This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json) Hash identifier: uUozAcNMJApX/9TCVKmhrLNXmoWJ9LoTAA0wsILyDA0= Subject key identifier: DD:6A:5F:1E:72:1E:CA:1A:75:59:F0:E2:CE:99:40:0B:54:4F:F5:5A Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019AF31B80E45725BF7F6B29410259C48B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft Manifest number: 16C9 Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=) 2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=) 3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=) 4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: mYGxkPhdVORaBCGA7kq/WuAvLK5FI08v962MmxmNAf8=) 5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:e4:57:25:bf:7f:6b:29:41:02:59:c4:8b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=dd6a5f1e721eca1a7559f0e2ce99400b544ff55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:6e:e7:e4:2a:d6:d1:58:a4:29:66:1d:9c: 7f:ee:cc:44:a3:6e:7b:8e:77:49:58:7c:65:2d:6c: 64:1b:a7:f3:8a:66:2a:d5:de:83:f0:6c:d2:a2:a9: a5:79:84:9e:20:dc:0f:05:2f:80:7f:06:93:57:c9: 15:17:a2:7e:3f:39:31:b3:63:bf:a3:12:69:82:d7: 28:02:3d:e1:53:00:8e:44:06:a4:46:e6:8d:a8:a0: af:b6:99:d2:34:c7:ae:dd:e9:c7:0f:00:5b:89:43: c4:ee:bc:15:1b:d2:13:5b:13:77:0d:55:5f:fa:d3: fe:a1:b2:9a:3b:61:85:54:1b:b9:59:21:88:28:df: d7:0e:3f:ac:ec:98:e6:16:89:65:81:d7:f3:69:f7: fe:29:ef:ad:90:5e:60:eb:40:5c:27:d0:26:fb:19: b8:bb:df:f3:bb:fc:bc:22:08:63:b0:23:89:d0:8c: 65:cd:f9:a9:b5:5a:9e:8c:6c:e4:fb:16:cc:06:bd: 80:fb:6e:b9:85:6f:4e:c9:59:02:a0:00:a9:01:c5: 73:7e:f2:9b:b1:c7:a7:ba:cf:f5:47:55:78:a9:bc: 1d:2e:ef:9d:d9:c3:84:84:21:07:4e:ed:20:60:31: f0:c7:6e:15:79:54:a1:c8:5b:69:9c:4d:db:a3:b5: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:5F:1E:72:1E:CA:1A:75:59:F0:E2:CE:99:40:0B:54:4F:F5:5A X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d6:13:3a:34:36:3b:8e:ef:22:50:8d:e7:1b:49:e6:db:f6: 39:d0:63:e6:bd:ff:44:3c:2b:5f:00:c1:29:5b:7c:be:e0:43: 23:39:39:40:52:24:46:dc:19:4f:cf:a9:5f:43:c9:5e:75:9b: b9:31:61:ba:fd:4b:c6:0e:15:da:2f:f3:66:ec:4d:46:52:4b: e2:6e:5e:87:87:15:03:ce:26:1d:88:f6:b8:5b:3c:1b:2c:93: 36:84:2a:ca:26:37:b5:b8:8b:b9:ec:ee:e0:fc:17:14:7f:76: de:72:7e:76:8f:46:a2:2c:20:d7:c0:f7:94:bd:41:dd:93:ea: f4:53:bd:d9:5e:da:f8:04:53:b5:f2:e4:ef:e7:19:6c:4b:d8: 6f:41:bb:9e:59:5b:7a:cf:98:f5:32:59:d6:e0:a9:d9:50:c9: 9c:aa:09:28:8b:d7:e4:ff:8a:13:e5:80:11:50:20:19:8d:47: 60:81:52:a9:c1:5a:34:56:00:f0:3b:c9:b9:be:36:71:e0:ec: 0b:12:46:4c:bd:4a:cc:af:60:23:3e:9c:43:45:10:fe:19:93: 0d:a5:00:fa:7d:0c:59:7d:c5:82:49:85:23:20:0a:0e:c3:06: cf:a9:71:02:6f:29:c6:56:ce:ad:ac:51:2a:db:d2:02:00:16: 99:54:02:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4DkVyW/f2spQQJZxIuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD EyhkZDZhNWYxZTcyMWVjYTFhNzU1OWYwZTJjZTk5NDAwYjU0NGZmNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/tu5+Qq1tFYpClmHZx/7sxEo257 jndJWHxlLWxkG6fzimYq1d6D8GzSoqmleYSeINwPBS+AfwaTV8kVF6J+Pzkxs2O/ oxJpgtcoAj3hUwCORAakRuaNqKCvtpnSNMeu3enHDwBbiUPE7rwVG9ITWxN3DVVf +tP+obKaO2GFVBu5WSGIKN/XDj+s7JjmFollgdfzaff+Ke+tkF5g60BcJ9Am+xm4 u9/zu/y8IghjsCOJ0IxlzfmptVqejGzk+xbMBr2A+265hW9OyVkCoACpAcVzfvKb scenus/1R1V4qbwdLu+d2cOEhCEHTu0gYDHwx24VeVShyFtpnE3bo7XePQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1qXx5yHsoadVnw4s6ZQAtUT/VaMB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNYTOjQ2 O47vIlCN5xtJ5tv2OdBj5r3/RDwrXwDBKVt8vuBDIzk5QFIkRtwZT8+pX0PJXnWb uTFhuv1Lxg4V2i/zZuxNRlJL4m5eh4cVA84mHYj2uFs8GyyTNoQqyiY3tbiLuezu 4PwXFH923nJ+do9Goiwg18D3lL1B3ZPq9FO92V7a+ARTtfLk7+cZbEvYb0G7nllb es+Y9TJZ1uCp2VDJnKoJKIvX5P+KE+WAEVAgGY1HYIFSqcFaNFYA8DvJub42ceDs CxJGTL1KzK9gIz6cQ0UQ/hmTDaUA+n0MWX3FgkmFIyAKDsMGz6lxAm8pxlbOraxR KtvSAgAWmVQCUw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:08 2025 by rpki-client