This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json) Hash identifier: rAboRH53n9/21v6YsaPMsMqZGhstWNJtIyQ/51fYxc4= Subject key identifier: AD:A8:B4:01:F1:33:53:AE:A2:39:E2:DC:5B:63:FE:74:5F:1F:55:25 Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Certificate serial: 019AF23FD1A1C29647E0E2FF609285BAB84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft Manifest number: 08CA Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=) 2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: DSyKUhNqLXbGwj6+HjqPpevkxohPTFO/BgAg2dYkK2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d1:a1:c2:96:47:e0:e2:ff:60:92:85:ba:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=ada8b401f13353aea239e2dc5b63fe745f1f5525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:ce:b2:31:c4:61:3a:8f:52:95:e0:66:16: db:83:35:7a:d6:3b:7b:c6:ae:b1:91:4d:04:7f:81: 9c:bc:4a:da:bc:20:fe:04:61:56:f8:dc:dd:5c:96: 12:ff:c8:fb:d1:4e:92:48:28:4f:12:1a:6d:dc:bb: 70:34:9f:2b:8e:c7:cd:b8:53:dd:0c:47:43:24:9e: 68:ec:2e:f4:a6:cf:1b:09:55:cc:0f:23:7e:00:2d: 92:cc:74:9c:13:5c:5f:1e:00:ab:85:1d:ec:d1:6a: 3b:49:31:4b:46:10:67:27:3c:2c:ef:81:a5:50:18: 94:c9:62:e7:b6:ab:f3:22:e8:c3:fe:b1:5c:d4:92: 46:05:e2:46:e7:fa:3c:d2:a1:cd:e1:45:83:f3:f1: 48:d0:55:78:73:b7:36:52:4e:fc:06:1e:e8:d8:97: e7:59:6b:68:80:c2:d1:bb:51:6b:27:ae:96:ff:c6: 15:ec:87:f4:84:b2:36:2b:06:57:98:a6:f9:05:2b: 99:d9:b6:bf:57:8b:ff:01:ac:2e:1d:a8:af:b1:64: 1e:ab:b4:ff:e5:2f:d0:8c:84:c3:5a:88:a8:61:4b: 0c:12:a3:aa:63:e9:d1:68:54:bd:21:93:b9:59:37: 95:93:dd:ee:b9:77:db:37:0b:61:80:42:03:bf:02: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:B4:01:F1:33:53:AE:A2:39:E2:DC:5B:63:FE:74:5F:1F:55:25 X509v3 Authority Key Identifier: keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:49:7d:d5:5f:7d:43:5c:4c:b9:28:7c:ff:ec:fc:bc:e7:00: fb:1c:70:75:56:c4:1a:96:3d:00:fd:b4:22:82:da:97:6c:cd: 6e:b6:23:7b:13:60:b9:01:85:0e:46:cf:5e:85:d7:60:da:1e: 2a:b6:0d:de:6a:d2:a8:df:43:65:24:1d:0d:ca:ad:39:e3:be: cb:83:eb:48:c1:ff:d0:fd:f2:b7:ee:70:70:48:fc:65:a3:62: 13:a1:4f:59:99:3f:62:6b:a5:3f:e7:f2:ff:42:fe:c8:b2:fc: af:7e:11:42:97:d6:bb:53:f7:bf:99:97:5c:67:4a:1b:79:3d: 20:6b:cc:c1:3d:65:76:67:77:4a:17:61:c7:c1:66:31:35:cb: 3c:b5:41:f9:f5:17:dc:f1:6e:33:44:b5:0c:49:a4:32:c5:b4: d0:e3:b8:d8:3b:29:6d:06:69:c1:3c:93:c3:72:1e:9f:20:52: 05:76:2c:74:ec:02:1b:9e:57:c2:da:3e:34:ba:b3:19:d8:95: 41:37:d7:9c:df:6c:fd:b0:17:ac:2c:71:cb:45:19:e8:2a:28: 3e:b5:16:51:b0:57:b9:46:ce:4d:30:0c:9b:77:a6:9b:78:d9: 08:8c:e2:90:91:6e:30:1e:67:dd:68:47:66:df:1e:19:32:89: e8:c8:49:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9GhwpZH4OL/YJKFurhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx YjNlMjYwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EyhhZGE4YjQwMWYxMzM1M2FlYTIzOWUyZGM1YjYzZmU3NDVmMWY1NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jnOsjHEYTqPUpXgZhbbgzV61jt7 xq6xkU0Ef4GcvEravCD+BGFW+NzdXJYS/8j70U6SSChPEhpt3LtwNJ8rjsfNuFPd DEdDJJ5o7C70ps8bCVXMDyN+AC2SzHScE1xfHgCrhR3s0Wo7STFLRhBnJzws74Gl UBiUyWLntqvzIujD/rFc1JJGBeJG5/o80qHN4UWD8/FI0FV4c7c2Uk78Bh7o2Jfn WWtogMLRu1FrJ66W/8YV7If0hLI2KwZXmKb5BSuZ2ba/V4v/AawuHaivsWQeq7T/ 5S/QjITDWoioYUsMEqOqY+nRaFS9IZO5WTeVk93uuXfbNwthgEIDvwI/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2otAHxM1Ouojni3Ftj/nRfH1UlMB8GA1UdIwQY MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkl91V99 Q1xMuSh8/+z8vOcA+xxwdVbEGpY9AP20IoLal2zNbrYjexNguQGFDkbPXoXXYNoe KrYN3mrSqN9DZSQdDcqtOeO+y4PrSMH/0P3yt+5wcEj8ZaNiE6FPWZk/YmulP+fy /0L+yLL8r34RQpfWu1P3v5mXXGdKG3k9IGvMwT1ldmd3Shdhx8FmMTXLPLVB+fUX 3PFuM0S1DEmkMsW00OO42DspbQZpwTyTw3IenyBSBXYsdOwCG55Xwto+NLqzGdiV QTfXnN9s/bAXrCxxy0UZ6CooPrUWUbBXuUbOTTAMm3emm3jZCIzikJFuMB5n3WhH Zt8eGTKJ6MhJYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:33 2025 by rpki-client