJOaVyN5C +AEQRWjh2tDdRkM6zomRJu3Fbb6AwAGYTWoD4D34zrmNoslm66Y12AXiLe27YAo/ 4eow0oeKroUET0HK/3JmjPbEmSYNFrcOqH7uZKWVGeDBYiQkpzFnDHGVfNsSAyhO 63NbZCZh+443rg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client