This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json) Hash identifier: hGaqvQMwm8PSDkE9sbIdjJXQc1Yf8e/oYnSYZTMHEdw= Subject key identifier: 91:58:97:C7:92:B8:60:1E:A2:8D:2A:96:AD:61:C0:24:5D:A0:21:1F Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Certificate serial: 019AFB42FA2C913546BAD8C6A1913EA2DC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft Manifest number: 0D30 Signing time: Mon 08 Dec 2025 00:01:01 +0000 Manifest this update: Mon 08 Dec 2025 00:01:01 +0000 Manifest next update: Tue 09 Dec 2025 00:01:01 +0000 Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=) 2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: p/EO+WVdz+lXulyB/Iutlg/aISR1elhS7XEUiLzpcjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:fa:2c:91:35:46:ba:d8:c6:a1:91:3e:a2:dc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Validity Not Before: Dec 8 00:01:01 2025 GMT Not After : Dec 9 00:01:01 2025 GMT Subject: CN=915897c792b8601ea28d2a96ad61c0245da0211f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:37:09:d4:5a:72:1e:95:94:0b:7c:c9:98: 1e:5e:73:d5:b2:b2:53:a8:8a:67:ab:38:ba:a0:5e: 9d:c8:b7:41:a4:51:52:d7:4c:b8:75:4a:35:36:d4: 3d:a5:0a:ce:d9:51:41:13:c6:62:c1:16:68:8f:f8: ea:93:7d:db:38:42:a4:18:0c:04:b4:90:ab:c0:58: d8:f2:5e:e8:e2:13:eb:31:f8:09:e1:64:c8:6d:eb: 8e:cb:40:4d:d7:02:75:6e:05:9f:4f:a5:05:ad:21: 66:6b:82:62:52:4a:f0:3b:25:b9:64:5f:f9:fc:8f: dc:d9:45:d0:23:23:2a:4b:88:d2:75:d5:8d:f8:9c: e6:3f:74:b8:d6:5c:f9:3b:10:77:4f:81:11:49:dd: a6:36:14:fb:c9:ab:70:57:27:0f:b6:b2:7f:df:89: 57:5c:68:a8:cb:db:2f:1e:0e:d6:21:bd:42:ca:e6: 56:8b:7e:eb:f3:46:58:2e:1e:e1:fb:d5:c5:e2:91: 77:0d:f2:d7:30:82:ff:42:b4:51:5e:7a:2e:c0:c4: 90:b0:58:30:ac:f9:8f:dd:b8:3e:6f:96:86:15:37: ef:e6:d7:f7:86:8e:6c:10:84:ff:f8:14:77:e2:9a: 44:60:d5:37:b8:89:cc:f0:6c:18:2d:2b:ed:ae:23: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:97:C7:92:B8:60:1E:A2:8D:2A:96:AD:61:C0:24:5D:A0:21:1F X509v3 Authority Key Identifier: keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f7:84:c9:19:a3:62:4c:8f:aa:2d:a4:88:17:c5:06:62:36: 8a:f7:83:13:5c:42:3e:1b:e7:c6:09:3b:70:28:34:95:be:86: c7:2c:be:30:e0:1a:96:0b:df:e2:bb:2a:b4:d5:5b:cd:b1:0b: 88:84:49:59:74:a7:35:c6:6c:a2:b7:35:29:35:18:13:f6:c6: 2b:48:f0:88:08:2b:00:6d:af:36:a0:8c:67:58:60:91:8b:17: 65:cc:f1:de:14:4c:d7:b6:92:1e:e5:aa:62:6c:e3:ed:25:12: 5d:eb:ac:ca:d5:0b:97:66:a5:e0:bf:80:48:1f:57:a2:ea:3b: c5:cd:4c:25:c6:66:10:5e:53:a7:9c:83:2b:11:22:94:e3:29: 89:f5:f1:f2:46:13:1f:54:5a:82:31:6a:35:c0:72:cd:2b:f6: 80:cf:81:0b:d7:0b:84:c6:63:d6:59:12:67:18:69:b5:6d:9e: ca:d0:25:e0:fe:79:74:9a:80:12:cd:60:66:f3:cc:71:dd:02: d0:5f:19:94:37:92:77:1a:88:f8:7c:a4:a1:5e:03:4e:30:ec: 40:b3:b9:8a:84:5b:f2:be:ea:7f:ae:e6:91:ad:2c:3a:b3:2d: c7:8e:23:3e:6b:31:55:17:81:97:fd:f1:49:bc:b4:fb:a9:ba: b2:d2:7d:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QvoskTVGutjGoZE+otxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj YzZhYzgwHhcNMjUxMjA4MDAwMTAxWhcNMjUxMjA5MDAwMTAxWjAzMTEwLwYDVQQD Eyg5MTU4OTdjNzkyYjg2MDFlYTI4ZDJhOTZhZDYxYzAyNDVkYTAyMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O03CdRach6VlAt8yZgeXnPVsrJT qIpnqzi6oF6dyLdBpFFS10y4dUo1NtQ9pQrO2VFBE8ZiwRZoj/jqk33bOEKkGAwE tJCrwFjY8l7o4hPrMfgJ4WTIbeuOy0BN1wJ1bgWfT6UFrSFma4JiUkrwOyW5ZF/5 /I/c2UXQIyMqS4jSddWN+JzmP3S41lz5OxB3T4ERSd2mNhT7yatwVycPtrJ/34lX XGioy9svHg7WIb1CyuZWi37r80ZYLh7h+9XF4pF3DfLXMIL/QrRRXnouwMSQsFgw rPmP3bg+b5aGFTfv5tf3ho5sEIT/+BR34ppEYNU3uInM8GwYLSvtriMQPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFYl8eSuGAeoo0qlq1hwCRdoCEfMB8GA1UdIwQY MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1 LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVveEyRmj YkyPqi2kiBfFBmI2iveDE1xCPhvnxgk7cCg0lb6Gxyy+MOAalgvf4rsqtNVbzbEL iIRJWXSnNcZsorc1KTUYE/bGK0jwiAgrAG2vNqCMZ1hgkYsXZczx3hRM17aSHuWq Ymzj7SUSXeusytULl2al4L+ASB9Xouo7xc1MJcZmEF5Tp5yDKxEilOMpifXx8kYT H1RagjFqNcByzSv2gM+BC9cLhMZj1lkSZxhptW2eytAl4P55dJqAEs1gZvPMcd0C 0F8ZlDeSdxqI+HykoV4DTjDsQLO5ioRb8r7qf67mka0sOrMtx44jPmsxVReBl/3x Sby0+6m6stJ9zA== -----END CERTIFICATE-----Generated at Mon Dec 8 08:50:33 2025 by rpki-client