This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json) Hash identifier: wbqRZklyRUnd/zNWr3j+2dx8VDaVqL1rUWFLqMGZ7WE= Subject key identifier: E2:6C:95:5A:CE:E1:B9:28:06:7F:94:28:0E:85:D7:87:CC:D1:C0:15 Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Certificate serial: 019AF1D17F86EF7450931799C5BDB4B8EC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft Manifest number: 1600 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: djvg8pzOtTauHIKKJBfc0s5Zt+/tX9tmQOhcyhDS9DA=) 2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7f:86:ef:74:50:93:17:99:c5:bd:b4:b8:ec:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=e26c955acee1b928067f94280e85d787ccd1c015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:3e:b2:ed:79:74:c0:9d:d5:78:11:ad:77: aa:73:c8:a4:ea:bc:77:3e:46:3b:38:77:97:e0:bf: b6:75:58:c2:1d:86:72:7c:79:b0:57:1a:30:61:dd: 22:cc:66:6f:d2:2c:0d:4d:81:31:d3:1a:d8:9b:a3: 31:87:6d:3a:8d:5f:e1:7f:c8:fa:bc:cf:8e:f4:41: b4:61:93:fa:90:fb:c4:ba:d1:4a:ae:51:a0:fe:f5: 58:7d:75:ac:4e:df:90:9e:bd:16:45:ca:d4:56:5f: 14:08:0e:6d:71:cb:6e:06:75:88:d0:81:3c:93:5e: bf:f5:a6:54:bc:29:cd:68:75:ae:e0:e5:97:b3:aa: 90:d9:4d:1b:82:64:7d:3c:9c:1e:56:40:80:d3:e0: e7:c6:22:d4:f1:74:cf:92:5c:11:49:b5:47:4e:16: db:40:fa:21:60:94:83:50:90:ee:9d:de:2d:23:88: 0f:b5:95:b5:37:bc:d5:ec:de:c7:5b:a1:44:9a:5c: 56:7f:3b:49:cb:fc:eb:ca:0b:32:c4:5a:23:73:bf: a3:89:5d:bd:26:90:75:00:61:56:ea:16:04:ab:86: d8:ac:d5:77:aa:10:f6:39:8e:41:87:27:8d:80:92: 00:01:b9:8a:1f:cd:eb:7e:76:8e:97:66:1e:5c:76: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:95:5A:CE:E1:B9:28:06:7F:94:28:0E:85:D7:87:CC:D1:C0:15 X509v3 Authority Key Identifier: keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:be:d4:85:8f:b5:ec:9a:fb:0a:63:f2:d7:1f:83:e3:63:25: 59:58:96:83:f5:ea:aa:c1:fb:f1:51:08:29:94:9d:c1:ab:27: 17:d5:c2:05:d8:01:79:2a:0f:dc:2d:77:b2:80:f4:1a:20:2c: 53:d9:cf:5d:c3:8f:d4:39:c3:32:f4:9a:02:74:7d:6e:44:b8: 53:a4:01:f1:42:1f:ef:48:60:88:27:e3:88:ba:95:2a:c5:6c: 60:81:a9:e3:fd:48:a7:7c:79:b6:84:d5:fe:e2:77:a0:7e:73: 3e:00:a9:b9:f7:16:a4:2c:7c:39:c0:75:33:b9:d8:63:f8:ca: 05:bf:bd:47:7a:7e:be:23:e2:c1:16:9d:7d:73:0d:e6:42:3b: 28:bc:60:ce:0e:61:f1:68:67:e9:df:27:8c:78:a1:a4:3e:43: e1:71:cb:ba:b8:d5:70:c3:f0:69:51:1a:68:8a:60:f5:79:c4: 45:ac:25:7e:91:c6:a1:7b:89:64:fb:1a:cf:c5:8e:df:b6:94: ea:48:38:d3:19:a0:51:a5:74:98:42:3f:0f:26:ef:d3:50:6e: 47:6f:4e:c0:2e:69:81:e3:b1:99:7e:c2:33:20:ae:13:22:cf: bb:0c:56:6d:32:c6:1e:14:ec:aa:6b:71:ae:3b:01:3f:cf:4e: d2:e8:4f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X+G73RQkxeZxb20uOwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3 ZjZlMmIwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EyhlMjZjOTU1YWNlZTFiOTI4MDY3Zjk0MjgwZTg1ZDc4N2NjZDFjMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ok+su15dMCd1XgRrXeqc8ik6rx3 PkY7OHeX4L+2dVjCHYZyfHmwVxowYd0izGZv0iwNTYEx0xrYm6Mxh206jV/hf8j6 vM+O9EG0YZP6kPvEutFKrlGg/vVYfXWsTt+Qnr0WRcrUVl8UCA5tcctuBnWI0IE8 k16/9aZUvCnNaHWu4OWXs6qQ2U0bgmR9PJweVkCA0+DnxiLU8XTPklwRSbVHThbb QPohYJSDUJDund4tI4gPtZW1N7zV7N7HW6FEmlxWfztJy/zrygsyxFojc7+jiV29 JpB1AGFW6hYEq4bYrNV3qhD2OY5BhyeNgJIAAbmKH83rfnaOl2YeXHbuAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJslVrO4bkoBn+UKA6F14fM0cAVMB8GA1UdIwQY MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5 LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr7UhY+1 7Jr7CmPy1x+D42MlWViWg/XqqsH78VEIKZSdwasnF9XCBdgBeSoP3C13soD0GiAs U9nPXcOP1DnDMvSaAnR9bkS4U6QB8UIf70hgiCfjiLqVKsVsYIGp4/1Ip3x5toTV /uJ3oH5zPgCpufcWpCx8OcB1M7nYY/jKBb+9R3p+viPiwRadfXMN5kI7KLxgzg5h 8Whn6d8njHihpD5D4XHLurjVcMPwaVEaaIpg9XnERawlfpHGoXuJZPsaz8WO37aU 6kg40xmgUaV0mEI/Dybv01BuR29OwC5pgeOxmX7CMyCuEyLPuwxWbTLGHhTsqmtx rjsBP89O0uhPLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:34 2025 by rpki-client