This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json) Hash identifier: OsAX+x7Zbalw5G9ZHKhQxY1wN6wDe1nmcf93guAfme4= Subject key identifier: B3:22:32:34:5C:FC:1E:8A:5F:E2:E3:5E:42:A7:D2:B3:5F:08:DA:47 Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6 Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6 Certificate serial: 019AF31CDD96B15446895829516290D58894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft Manifest number: 0853 Signing time: Sat 06 Dec 2025 10:02:26 +0000 Manifest this update: Sat 06 Dec 2025 10:02:26 +0000 Manifest next update: Sun 07 Dec 2025 10:02:26 +0000 Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=) 2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=) 3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: SMrrb6EN0iC55KbAyG3TR3SrR+n9Hp9IQHaUeX7GtvI=) 4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:dd:96:b1:54:46:89:58:29:51:62:90:d5:88:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6 Validity Not Before: Dec 6 10:02:26 2025 GMT Not After : Dec 7 10:02:26 2025 GMT Subject: CN=b32232345cfc1e8a5fe2e35e42a7d2b35f08da47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:d3:ac:2f:1a:c2:c5:bd:ea:14:35:81:73: 69:44:d5:bc:fc:9a:d9:c9:df:73:5b:43:12:e8:24: d9:ae:bc:3c:55:89:19:ab:be:61:1e:e4:b4:da:18: 63:47:9c:8d:8b:54:ec:36:b6:53:c7:dd:3c:e8:0b: c2:77:9e:58:01:9f:38:35:97:8b:84:7d:82:7d:47: 3c:d7:8b:1f:95:9c:4b:0d:82:00:0f:6c:e1:ab:69: 57:87:92:5f:75:54:cc:3a:36:ec:c7:8c:33:32:26: 21:a5:ad:03:51:af:c9:43:dd:20:10:4f:cc:c9:1d: c3:ec:8c:1a:12:97:7d:f3:fd:6c:b6:9d:9d:51:3f: 7f:01:ac:28:04:15:48:8e:4b:c1:ee:7a:da:75:03: 28:66:7c:9b:28:df:38:40:96:65:71:d0:55:21:b1: b3:13:a6:c6:86:d2:2b:e9:19:56:92:80:b3:95:a9: 50:fb:40:cf:35:0d:19:74:32:7e:cb:02:1d:51:68: ee:2a:1c:d9:d3:81:32:3e:3a:44:0d:23:db:e1:ce: 45:2f:4c:86:e0:1e:6d:f1:03:94:aa:4e:53:cf:33: 90:b6:01:7c:4c:37:64:5b:d6:52:49:4b:e3:14:f8: a7:37:cb:c7:94:f3:7a:75:6f:70:6c:52:b7:a9:d4: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:22:32:34:5C:FC:1E:8A:5F:E2:E3:5E:42:A7:D2:B3:5F:08:DA:47 X509v3 Authority Key Identifier: keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:73:a6:5c:28:8e:89:10:13:4a:99:23:b6:88:eb:fd:ce:74: db:c4:bf:f2:74:ee:af:aa:a6:2e:f9:92:ca:f1:82:cb:e9:d4: 70:90:4b:96:9c:c1:94:70:b7:f7:24:f8:52:af:1b:a4:32:a9: 3c:3a:a6:84:0e:35:42:04:1d:f5:3f:7a:ba:8c:86:f2:71:b0: ac:e4:85:13:f5:63:f1:92:f1:54:42:f2:f3:14:8b:89:b6:87: d5:26:20:6b:9b:3b:74:de:b0:47:47:2b:2a:09:33:1f:59:55: 43:2f:fb:5e:64:33:95:1d:f9:15:a4:13:f3:47:de:54:27:a9: 1e:1b:50:bc:a5:20:cf:e0:0e:50:d0:ff:5d:75:8e:6d:bd:e0: 39:0e:e9:51:f7:55:59:e2:9d:0c:45:85:8e:53:80:f6:a4:a9: af:8f:9b:ee:c9:d0:ff:c3:21:e9:40:30:b5:a8:63:aa:c6:6e: 9e:c3:54:cd:74:61:69:ea:31:3d:67:ee:49:f2:38:41:ce:fd: 81:5d:f8:8b:82:0c:00:9b:c2:23:23:05:93:9e:2e:84:13:d9: 85:f6:fd:fc:9d:b3:ab:bc:e4:2c:68:22:cf:1a:d2:bf:ea:f1: cf:dd:ef:f5:50:0d:7c:b2:07:07:7f:9a:58:67:bd:5a:46:55: ef:f1:9c:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHN2WsVRGiVgpUWKQ1YiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMWJhNmUxNGQ4M2E4YjE0YjA1MDI2ZTcxMGM4NmM0NmI3 M2MzYTYwHhcNMjUxMjA2MTAwMjI2WhcNMjUxMjA3MTAwMjI2WjAzMTEwLwYDVQQD EyhiMzIyMzIzNDVjZmMxZThhNWZlMmUzNWU0MmE3ZDJiMzVmMDhkYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2PTrC8awsW96hQ1gXNpRNW8/JrZ yd9zW0MS6CTZrrw8VYkZq75hHuS02hhjR5yNi1TsNrZTx9086AvCd55YAZ84NZeL hH2CfUc814sflZxLDYIAD2zhq2lXh5JfdVTMOjbsx4wzMiYhpa0DUa/JQ90gEE/M yR3D7IwaEpd98/1stp2dUT9/AawoBBVIjkvB7nradQMoZnybKN84QJZlcdBVIbGz E6bGhtIr6RlWkoCzlalQ+0DPNQ0ZdDJ+ywIdUWjuKhzZ04EyPjpEDSPb4c5FL0yG 4B5t8QOUqk5TzzOQtgF8TDdkW9ZSSUvjFPinN8vHlPN6dW9wbFK3qdTnMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMiMjRc/B6KX+LjXkKn0rNfCNpHMB8GA1UdIwQY MBaAFG8bpuFNg6ixSwUCbnEMhsRrc8OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmIt ZGFlOWZiOGJmMGIxLzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmItZGFlOWZiOGJmMGIx LzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3OmXCiO iRATSpkjtojr/c5028S/8nTur6qmLvmSyvGCy+nUcJBLlpzBlHC39yT4Uq8bpDKp PDqmhA41QgQd9T96uoyG8nGwrOSFE/Vj8ZLxVELy8xSLibaH1SYga5s7dN6wR0cr KgkzH1lVQy/7XmQzlR35FaQT80feVCepHhtQvKUgz+AOUND/XXWObb3gOQ7pUfdV WeKdDEWFjlOA9qSpr4+b7snQ/8Mh6UAwtahjqsZunsNUzXRhaeoxPWfuSfI4Qc79 gV34i4IMAJvCIyMFk54uhBPZhfb9/J2zq7zkLGgizxrSv+rxz93v9VANfLIHB3+a WGe9WkZV7/GcLw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:36 2025 by rpki-client