This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json) Hash identifier: 6wMK2bcE2uflLOt1k4lQRJQabimwiEvpnNu87wJCAJo= Subject key identifier: 22:07:51:12:E8:61:CD:44:C0:6F:92:64:2B:89:8C:53:05:B5:85:6D Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Certificate serial: 019B0E92EE4CFDEE30DDA4B2DA1E407FCCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft Manifest number: 08DE Signing time: Thu 11 Dec 2025 18:01:08 +0000 Manifest this update: Thu 11 Dec 2025 18:01:08 +0000 Manifest next update: Fri 12 Dec 2025 18:01:08 +0000 Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=) 2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=) 3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 5kj7I1Gfs9QirTxlDCM70ByDmNoRiKQqHlM+QQWzmWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:ee:4c:fd:ee:30:dd:a4:b2:da:1e:40:7f:cc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Validity Not Before: Dec 11 18:01:08 2025 GMT Not After : Dec 12 18:01:08 2025 GMT Subject: CN=22075112e861cd44c06f92642b898c5305b5856d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:51:14:3c:ee:50:d4:0b:e6:f7:7e:68:3e: 46:21:9d:6b:d9:38:f4:df:ce:6b:16:e9:f9:34:d5: 24:c7:af:64:d4:e5:b1:36:dc:32:12:74:cd:c1:61: 13:d9:70:e1:53:87:b9:ab:59:b1:50:86:19:18:81: 2b:87:da:41:b1:bb:93:e1:1a:51:87:64:00:05:61: 05:a2:f2:b0:f0:02:38:57:8a:1c:87:2e:04:bf:77: c6:3a:5a:61:89:81:8d:92:9e:39:ad:4a:ae:24:ca: 98:81:20:98:26:62:22:c3:fe:ed:73:54:24:8d:0a: 2e:d8:4f:a6:dd:8d:ad:89:25:03:9e:97:e9:70:79: ae:66:e3:62:4f:df:a5:68:97:b2:ab:d7:f3:14:52: 5c:3b:0a:c5:cf:6e:2c:da:e5:e5:8f:8b:1a:88:73: 54:e7:61:87:28:91:19:0f:a2:b4:f0:be:23:89:00: 27:a6:ff:f8:b5:49:0e:08:4f:17:b8:1f:ca:52:f3: 44:89:22:b3:58:11:83:2b:d8:8e:fc:29:65:e5:72: 29:4b:84:3f:0e:c6:e2:21:3b:cc:43:85:67:62:c8: f8:f6:fd:4a:70:48:0d:95:0a:2b:94:81:88:79:38: 2a:12:6a:2a:a1:d4:de:42:e2:93:5a:e3:0e:30:8a: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:07:51:12:E8:61:CD:44:C0:6F:92:64:2B:89:8C:53:05:B5:85:6D X509v3 Authority Key Identifier: keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:5b:bd:77:4d:36:3a:2e:42:82:64:58:0b:50:0f:3c:9f: 49:61:83:34:fc:d6:14:e1:d8:7c:f9:8b:ea:64:08:a5:47:96: c9:71:d4:53:4b:ee:7d:12:a2:32:7e:f7:8c:39:34:cc:2c:70: d2:12:9b:14:83:93:88:0e:95:78:49:a2:d5:b5:f9:88:fb:0e: 87:f5:88:fd:c7:e7:81:0a:09:60:b5:d5:23:61:f8:fb:06:13: 1d:58:7e:cc:a2:34:50:cb:f7:de:57:85:26:15:10:93:08:af: 23:db:79:da:5d:f6:38:94:cd:a8:ff:53:c9:30:4c:08:07:af: 3b:05:a6:30:96:2e:dc:5a:ef:22:de:b4:d9:28:a9:13:de:c0: 46:dd:69:82:0d:14:33:2d:a6:34:8a:c0:8c:47:0c:45:ee:d8: 10:d2:a5:ad:14:be:c6:d3:b2:51:2d:93:94:ff:21:01:48:a4: 8e:fe:15:77:e4:42:2c:1a:a6:57:e1:a1:89:d6:11:51:5f:48: 3d:05:89:ba:b1:f5:1e:c5:4f:b7:58:7b:d4:28:d7:46:5f:2d: 59:16:53:7f:0d:c9:40:68:8f:86:6c:48:2d:41:8e:b2:ce:86: 04:fd:5a:d3:e5:75:85:67:1d:00:3a:bf:d7:19:5c:aa:5e:50: 89:28:72:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOku5M/e4w3aSy2h5Af8zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0 NzZmOWEwHhcNMjUxMjExMTgwMTA4WhcNMjUxMjEyMTgwMTA4WjAzMTEwLwYDVQQD EygyMjA3NTExMmU4NjFjZDQ0YzA2ZjkyNjQyYjg5OGM1MzA1YjU4NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsFRFDzuUNQL5vd+aD5GIZ1r2Tj0 385rFun5NNUkx69k1OWxNtwyEnTNwWET2XDhU4e5q1mxUIYZGIErh9pBsbuT4RpR h2QABWEFovKw8AI4V4ochy4Ev3fGOlphiYGNkp45rUquJMqYgSCYJmIiw/7tc1Qk jQou2E+m3Y2tiSUDnpfpcHmuZuNiT9+laJeyq9fzFFJcOwrFz24s2uXlj4saiHNU 52GHKJEZD6K08L4jiQAnpv/4tUkOCE8XuB/KUvNEiSKzWBGDK9iO/Cll5XIpS4Q/ DsbiITvMQ4VnYsj49v1KcEgNlQorlIGIeTgqEmoqodTeQuKTWuMOMIpJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIHURLoYc1EwG+SZCuJjFMFtYVtMB8GA1UdIwQY MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWVbvXdN NjouQoJkWAtQDzyfSWGDNPzWFOHYfPmL6mQIpUeWyXHUU0vufRKiMn73jDk0zCxw 0hKbFIOTiA6VeEmi1bX5iPsOh/WI/cfngQoJYLXVI2H4+wYTHVh+zKI0UMv33leF JhUQkwivI9t52l32OJTNqP9TyTBMCAevOwWmMJYu3FrvIt602SipE97ARt1pgg0U My2mNIrAjEcMRe7YENKlrRS+xtOyUS2TlP8hAUikjv4Vd+RCLBqmV+GhidYRUV9I PQWJurH1HsVPt1h71CjXRl8tWRZTfw3JQGiPhmxILUGOss6GBP1a0+V1hWcdADq/ 1xlcql5QiShyHA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:20 2025 by rpki-client