This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json) Hash identifier: kHGjl69hiEd232qgE1h3qTC5ZEMgq7+A4XQ+U9q7PiA= Subject key identifier: 4F:3A:DC:96:76:EA:9F:22:87:79:28:30:B1:88:6F:92:F1:09:A2:9D Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d Certificate serial: 019AF209AAAE4C2F6873C14D937BB1F7DB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft Manifest number: 0ED6 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: +sqFMbXjeYw6BE2R7R9KZ99rAo/a/BPhmTWQNvd1bjs=) 2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:aa:ae:4c:2f:68:73:c1:4d:93:7b:b1:f7:db:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=4f3adc9676ea9f2287792830b1886f92f109a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:d4:42:ac:65:63:b0:7a:31:71:1a:61:28: 45:6a:dc:2e:7c:6f:93:4e:c4:65:fb:2e:0f:6b:3a: ee:2e:1d:1c:79:af:70:5a:0f:53:b6:cf:a8:2a:cc: 76:ec:7b:5f:e5:65:41:8e:e5:fb:3a:11:a8:64:99: 7d:17:e8:1c:c0:f6:04:f5:d1:90:91:cb:01:ee:4c: 34:e1:65:7f:23:8f:73:5e:b8:94:eb:0c:a3:78:ed: 9c:b3:94:c5:52:7e:33:9a:0b:2b:d9:a7:0f:00:62: 47:8b:1c:a0:dd:b5:61:4a:c3:15:d3:43:b2:e5:31: a4:09:8a:9e:3b:26:54:78:8b:15:5b:e0:9c:3b:e4: 0d:71:36:50:bf:53:3e:0c:49:bf:51:11:c4:4a:6a: 15:a9:c1:d9:db:df:03:2c:b5:bc:25:bb:ab:e9:96: 8b:9f:35:85:91:d0:f4:b0:25:77:4b:b8:26:bc:fe: b6:11:e6:ce:7d:15:03:34:f8:40:1a:2a:fb:8b:b6: 1d:d3:bf:75:8b:10:d2:b9:64:fd:11:ec:83:f3:3e: 41:32:7c:ae:bd:90:04:eb:c3:c2:d4:71:62:54:32: fb:b8:4e:74:06:35:b0:13:6a:ab:bf:59:47:81:e3: 92:8d:9c:82:ac:62:97:d8:6d:e0:bb:b2:f4:f4:e0: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3A:DC:96:76:EA:9F:22:87:79:28:30:B1:88:6F:92:F1:09:A2:9D X509v3 Authority Key Identifier: keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f4:f7:8f:1a:74:ec:0d:74:5f:9c:fa:7c:d7:c9:04:59:a9: 1e:01:71:be:a6:88:7c:52:7f:cf:78:06:b1:03:01:5b:d1:31: b9:c9:e2:4c:06:fe:6b:b0:90:4c:98:db:2c:eb:59:ea:bd:ab: 9c:d1:80:94:bc:e9:95:33:54:d0:22:32:6e:58:45:1b:03:c4: b2:f3:db:8c:a5:9a:b8:18:ea:58:b9:ab:e2:6b:63:0f:72:48: 49:7d:9b:4f:a7:be:c0:7e:98:3a:82:ee:79:94:e6:43:4c:47: 90:68:f3:de:ca:7f:55:bb:ed:fb:b4:8a:8f:e5:bc:06:7f:7b: 1f:87:1e:e1:40:b5:39:e2:94:31:9e:2f:d2:15:07:36:9e:8e: 70:b1:b9:b0:84:d2:12:a1:d1:69:9b:2d:a8:98:7c:5e:1b:b8: 77:82:f3:16:fe:da:25:0c:46:59:f6:e5:1e:b3:fe:fd:bb:e3: 86:0e:51:48:cb:38:f2:26:ca:a1:74:6c:a5:81:e7:60:92:b2: 9f:be:a5:07:29:eb:46:07:59:3b:50:9b:d5:60:7c:55:06:47: de:87:3e:9e:fa:0b:fd:e7:3d:bc:d2:4f:57:d5:1f:70:62:4b: dd:cc:c0:4a:09:d6:9e:b0:40:ff:69:55:dc:a4:8d:d1:9f:7b: a2:67:6b:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaquTC9oc8FNk3ux99syMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGM2OTRmMGMzMjU1ZDVkNTU3M2YxMzI4ZTUzNjU0Y2Zi MjJjNGQwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg0ZjNhZGM5Njc2ZWE5ZjIyODc3OTI4MzBiMTg4NmY5MmYxMDlhMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLnUQqxlY7B6MXEaYShFatwufG+T TsRl+y4PazruLh0cea9wWg9Tts+oKsx27Htf5WVBjuX7OhGoZJl9F+gcwPYE9dGQ kcsB7kw04WV/I49zXriU6wyjeO2cs5TFUn4zmgsr2acPAGJHixyg3bVhSsMV00Oy 5TGkCYqeOyZUeIsVW+CcO+QNcTZQv1M+DEm/URHESmoVqcHZ298DLLW8Jbur6ZaL nzWFkdD0sCV3S7gmvP62EebOfRUDNPhAGir7i7Yd0791ixDSuWT9EeyD8z5BMnyu vZAE68PC1HFiVDL7uE50BjWwE2qrv1lHgeOSjZyCrGKX2G3gu7L09ODs2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE863JZ26p8ih3koMLGIb5LxCaKdMB8GA1UdIwQY MBaAFGzcaU8MMlXV1Vc/EyjlNlTPsixNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEt NTM2ZTFmMGM0ZmY5LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEtNTM2ZTFmMGM0ZmY5 LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/T3jxp0 7A10X5z6fNfJBFmpHgFxvqaIfFJ/z3gGsQMBW9ExucniTAb+a7CQTJjbLOtZ6r2r nNGAlLzplTNU0CIyblhFGwPEsvPbjKWauBjqWLmr4mtjD3JISX2bT6e+wH6YOoLu eZTmQ0xHkGjz3sp/Vbvt+7SKj+W8Bn97H4ce4UC1OeKUMZ4v0hUHNp6OcLG5sITS EqHRaZstqJh8Xhu4d4LzFv7aJQxGWfblHrP+/bvjhg5RSMs48ibKoXRspYHnYJKy n76lBynrRgdZO1Cb1WB8VQZH3oc+nvoL/ec9vNJPV9UfcGJL3czASgnWnrBA/2lV 3KSN0Z97omdr/A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:23 2025 by rpki-client