This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json) Hash identifier: nxHLe7BXlVLhG/QKMemsBznGvSOSdUWdOmi9PpPMNLI= Subject key identifier: EA:42:BC:64:B3:FA:DB:60:EF:E1:FD:CC:8E:81:F2:25:2E:08:1E:6D Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Certificate serial: 019B4438755981EC32399E3C2BDAA2194D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft Manifest number: 12E6 Signing time: Mon 22 Dec 2025 04:01:49 +0000 Manifest this update: Mon 22 Dec 2025 04:01:49 +0000 Manifest next update: Tue 23 Dec 2025 04:01:49 +0000 Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: 6E5raOUefzjr3zH//mnx6BOCmN/vZeizv4hkov2uzgQ=) 2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:75:59:81:ec:32:39:9e:3c:2b:da:a2:19:4d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Validity Not Before: Dec 22 04:01:49 2025 GMT Not After : Dec 23 04:01:49 2025 GMT Subject: CN=ea42bc64b3fadb60efe1fdcc8e81f2252e081e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:1a:64:3c:a9:3a:f6:3e:53:9e:c9:7b:51: 18:43:a5:f3:06:36:2c:37:b2:18:15:e0:08:20:9d: 3a:cc:1a:50:af:6d:d7:cf:00:99:91:0b:30:13:0e: 51:44:7d:bc:ec:74:8c:ed:0e:97:f9:0a:51:07:3d: 27:e7:21:26:1b:59:46:e6:09:7a:1f:87:88:44:3f: 11:9a:22:3a:c3:d9:b0:1e:d5:f5:27:95:22:e0:c3: e2:2b:e4:e3:4d:a1:51:01:55:b3:48:51:d7:de:ce: 13:34:b8:b1:2a:2c:cc:43:11:78:aa:dc:83:0f:d9: bf:bd:7f:5c:e7:ca:11:be:6b:ce:80:e1:1e:e0:66: dd:99:11:71:59:1c:d3:1f:c9:61:65:1d:b7:4f:e3: 50:75:1d:48:b2:a9:ed:60:29:3a:85:b8:33:86:65: 77:09:a2:f8:4e:0d:23:9c:b0:8f:aa:8a:c8:6c:36: ef:77:1c:cb:4a:46:02:62:ac:34:e4:25:aa:23:85: 74:ab:f1:07:13:97:68:58:ad:ee:1b:40:6a:bc:37: 33:af:c0:79:09:5e:d9:1e:c8:66:96:11:94:c1:68: 1e:f6:9b:46:bb:ac:09:03:86:68:11:a6:85:00:0c: 2b:4d:be:68:a6:8f:5e:73:35:f1:03:1b:b1:54:88: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:BC:64:B3:FA:DB:60:EF:E1:FD:CC:8E:81:F2:25:2E:08:1E:6D X509v3 Authority Key Identifier: keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a0:5b:56:5b:f1:b6:0a:56:75:e0:41:30:d0:fe:47:a9:d1: 49:e4:8f:0b:1f:0f:34:f3:59:99:11:cd:5b:eb:2e:b5:98:bd: e1:3a:8e:5f:bf:17:73:66:d4:2b:c1:2a:40:0d:ea:20:d5:52: 0d:88:00:58:a3:0d:24:20:13:b7:67:dc:e5:48:67:26:fc:a0: 53:18:db:78:66:ff:18:f7:7d:37:00:b4:2d:9f:4f:c3:bc:4a: fe:25:13:e3:5e:4c:45:e1:8e:c3:24:ce:b2:fe:c9:83:93:eb: 90:7a:35:d2:4a:b2:b4:76:65:2a:4a:13:11:b4:3f:16:3a:84: d0:a8:c8:d2:87:92:fc:d6:2f:da:14:0c:d7:5f:42:db:11:a5: 34:2c:77:72:03:97:6a:87:f3:46:c0:d6:04:81:e5:90:08:e0: 9a:a9:d1:8c:81:ab:dd:db:b3:88:00:46:a9:9b:38:48:01:6c: 03:37:35:5a:4a:4b:c9:2e:0c:db:32:28:5b:3d:25:8a:0b:f0: 99:e0:fb:a1:0e:49:2a:81:1d:53:b0:0e:61:cf:96:fd:f0:6b: d1:cb:16:1b:7f:13:05:95:33:b3:cc:b3:ad:f7:b0:0b:52:6b: b2:e6:35:c9:f4:1a:eb:d1:67:d6:2a:e2:c9:f0:1a:4a:6c:a1: d5:83:7e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOHVZgewyOZ48K9qiGU1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4 NTRmOWMwHhcNMjUxMjIyMDQwMTQ5WhcNMjUxMjIzMDQwMTQ5WjAzMTEwLwYDVQQD EyhlYTQyYmM2NGIzZmFkYjYwZWZlMWZkY2M4ZTgxZjIyNTJlMDgxZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgwaZDypOvY+U57Je1EYQ6XzBjYs N7IYFeAIIJ06zBpQr23XzwCZkQswEw5RRH287HSM7Q6X+QpRBz0n5yEmG1lG5gl6 H4eIRD8RmiI6w9mwHtX1J5Ui4MPiK+TjTaFRAVWzSFHX3s4TNLixKizMQxF4qtyD D9m/vX9c58oRvmvOgOEe4GbdmRFxWRzTH8lhZR23T+NQdR1IsqntYCk6hbgzhmV3 CaL4Tg0jnLCPqorIbDbvdxzLSkYCYqw05CWqI4V0q/EHE5doWK3uG0BqvDczr8B5 CV7ZHshmlhGUwWge9ptGu6wJA4ZoEaaFAAwrTb5opo9eczXxAxuxVIiW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpCvGSz+ttg7+H9zI6B8iUuCB5tMB8GA1UdIwQY MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5 LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKBbVlvx tgpWdeBBMND+R6nRSeSPCx8PNPNZmRHNW+sutZi94TqOX78Xc2bUK8EqQA3qINVS DYgAWKMNJCATt2fc5UhnJvygUxjbeGb/GPd9NwC0LZ9Pw7xK/iUT415MReGOwyTO sv7Jg5PrkHo10kqytHZlKkoTEbQ/FjqE0KjI0oeS/NYv2hQM119C2xGlNCx3cgOX aofzRsDWBIHlkAjgmqnRjIGr3duziABGqZs4SAFsAzc1WkpLyS4M2zIoWz0ligvw meD7oQ5JKoEdU7AOYc+W/fBr0csWG38TBZUzs8yzrfewC1JrsuY1yfQa69Fn1iri yfAaSmyh1YN+Gg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:33 2025 by rpki-client