This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json) Hash identifier: ukPST4NOgxpYY1ZpcFbY/dGEFoh9r+TWAo4n8RieuwM= Subject key identifier: 8C:8F:11:EA:B0:5A:30:54:62:50:60:DA:13:BA:5E:35:AC:F5:44:09 Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Certificate serial: 019AF1D25A872468910686521345DA231377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft Manifest number: 0AE5 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (hash: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=) 2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: +ty9fyee8inQyluyykXY8Er8hTxvqaP5GkM7DaJLZtM=) 3: f1Yqi8lvwcIpnbg2hTJqBii1euQ.roa (hash: thrb8BU441zB2iuhJJ9dbE9Q7lmEZNGWAp0dWfYSQoY=) 4: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (hash: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5a:87:24:68:91:06:86:52:13:45:da:23:13:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=8c8f11eab05a3054625060da13ba5e35acf54409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:27:0a:bd:d1:36:ac:ba:b8:3c:ff:d1:3b: a8:a6:9d:8b:8c:42:3c:19:66:10:fb:d0:2d:c6:fa: 75:7c:8b:05:d1:d4:cb:ad:ad:00:b0:22:9f:1b:02: 85:02:8b:50:36:4c:d4:06:9f:c4:c2:4d:20:0d:9b: a2:65:d1:12:c2:c6:76:fa:ee:e0:97:62:f9:04:9f: 93:81:0e:b6:d3:7b:cd:48:94:af:77:be:4a:91:41: 1b:ab:33:67:67:35:68:4d:17:5c:f2:69:3c:08:76: 67:49:55:82:11:2c:5c:2b:40:21:e7:21:5b:88:2a: 8d:a2:68:ac:80:1a:67:24:c1:dc:a9:7a:9d:e9:ef: c2:16:db:3d:18:ad:70:77:c2:a7:12:ad:db:8b:e3: fc:b1:a3:ea:1f:e4:da:1e:c6:2e:b3:a4:5f:77:4b: ee:1f:8f:96:39:fb:61:3d:a7:cf:52:9f:a6:86:e0: 98:b5:29:bd:48:28:f9:6e:2e:ed:12:1f:2e:26:b1: 1f:7f:fe:b9:25:5f:97:e7:16:71:43:5c:a5:d3:5b: b7:c5:b8:56:a9:4d:8d:f8:6a:4a:3d:85:4e:31:3a: 9a:b7:6b:f4:70:ed:91:d3:d8:2c:b6:f4:55:3d:6f: a5:81:99:d0:72:04:15:f3:f2:34:e3:a8:e4:ee:79: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:11:EA:B0:5A:30:54:62:50:60:DA:13:BA:5E:35:AC:F5:44:09 X509v3 Authority Key Identifier: keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d7:ca:9e:fa:09:15:df:0e:c0:5b:2d:dd:2f:a6:61:7d:8d: e0:40:3c:dd:14:14:21:01:2e:b3:57:28:40:f4:3d:b4:ed:19: 8c:dc:a1:dc:50:d4:3c:82:f1:a7:49:b1:d6:5c:f8:f8:6c:93: 51:07:72:1e:6c:86:80:18:3a:8c:58:3e:cd:75:7f:25:47:c6: d6:30:21:b0:7f:43:d5:5c:10:64:6f:e4:87:d2:91:62:c9:00: e3:17:ff:69:6e:d7:9e:22:a7:f8:80:49:a2:06:2c:b4:b5:d6: 5e:24:0b:97:ad:9c:c0:6b:7b:84:3c:50:e2:fa:30:96:59:01: dd:85:05:ce:8b:51:d2:89:07:f6:10:c0:fb:96:a5:06:df:eb: 01:ab:96:89:02:00:b1:b8:c1:a5:aa:f9:01:e3:1d:e5:d0:21: bc:72:d0:27:d0:e2:1c:49:7b:9d:8c:54:7d:8b:2a:09:a8:ce: 24:be:0f:83:a8:8c:b9:5d:d2:68:f7:bd:f3:37:5e:8c:81:24: 75:4c:ce:37:c4:45:eb:9e:8b:7a:c8:91:b8:c9:db:11:00:79: 5c:43:f6:50:62:e4:99:24:09:ab:4e:a6:29:14:2b:b4:aa:12: 6c:7b:69:93:b5:c2:c3:50:0a:ce:d5:1f:30:15:fc:5b:cf:63: 9f:53:12:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lqHJGiRBoZSE0XaIxN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My MzgxZTIwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg4YzhmMTFlYWIwNWEzMDU0NjI1MDYwZGExM2JhNWUzNWFjZjU0NDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrEnCr3RNqy6uDz/0Tuopp2LjEI8 GWYQ+9Atxvp1fIsF0dTLra0AsCKfGwKFAotQNkzUBp/Ewk0gDZuiZdESwsZ2+u7g l2L5BJ+TgQ6203vNSJSvd75KkUEbqzNnZzVoTRdc8mk8CHZnSVWCESxcK0Ah5yFb iCqNomisgBpnJMHcqXqd6e/CFts9GK1wd8KnEq3bi+P8saPqH+TaHsYus6Rfd0vu H4+WOfthPafPUp+mhuCYtSm9SCj5bi7tEh8uJrEff/65JV+X5xZxQ1yl01u3xbhW qU2N+GpKPYVOMTqat2v0cO2R09gstvRVPW+lgZnQcgQV8/I046jk7nmPRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyPEeqwWjBUYlBg2hO6XjWs9UQJMB8GA1UdIwQY MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9fKnvoJ Fd8OwFst3S+mYX2N4EA83RQUIQEus1coQPQ9tO0ZjNyh3FDUPILxp0mx1lz4+GyT UQdyHmyGgBg6jFg+zXV/JUfG1jAhsH9D1VwQZG/kh9KRYskA4xf/aW7XniKn+IBJ ogYstLXWXiQLl62cwGt7hDxQ4vowllkB3YUFzotR0okH9hDA+5alBt/rAauWiQIA sbjBpar5AeMd5dAhvHLQJ9DiHEl7nYxUfYsqCajOJL4Pg6iMuV3SaPe98zdejIEk dUzON8RF656LesiRuMnbEQB5XEP2UGLkmSQJq06mKRQrtKoSbHtpk7XCw1AKztUf MBX8W89jn1MStg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:55 2025 by rpki-client