This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json) Hash identifier: g1sAdrSfrRSmRKG/oE28j6QDLwZq12IStDJq2Bp5taE= Subject key identifier: 27:3D:81:38:62:5E:AD:EE:C1:A9:E8:CF:53:88:86:C0:E1:A0:E8:2C Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Certificate serial: 019AF0BF9A03D162C2689487BA8F0919D32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft Manifest number: 0E9D Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=) 2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: 91TDKzWjiaIu+/FB7pL3O3wvSFPgqA2GENZI9zBxjps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9a:03:d1:62:c2:68:94:87:ba:8f:09:19:d3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=273d8138625eadeec1a9e8cf538886c0e1a0e82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:54:eb:7c:a1:d8:e2:0d:7e:3d:41:84:8c: 96:87:6a:b1:fb:91:91:f1:f7:24:7b:d5:5f:e1:c8: c7:68:1f:d5:ef:13:00:53:fc:55:bd:ab:bf:3e:e9: 3d:82:24:26:61:eb:4a:b9:81:63:08:fe:00:a9:58: 3d:cb:71:ad:90:e3:37:72:ee:dd:c1:1e:84:16:69: 14:cf:1f:42:54:70:6f:4e:e4:96:01:69:0a:ee:8e: 13:bf:14:9e:b2:ce:f2:2f:53:7a:e0:f4:91:f9:c9: 52:99:06:09:84:3f:89:92:05:71:52:7b:14:11:53: 06:29:4d:50:c4:c1:0a:9b:47:2b:1a:16:83:19:c1: ba:c0:80:d8:b8:3d:50:4b:8e:7a:55:a3:41:87:a5: 2f:c7:8f:1c:bd:d6:0c:0f:ac:2f:cf:66:21:b9:fd: 72:79:ff:6b:04:7c:d2:26:32:b7:46:7e:71:5e:35: e0:cb:55:27:21:3d:08:e6:e7:ff:ce:0a:08:f4:09: d6:2c:fc:0e:4d:b5:74:89:58:68:47:7e:ac:74:65: 57:c6:3e:bd:b6:a4:f5:79:37:8f:9f:14:af:58:ed: 92:43:4c:54:ca:9a:a8:1e:af:f6:a0:3d:b7:a6:06: 61:1a:9b:35:e4:99:8b:dc:91:e1:68:da:c1:30:61: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3D:81:38:62:5E:AD:EE:C1:A9:E8:CF:53:88:86:C0:E1:A0:E8:2C X509v3 Authority Key Identifier: keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7e:3a:cd:23:40:f2:11:20:56:d4:18:25:6d:b6:ec:41:17: a5:ae:ef:fb:ec:29:17:00:2a:d4:4b:37:46:38:54:1a:f1:c4: c7:b9:82:4b:96:56:e2:50:2c:78:85:da:3e:10:f7:cc:2e:36: 0b:b0:f3:dc:83:bf:60:78:38:de:e4:64:1c:7c:7b:c6:2d:fe: f5:34:f3:58:96:34:01:f1:d6:83:02:a3:cf:56:e8:22:d7:f9: 53:ba:07:14:46:d8:4f:ae:e9:a8:2b:c4:cc:01:b7:e3:b9:96: 44:90:3a:84:a2:1d:17:82:ca:b3:3b:85:e0:d6:40:db:ec:6c: 7d:8c:11:34:76:99:d1:2b:81:cf:20:88:cd:1e:3a:58:eb:6c: f9:21:57:42:48:b0:f2:67:6c:f3:d5:78:b4:96:81:e2:fa:d3: 3c:40:23:9b:b8:a9:a8:d5:3f:d5:4d:60:a0:ff:89:c1:89:67: 0e:3e:b2:12:c9:e7:5a:ee:8b:09:26:6e:c4:26:8f:85:b4:f0: 75:ad:fe:89:ba:d1:40:6b:3d:86:3b:01:84:3f:4e:b3:fe:90: 17:42:49:b8:6e:35:17:da:b1:09:b3:4c:46:70:df:b7:ea:4c: 57:01:66:5b:e4:a8:8a:d5:42:75:0f:c4:9c:c6:93:e7:66:15: 9b:65:b5:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5oD0WLCaJSHuo8JGdMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VlMmI4NDAwMjA4YTdlZWE0NTA2MGY0YjdhODNjNDNl OGRlN2MwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EygyNzNkODEzODYyNWVhZGVlYzFhOWU4Y2Y1Mzg4ODZjMGUxYTBlODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LFU63yh2OINfj1BhIyWh2qx+5GR 8fcke9Vf4cjHaB/V7xMAU/xVvau/Puk9giQmYetKuYFjCP4AqVg9y3GtkOM3cu7d wR6EFmkUzx9CVHBvTuSWAWkK7o4TvxSess7yL1N64PSR+clSmQYJhD+JkgVxUnsU EVMGKU1QxMEKm0crGhaDGcG6wIDYuD1QS456VaNBh6Uvx48cvdYMD6wvz2Yhuf1y ef9rBHzSJjK3Rn5xXjXgy1UnIT0I5uf/zgoI9AnWLPwOTbV0iVhoR36sdGVXxj69 tqT1eTePnxSvWO2SQ0xUypqoHq/2oD23pgZhGps15JmL3JHhaNrBMGFEawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCc9gThiXq3uwanoz1OIhsDhoOgsMB8GA1UdIwQY MBaAFG4+4rhAAgin7qRQYPS3qDxD6N58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUt NzMyN2RmNmJkZDEwLzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUtNzMyN2RmNmJkZDEw LzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe346zSNA 8hEgVtQYJW227EEXpa7v++wpFwAq1Es3RjhUGvHEx7mCS5ZW4lAseIXaPhD3zC42 C7Dz3IO/YHg43uRkHHx7xi3+9TTzWJY0AfHWgwKjz1boItf5U7oHFEbYT67pqCvE zAG347mWRJA6hKIdF4LKszuF4NZA2+xsfYwRNHaZ0SuBzyCIzR46WOts+SFXQkiw 8mds89V4tJaB4vrTPEAjm7ipqNU/1U1goP+JwYlnDj6yEsnnWu6LCSZuxCaPhbTw da3+ibrRQGs9hjsBhD9Os/6QF0JJuG41F9qxCbNMRnDft+pMVwFmW+SoitVCdQ/E nMaT52YVm2W1fA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:41 2025 by rpki-client