This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json) Hash identifier: rbFzA2KUPpk9wLoQwDHUJ5LU1FrCN2+URD0XO0CZ72s= Subject key identifier: DB:C1:15:3D:68:92:CD:56:80:33:58:45:6F:7D:56:05:62:EC:F3:6C Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019AF2E45659376DE9151D47425261822A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft Manifest number: 0910 Signing time: Sat 06 Dec 2025 09:00:41 +0000 Manifest this update: Sat 06 Dec 2025 09:00:41 +0000 Manifest next update: Sun 07 Dec 2025 09:00:41 +0000 Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=) 2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: h3v+rVynLb0CKuZI4XKxMqS+VD2og1FuvJeFagmuxtE=) 3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:56:59:37:6d:e9:15:1d:47:42:52:61:82:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Dec 6 09:00:41 2025 GMT Not After : Dec 7 09:00:41 2025 GMT Subject: CN=dbc1153d6892cd56803358456f7d560562ecf36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:1d:d5:19:49:8b:95:e9:59:66:82:dc:47: 0a:a2:e0:0a:c5:41:54:9d:12:e8:e7:4c:3e:9f:39: 75:70:bc:ad:c7:58:a7:28:3e:15:18:b3:14:43:6b: 32:86:ea:29:68:b2:94:2a:0f:73:a9:68:16:ef:af: c4:00:b4:8e:6f:34:66:f4:63:d9:4f:fa:84:dc:16: c0:cd:f2:bb:80:9c:69:75:69:32:de:9d:fe:29:0f: f4:31:7b:5f:80:65:4b:46:a7:84:2d:42:72:ff:d7: 95:ec:d8:be:f3:9f:ca:8f:fa:4b:bb:d1:bf:ce:69: e9:ae:32:c5:4f:ac:fb:05:05:ec:b3:42:6d:73:35: 4e:2e:54:ad:a6:da:cd:0a:7d:87:c6:22:b8:56:05: 58:63:8d:29:dd:78:f4:2f:21:68:7d:2e:14:9c:91: 9a:8a:56:96:fe:39:ed:49:0e:b1:51:9a:61:ac:d0: 5d:4e:f3:62:07:76:42:f7:1f:b2:5b:31:54:6b:9a: f8:cc:ed:f9:8f:69:de:23:c1:5a:17:b1:96:f7:b6: d5:d8:04:e9:1a:a2:bd:fc:c0:38:0d:0c:59:f9:d8: 70:5a:7a:79:15:70:eb:66:24:05:1d:e7:ac:b3:35: a4:13:ce:57:72:26:9b:34:ea:ff:85:d7:ea:32:86: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C1:15:3D:68:92:CD:56:80:33:58:45:6F:7D:56:05:62:EC:F3:6C X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:85:15:94:df:d9:40:64:1d:75:52:41:b6:60:2e:65:e1:a4: 9f:95:d0:75:93:dc:85:90:87:62:64:a6:b3:14:1d:8c:c1:c8: bf:f5:f4:4f:b3:7b:4b:fb:56:47:6a:8e:22:c9:07:0d:63:8c: 4a:89:80:a4:ef:ba:01:78:bd:63:84:9f:7b:24:fe:b5:26:d4: 16:c2:23:bc:5c:03:66:21:52:df:b8:30:fa:4f:6b:58:f5:20: cb:35:40:fc:ba:0a:9d:07:5f:eb:7c:77:da:76:a6:15:0f:a2: e3:09:cc:f3:0f:2a:72:67:42:71:69:d9:bc:fa:88:b0:86:41: 8a:28:74:52:d2:a5:5b:b9:eb:1c:18:a1:aa:1a:2d:bf:c1:c3: e3:25:02:e7:83:82:e0:78:db:ec:c8:02:74:21:33:39:e6:07: 68:de:3d:b4:0d:ce:b1:2f:ac:94:10:e6:a6:61:6b:4d:ed:0b: ab:da:a1:5c:2b:f9:e3:f5:86:43:ea:cb:8c:8e:4e:c5:f9:bf: 5e:4c:73:5a:36:90:4d:ca:b6:d3:0d:24:52:7d:b3:d4:37:d4: f3:26:a4:4a:96:63:81:d5:f8:03:9a:5b:47:ac:0a:ac:16:21: 78:64:1f:85:9b:97:a5:53:7c:71:3f:d0:37:4e:15:2c:4d:e8: 9d:18:d9:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FZZN23pFR1HQlJhgioAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjUxMjA2MDkwMDQxWhcNMjUxMjA3MDkwMDQxWjAzMTEwLwYDVQQD EyhkYmMxMTUzZDY4OTJjZDU2ODAzMzU4NDU2ZjdkNTYwNTYyZWNmMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLId1RlJi5XpWWaC3EcKouAKxUFU nRLo50w+nzl1cLytx1inKD4VGLMUQ2syhuopaLKUKg9zqWgW76/EALSObzRm9GPZ T/qE3BbAzfK7gJxpdWky3p3+KQ/0MXtfgGVLRqeELUJy/9eV7Ni+85/Kj/pLu9G/ zmnprjLFT6z7BQXss0JtczVOLlStptrNCn2HxiK4VgVYY40p3Xj0LyFofS4UnJGa ilaW/jntSQ6xUZphrNBdTvNiB3ZC9x+yWzFUa5r4zO35j2neI8FaF7GW97bV2ATp GqK9/MA4DQxZ+dhwWnp5FXDrZiQFHeesszWkE85XciabNOr/hdfqMoZpewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvBFT1oks1WgDNYRW99VgVi7PNsMB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoUVlN/Z QGQddVJBtmAuZeGkn5XQdZPchZCHYmSmsxQdjMHIv/X0T7N7S/tWR2qOIskHDWOM SomApO+6AXi9Y4SfeyT+tSbUFsIjvFwDZiFS37gw+k9rWPUgyzVA/LoKnQdf63x3 2namFQ+i4wnM8w8qcmdCcWnZvPqIsIZBiih0UtKlW7nrHBihqhotv8HD4yUC54OC 4Hjb7MgCdCEzOeYHaN49tA3OsS+slBDmpmFrTe0Lq9qhXCv54/WGQ+rLjI5Oxfm/ XkxzWjaQTcq20w0kUn2z1DfU8yakSpZjgdX4A5pbR6wKrBYheGQfhZuXpVN8cT/Q N04VLE3onRjZAw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:03 2025 by rpki-client