This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json) Hash identifier: +zLD4m8qIKpC2E9dODovtu+YQbQ3/zeDtl8l1DtQrNQ= Subject key identifier: 96:66:34:EC:95:C5:C9:C2:C3:55:F1:FC:D7:07:0C:E7:22:17:60:66 Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844 Certificate serial: 019AF50A4C32BEB902F1DD64BE7D37AC3A87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 19:01:23 +0000 Manifest this update: Sat 06 Dec 2025 19:01:23 +0000 Manifest next update: Sun 07 Dec 2025 19:01:23 +0000 Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: qFoT8FEFatu913NfPW4ucSq0uRTnm8ofWPkvKs5U8A4=) 2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:4c:32:be:b9:02:f1:dd:64:be:7d:37:ac:3a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844 Validity Not Before: Dec 6 19:01:23 2025 GMT Not After : Dec 7 19:01:23 2025 GMT Subject: CN=966634ec95c5c9c2c355f1fcd7070ce722176066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:90:60:c1:53:d5:13:d6:0d:7d:ab:99:84: a1:59:1b:1c:76:40:ec:f1:da:29:a9:97:59:b6:d1: fa:6d:8d:db:e0:4d:a4:48:4d:a2:1f:26:89:f9:1e: 00:3d:1d:c7:f2:78:f5:56:f8:20:22:c4:75:bd:c1: a3:e4:8f:9e:26:b3:8f:ba:64:2f:72:f3:82:fe:a4: 3e:a8:3a:4c:b2:68:0d:a7:84:65:83:94:13:74:92: 60:98:84:da:20:95:d9:35:ae:8f:2b:8f:a8:ac:6d: ed:bb:51:d9:8d:cd:3d:1d:cb:a3:09:af:4f:cb:db: f4:2d:58:44:a7:c5:57:b8:21:4f:cd:1e:03:0e:1a: 67:7a:c4:cd:83:0e:30:4a:f2:0d:f9:ff:b5:97:aa: 8e:a7:1f:f1:4f:00:15:72:c9:05:3b:64:46:eb:14: 8e:df:52:f6:91:84:50:c3:54:56:5e:92:8b:03:b8: a2:88:bf:62:2e:29:e5:bd:78:4b:ce:24:71:9e:c0: a0:1d:56:b1:cf:de:23:b6:e9:64:5f:0a:36:c6:89: 74:31:28:8e:59:1c:d7:18:8e:32:4a:6a:f6:5a:a0: a1:9f:0c:27:2a:38:94:67:ad:0f:40:17:1c:a7:ed: 70:a4:eb:5a:0d:42:40:5d:b8:52:d8:ef:ab:b3:89: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:66:34:EC:95:C5:C9:C2:C3:55:F1:FC:D7:07:0C:E7:22:17:60:66 X509v3 Authority Key Identifier: keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:b8:16:54:50:78:d0:d4:37:e2:12:62:7e:3b:dc:b5:60: 47:ee:a7:80:60:58:2b:3b:8d:ec:86:7e:b8:e6:c5:fb:d9:94: e5:b1:75:09:df:32:f7:53:ae:eb:b4:c5:48:63:97:f4:da:2d: bc:06:31:fb:6c:7c:5c:4b:72:c4:54:e1:03:10:44:1b:e1:1e: bc:6f:78:a7:6d:d8:a2:47:06:74:90:b9:e6:73:11:c1:24:d6: c0:86:9e:cb:d2:51:b6:0e:4d:cd:bc:61:30:5b:ef:22:98:5c: 55:c5:b3:72:ed:05:6d:4e:ed:8e:1e:32:d4:ca:3f:d7:59:c0: 88:08:76:81:3a:7e:f3:3d:dd:60:7d:b0:84:3c:cb:cc:b5:ef: 78:d6:6b:55:9c:20:e2:a5:5a:ba:81:b7:88:04:2c:07:61:56: c9:58:e3:de:e3:a9:02:c4:d2:2a:cf:34:e9:3e:af:7e:09:8e: 02:c1:2c:a0:fe:79:d9:60:9c:4e:22:96:5c:e5:1f:d5:a6:c8: b0:75:79:e2:87:34:ec:81:86:4a:02:d5:86:ca:3b:03:5c:2b: 2e:e1:51:88:7e:57:6c:3a:f9:9a:48:58:57:c4:48:c3:6d:01: da:02:b0:12:bd:f8:28:5e:ea:36:97:62:93:21:15:ab:01:0a: 00:b0:8e:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkwyvrkC8d1kvn03rDqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2U1YjI4NDY2YjkyNzQyNTI2MDMxMzkyZDk0YmYxYTU1 OGU4NDQwHhcNMjUxMjA2MTkwMTIzWhcNMjUxMjA3MTkwMTIzWjAzMTEwLwYDVQQD Eyg5NjY2MzRlYzk1YzVjOWMyYzM1NWYxZmNkNzA3MGNlNzIyMTc2MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuWQYMFT1RPWDX2rmYShWRscdkDs 8dopqZdZttH6bY3b4E2kSE2iHyaJ+R4APR3H8nj1VvggIsR1vcGj5I+eJrOPumQv cvOC/qQ+qDpMsmgNp4Rlg5QTdJJgmITaIJXZNa6PK4+orG3tu1HZjc09HcujCa9P y9v0LVhEp8VXuCFPzR4DDhpnesTNgw4wSvIN+f+1l6qOpx/xTwAVcskFO2RG6xSO 31L2kYRQw1RWXpKLA7iiiL9iLinlvXhLziRxnsCgHVaxz94jtulkXwo2xol0MSiO WRzXGI4ySmr2WqChnwwnKjiUZ60PQBccp+1wpOtaDUJAXbhS2O+rs4kFBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZmNOyVxcnCw1Xx/NcHDOciF2BmMB8GA1UdIwQY MBaAFAbOWyhGa5J0JSYDE5LZS/GlWOhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGIt NDg1YjIwOTUyZDkzLzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGItNDg1YjIwOTUyZDkz LzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGm4FlRQ eNDUN+ISYn473LVgR+6ngGBYKzuN7IZ+uObF+9mU5bF1Cd8y91Ou67TFSGOX9Not vAYx+2x8XEtyxFThAxBEG+EevG94p23YokcGdJC55nMRwSTWwIaey9JRtg5Nzbxh MFvvIphcVcWzcu0FbU7tjh4y1Mo/11nAiAh2gTp+8z3dYH2whDzLzLXveNZrVZwg 4qVauoG3iAQsB2FWyVjj3uOpAsTSKs806T6vfgmOAsEsoP552WCcTiKWXOUf1abI sHV54oc07IGGSgLVhso7A1wrLuFRiH5XbDr5mkhYV8RIw20B2gKwEr34KF7qNpdi kyEVqwEKALCOAA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:21:12 2025 by rpki-client