This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json) Hash identifier: J9IcoOq/frwN/Dno52Li/dS9SKORtJ/eWN7sEnbdVMc= Subject key identifier: 1D:AE:E9:5C:EC:C9:C5:1B:0E:34:AB:6B:EA:F8:E9:E5:39:93:EA:C9 Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f Certificate serial: 019AF1D1A269E21A6322E2E488C111941D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft Manifest number: 09DB Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: /CfHTKgDMnhKQrgQ5AsKmsv2E8c6nMcQftsXuuuzzhY=) 2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a2:69:e2:1a:63:22:e2:e4:88:c1:11:94:1d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=1daee95cecc9c51b0e34ab6beaf8e9e53993eac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:36:cd:d9:77:a4:5d:85:0b:41:ed:2a:6c: 39:d0:0a:f8:27:3d:4b:67:69:cb:df:b8:22:22:16: 05:7a:d9:d6:d3:a7:2d:da:65:2c:35:da:5c:cb:f3: ff:35:1a:71:0e:04:89:91:57:f0:2c:8a:bf:42:bc: d3:1c:50:e2:f8:c9:07:3b:f6:1e:03:98:30:cd:85: b8:ec:45:d0:9e:7c:46:77:3b:ae:d0:35:b9:78:23: eb:ad:7f:b7:06:bf:98:eb:af:14:d0:66:32:a0:ab: b4:ca:21:42:4c:c7:df:91:56:27:1a:48:6d:f0:ce: 2e:9a:e0:de:e8:8b:70:46:fd:cc:60:a5:de:5f:f2: 71:e2:fc:da:a9:a4:8e:ac:f1:73:1f:14:68:c8:18: 7a:24:25:32:44:c6:47:d5:e2:e7:c2:b3:6e:c1:2f: 49:3e:be:c4:68:9f:13:8a:8b:28:cb:c3:5d:97:47: 7d:00:d5:84:2c:c6:90:a5:06:7f:c5:fc:70:20:a0: 0e:49:e6:a9:11:e7:99:c3:6b:ab:8e:21:d2:06:09: b9:68:00:42:39:26:d2:1c:31:1b:9f:4a:b4:c7:fb: 94:9c:0d:7f:c0:9c:53:ac:4d:72:ce:d0:54:c2:a9: b1:4f:69:dd:ad:30:61:e0:51:05:69:2b:7d:66:fb: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:E9:5C:EC:C9:C5:1B:0E:34:AB:6B:EA:F8:E9:E5:39:93:EA:C9 X509v3 Authority Key Identifier: keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:58:6d:84:06:02:4d:1f:0b:2b:99:31:1a:91:17:c0:01:55: bd:b3:10:77:4d:89:30:02:37:43:9c:ce:91:9b:f9:f5:ae:36: 92:b7:25:62:25:93:02:81:b2:65:1f:77:fc:c3:10:97:f3:77: 27:72:48:1b:7e:98:d9:1e:e3:07:68:2a:e7:01:96:c0:86:75: 4c:7c:3b:d1:38:ae:03:2a:cd:b5:7f:18:44:25:4f:69:9c:2b: 63:c9:30:cf:21:ca:5c:7a:d3:55:da:87:84:b4:13:c7:af:16: 94:68:79:5f:e0:2b:03:7e:67:d2:67:dc:c3:c8:66:17:12:b6: 5b:8a:f6:29:06:ca:e6:c8:b5:6d:0e:26:20:16:7d:b1:5a:e9: c8:43:b4:9d:5c:df:9e:fd:5c:b3:08:61:cf:d5:7e:48:06:8d: 8b:ce:d5:d0:48:8e:98:b4:0a:3d:4d:2e:da:38:90:3d:d8:60: 2d:bb:9d:31:2d:c9:a7:67:90:d2:5e:6b:08:07:74:a2:90:10: ad:11:a5:c8:20:7b:ad:d9:ea:98:6d:e7:a1:6c:39:ea:ce:a6: 92:cd:cd:b4:8b:3d:cd:d3:6c:92:ec:cd:e4:47:76:e7:29:dc: 35:18:3b:d5:00:5c:38:93:3d:d5:20:b4:2d:ca:1c:f1:e0:ff: fe:d5:d7:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aJp4hpjIuLkiMERlB0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk ZmJlNGYwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EygxZGFlZTk1Y2VjYzljNTFiMGUzNGFiNmJlYWY4ZTllNTM5OTNlYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZQ2zdl3pF2FC0HtKmw50Ar4Jz1L Z2nL37giIhYFetnW06ct2mUsNdpcy/P/NRpxDgSJkVfwLIq/QrzTHFDi+MkHO/Ye A5gwzYW47EXQnnxGdzuu0DW5eCPrrX+3Br+Y668U0GYyoKu0yiFCTMffkVYnGkht 8M4umuDe6ItwRv3MYKXeX/Jx4vzaqaSOrPFzHxRoyBh6JCUyRMZH1eLnwrNuwS9J Pr7EaJ8Tiosoy8Ndl0d9ANWELMaQpQZ/xfxwIKAOSeapEeeZw2urjiHSBgm5aABC OSbSHDEbn0q0x/uUnA1/wJxTrE1yztBUwqmxT2ndrTBh4FEFaSt9ZvshswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2u6VzsycUbDjSra+r46eU5k+rJMB8GA1UdIwQY MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt MWY3NmU5ZGNmZjkyLzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1hthAYC TR8LK5kxGpEXwAFVvbMQd02JMAI3Q5zOkZv59a42krclYiWTAoGyZR93/MMQl/N3 J3JIG36Y2R7jB2gq5wGWwIZ1THw70TiuAyrNtX8YRCVPaZwrY8kwzyHKXHrTVdqH hLQTx68WlGh5X+ArA35n0mfcw8hmFxK2W4r2KQbK5si1bQ4mIBZ9sVrpyEO0nVzf nv1cswhhz9V+SAaNi87V0EiOmLQKPU0u2jiQPdhgLbudMS3Jp2eQ0l5rCAd0opAQ rRGlyCB7rdnqmG3noWw56s6mks3NtIs9zdNskuzN5Ed25yncNRg71QBcOJM91SC0 Lcoc8eD//tXXWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:45 2025 by rpki-client