This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json) Hash identifier: rnn7vebNW9CmP1nk1iIMDA41PkE5zg9IZRaDljr88kw= Subject key identifier: 6A:69:DF:3B:CD:1E:11:9A:95:88:67:BB:A9:91:7E:32:A9:86:C6:92 Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa Certificate serial: 019AF12E765CFA3E387D3B1BB21E4F4F61CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=) 2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: wRB+rTAjg2RJj+wr5/qwFB6kvvAZHa6rYyf5AqgXuXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:76:5c:fa:3e:38:7d:3b:1b:b2:1e:4f:4f:61:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=6a69df3bcd1e119a958867bba9917e32a986c692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:78:2d:cc:cf:89:90:7a:a9:ba:41:0a:ed: 5d:bf:4e:e6:cf:5f:80:40:80:ce:ce:ad:55:52:e5: c8:bd:8c:73:de:67:ef:ce:40:e5:78:d5:30:e2:78: 34:28:44:ea:ef:f5:55:b6:47:55:91:cf:23:45:0d: 5c:d9:13:a5:14:0d:7f:e6:82:22:3d:15:ea:9c:09: 3f:11:68:b9:fb:e7:40:56:1a:99:f1:72:58:98:23: 87:c1:19:f2:6e:08:6c:5f:32:55:63:ba:44:f8:d5: c0:8e:f4:5a:c8:bd:84:f2:b5:96:d1:ad:80:a7:19: 7e:75:c1:3b:c4:b0:75:26:38:4d:5d:05:82:40:11: f9:1f:be:a5:ab:1d:81:f8:70:1d:b1:b0:83:31:4d: 8c:4c:05:07:6a:b3:22:8c:f7:2b:da:b3:06:08:c0: 98:39:3b:4e:9d:b8:72:58:11:99:03:18:37:7f:a9: 7a:f0:75:0c:fe:9a:d7:36:50:1b:eb:77:4d:19:e1: 77:01:0d:b3:4b:95:f3:ff:5c:d8:a9:c8:8a:4d:45: 21:27:19:8b:33:6b:78:8b:d4:b9:40:36:cf:c6:61: 0f:cd:2c:ea:1e:f6:a4:1b:bb:35:ad:96:9a:92:02: 6c:2f:a5:b5:e0:d6:5d:6a:78:95:e8:71:26:54:76: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:69:DF:3B:CD:1E:11:9A:95:88:67:BB:A9:91:7E:32:A9:86:C6:92 X509v3 Authority Key Identifier: keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:32:3b:f9:19:fe:bd:24:f5:83:d5:7d:ab:fd:28:58:ab:3b: ae:a2:a6:7d:ac:ad:2b:ac:34:6a:d7:e2:2e:88:37:bf:67:c6: 1e:47:4c:5a:e1:1c:e6:2c:db:17:13:0c:c6:5c:d8:d8:29:3d: bc:0e:ca:da:04:44:9a:d3:4c:61:88:05:33:4f:97:e8:0d:96: 5c:c7:78:2e:54:ae:7a:f7:d4:3f:17:16:03:c3:9e:61:01:57: 98:5e:5c:c2:c4:7c:fe:08:9a:69:01:5f:ae:f8:c7:8b:65:22: 94:f6:a6:99:ba:da:7f:e2:4f:53:83:8f:b3:49:70:63:38:54: 43:02:dc:0f:87:e1:c1:1d:9e:4c:d3:52:a0:73:5c:ea:68:95: fd:fa:10:d8:c8:ab:87:36:94:29:a0:f1:22:3d:dd:5f:30:ed: d1:2d:d0:eb:00:a3:fa:51:30:f8:4a:c5:e8:f7:d5:73:c9:16: 3f:d9:93:b7:8c:6e:6d:8d:43:0e:8f:c0:95:0b:ea:fd:da:9c: c6:f5:80:91:43:3f:1a:1c:a8:02:18:35:e2:75:e5:69:8b:e4: 8e:ad:de:ab:6f:61:5c:63:30:dd:b3:d6:03:0b:8c:a8:b4:9e: 7e:5b:d2:09:a6:1e:fe:66:77:df:e6:7a:af:86:cd:51:ea:0d: 10:ad:00:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnZc+j44fTsbsh5PT2HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy MDU3ZmEwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD Eyg2YTY5ZGYzYmNkMWUxMTlhOTU4ODY3YmJhOTkxN2UzMmE5ODZjNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLJ4LczPiZB6qbpBCu1dv07mz1+A QIDOzq1VUuXIvYxz3mfvzkDleNUw4ng0KETq7/VVtkdVkc8jRQ1c2ROlFA1/5oIi PRXqnAk/EWi5++dAVhqZ8XJYmCOHwRnybghsXzJVY7pE+NXAjvRayL2E8rWW0a2A pxl+dcE7xLB1JjhNXQWCQBH5H76lqx2B+HAdsbCDMU2MTAUHarMijPcr2rMGCMCY OTtOnbhyWBGZAxg3f6l68HUM/prXNlAb63dNGeF3AQ2zS5Xz/1zYqciKTUUhJxmL M2t4i9S5QDbPxmEPzSzqHvakG7s1rZaakgJsL6W14NZdaniV6HEmVHYJeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpp3zvNHhGalYhnu6mRfjKphsaSMB8GA1UdIwQY MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt MDhmMDk0ZGFmMjQ3LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3 LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzI7+Rn+ vST1g9V9q/0oWKs7rqKmfaytK6w0atfiLog3v2fGHkdMWuEc5izbFxMMxlzY2Ck9 vA7K2gREmtNMYYgFM0+X6A2WXMd4LlSuevfUPxcWA8OeYQFXmF5cwsR8/giaaQFf rvjHi2UilPammbraf+JPU4OPs0lwYzhUQwLcD4fhwR2eTNNSoHNc6miV/foQ2Mir hzaUKaDxIj3dXzDt0S3Q6wCj+lEw+ErF6PfVc8kWP9mTt4xubY1DDo/AlQvq/dqc xvWAkUM/GhyoAhg14nXlaYvkjq3eq29hXGMw3bPWAwuMqLSeflvSCaYe/mZ33+Z6 r4bNUeoNEK0ABA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:52 2025 by rpki-client