This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json) Hash identifier: NxyLCmYjuu/OVz+wTtscNobAOQ+4NZCz4Ri94NQ/w9g= Subject key identifier: 21:EC:85:B2:DD:E9:0D:EB:58:E7:26:57:BA:3F:1D:FE:AA:FB:89:EB Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Certificate serial: 019AF2AD7C65F029FC10951CAAB4B7C7C852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: IVWLNAUIsWDuNfRfR17vH-v5XfI.roa (hash: OmbLmtXQG4MyTcSNnTCa+QZsFqNmOgdwU2G3Jors4PA=) 2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: L4y38qIYN/0AHLnQ9rtx5n3ftUZs5QEwG9k83/3WtN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7c:65:f0:29:fc:10:95:1c:aa:b4:b7:c7:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=21ec85b2dde90deb58e72657ba3f1dfeaafb89eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:ee:5a:0d:90:23:6a:3c:71:a0:79:8c:5e: 9d:5a:b1:4d:f0:68:be:5d:90:81:c5:a4:48:72:a1: a8:2e:f7:85:ef:dc:95:cb:6f:b9:87:6d:7f:35:b1: 4b:0a:ec:cc:1b:7e:0d:11:1d:8d:eb:21:87:b1:fa: 97:4c:95:03:71:0a:12:d7:ad:9f:0c:7b:c2:a6:29: 7f:1f:65:2f:29:e1:5c:9f:55:27:f4:dd:03:2d:7e: ed:47:20:89:78:0a:55:59:4d:67:6c:fc:36:51:5e: 6d:67:c6:f7:8c:83:78:6e:5a:28:83:c4:2c:94:d7: e4:79:64:eb:0a:ce:bd:30:4a:60:7d:0b:2a:38:1c: 9c:f0:29:60:b8:b7:b7:e4:74:e7:6e:aa:20:31:62: e7:f2:9e:ba:a7:ab:04:db:4a:90:54:92:fa:04:87: 31:34:29:aa:6b:0a:14:7e:55:24:e6:49:02:0a:dc: c3:d3:1c:0c:ce:b0:50:66:f5:06:ac:ba:b2:08:66: 58:57:9b:b6:73:a2:06:03:10:88:44:a7:60:6d:d2: 25:e5:61:10:98:97:50:05:ad:1b:cf:10:70:21:65: 16:cc:b2:11:cf:44:31:f2:52:4b:4a:11:9f:2b:58: a4:5f:a4:0c:9d:34:94:3b:09:b6:08:ef:9d:19:15: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:85:B2:DD:E9:0D:EB:58:E7:26:57:BA:3F:1D:FE:AA:FB:89:EB X509v3 Authority Key Identifier: keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:11:0d:74:5e:fb:e2:85:e2:f6:ca:5b:d7:d7:62:5e:4f:bd: 80:f1:66:a6:3f:28:e4:0a:ad:4d:ac:f0:22:c4:55:9f:ac:d8: 4c:a3:94:d4:2d:3e:94:cf:c4:d3:37:f2:0a:f4:53:97:94:46: 45:46:aa:ed:31:5b:08:b0:1f:59:9c:5e:6c:76:c5:1a:ff:44: 03:44:04:49:8b:b7:b3:77:52:d4:43:e3:f0:92:62:95:32:2f: 2a:f9:7d:1a:63:4e:59:d3:4a:84:82:bd:0b:cc:7e:df:58:7c: eb:1d:3e:84:6b:a2:a1:7a:8b:0c:d9:d3:29:75:41:ac:2d:4d: 39:24:2d:89:35:c5:79:d1:69:ae:2c:d3:7c:21:fc:59:4b:04: 3a:0b:b7:b3:3f:97:1f:6c:0b:77:d1:4a:2a:7f:4c:f1:75:23: 6d:b7:81:f6:ab:b5:21:66:7c:b6:60:b4:e3:af:e6:30:0f:a2: 05:ca:ef:9f:1b:67:d2:7d:cf:97:c2:92:e9:72:27:c3:4e:52: 37:90:c9:bb:3c:30:4d:23:41:85:ec:13:57:2b:bd:00:fb:d5: f6:b6:fa:09:4f:04:13:d9:6a:96:c8:b5:50:e4:d3:b4:f6:62: 2b:b4:16:ed:e7:42:fa:3a:47:a5:f0:15:93:8e:40:5e:8f:57: 66:c3:5a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXxl8Cn8EJUcqrS3x8hSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh ZmUzYTMwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygyMWVjODViMmRkZTkwZGViNThlNzI2NTdiYTNmMWRmZWFhZmI4OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W3uWg2QI2o8caB5jF6dWrFN8Gi+ XZCBxaRIcqGoLveF79yVy2+5h21/NbFLCuzMG34NER2N6yGHsfqXTJUDcQoS162f DHvCpil/H2UvKeFcn1Un9N0DLX7tRyCJeApVWU1nbPw2UV5tZ8b3jIN4bloog8Qs lNfkeWTrCs69MEpgfQsqOByc8ClguLe35HTnbqogMWLn8p66p6sE20qQVJL6BIcx NCmqawoUflUk5kkCCtzD0xwMzrBQZvUGrLqyCGZYV5u2c6IGAxCIRKdgbdIl5WEQ mJdQBa0bzxBwIWUWzLIRz0Qx8lJLShGfK1ikX6QMnTSUOwm2CO+dGRWfrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHshbLd6Q3rWOcmV7o/Hf6q+4nrMB8GA1UdIwQY MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt NWZiYzIzMGFiZGMyLzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBENdF77 4oXi9spb19diXk+9gPFmpj8o5AqtTazwIsRVn6zYTKOU1C0+lM/E0zfyCvRTl5RG RUaq7TFbCLAfWZxebHbFGv9EA0QESYu3s3dS1EPj8JJilTIvKvl9GmNOWdNKhIK9 C8x+31h86x0+hGuioXqLDNnTKXVBrC1NOSQtiTXFedFprizTfCH8WUsEOgu3sz+X H2wLd9FKKn9M8XUjbbeB9qu1IWZ8tmC046/mMA+iBcrvnxtn0n3Pl8KS6XInw05S N5DJuzwwTSNBhewTVyu9APvV9rb6CU8EE9lqlsi1UOTTtPZiK7QW7edC+jpHpfAV k45AXo9XZsNavA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:09 2025 by rpki-client