This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json) Hash identifier: PZO0wvFPO1apN4zJwUNQVaBPpsFWqQFpLdFapwLI8pw= Subject key identifier: 96:70:9B:D2:AD:3C:83:AC:4E:D8:06:78:6F:25:97:CE:A6:CE:B3:C0 Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Certificate serial: 019AF240246DB560E1A0428578539BC5F4FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft Manifest number: 144D Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=) 2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: 2h0bkysiaUBv/ZF08QC60xnyMaQvGaremklzY5If8CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:24:6d:b5:60:e1:a0:42:85:78:53:9b:c5:f4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=96709bd2ad3c83ac4ed806786f2597cea6ceb3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:a7:09:c4:75:05:21:91:01:c0:f5:99:46: 95:af:2f:3d:83:df:b2:4a:fb:cf:e3:ad:7d:a7:11: fd:5f:6c:fa:3d:42:2b:9c:f7:06:a7:91:ff:01:a0: 61:f6:b2:63:a4:0c:63:1c:c2:b9:62:4d:b3:26:35: c9:12:f4:57:8b:e7:da:c3:9e:52:2b:73:57:dc:b5: 86:f7:c7:78:aa:f9:3f:da:e1:4a:95:13:80:ec:dc: 08:bf:99:9b:d5:cf:4d:92:48:c4:87:17:c6:5c:ce: 53:0c:3b:a9:f4:d7:6c:d6:67:85:81:11:d9:15:89: 5c:62:2c:33:82:17:ad:a2:b6:8b:fd:59:f1:e1:16: ab:78:91:26:c0:60:4e:b1:4d:7b:5e:d9:04:c6:d6: e0:cd:69:c9:5b:52:74:81:81:f9:cd:ea:23:4d:00: 8a:ef:11:aa:44:49:d5:7a:bf:6b:ef:f7:71:cf:a5: 97:2e:6c:90:28:49:20:88:3e:a8:48:a1:75:f9:0f: 45:f4:da:15:d8:25:8f:3f:79:39:a8:16:52:9a:77: df:bf:cf:14:d5:f1:8d:0b:f7:dd:30:69:52:7a:1d: 04:4e:d9:e5:3a:1a:7d:1d:31:ec:11:f0:58:0e:63: 67:3e:36:25:dc:85:ff:4c:99:ce:dc:8d:d8:f8:d2: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:9B:D2:AD:3C:83:AC:4E:D8:06:78:6F:25:97:CE:A6:CE:B3:C0 X509v3 Authority Key Identifier: keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:fe:7f:6a:a0:6f:d3:84:62:cd:10:31:51:ab:4d:a8:72: 21:47:ee:b9:e8:98:ab:40:6e:41:ba:bb:ef:33:69:03:22:52: fa:00:52:cc:28:19:3c:c0:1b:4d:64:54:fd:cf:90:01:0f:85: 36:89:80:8c:d0:b2:1f:7d:cc:46:de:9e:40:26:6b:de:9d:96: af:ed:e1:05:05:35:b2:c0:e8:68:9e:e9:0f:bb:d8:71:27:77: 16:3e:e4:80:9b:db:dd:54:3d:0f:1b:36:30:c8:19:59:6c:1b: b8:29:82:21:00:a5:dc:ab:c8:05:52:9d:dc:c9:44:ec:6a:6d: 3e:6e:e8:05:00:2a:35:d6:74:ed:27:09:e5:dd:ed:92:95:f3: 36:59:fb:54:ec:a7:08:61:3b:96:dd:7d:24:c4:f5:b8:f1:3d: 9b:b5:c6:d8:30:39:46:92:47:08:78:c5:fc:4a:57:cc:c0:ef: 28:97:15:7c:2f:90:56:0b:7b:15:46:bf:73:d3:4d:00:37:65: b3:39:4f:ae:0d:47:fc:9e:a9:08:98:2d:bd:9d:62:5f:90:ec: 0b:57:53:df:1d:33:13:c1:c6:41:f7:59:81:da:87:bd:16:79: d0:4d:1c:c0:f9:2d:9e:15:2e:04:2f:cf:2f:c1:02:bc:2e:9b: fb:69:aa:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCRttWDhoEKFeFObxfT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh OGU3OGQwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD Eyg5NjcwOWJkMmFkM2M4M2FjNGVkODA2Nzg2ZjI1OTdjZWE2Y2ViM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyomnCcR1BSGRAcD1mUaVry89g9+y SvvP4619pxH9X2z6PUIrnPcGp5H/AaBh9rJjpAxjHMK5Yk2zJjXJEvRXi+faw55S K3NX3LWG98d4qvk/2uFKlROA7NwIv5mb1c9NkkjEhxfGXM5TDDup9Nds1meFgRHZ FYlcYiwzghetoraL/Vnx4RareJEmwGBOsU17XtkExtbgzWnJW1J0gYH5zeojTQCK 7xGqREnVer9r7/dxz6WXLmyQKEkgiD6oSKF1+Q9F9NoV2CWPP3k5qBZSmnffv88U 1fGNC/fdMGlSeh0ETtnlOhp9HTHsEfBYDmNnPjYl3IX/TJnO3I3Y+NLyzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZwm9KtPIOsTtgGeG8ll86mzrPAMB8GA1UdIwQY MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOD+f2qg b9OEYs0QMVGrTahyIUfuueiYq0BuQbq77zNpAyJS+gBSzCgZPMAbTWRU/c+QAQ+F NomAjNCyH33MRt6eQCZr3p2Wr+3hBQU1ssDoaJ7pD7vYcSd3Fj7kgJvb3VQ9Dxs2 MMgZWWwbuCmCIQCl3KvIBVKd3MlE7GptPm7oBQAqNdZ07ScJ5d3tkpXzNln7VOyn CGE7lt19JMT1uPE9m7XG2DA5RpJHCHjF/EpXzMDvKJcVfC+QVgt7FUa/c9NNADdl szlPrg1H/J6pCJgtvZ1iX5DsC1dT3x0zE8HGQfdZgdqHvRZ50E0cwPktnhUuBC/P L8ECvC6b+2mqKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:42 2025 by rpki-client