This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json) Hash identifier: fWlqXym0lFbiYZEhzmc4E36J14oGK5kGtFGMpdYW4o8= Subject key identifier: 5D:B9:21:92:5B:1E:F9:C3:10:FD:FE:3B:10:A7:6C:23:75:2C:ED:B3 Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Certificate serial: 019AF31C57B14214524A569C0BBC43DB4CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft Manifest number: 0ED4 Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=) 2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: NhTJCYzTUE0j9spIYk/4L6RGCEuzFyH+LCX8FBiQ8bI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:57:b1:42:14:52:4a:56:9c:0b:bc:43:db:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=5db921925b1ef9c310fdfe3b10a76c23752cedb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:4f:a4:14:16:89:2c:53:5d:5d:3e:f6:69: 83:fb:3f:9e:19:7a:a5:ea:2e:34:02:ad:87:95:33: cf:7a:83:df:93:f6:e4:a1:36:58:4a:7c:b3:32:a5: 35:37:ce:ef:5d:33:dd:44:2d:55:24:24:fa:d5:5f: b3:e8:79:f1:cd:08:95:74:d0:13:17:2a:cb:6f:26: 92:2f:05:ac:f5:dc:d6:90:18:ad:66:2f:35:48:b1: d1:11:61:fe:c5:9f:c2:60:90:12:ad:66:ab:41:c8: a0:a8:1e:5a:87:59:8a:17:d8:1f:57:f6:2c:0c:4d: 00:b9:8b:c5:8e:a3:fc:18:59:1d:3b:24:aa:06:7e: c6:67:07:9b:c4:83:5c:76:38:3c:b9:7a:40:5a:29: cc:eb:29:4b:7c:80:8d:1a:0e:3d:ab:f7:42:cb:95: 9a:c5:cc:ab:8b:9d:34:aa:cb:fc:ec:85:1f:c0:39: d3:51:c5:7b:f3:52:03:07:83:4e:87:57:7e:84:05: 6b:41:37:e2:0e:a1:33:cd:94:5b:52:3a:30:78:82: 02:bf:fe:e7:b6:15:36:3a:f8:db:42:0c:b1:ee:1b: a3:24:17:6a:f1:21:25:b0:23:3f:b1:7e:82:a6:13: a7:70:ba:01:7f:5d:03:ce:45:f9:33:9b:e6:05:17: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B9:21:92:5B:1E:F9:C3:10:FD:FE:3B:10:A7:6C:23:75:2C:ED:B3 X509v3 Authority Key Identifier: keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:08:89:b1:da:22:23:dc:32:40:25:c2:2e:ce:bc:bd:67:a5: dd:a5:62:38:83:72:60:52:1f:f1:d5:d5:87:d2:1a:35:4e:c6: c0:d5:ed:74:4c:7e:8f:71:5b:fe:51:60:0f:d4:8b:97:be:28: a9:bf:ef:4a:8f:48:5f:9d:52:02:40:26:9f:02:46:45:3a:c1: 65:ec:0c:74:df:88:10:c9:23:30:00:5e:5b:e9:b2:f7:06:ed: a1:42:70:ae:6e:53:ae:cd:f5:f9:f7:cc:9e:4f:c1:ff:ab:7b: 3d:a0:d2:8f:2e:ad:30:3c:27:ca:75:61:9b:d2:49:2c:1c:92: e0:9a:d4:47:49:71:69:5f:eb:fe:eb:17:65:32:24:d2:fa:e1: b9:8e:b2:ef:99:c6:30:b1:1c:a0:d0:a4:64:f6:36:55:02:1b: 3c:00:a7:41:83:3a:92:8e:ea:98:e4:87:5f:a2:7b:48:25:c3: 0f:5c:98:a6:04:ca:29:aa:8a:29:0b:3f:1b:6e:18:81:5b:cc: 9f:e0:f4:d4:fe:3e:46:c2:30:89:d2:64:d0:02:ca:c2:11:26: 79:ee:4a:a3:7c:20:65:ec:eb:1d:4c:68:fa:3a:a1:c5:3d:e1: 38:71:06:1a:ae:2e:21:7a:82:9e:69:56:de:6c:cf:ca:22:84: 27:6b:18:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFexQhRSSlacC7xD20zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw YTdmNmUwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD Eyg1ZGI5MjE5MjViMWVmOWMzMTBmZGZlM2IxMGE3NmMyMzc1MmNlZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyZPpBQWiSxTXV0+9mmD+z+eGXql 6i40Aq2HlTPPeoPfk/bkoTZYSnyzMqU1N87vXTPdRC1VJCT61V+z6HnxzQiVdNAT FyrLbyaSLwWs9dzWkBitZi81SLHREWH+xZ/CYJASrWarQcigqB5ah1mKF9gfV/Ys DE0AuYvFjqP8GFkdOySqBn7GZwebxINcdjg8uXpAWinM6ylLfICNGg49q/dCy5Wa xcyri500qsv87IUfwDnTUcV781IDB4NOh1d+hAVrQTfiDqEzzZRbUjoweIICv/7n thU2OvjbQgyx7hujJBdq8SElsCM/sX6CphOncLoBf10DzkX5M5vmBRcBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF25IZJbHvnDEP3+OxCnbCN1LO2zMB8GA1UdIwQY MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQiJsdoi I9wyQCXCLs68vWel3aViOINyYFIf8dXVh9IaNU7GwNXtdEx+j3Fb/lFgD9SLl74o qb/vSo9IX51SAkAmnwJGRTrBZewMdN+IEMkjMABeW+my9wbtoUJwrm5Trs31+ffM nk/B/6t7PaDSjy6tMDwnynVhm9JJLByS4JrUR0lxaV/r/usXZTIk0vrhuY6y75nG MLEcoNCkZPY2VQIbPACnQYM6ko7qmOSHX6J7SCXDD1yYpgTKKaqKKQs/G24YgVvM n+D01P4+RsIwidJk0ALKwhEmee5Ko3wgZezrHUxo+jqhxT3hOHEGGq4uIXqCnmlW 3mzPyiKEJ2sY5w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:04 2025 by rpki-client