This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json) Hash identifier: OhFXAUhr9CYWKWks+vCp/W57mT6FWl0SmCD/dbyGlFY= Subject key identifier: 74:2C:7E:7D:09:D3:AB:78:F5:7D:2C:BE:00:46:EE:5F:45:CE:23:24 Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019B5A88A0041E11B7CC7989B51F27414FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:01:01 +0000 Manifest this update: Fri 26 Dec 2025 12:01:01 +0000 Manifest next update: Sat 27 Dec 2025 12:01:01 +0000 Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=) 2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: gVZGvkRyrAro066vpAj2I6GOEPbeNur4zat3Ty03K0Q=) 3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=) 4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a0:04:1e:11:b7:cc:79:89:b5:1f:27:41:4f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Dec 26 12:01:01 2025 GMT Not After : Dec 27 12:01:01 2025 GMT Subject: CN=742c7e7d09d3ab78f57d2cbe0046ee5f45ce2324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:cf:30:9a:42:d4:21:64:3b:e4:74:7a:ce: 4c:42:af:b9:eb:0f:e7:a6:d1:09:5e:86:02:b1:ca: 12:6b:2e:83:43:2d:dd:cb:e6:87:3d:65:f3:8b:d4: 28:55:24:8e:be:f3:a4:ca:6d:01:ee:ca:50:6c:d7: c9:0c:1d:ae:a2:81:ba:c7:10:3e:ad:44:65:10:60: 0e:2d:e4:90:b4:51:af:73:1c:94:5d:a5:4f:52:62: ba:a0:8e:4d:2e:00:74:06:55:ad:3a:48:81:e6:23: 7c:03:45:13:b1:91:1c:9a:a6:61:0d:47:08:a5:79: e6:27:41:07:b5:f2:f0:4f:09:94:d1:17:a5:ec:bb: 69:47:b0:ff:22:cd:58:ca:ed:25:3f:e6:bb:af:cb: 02:4f:c9:05:d0:a5:48:6a:fb:90:4f:a4:71:e7:b2: 13:96:4e:04:16:3e:2a:46:14:08:69:74:fd:cf:dc: 02:15:0e:85:81:26:ea:6b:40:5c:8a:dd:76:16:e1: 18:72:b2:f9:44:c4:43:0a:ae:c2:44:55:84:51:1d: 65:58:59:2a:68:5a:db:5e:a8:4f:d5:63:c3:69:56: b7:fc:5a:77:40:51:a8:3e:0f:d9:ae:ca:4e:da:bc: 30:3b:da:75:89:66:73:37:37:a1:4e:c2:1a:ef:8a: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2C:7E:7D:09:D3:AB:78:F5:7D:2C:BE:00:46:EE:5F:45:CE:23:24 X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3a:a4:f4:88:31:82:bd:02:29:bc:a5:1a:21:bf:31:c4:00: 9d:db:ff:b4:99:6a:f2:19:7d:c0:64:ef:6d:f6:37:14:b4:29: 6f:e8:90:99:7e:97:bd:09:80:ae:49:06:6e:90:5c:f5:f0:c5: a2:f7:8c:81:99:f7:d8:00:b3:6a:9d:83:4d:1f:69:ef:36:bd: 52:bb:2c:ee:ca:0b:35:02:fe:df:b1:48:44:bd:35:d7:a8:47: 95:95:01:e1:2d:cb:80:bc:41:c9:42:31:7a:60:25:a5:92:52: 37:5d:98:da:72:6b:b6:b8:3c:cf:32:7a:ff:f2:0c:c6:2a:cd: 02:01:2e:81:10:f1:0c:d9:6d:cc:30:62:fd:15:cb:16:6b:8f: e3:e1:50:93:7e:67:11:47:cf:ea:e7:ad:41:02:41:06:ae:88: a5:b2:38:36:21:6f:97:de:6b:11:52:8c:ea:f1:57:80:19:65: c2:2c:9c:0e:74:9a:6a:08:a2:7a:6a:c5:b3:ca:62:1e:de:0c: f9:1d:e6:7b:9b:3b:d0:db:e9:2b:87:4b:eb:27:14:0d:9d:f7: a5:03:5f:f4:e9:d3:7f:0d:9c:50:ae:45:78:f5:df:1e:6e:da: 8e:ea:a4:c4:1f:1f:e9:50:32:89:54:67:d0:8b:fd:34:aa:ea: b8:f2:a5:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKAEHhG3zHmJtR8nQU/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjUxMjI2MTIwMTAxWhcNMjUxMjI3MTIwMTAxWjAzMTEwLwYDVQQD Eyg3NDJjN2U3ZDA5ZDNhYjc4ZjU3ZDJjYmUwMDQ2ZWU1ZjQ1Y2UyMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrbPMJpC1CFkO+R0es5MQq+56w/n ptEJXoYCscoSay6DQy3dy+aHPWXzi9QoVSSOvvOkym0B7spQbNfJDB2uooG6xxA+ rURlEGAOLeSQtFGvcxyUXaVPUmK6oI5NLgB0BlWtOkiB5iN8A0UTsZEcmqZhDUcI pXnmJ0EHtfLwTwmU0Rel7LtpR7D/Is1Yyu0lP+a7r8sCT8kF0KVIavuQT6Rx57IT lk4EFj4qRhQIaXT9z9wCFQ6FgSbqa0Bcit12FuEYcrL5RMRDCq7CRFWEUR1lWFkq aFrbXqhP1WPDaVa3/Fp3QFGoPg/ZrspO2rwwO9p1iWZzNzehTsIa74q8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQsfn0J06t49X0svgBG7l9FziMkMB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjqk9Igx gr0CKbylGiG/McQAndv/tJlq8hl9wGTvbfY3FLQpb+iQmX6XvQmArkkGbpBc9fDF oveMgZn32ACzap2DTR9p7za9Urss7soLNQL+37FIRL0116hHlZUB4S3LgLxByUIx emAlpZJSN12Y2nJrtrg8zzJ6//IMxirNAgEugRDxDNltzDBi/RXLFmuP4+FQk35n EUfP6uetQQJBBq6IpbI4NiFvl95rEVKM6vFXgBllwiycDnSaagiiemrFs8piHt4M +R3me5s70NvpK4dL6ycUDZ33pQNf9OnTfw2cUK5FePXfHm7ajuqkxB8f6VAyiVRn 0Iv9NKrquPKlAg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client