This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json) Hash identifier: eG5mGTNGpJbxWwdcFjAZ/un1iJAGRpu5pbRDHl4zjYA= Subject key identifier: CB:B8:D2:1C:40:DE:45:B5:2B:EE:C1:53:6A:FB:25:A5:AA:20:CE:90 Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Certificate serial: 019B243EBD4CAF608DC299B447CF2AF645CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft Manifest number: 0862 Signing time: Mon 15 Dec 2025 23:00:49 +0000 Manifest this update: Mon 15 Dec 2025 23:00:49 +0000 Manifest next update: Tue 16 Dec 2025 23:00:49 +0000 Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=) 2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: FAXDAkN55qP6rHKXeMSbpwz+uLm9wRmetq7QkY7kLhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:bd:4c:af:60:8d:c2:99:b4:47:cf:2a:f6:45:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Validity Not Before: Dec 15 23:00:49 2025 GMT Not After : Dec 16 23:00:49 2025 GMT Subject: CN=cbb8d21c40de45b52beec1536afb25a5aa20ce90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:53:a4:8b:aa:51:d8:09:a2:e6:82:18:dd: 6b:47:75:96:cd:3f:b4:11:a0:c3:44:47:14:32:59: aa:b0:46:db:b1:e7:ce:1b:e6:94:b1:4a:fc:71:3c: 1e:f5:d8:06:e3:8c:ba:84:fa:82:e7:e3:06:f5:dd: 55:e4:db:25:90:8f:89:a6:0d:f4:78:30:ae:ac:31: 96:30:bf:b8:83:0a:29:44:bd:b1:e0:f4:82:6f:b7: 01:fc:b3:e9:bc:c3:6b:0f:32:86:05:21:dd:69:b7: 75:49:39:22:18:75:65:0f:c6:e2:ef:b7:74:ef:ae: ea:cd:69:61:66:e1:d2:b8:f9:66:84:46:8c:fd:a4: bc:f6:cc:30:4b:de:4d:13:3a:91:91:de:5e:fa:ca: 0d:00:39:2b:37:e5:c9:23:be:95:de:e8:a1:cb:1c: 15:20:c2:bc:6b:0f:d8:20:4d:52:f1:6d:65:52:30: f6:73:4b:79:f0:a4:e4:4c:24:66:ae:c7:40:c2:c6: 93:18:72:ee:1b:c0:5d:0e:8b:f4:ad:82:c4:be:aa: 12:bb:2a:43:6d:ca:99:f1:2a:85:bd:fc:6a:84:07: 80:fe:c1:30:4b:e2:7e:ef:85:6c:03:80:2b:be:d8: eb:b8:ec:1d:57:bd:fc:f1:05:d1:b5:30:03:a5:a5: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:D2:1C:40:DE:45:B5:2B:EE:C1:53:6A:FB:25:A5:AA:20:CE:90 X509v3 Authority Key Identifier: keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8c:72:59:33:a0:4c:83:1e:d4:f8:a6:7f:f0:40:07:a7:b3: 58:e3:be:4d:95:66:a6:f7:7d:0a:c7:80:e9:8c:82:35:b8:ca: 36:f1:b1:5c:96:1e:31:3e:8a:4e:20:5f:76:7c:f8:6d:31:b7: 27:f4:b6:a8:8a:92:72:49:ea:fd:2b:2b:dd:89:5f:bd:87:41: b3:86:1a:c5:32:76:73:e7:9a:ed:9f:26:fe:5d:d2:f0:5b:e7: 45:c3:6a:33:1f:e9:f5:c0:8d:b0:f3:fa:36:a0:4e:cc:db:5e: 79:41:1e:bb:2b:d4:a2:c5:f1:f9:a5:ea:8c:a7:68:bb:49:7b: 27:fd:86:6d:ad:86:70:71:3d:70:08:ab:cf:55:5c:a0:11:4b: b9:cd:5a:81:88:bd:1e:5c:bf:fe:95:26:ca:23:3e:45:7f:cc: a6:76:41:e3:57:46:21:37:13:6d:17:7b:06:c1:4f:35:90:c5: 5c:97:31:15:f8:75:9d:d8:a0:c4:4c:fa:89:c5:d2:2a:81:3e: ea:f6:84:77:92:c2:0f:cc:4a:18:2f:c6:6a:6e:26:e3:d7:30: 53:af:cb:84:86:06:e2:bc:4d:34:cf:f6:85:ec:06:92:50:d2: a5:83:b1:f1:d0:af:63:6e:ff:2f:de:58:28:dc:4f:60:62:3c: c3:a9:85:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPr1Mr2CNwpm0R88q9kXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh NGI4YTcwHhcNMjUxMjE1MjMwMDQ5WhcNMjUxMjE2MjMwMDQ5WjAzMTEwLwYDVQQD EyhjYmI4ZDIxYzQwZGU0NWI1MmJlZWMxNTM2YWZiMjVhNWFhMjBjZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnApTpIuqUdgJouaCGN1rR3WWzT+0 EaDDREcUMlmqsEbbsefOG+aUsUr8cTwe9dgG44y6hPqC5+MG9d1V5NslkI+Jpg30 eDCurDGWML+4gwopRL2x4PSCb7cB/LPpvMNrDzKGBSHdabd1STkiGHVlD8bi77d0 767qzWlhZuHSuPlmhEaM/aS89swwS95NEzqRkd5e+soNADkrN+XJI76V3uihyxwV IMK8aw/YIE1S8W1lUjD2c0t58KTkTCRmrsdAwsaTGHLuG8BdDov0rYLEvqoSuypD bcqZ8SqFvfxqhAeA/sEwS+J+74VsA4ArvtjruOwdV7388QXRtTADpaUbWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu40hxA3kW1K+7BU2r7JaWqIM6QMB8GA1UdIwQY MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4 LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboxyWTOg TIMe1Pimf/BAB6ezWOO+TZVmpvd9CseA6YyCNbjKNvGxXJYeMT6KTiBfdnz4bTG3 J/S2qIqScknq/Ssr3YlfvYdBs4YaxTJ2c+ea7Z8m/l3S8FvnRcNqMx/p9cCNsPP6 NqBOzNteeUEeuyvUosXx+aXqjKdou0l7J/2Gba2GcHE9cAirz1VcoBFLuc1agYi9 Hly//pUmyiM+RX/MpnZB41dGITcTbRd7BsFPNZDFXJcxFfh1ndigxEz6icXSKoE+ 6vaEd5LCD8xKGC/Gam4m49cwU6/LhIYG4rxNNM/2hewGklDSpYOx8dCvY27/L95Y KNxPYGI8w6mFJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:59:22 2025 by rpki-client