This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json) Hash identifier: QW1Q87uuRwgIj2y4sqAGUXqzjU9Z3bBHgHpqVVcGpPE= Subject key identifier: 0D:44:61:21:0A:21:2C:D1:BE:AC:53:6F:EC:69:3E:6A:BC:30:56:60 Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019B2EC2174481DB085348651BA291161A5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft Manifest number: 092F Signing time: Thu 18 Dec 2025 00:00:30 +0000 Manifest this update: Thu 18 Dec 2025 00:00:30 +0000 Manifest next update: Fri 19 Dec 2025 00:00:30 +0000 Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=) 2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: Z6CEfprjXJflBYRdOGHww2T3PzdgWYdxeeg28k1sP0U=) 3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:17:44:81:db:08:53:48:65:1b:a2:91:16:1a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Dec 18 00:00:30 2025 GMT Not After : Dec 19 00:00:30 2025 GMT Subject: CN=0d4461210a212cd1beac536fec693e6abc305660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:73:81:0c:b5:dd:10:f0:8e:d7:92:1c:b9: d2:f9:72:cb:ae:bd:bf:33:df:a6:0a:5f:7d:94:e6: 8b:4c:43:59:57:0d:36:96:5f:38:cd:0a:a1:da:9c: df:89:fa:ac:a4:2c:e2:79:ba:d3:fd:1f:4d:81:9c: 7c:3c:da:44:ea:ae:e4:1b:a3:35:80:62:24:a2:fe: e1:7b:84:d4:56:29:01:71:c2:89:9e:6d:6e:1d:6b: 51:a7:57:b9:93:de:10:25:5a:58:c4:27:36:63:e5: 82:21:f2:7f:a0:21:ae:a3:e6:d4:fe:33:78:e8:76: b4:dc:c1:cb:63:d5:47:ec:ee:2a:27:16:58:30:d1: 17:e1:74:ca:ea:ea:3c:87:ba:d0:62:76:71:13:2a: b6:a5:61:df:29:f7:4a:c4:86:88:e9:56:c4:49:af: 0a:22:30:fb:a4:e7:ec:14:8f:c1:8e:c2:69:03:45: 09:93:25:57:50:5b:10:f5:03:da:82:a7:52:51:81: 93:c4:8f:4d:94:1d:dc:d8:60:22:31:df:3c:0f:9e: 27:53:a1:87:d3:45:35:99:43:8c:00:1e:f8:80:72: 99:5c:f0:61:25:13:63:56:0f:98:22:98:a3:54:1f: c4:91:cc:89:1f:7e:ee:5a:05:bd:2f:eb:86:f7:c6: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:44:61:21:0A:21:2C:D1:BE:AC:53:6F:EC:69:3E:6A:BC:30:56:60 X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ab:18:2e:4c:00:f1:9e:be:7c:9b:76:bf:1d:d1:8c:e1:8b: 46:c9:ab:bf:01:05:24:d9:7d:5a:93:77:5e:48:c5:2d:0b:b7: ca:c7:95:e3:29:c4:24:9a:d1:ea:f6:1d:58:41:b1:09:6a:60: 8f:ca:10:d0:de:02:21:d2:56:31:7a:29:ea:df:9f:e8:73:db: f2:9b:e4:a9:a0:83:40:04:86:7d:ef:23:75:55:71:66:48:5c: b3:36:60:22:5c:78:75:f6:08:35:db:25:6f:43:72:b4:54:af: ba:12:15:24:25:d8:01:6c:9a:c8:bf:5b:6b:e1:00:2e:1b:8d: 73:9a:c4:26:d0:36:1d:03:ed:c5:bf:2b:14:85:0a:c9:96:6b: 8f:b4:16:7f:c8:d0:17:91:1b:10:5c:b4:39:7b:8e:06:91:9b: f6:0c:70:c8:11:d0:c0:2c:31:d2:d0:23:cd:1e:d7:4c:d0:a1: a8:ca:da:d6:9b:72:47:d2:76:a7:4c:cb:36:d3:58:3c:be:4b: 06:c7:e2:dd:71:c6:bf:eb:84:37:3b:7f:17:b8:a5:e4:d9:5b: 71:4d:02:66:34:1f:aa:3b:8e:a7:ac:54:bc:e0:e2:78:55:49: 1f:50:de:c2:13:8d:87:61:b0:46:fd:9b:a5:21:0e:3d:09:a3: ea:82:06:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwhdEgdsIU0hlG6KRFhpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjUxMjE4MDAwMDMwWhcNMjUxMjE5MDAwMDMwWjAzMTEwLwYDVQQD EygwZDQ0NjEyMTBhMjEyY2QxYmVhYzUzNmZlYzY5M2U2YWJjMzA1NjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTVzgQy13RDwjteSHLnS+XLLrr2/ M9+mCl99lOaLTENZVw02ll84zQqh2pzfifqspCziebrT/R9NgZx8PNpE6q7kG6M1 gGIkov7he4TUVikBccKJnm1uHWtRp1e5k94QJVpYxCc2Y+WCIfJ/oCGuo+bU/jN4 6Ha03MHLY9VH7O4qJxZYMNEX4XTK6uo8h7rQYnZxEyq2pWHfKfdKxIaI6VbESa8K IjD7pOfsFI/BjsJpA0UJkyVXUFsQ9QPagqdSUYGTxI9NlB3c2GAiMd88D54nU6GH 00U1mUOMAB74gHKZXPBhJRNjVg+YIpijVB/EkcyJH37uWgW9L+uG98aQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1EYSEKISzRvqxTb+xpPmq8MFZgMB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwasYLkwA 8Z6+fJt2vx3RjOGLRsmrvwEFJNl9WpN3XkjFLQu3yseV4ynEJJrR6vYdWEGxCWpg j8oQ0N4CIdJWMXop6t+f6HPb8pvkqaCDQASGfe8jdVVxZkhcszZgIlx4dfYINdsl b0NytFSvuhIVJCXYAWyayL9ba+EALhuNc5rEJtA2HQPtxb8rFIUKyZZrj7QWf8jQ F5EbEFy0OXuOBpGb9gxwyBHQwCwx0tAjzR7XTNChqMra1ptyR9J2p0zLNtNYPL5L Bsfi3XHGv+uENzt/F7il5NlbcU0CZjQfqjuOp6xUvODieFVJH1DewhONh2GwRv2b pSEOPQmj6oIGyA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:05 2025 by rpki-client