This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json) Hash identifier: IZocgxL3ZKfS5xLV7RAF6NSVVAiQm92IksvK/jPw7d0= Subject key identifier: D4:77:C2:CE:3C:C8:5A:1A:22:44:2E:88:12:81:3C:E1:10:94:A5:5A Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Certificate serial: 019AF051B95F7F1E183069D49B11FCB62366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft Manifest number: 0DF2 Signing time: Fri 05 Dec 2025 21:01:18 +0000 Manifest this update: Fri 05 Dec 2025 21:01:18 +0000 Manifest next update: Sat 06 Dec 2025 21:01:18 +0000 Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=) 2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: Q7Exn7/myF52bvIU+khe8OLTLa1SF/WBamjpyCy1abo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:b9:5f:7f:1e:18:30:69:d4:9b:11:fc:b6:23:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Validity Not Before: Dec 5 21:01:18 2025 GMT Not After : Dec 6 21:01:18 2025 GMT Subject: CN=d477c2ce3cc85a1a22442e8812813ce11094a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:67:80:a0:af:0b:32:07:a0:97:87:be:7d: e6:9d:f9:f3:b2:65:2f:a3:f2:4e:c8:15:4b:1e:a3: da:43:33:81:ed:8f:61:6f:b9:42:61:8e:e9:47:46: 38:2b:91:3e:86:da:33:59:36:d3:f5:82:26:f5:23: 6c:08:a4:49:f6:52:20:49:c9:c6:de:60:4b:aa:c1: 38:4f:f9:51:42:3b:d6:02:0d:ca:22:5c:2f:b0:4b: aa:36:7a:1b:38:ef:38:40:b2:d3:b7:64:36:8c:a9: 05:da:dd:12:39:a3:f2:c1:3e:ab:10:42:9a:c9:84: 22:5c:c7:04:ef:b0:3f:53:fa:90:39:11:07:66:c4: 25:86:12:bb:54:43:01:51:4a:b5:1c:ef:7c:f9:e4: 07:09:9d:92:93:16:0f:bb:a2:14:d4:63:da:07:15: 82:13:d7:5b:31:6d:d2:53:f1:ba:fa:5f:35:84:4a: 9e:01:9e:db:bf:4b:4f:6d:48:22:06:05:87:4b:f1: 3b:77:aa:bb:9e:0c:70:f2:ec:e2:71:b2:e5:3c:2e: ab:3b:3b:14:b4:71:c1:4b:ce:06:9b:83:6e:8a:e1: 23:be:e4:a3:68:87:0e:23:d0:67:49:44:c2:52:ad: 0b:34:5e:b9:87:a7:10:fa:30:40:ce:ea:4f:5e:d2: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:77:C2:CE:3C:C8:5A:1A:22:44:2E:88:12:81:3C:E1:10:94:A5:5A X509v3 Authority Key Identifier: keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:39:d3:95:c4:10:73:27:b5:43:74:2d:79:c8:f1:d9:76:08: e7:be:4a:90:c9:f4:37:07:5c:59:97:94:7c:82:fc:74:c1:2f: c6:10:8b:58:4c:5a:0c:c8:d0:f0:02:12:47:18:b3:65:94:2c: 9d:99:f9:19:8b:8a:63:ec:37:9a:c8:f8:bc:88:db:35:94:ea: 26:35:ed:39:be:e4:82:10:77:07:fc:50:19:9c:20:93:a1:3a: 30:8d:a2:01:ad:19:36:12:e0:21:8d:5d:62:a2:04:1a:4c:43: 9e:61:95:42:15:e0:4d:80:e4:f1:b3:57:8e:73:51:62:10:6a: ba:19:37:d1:45:ee:e0:ff:1a:62:38:ae:50:36:fe:5d:b2:55: 7d:2d:53:f9:38:0b:11:87:a1:bc:09:92:b8:c7:48:aa:ed:d5: 79:8b:dc:17:02:88:69:68:90:24:fa:a4:c1:7c:4b:5c:c8:bd: ef:05:0f:eb:db:98:b6:9e:3f:a7:65:43:60:40:39:9a:ed:03: e5:72:df:08:af:91:3e:98:d3:d9:bf:e7:a2:6c:59:70:52:e6: a2:b2:b1:90:b5:70:d3:11:a1:bd:0e:60:43:67:1a:a8:0d:89: 83:94:76:86:07:34:e2:4d:cb:70:06:9f:96:fa:5d:af:e8:49: 47:6e:e6:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUblffx4YMGnUmxH8tiNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOWIzZTE5ZmQxZjQzMGY1MTQ1ZDZkYjkyNDFhNTA1N2Vk OTZjYjMwHhcNMjUxMjA1MjEwMTE4WhcNMjUxMjA2MjEwMTE4WjAzMTEwLwYDVQQD EyhkNDc3YzJjZTNjYzg1YTFhMjI0NDJlODgxMjgxM2NlMTEwOTRhNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QpngKCvCzIHoJeHvn3mnfnzsmUv o/JOyBVLHqPaQzOB7Y9hb7lCYY7pR0Y4K5E+htozWTbT9YIm9SNsCKRJ9lIgScnG 3mBLqsE4T/lRQjvWAg3KIlwvsEuqNnobOO84QLLTt2Q2jKkF2t0SOaPywT6rEEKa yYQiXMcE77A/U/qQOREHZsQlhhK7VEMBUUq1HO98+eQHCZ2SkxYPu6IU1GPaBxWC E9dbMW3SU/G6+l81hEqeAZ7bv0tPbUgiBgWHS/E7d6q7ngxw8uzicbLlPC6rOzsU tHHBS84Gm4NuiuEjvuSjaIcOI9BnSUTCUq0LNF65h6cQ+jBAzupPXtKTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR3ws48yFoaIkQuiBKBPOEQlKVaMB8GA1UdIwQY MBaAFGybPhn9H0MPUUXW25JBpQV+2WyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgt MGJhYTc3NzhhY2U3LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgtMGJhYTc3NzhhY2U3 LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTnTlcQQ cye1Q3Qtecjx2XYI575KkMn0NwdcWZeUfIL8dMEvxhCLWExaDMjQ8AISRxizZZQs nZn5GYuKY+w3msj4vIjbNZTqJjXtOb7kghB3B/xQGZwgk6E6MI2iAa0ZNhLgIY1d YqIEGkxDnmGVQhXgTYDk8bNXjnNRYhBquhk30UXu4P8aYjiuUDb+XbJVfS1T+TgL EYehvAmSuMdIqu3VeYvcFwKIaWiQJPqkwXxLXMi97wUP69uYtp4/p2VDYEA5mu0D 5XLfCK+RPpjT2b/nomxZcFLmorKxkLVw0xGhvQ5gQ2caqA2Jg5R2hgc04k3LcAaf lvpdr+hJR27mTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:16 2025 by rpki-client