This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json) Hash identifier: 8ZRJnAnMFWDajo5vNuRua2ZvojrOjlKtNDa3uK8JgmQ= Subject key identifier: EF:38:1D:C3:40:A1:D1:4F:9C:3D:E9:FF:EF:BB:7A:0D:88:F9:E0:19 Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af Certificate serial: 019AF19B250FF0EEC09AC446BE5354D347CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=) 2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: itmn7Lz0J7PzwJEQ2PIOZw8KNOzd9FF/imriDP0rVEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:0f:f0:ee:c0:9a:c4:46:be:53:54:d3:47:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=ef381dc340a1d14f9c3de9ffefbb7a0d88f9e019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:a2:4e:6e:2b:b7:5f:f5:67:e5:b7:d8:b0: 09:84:20:35:c8:3f:96:26:a3:21:6f:35:a6:96:06: ba:b4:ad:4f:2d:65:47:43:e4:aa:2d:c3:9b:5d:1d: e5:df:ab:9e:e5:cb:ab:1f:0f:da:69:af:17:8b:52: e3:2d:b0:80:ad:c0:12:b8:26:73:0f:35:6d:89:10: 27:55:25:bc:2c:f9:a2:dd:cb:a3:d4:48:e9:85:ac: 58:e2:2b:76:5e:03:4a:39:3c:c6:08:f9:d0:ce:99: ca:59:23:8d:af:6b:0c:ab:19:da:f7:c5:53:1a:b9: 52:f8:ed:55:29:b3:de:72:da:4e:2b:a1:03:94:7a: d0:14:20:42:79:83:61:be:00:30:3b:8b:df:fb:c9: 9a:c0:84:b8:48:c9:15:85:ab:10:4e:9b:a5:74:4a: 5e:ee:99:04:1a:b4:a7:95:1b:8c:4d:58:ef:fa:ea: 95:c7:50:14:c1:c6:a5:42:63:fe:7a:0d:63:67:91: b4:da:5f:4a:f7:a3:51:94:1c:8a:5f:64:49:b2:fc: bc:6a:c8:73:5c:16:0b:04:48:fc:77:71:7d:93:c5: d8:1c:11:dd:0a:97:41:63:21:30:fe:c6:a4:2c:ca: 7b:94:28:af:0c:ba:d3:4c:41:b2:5f:e4:42:73:f5: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:1D:C3:40:A1:D1:4F:9C:3D:E9:FF:EF:BB:7A:0D:88:F9:E0:19 X509v3 Authority Key Identifier: keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b1:d7:e1:13:8f:80:ed:33:de:89:8d:ff:66:f6:16:a7:4c: 47:eb:92:32:0c:d3:3e:5a:1d:cf:03:e3:e0:c2:71:95:b8:96: b4:9a:c0:1c:08:bf:cf:27:89:58:02:bf:64:9a:df:f4:9f:5a: a8:34:c7:68:63:7d:b6:23:ec:3f:12:4c:45:18:a2:e2:0c:17: f5:ae:49:75:58:94:5c:bb:a8:c2:da:4c:58:8c:54:e4:56:04: b3:b4:01:28:af:1f:0f:f4:43:16:7b:6a:e3:9a:d7:9c:1f:ba: ff:a4:17:7a:cd:ab:fe:c8:68:a6:b6:13:df:d9:e9:4b:b2:69: 92:04:be:86:59:98:e0:55:b1:71:5d:d2:f3:b6:53:57:cd:a3: 8b:92:49:0c:05:df:f7:3b:d4:1a:70:6a:6a:65:d3:82:5e:b8: 8e:20:da:ff:82:fb:df:89:4a:89:f3:43:bb:d6:a8:99:cf:14: 82:53:fb:c2:28:91:84:8f:3d:da:9e:44:93:f8:3e:75:fb:a7: 0d:18:82:b6:0b:e5:fd:27:de:63:f5:b4:14:30:5f:a7:11:73: 1e:8f:5e:e8:23:f8:0b:a4:4d:a5:fa:32:77:51:11:13:b1:d1: b3:a5:5b:e1:a2:ff:40:6e:13:39:c6:a8:ad:5b:a7:cb:d4:d3: c4:31:04:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyUP8O7AmsRGvlNU00fLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTQ5ZDJiZDY0ZWUxN2VmNWQ0N2Y5NjNlM2Q1ZDdhOTgy YjEyYWYwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EyhlZjM4MWRjMzQwYTFkMTRmOWMzZGU5ZmZlZmJiN2EwZDg4ZjllMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dGiTm4rt1/1Z+W32LAJhCA1yD+W JqMhbzWmlga6tK1PLWVHQ+SqLcObXR3l36ue5curHw/aaa8Xi1LjLbCArcASuCZz DzVtiRAnVSW8LPmi3cuj1EjphaxY4it2XgNKOTzGCPnQzpnKWSONr2sMqxna98VT GrlS+O1VKbPectpOK6EDlHrQFCBCeYNhvgAwO4vf+8mawIS4SMkVhasQTpuldEpe 7pkEGrSnlRuMTVjv+uqVx1AUwcalQmP+eg1jZ5G02l9K96NRlByKX2RJsvy8ashz XBYLBEj8d3F9k8XYHBHdCpdBYyEw/sakLMp7lCivDLrTTEGyX+RCc/UYvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO84HcNAodFPnD3p/++7eg2I+eAZMB8GA1UdIwQY MBaAFGyUnSvWTuF+9dR/lj49XXqYKxKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEt MjMyZjQ3MDM0OTFmLzEvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEtMjMyZjQ3MDM0OTFm LzEvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrHX4ROP gO0z3omN/2b2FqdMR+uSMgzTPlodzwPj4MJxlbiWtJrAHAi/zyeJWAK/ZJrf9J9a qDTHaGN9tiPsPxJMRRii4gwX9a5JdViUXLuowtpMWIxU5FYEs7QBKK8fD/RDFntq 45rXnB+6/6QXes2r/shoprYT39npS7JpkgS+hlmY4FWxcV3S87ZTV82ji5JJDAXf 9zvUGnBqamXTgl64jiDa/4L734lKifNDu9aomc8UglP7wiiRhI892p5Ek/g+dfun DRiCtgvl/SfeY/W0FDBfpxFzHo9e6CP4C6RNpfoyd1ERE7HRs6Vb4aL/QG4TOcao rVuny9TTxDEE3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:20 2025 by rpki-client