This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: NfXyImbn6iu72+m7O/ilznfTycr9Ha0bVmtVADv0TCI= Subject key identifier: 0F:C7:8A:F2:F9:EC:CB:F7:3F:53:A0:35:4F:31:6E:C5:F6:0F:B4:11 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B258874D35828D08EB166D35D0A1B7BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1682 Signing time: Tue 16 Dec 2025 05:00:58 +0000 Manifest this update: Tue 16 Dec 2025 05:00:58 +0000 Manifest next update: Wed 17 Dec 2025 05:00:58 +0000 Files and hashes: 1: 1-wNbXwWq_rcd31KdtUHBjHqlOYw.roa (hash: Vna41k3RUzjuu4Rno9oMx5pWO8RDhSOU/oHNJLNrfMg=) 2: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=) 3: 5EzMYu_fV4yzemMUF8IEirZ3m4k.roa (hash: 2tDqtkuFBxnBwvK51GUDoy84nUWDqYsh4HO+bwOKy8M=) 4: 5eRHhosWaEn81OkNyusCZwVd7dE.roa (hash: ocfP0fS6gnrVeOxLsKmob4730X36T0aRDwqF+FQB7po=) 5: 7dOxBPA-NVqHM_R34TmdQX-eiVk.roa (hash: F50CnYYnm4HGmpVuvVtE+trmrhmEhsgxat1JiN/ij8U=) 6: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=) 7: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=) 8: GDtm9Gv3P0fKgIud1P943rZPnpI.roa (hash: ZgMgh7QThQHVCvY7UkXW80lU6rdqlfPDwGLKvElHD7o=) 9: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=) 10: I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa (hash: +t66xrsaCPSb5WzTrykjh+nmEbajrQRTzYzj7itFceY=) 11: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=) 12: RpFEf2i-KdvJWns5f60QFIiul8A.roa (hash: IhnLzk7nknFDNbFcmh5KMyW66l5exCsFA25jgANhkOU=) 13: S1WNVPH-yhQYVBlY1oxGoA4pYB8.roa (hash: /KwKr2NjkF6vHZXTNqR2GuVfyY5uthmni4bhiTmH1io=) 14: TKHVPCgKWgmlRhWEubfTc_2iNdo.roa (hash: kNRIFdkqpRBsn7JG22+KFQspfd2argAfeCH1zb4/CE4=) 15: V2uTQCIG7cpvASw3b1o6E1FEC9w.roa (hash: lSRRwHc5aUwf96o9oByRNWmxPAHRtbICzuXtltcIQaU=) 16: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=) 17: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: sfzNcpoDRvKggWF0LpFefbkxF+xBS0adGAaz4chKa6Q=) 18: hmhsGXGseV2PwIXfLkkzy9brjH8.roa (hash: LD7+KdCf6+q+GHIUMNOAE/kbGPimpdSNwZOTxjTUsL4=) 19: lTuwy0CV892PuCB-pFiGJP53Jfc.roa (hash: 18dJLCtPjiOUThLo90h3UI2WpttIaLE5TSwG1m7paLM=) 20: mrPMPRRrlkwWoRTckPExVReGdzU.roa (hash: udQkxnQ/puhpRZBZD7aeBvy0qFXVY4xyBvq7R9flC08=) 21: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=) 22: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=) 23: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:74:d3:58:28:d0:8e:b1:66:d3:5d:0a:1b:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Dec 16 05:00:58 2025 GMT Not After : Dec 17 05:00:58 2025 GMT Subject: CN=0fc78af2f9eccbf73f53a0354f316ec5f60fb411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:d5:e1:fb:47:50:3a:2b:53:1f:b2:e2:bb: dc:08:60:f1:91:a7:3b:5b:f1:18:c5:08:91:2a:a5: af:46:59:f6:83:4b:8f:fe:5e:03:34:40:03:da:db: 55:a8:0d:22:59:f3:3c:1c:2c:ac:24:23:fb:97:e1: 5c:8e:24:c5:02:a8:27:92:c1:96:cb:4c:ba:41:37: 44:2e:0f:6e:95:4a:89:88:fe:bf:cc:22:33:c5:4e: 38:e0:9d:32:dc:ae:8b:12:f7:f5:3a:ba:5f:7f:9a: e4:3e:3b:b9:79:4e:ba:a4:b5:c3:bd:aa:5c:70:e9: 75:46:8d:b1:21:e4:2e:d3:59:c0:4e:97:6c:5d:92: 86:25:19:c7:de:7a:77:75:1b:b6:19:00:9a:3f:50: b3:b9:ff:4b:52:bb:1f:59:b1:5a:02:bf:45:f8:38: c0:c6:54:9a:65:e4:25:75:ac:06:87:fb:11:ef:8e: 05:90:1e:d6:2c:1a:c0:3e:a2:35:98:b6:13:dd:77: 5d:b0:84:7b:26:e4:04:86:2d:2e:64:9a:19:9f:f5: fb:e4:ff:63:c2:ff:45:3c:4b:6b:12:eb:ea:45:38: d1:a5:f6:a1:3c:57:96:24:c4:72:5a:6e:a0:68:7d: a5:32:8f:43:c7:53:56:08:2d:f3:13:ec:18:c4:f0: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C7:8A:F2:F9:EC:CB:F7:3F:53:A0:35:4F:31:6E:C5:F6:0F:B4:11 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:e3:bd:2d:58:97:c1:6c:d1:2c:27:e4:9d:ae:ec:16:ab: f1:9f:89:32:fe:d4:89:a8:44:10:e9:46:61:fb:d1:a8:c5:35: 58:6e:4c:20:2c:6b:8c:bf:a5:07:ec:d2:fe:a3:b9:bb:53:b7: 8f:a7:03:d4:bf:34:7c:f9:ea:03:24:e3:ad:c7:9d:2d:0b:f2: 2e:c1:e7:01:94:95:b2:4f:f9:b7:63:e8:b4:3d:74:02:22:fd: ac:66:61:e7:b5:62:02:38:a3:f0:e8:14:38:c5:1f:a9:9d:da: f3:e4:d2:0a:4e:5f:9a:94:3e:e2:d7:2f:c7:23:cf:f0:b2:f1: 93:2f:fc:9f:0e:ce:60:29:9d:9c:8f:b5:ac:fb:f7:6d:a4:e8: 8b:e0:8d:3f:3f:e3:01:a6:7b:29:40:f1:a1:49:79:09:57:01: d0:d6:ad:1a:a8:f8:3d:0e:3d:7d:15:20:2d:e3:ba:e2:61:64: f4:33:7f:6d:08:d9:8b:08:56:8c:87:45:be:77:2c:65:65:ee: 36:12:06:7b:75:65:f5:02:1e:90:1c:b1:70:5f:cb:58:33:73: 50:b8:ff:a6:46:3f:ce:ad:1c:83:e2:cd:4b:fe:d2:4d:e1:a2: f9:a8:0d:26:65:75:c6:ab:d0:86:21:f8:96:a1:d3:3d:3d:4c: c1:fa:26:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliHTTWCjQjrFm010KG3v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUxMjE2MDUwMDU4WhcNMjUxMjE3MDUwMDU4WjAzMTEwLwYDVQQD EygwZmM3OGFmMmY5ZWNjYmY3M2Y1M2EwMzU0ZjMxNmVjNWY2MGZiNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrrV4ftHUDorUx+y4rvcCGDxkac7 W/EYxQiRKqWvRln2g0uP/l4DNEAD2ttVqA0iWfM8HCysJCP7l+FcjiTFAqgnksGW y0y6QTdELg9ulUqJiP6/zCIzxU444J0y3K6LEvf1Orpff5rkPju5eU66pLXDvapc cOl1Ro2xIeQu01nATpdsXZKGJRnH3np3dRu2GQCaP1Czuf9LUrsfWbFaAr9F+DjA xlSaZeQldawGh/sR744FkB7WLBrAPqI1mLYT3XddsIR7JuQEhi0uZJoZn/X75P9j wv9FPEtrEuvqRTjRpfahPFeWJMRyWm6gaH2lMo9Dx1NWCC3zE+wYxPAKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/HivL57Mv3P1OgNU8xbsX2D7QRMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRDjvS1Y l8Fs0Swn5J2u7Bar8Z+JMv7UiahEEOlGYfvRqMU1WG5MICxrjL+lB+zS/qO5u1O3 j6cD1L80fPnqAyTjrcedLQvyLsHnAZSVsk/5t2PotD10AiL9rGZh57ViAjij8OgU OMUfqZ3a8+TSCk5fmpQ+4tcvxyPP8LLxky/8nw7OYCmdnI+1rPv3baToi+CNPz/j AaZ7KUDxoUl5CVcB0NatGqj4PQ49fRUgLeO64mFk9DN/bQjZiwhWjIdFvncsZWXu NhIGe3Vl9QIekByxcF/LWDNzULj/pkY/zq0cg+LNS/7STeGi+agNJmV1xqvQhiH4 lqHTPT1MwfomJg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:08 2025 by rpki-client