This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json) Hash identifier: R1wJmxUX+2ZYF6Y+nx/DlzAxKtPkcBQxNBkmJY9McJc= Subject key identifier: 1A:C0:B5:8E:C1:83:37:29:18:D8:F1:01:3D:2D:DB:A7:AF:8A:FD:00 Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Certificate serial: 019AF1D1982FD484E4E18ABDCAC3D7D54E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft Manifest number: 0A39 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=) 2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: VWQlrBUVjeXof1t4rgrhzY+2k7NXLPLGtRXYn4KM7VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:98:2f:d4:84:e4:e1:8a:bd:ca:c3:d7:d5:4e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=1ac0b58ec183372918d8f1013d2ddba7af8afd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:f4:02:e0:db:c5:7c:ef:11:dd:51:06:e0: 1e:65:35:13:2c:44:11:f4:86:ad:87:b3:a0:1f:5c: b6:3a:bb:0b:15:83:d2:a0:22:6e:cf:a9:c1:69:92: 39:c8:db:1b:f6:65:2d:8d:57:6d:33:b3:2c:34:37: ac:97:04:ee:7a:7a:23:77:42:f0:b0:cd:f8:ef:ab: da:2a:7d:cb:5e:bd:0a:9c:4a:85:8d:f2:98:19:7d: 36:60:ea:a4:39:9f:38:0b:63:1c:6b:3b:85:76:d3: ce:11:12:f7:54:cb:87:90:a4:e3:9e:75:c8:d7:c4: fe:c2:27:dc:0a:aa:0f:ba:b4:4d:9d:47:5f:9a:12: cc:a0:47:4a:d9:60:75:18:ea:19:9c:62:85:c3:21: 0a:33:94:5f:97:2b:29:08:a7:df:e4:81:31:f4:ff: f1:e7:51:b7:95:cc:e8:15:f4:80:60:ec:7a:61:5f: b9:4c:aa:04:40:94:2a:3f:f9:a0:4a:cc:09:ca:c3: 52:dd:53:b5:c7:2e:d7:7d:b4:c7:4f:f9:6e:5e:ce: 7b:12:bc:d0:ea:57:9f:61:8d:eb:36:7a:af:84:ef: 3a:f6:46:94:4b:de:72:e8:d8:d7:6a:ad:4c:8a:31: 64:d8:d0:e0:29:13:1d:7f:ed:15:34:98:30:8c:f4: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:B5:8E:C1:83:37:29:18:D8:F1:01:3D:2D:DB:A7:AF:8A:FD:00 X509v3 Authority Key Identifier: keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:37:98:42:1f:e5:1f:e0:93:e8:6d:46:81:f3:84:26:86:6b: 86:40:e9:a7:f2:5b:9c:33:74:ff:15:cc:fc:2e:e0:e6:49:61: 1a:9d:93:ce:e6:aa:a6:5e:f2:72:a0:c3:97:f2:3a:6b:73:30: 1a:43:fd:c1:46:c1:2c:f2:2b:29:e4:bf:e6:9b:09:61:f3:25: b3:73:18:b9:9a:fb:f9:b5:2b:7a:8e:74:aa:41:9e:40:95:43: 90:ca:50:e8:76:b1:54:c6:bb:69:e1:e3:08:3b:c0:fc:a5:cb: 10:67:11:8a:85:82:e1:84:d5:3f:b6:1e:3c:d4:21:15:03:fb: 7b:35:e9:42:d8:ba:60:8b:55:c1:21:29:e4:65:79:7e:c5:f3: 2d:c5:54:3f:36:b6:0e:f2:24:6c:c9:ef:0d:31:3d:99:8b:d7: 03:85:be:eb:3b:54:f3:67:77:df:89:1d:92:39:df:61:7a:23: bb:00:36:97:26:50:95:d0:e8:0f:60:d6:ba:0b:dd:24:ae:bc: 43:09:fc:b9:54:3c:cf:9b:56:27:c1:9f:fc:c1:f9:37:28:3c: 29:02:90:b5:08:9d:d0:b4:4e:ef:1a:5b:09:10:2f:d9:18:7c: 75:13:ad:24:5f:53:4b:9d:7f:5f:34:4e:dd:f8:bd:9a:2e:6b: cb:23:d1:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zgv1ITk4Yq9ysPX1U4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzFmYWMyNGUzMGQ5MjU4ZWIyZWY3MmYzMWVkOWJkNjA4 ZmUwZGUwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EygxYWMwYjU4ZWMxODMzNzI5MThkOGYxMDEzZDJkZGJhN2FmOGFmZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZH0AuDbxXzvEd1RBuAeZTUTLEQR 9Iath7OgH1y2OrsLFYPSoCJuz6nBaZI5yNsb9mUtjVdtM7MsNDeslwTuenojd0Lw sM3476vaKn3LXr0KnEqFjfKYGX02YOqkOZ84C2McazuFdtPOERL3VMuHkKTjnnXI 18T+wifcCqoPurRNnUdfmhLMoEdK2WB1GOoZnGKFwyEKM5RflyspCKff5IEx9P/x 51G3lczoFfSAYOx6YV+5TKoEQJQqP/mgSswJysNS3VO1xy7XfbTHT/luXs57ErzQ 6lefYY3rNnqvhO869kaUS95y6NjXaq1MijFk2NDgKRMdf+0VNJgwjPRNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrAtY7BgzcpGNjxAT0t26eviv0AMB8GA1UdIwQY MBaAFAbB+sJOMNkljrLvcvMe2b1gj+DeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDIt MzQ2YTNjY2U1ZjA5LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDItMzQ2YTNjY2U1ZjA5 LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjeYQh/l H+CT6G1GgfOEJoZrhkDpp/JbnDN0/xXM/C7g5klhGp2Tzuaqpl7ycqDDl/I6a3Mw GkP9wUbBLPIrKeS/5psJYfMls3MYuZr7+bUreo50qkGeQJVDkMpQ6HaxVMa7aeHj CDvA/KXLEGcRioWC4YTVP7YePNQhFQP7ezXpQti6YItVwSEp5GV5fsXzLcVUPza2 DvIkbMnvDTE9mYvXA4W+6ztU82d334kdkjnfYXojuwA2lyZQldDoD2DWugvdJK68 Qwn8uVQ8z5tWJ8Gf/MH5Nyg8KQKQtQid0LRO7xpbCRAv2Rh8dROtJF9TS51/XzRO 3fi9mi5ryyPRrA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:54 2025 by rpki-client