This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json) Hash identifier: SEv6IYk7mxc70TgCEWGsg79dJfmc+D1+2sgDoNkmDfE= Subject key identifier: 43:0B:15:CE:FA:F9:25:4A:B4:A2:D9:70:C3:9B:34:91:AF:54:C7:7D Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff Certificate serial: 019B33441E03FB26D2F11B54034411BE2CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft Manifest number: 072F Signing time: Thu 18 Dec 2025 21:01:00 +0000 Manifest this update: Thu 18 Dec 2025 21:01:00 +0000 Manifest next update: Fri 19 Dec 2025 21:01:00 +0000 Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=) 2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: BfMB/Zv4FRw+lMowee4+FKl+nHGoL6r0XRIfns7f/cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:1e:03:fb:26:d2:f1:1b:54:03:44:11:be:2c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff Validity Not Before: Dec 18 21:01:00 2025 GMT Not After : Dec 19 21:01:00 2025 GMT Subject: CN=430b15cefaf9254ab4a2d970c39b3491af54c77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:4a:96:06:63:14:16:3b:10:80:8c:7c:00: 37:71:75:3a:e3:0c:3b:60:2a:bd:9c:8b:72:00:fb: 55:ac:20:34:81:8e:b5:58:b3:ce:c2:31:a3:9d:80: c9:1f:0c:85:0e:17:6c:19:39:f3:70:9a:44:45:e8: 6a:15:10:0a:33:e4:ae:d9:93:b8:17:ee:7a:65:2d: 76:a9:cc:29:47:90:45:0a:69:d9:bd:e3:ec:ff:f0: 6e:33:34:98:4b:05:77:0a:00:a1:26:dc:4f:6a:6e: 35:4c:ae:14:99:d8:fe:63:7d:b6:3f:c1:e9:32:76: 65:0f:c8:2c:2c:a3:4a:16:6f:31:66:f7:ce:88:28: a3:97:4f:6f:1f:bc:53:d9:94:bc:ac:f9:79:21:82: 89:15:95:c9:d9:c7:9a:9a:9f:f1:0a:75:bc:60:a3: 9b:8c:09:b1:07:34:75:a4:75:a3:d1:38:60:ab:e7: f8:74:3b:98:b9:68:d7:70:60:87:5c:1d:bd:63:37: fb:24:35:4b:5b:95:40:ae:a8:99:57:44:72:22:0b: 1e:ba:86:19:7a:21:de:9a:eb:8d:3d:97:37:79:0c: 6d:5f:08:c7:06:eb:82:43:84:6b:8b:36:56:a9:f7: 20:34:34:93:ae:b9:c2:e7:8e:72:1b:63:62:dd:34: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:15:CE:FA:F9:25:4A:B4:A2:D9:70:C3:9B:34:91:AF:54:C7:7D X509v3 Authority Key Identifier: keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f9:40:8d:cd:40:54:0e:66:f6:a3:1e:28:f5:0d:9b:e6:96: fe:86:b5:d2:75:63:60:6a:18:a8:2a:89:00:e5:1f:90:64:37: f6:5f:f7:9d:98:da:75:63:8a:f8:e9:51:19:80:a4:6a:0e:72: 0b:a3:61:fd:db:1a:d9:e4:dd:22:c5:91:c7:76:32:f8:5f:27: 28:ea:c1:32:c6:b3:02:52:82:1f:f2:f5:9c:87:10:bb:47:6a: 3e:55:9d:e7:07:7c:de:82:a0:96:b9:41:89:c5:08:ce:c3:e4: 35:86:4b:8c:e8:3f:e1:fe:fa:3a:66:63:62:2c:fb:53:f1:5d: 6b:0f:97:85:9d:c2:4f:65:4d:fc:b1:de:15:98:5b:ba:e2:dc: cb:40:ef:8f:e7:ed:19:45:08:43:b5:a2:19:e9:56:a7:bb:fb: dc:ec:45:42:08:40:3d:ce:72:ca:96:f4:b0:d4:a6:de:56:0d: 93:ff:fd:1e:3d:b7:3b:2e:21:1a:c6:89:c1:b4:f8:c5:f8:f2: 74:f2:84:2f:70:95:57:99:a5:b8:9c:2f:c6:4b:4d:15:d0:2f: cc:09:74:b5:6c:67:a5:c1:87:7e:0f:f3:73:5f:05:79:b4:55: 53:2e:d2:52:49:cc:05:3d:b7:42:1e:52:df:c3:d7:88:8b:d2: 0d:b4:15:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRB4D+ybS8RtUA0QRvizDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy YjhmZmYwHhcNMjUxMjE4MjEwMTAwWhcNMjUxMjE5MjEwMTAwWjAzMTEwLwYDVQQD Eyg0MzBiMTVjZWZhZjkyNTRhYjRhMmQ5NzBjMzliMzQ5MWFmNTRjNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA211KlgZjFBY7EICMfAA3cXU64ww7 YCq9nItyAPtVrCA0gY61WLPOwjGjnYDJHwyFDhdsGTnzcJpERehqFRAKM+Su2ZO4 F+56ZS12qcwpR5BFCmnZvePs//BuMzSYSwV3CgChJtxPam41TK4Umdj+Y322P8Hp MnZlD8gsLKNKFm8xZvfOiCijl09vH7xT2ZS8rPl5IYKJFZXJ2ceamp/xCnW8YKOb jAmxBzR1pHWj0Thgq+f4dDuYuWjXcGCHXB29Yzf7JDVLW5VArqiZV0RyIgseuoYZ eiHemuuNPZc3eQxtXwjHBuuCQ4RrizZWqfcgNDSTrrnC545yG2Ni3TQKVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMLFc76+SVKtKLZcMObNJGvVMd9MB8GA1UdIwQY MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt YWVjOTZmNDMxMDE4LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4 LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKflAjc1A VA5m9qMeKPUNm+aW/oa10nVjYGoYqCqJAOUfkGQ39l/3nZjadWOK+OlRGYCkag5y C6Nh/dsa2eTdIsWRx3Yy+F8nKOrBMsazAlKCH/L1nIcQu0dqPlWd5wd83oKglrlB icUIzsPkNYZLjOg/4f76OmZjYiz7U/Fdaw+XhZ3CT2VN/LHeFZhbuuLcy0Dvj+ft GUUIQ7WiGelWp7v73OxFQghAPc5yypb0sNSm3lYNk//9Hj23Oy4hGsaJwbT4xfjy dPKEL3CVV5mluJwvxktNFdAvzAl0tWxnpcGHfg/zc18FebRVUy7SUknMBT23Qh5S 38PXiIvSDbQVwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:45:55 2025 by rpki-client