This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json) Hash identifier: znTHFPazNY0arSURf2+nhNhpLSUtG5CwHRdhtpgM0h8= Subject key identifier: 28:62:9A:B8:4E:9A:88:06:81:51:44:FB:85:09:D9:B5:D4:32:71:81 Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c Certificate serial: 019AF2AD628E7AC15373B683C0F18FAD7D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft Manifest number: 0862 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=) 2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=) 3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: MHTrXWdRc2Xfmq1vagC/lDWUfO7SeGN7uJUTZjKmdII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:62:8e:7a:c1:53:73:b6:83:c0:f1:8f:ad:7d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=28629ab84e9a8806815144fb8509d9b5d4327181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:17:76:e2:8f:b9:d4:7f:18:ec:fc:77:73: 5b:1b:35:c1:f3:ab:a7:8d:c1:26:ab:20:b5:3c:a2: e8:5e:35:9c:9c:ac:6c:f6:d4:4e:48:06:c1:13:0a: f3:15:65:9a:65:1d:7a:9b:e2:fd:bd:33:c7:1d:e4: 9a:fc:5c:0f:6e:11:9c:2c:b2:3c:64:48:22:6e:24: 1c:bd:76:66:56:f3:f5:71:46:6d:33:62:9e:e7:73: c6:3c:2e:d3:18:a2:10:c3:74:29:17:b8:bb:a1:4c: 82:ae:6e:5e:99:06:a4:38:6f:b2:b6:a1:ef:49:09: 6c:bb:31:b3:ba:92:01:07:99:b2:25:2c:0e:be:40: 94:b4:7f:39:59:a7:b3:94:96:34:d0:47:f6:c5:9c: 9d:13:92:0c:c0:d0:4a:24:04:88:8a:64:df:80:6f: 4c:2a:54:0a:50:ca:a4:e8:c4:3e:32:3c:02:cb:26: ca:67:16:7c:5f:2c:ab:71:54:a4:2d:8c:9d:9d:02: 82:5c:12:72:4e:4c:51:2d:95:df:7d:aa:82:20:e7: b0:29:61:41:a4:15:6a:62:07:22:62:50:bc:21:3d: 5e:d0:13:46:b9:20:7e:a3:b2:3c:92:33:32:df:ef: 2c:b2:c8:59:7e:b1:91:45:87:65:50:ff:7b:a9:54: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:9A:B8:4E:9A:88:06:81:51:44:FB:85:09:D9:B5:D4:32:71:81 X509v3 Authority Key Identifier: keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:44:d5:82:b2:d5:5c:8b:2c:49:a2:c9:55:09:c3:d8:f1:55: 0d:58:b4:ac:80:4f:7b:49:fa:cf:de:8c:54:6d:3b:02:44:bc: 65:1b:3e:b0:e1:d1:a0:6b:94:d5:78:c7:70:ce:0d:40:d2:e2: f1:c3:d1:cc:a5:0e:cc:99:18:40:9e:cd:cf:24:a1:1d:4e:fe: 49:4d:92:4c:80:42:51:ae:3d:fa:29:2c:29:fa:c2:d9:76:20: b8:c7:c4:fb:5e:35:47:99:e0:c3:6b:6b:00:e7:a1:ed:70:0a: 5a:46:13:ea:1d:cb:ea:ff:b9:fb:ed:92:5d:bb:cd:e1:35:84: 70:fe:38:38:03:e3:89:9f:60:58:1d:af:40:b9:cb:3f:d2:e9: 45:4e:15:69:8c:a0:10:14:23:a0:e4:9a:5b:bc:09:76:96:86: a7:ba:9a:3d:ab:13:47:9c:ef:11:38:c4:15:d3:f3:98:14:a9: 4e:6f:7f:ce:8e:b9:f0:63:f6:f9:ba:0c:78:d4:07:a5:52:5e: 31:c8:af:3b:80:15:33:30:b7:b6:da:e8:e2:62:99:4e:91:41: d5:ca:17:b7:b5:e5:c5:d5:dc:ee:e6:21:25:40:87:9b:df:ef: dd:a4:c5:9a:26:a7:10:e9:17:0c:60:0d:1c:5c:e9:0b:d3:16: 42:66:72:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWKOesFTc7aDwPGPrX0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjUwYWYxNzI0NDRiNTIxMTZhN2E2N2Q3NGFhYzdkZjhh NTVlMWMwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EygyODYyOWFiODRlOWE4ODA2ODE1MTQ0ZmI4NTA5ZDliNWQ0MzI3MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4gXduKPudR/GOz8d3NbGzXB86un jcEmqyC1PKLoXjWcnKxs9tROSAbBEwrzFWWaZR16m+L9vTPHHeSa/FwPbhGcLLI8 ZEgibiQcvXZmVvP1cUZtM2Ke53PGPC7TGKIQw3QpF7i7oUyCrm5emQakOG+ytqHv SQlsuzGzupIBB5myJSwOvkCUtH85WaezlJY00Ef2xZydE5IMwNBKJASIimTfgG9M KlQKUMqk6MQ+MjwCyybKZxZ8XyyrcVSkLYydnQKCXBJyTkxRLZXffaqCIOewKWFB pBVqYgciYlC8IT1e0BNGuSB+o7I8kjMy3+8ssshZfrGRRYdlUP97qVSx9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChimrhOmogGgVFE+4UJ2bXUMnGBMB8GA1UdIwQY MBaAFG1lCvFyREtSEWp6Z9dKrH34pV4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQt YjRhMGNiOGVkODIxLzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQtYjRhMGNiOGVkODIx LzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUTVgrLV XIssSaLJVQnD2PFVDVi0rIBPe0n6z96MVG07AkS8ZRs+sOHRoGuU1XjHcM4NQNLi 8cPRzKUOzJkYQJ7NzyShHU7+SU2STIBCUa49+iksKfrC2XYguMfE+141R5ngw2tr AOeh7XAKWkYT6h3L6v+5++2SXbvN4TWEcP44OAPjiZ9gWB2vQLnLP9LpRU4VaYyg EBQjoOSaW7wJdpaGp7qaPasTR5zvETjEFdPzmBSpTm9/zo658GP2+boMeNQHpVJe McivO4AVMzC3ttro4mKZTpFB1coXt7XlxdXc7uYhJUCHm9/v3aTFmianEOkXDGAN HFzpC9MWQmZyfg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:49 2025 by rpki-client