This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: zrUloUx4VF78Gm/JGN5k7GuI9mOr3C5g4lgu6DYCnog= Subject key identifier: B5:E7:E5:28:7E:07:52:4D:4F:68:66:22:57:DC:33:10:10:75:EF:85 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019AF91D92BE0444EF3E57AD3D94A0FF2BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 17A9 Signing time: Sun 07 Dec 2025 14:00:56 +0000 Manifest this update: Sun 07 Dec 2025 14:00:56 +0000 Manifest next update: Mon 08 Dec 2025 14:00:56 +0000 Files and hashes: 1: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (hash: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=) 2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 3: MtUNZWuEtv_AgAvU3cIWhKTi-Gg.roa (hash: ySbSia2jLKcCoCeLqt1N9qsuOZJeTIf7i11M9Z0B4Zw=) 4: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (hash: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=) 5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: Mv+BSQ90xL6zxDjwENgjs+MBBvXNSYMcs75MhQAPLyE=) 6: exu2V3MDMWUgQoAAO324t6RZezE.roa (hash: vzXnLaEVU/+BdpdjEE/HgCx55xSHkRHFXGxKZLhvrto=) 7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=) 8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:92:be:04:44:ef:3e:57:ad:3d:94:a0:ff:2b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Dec 7 14:00:56 2025 GMT Not After : Dec 8 14:00:56 2025 GMT Subject: CN=b5e7e5287e07524d4f68662257dc33101075ef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:f5:e0:2b:65:21:72:f1:8a:af:6e:a1:f3: 10:9c:26:1c:a0:6b:47:bb:c9:75:71:1e:74:24:91: 11:0f:65:fe:7f:91:f7:eb:31:a6:22:82:60:8f:d5: 57:21:34:ac:a5:36:75:cc:93:eb:66:5b:e9:d3:24: 4d:f8:2e:f2:bb:66:6f:b8:7c:8b:a5:b8:0a:12:de: 86:f3:a4:04:13:65:ab:7b:47:32:c6:e1:65:88:60: 2e:19:72:aa:d6:75:12:6c:96:84:c9:53:4d:67:64: c6:32:30:c3:b0:b7:c0:9d:6e:46:42:ee:4c:20:dc: aa:54:1f:c3:97:95:c2:ab:2a:91:09:19:c1:83:0d: fc:13:f5:11:c7:80:3c:20:7e:fd:27:a6:61:53:1f: 25:f0:a6:d8:99:03:63:fb:22:ce:2e:48:00:33:f4: da:67:e0:2c:e1:3a:36:86:c4:2f:52:bb:b6:f9:f8: f8:58:84:c6:43:91:fb:b8:7a:97:81:ea:be:62:42: d4:13:bf:1a:04:e6:5f:3a:a9:63:64:75:94:9b:45: 14:bf:f7:1d:fe:ba:e5:bf:cc:ad:6f:31:e5:f9:28: e5:15:a4:d2:0d:ad:ef:cb:da:83:56:f7:94:9c:5c: 78:50:3c:21:5e:54:56:07:4e:0b:d4:35:14:7d:d8: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E7:E5:28:7E:07:52:4D:4F:68:66:22:57:DC:33:10:10:75:EF:85 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ca:23:15:6f:e7:41:18:cc:3c:87:86:a5:01:ce:dc:7c:a5: 8c:a6:d4:0c:25:b1:59:3e:03:a8:a7:e4:ed:5a:1c:42:2a:d9: ac:35:b3:ce:03:09:0b:7a:c0:4f:fc:85:99:20:44:a6:90:be: 7f:bd:f4:1c:49:96:f8:87:5e:2f:6a:3d:16:dc:3a:19:4c:b5: dd:b4:04:1f:50:00:9b:ff:9b:3d:0d:ff:7c:93:e4:be:3d:75: 69:f6:2a:17:22:d1:b6:e2:d9:18:df:c8:63:1e:ad:11:6d:27: 8b:22:46:14:01:f4:cd:8d:d4:61:13:5f:07:29:fb:0a:cc:8f: eb:e6:30:b9:48:bd:2c:7a:24:d1:50:4a:99:90:e6:73:d4:e7: aa:b7:fb:d3:4b:c5:fb:b4:67:b4:b0:be:ab:d3:f3:2f:d6:27: ac:f2:5e:77:1d:a2:2d:54:0b:e8:41:2d:2d:90:30:7c:2f:40: 6d:4d:ca:9c:21:71:54:2e:35:01:db:a2:05:4e:f0:e3:fb:eb: 37:71:12:74:dd:ab:46:91:57:0f:b5:c8:25:34:38:c5:9c:4f: 71:cb:0c:46:7c:04:9a:63:b7:33:31:70:78:aa:8e:7a:bf:89: e2:3a:77:39:7e:52:94:a1:54:16:d0:3f:f7:dc:6d:b6:9c:c3: 6b:26:cd:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HZK+BETvPletPZSg/yuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUxMjA3MTQwMDU2WhcNMjUxMjA4MTQwMDU2WjAzMTEwLwYDVQQD EyhiNWU3ZTUyODdlMDc1MjRkNGY2ODY2MjI1N2RjMzMxMDEwNzVlZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2r14CtlIXLxiq9uofMQnCYcoGtH u8l1cR50JJERD2X+f5H36zGmIoJgj9VXITSspTZ1zJPrZlvp0yRN+C7yu2ZvuHyL pbgKEt6G86QEE2Wre0cyxuFliGAuGXKq1nUSbJaEyVNNZ2TGMjDDsLfAnW5GQu5M INyqVB/Dl5XCqyqRCRnBgw38E/URx4A8IH79J6ZhUx8l8KbYmQNj+yLOLkgAM/Ta Z+As4To2hsQvUru2+fj4WITGQ5H7uHqXgeq+YkLUE78aBOZfOqljZHWUm0UUv/cd /rrlv8ytbzHl+SjlFaTSDa3vy9qDVveUnFx4UDwhXlRWB04L1DUUfdiO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXn5Sh+B1JNT2hmIlfcMxAQde+FMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMojFW/n QRjMPIeGpQHO3HyljKbUDCWxWT4DqKfk7VocQirZrDWzzgMJC3rAT/yFmSBEppC+ f730HEmW+IdeL2o9Ftw6GUy13bQEH1AAm/+bPQ3/fJPkvj11afYqFyLRtuLZGN/I Yx6tEW0niyJGFAH0zY3UYRNfByn7CsyP6+YwuUi9LHok0VBKmZDmc9Tnqrf700vF +7RntLC+q9PzL9YnrPJedx2iLVQL6EEtLZAwfC9AbU3KnCFxVC41AduiBU7w4/vr N3ESdN2rRpFXD7XIJTQ4xZxPccsMRnwEmmO3MzFweKqOer+J4jp3OX5SlKFUFtA/ 99xttpzDaybNww== -----END CERTIFICATE-----Generated at Sun Dec 7 22:01:55 2025 by rpki-client