This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json) Hash identifier: 398OCDzQTM2vyRSY9H9dJJYAMlbX15bRoeqfUGM6w8Q= Subject key identifier: B4:56:62:28:10:B2:97:8E:3A:1D:C7:C3:70:95:23:0B:89:93:B6:0D Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Certificate serial: 019B33E9095BA4D26830694669EAC9781CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft Manifest number: 0E15 Signing time: Fri 19 Dec 2025 00:01:08 +0000 Manifest this update: Fri 19 Dec 2025 00:01:08 +0000 Manifest next update: Sat 20 Dec 2025 00:01:08 +0000 Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=) 2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: yE3OT/fS50lxalpH7ggnwndBPkQ49ykRaKHDm8yAHMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:09:5b:a4:d2:68:30:69:46:69:ea:c9:78:1c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Validity Not Before: Dec 19 00:01:08 2025 GMT Not After : Dec 20 00:01:08 2025 GMT Subject: CN=b456622810b2978e3a1dc7c37095230b8993b60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:74:a8:ac:f3:6d:58:5c:dd:aa:2c:eb:f4: de:d4:36:13:f6:ef:92:1a:75:7f:6d:e7:4c:5f:36: be:30:e3:13:c3:06:d9:39:ef:b1:0f:73:0f:af:51: e3:4a:8a:57:8d:f5:82:4c:ae:6d:fa:97:34:c2:d3: 04:2f:0a:32:24:4c:0d:d8:18:67:5e:fa:70:a6:6f: e4:9c:7a:88:3b:8c:81:7b:fe:33:ae:dd:ff:dc:64: 06:2d:95:40:c8:09:e6:bf:91:1b:a9:ba:76:d3:6c: 6c:40:bb:c8:5a:89:a1:4c:b9:2a:84:ec:c7:df:c1: d5:92:71:d1:d5:44:95:ee:61:a0:39:70:11:de:b6: cf:ab:3e:22:0c:90:3b:32:cf:2d:8f:cf:e6:7e:71: 43:e7:f3:55:9f:ca:35:3a:cc:30:3e:58:bf:f7:4e: 76:e1:fd:1f:2b:22:54:bb:9c:ca:23:1d:7f:77:be: f5:6b:b4:5b:76:4d:51:d8:09:76:5b:c6:a0:5e:1d: 9b:27:93:37:00:a8:93:58:8b:d3:69:e0:bb:a7:b2: f5:18:9b:ac:bf:25:0d:b4:d8:d1:6f:b1:d8:28:6f: b8:1d:7f:36:2c:43:1a:7b:8d:2a:9e:c9:36:f1:e4: a1:72:c8:8b:23:66:02:08:db:f8:46:c4:75:be:1e: 7c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:56:62:28:10:B2:97:8E:3A:1D:C7:C3:70:95:23:0B:89:93:B6:0D X509v3 Authority Key Identifier: keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:f2:44:83:4f:06:84:09:5b:ba:d5:14:c2:8b:23:ed:9e: 10:f0:f7:f2:aa:da:09:bc:2f:65:d8:11:b4:8e:cb:09:2c:25: f8:d9:ff:65:a0:af:60:ff:25:76:17:b0:be:bf:2b:a5:c2:aa: 75:21:c2:5d:9e:28:2f:ad:8b:c2:f9:ca:dd:ec:22:fa:e4:46: e6:a1:85:e9:6c:5a:ce:dd:b9:1c:94:86:99:e2:3d:2b:cc:25: 71:97:3a:d6:27:a8:1c:33:36:cf:e8:74:de:78:a6:7d:19:68: f3:af:2a:9c:98:e6:4d:ed:3d:4b:19:25:a0:c6:d2:92:79:90: 3d:9e:c1:f3:eb:c6:7d:f8:92:b0:52:b0:82:a1:cf:26:3a:f2: cd:f1:02:58:5b:2a:71:25:9e:93:1a:24:31:d5:5d:eb:fa:8e: 52:ce:a7:a1:fa:00:14:da:7a:a4:a6:0e:68:54:ca:ea:99:23: a1:bb:ec:35:88:d9:59:d1:d1:6c:2c:fb:d6:35:0d:08:64:76: d8:34:34:19:32:30:7c:05:a2:e9:1d:c2:d5:59:4a:2d:ed:b6: a0:50:19:86:74:b0:31:3a:90:c9:81:92:a9:89:99:8c:1f:8e: 65:fb:b8:6a:9c:ab:ba:8e:dd:8a:b0:78:4f:93:1f:74:b6:0d: ca:95:62:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6QlbpNJoMGlGaerJeBzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOWIzZTE5ZmQxZjQzMGY1MTQ1ZDZkYjkyNDFhNTA1N2Vk OTZjYjMwHhcNMjUxMjE5MDAwMTA4WhcNMjUxMjIwMDAwMTA4WjAzMTEwLwYDVQQD EyhiNDU2NjIyODEwYjI5NzhlM2ExZGM3YzM3MDk1MjMwYjg5OTNiNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFF0qKzzbVhc3aos6/Te1DYT9u+S GnV/bedMXza+MOMTwwbZOe+xD3MPr1HjSopXjfWCTK5t+pc0wtMELwoyJEwN2Bhn Xvpwpm/knHqIO4yBe/4zrt3/3GQGLZVAyAnmv5Ebqbp202xsQLvIWomhTLkqhOzH 38HVknHR1USV7mGgOXAR3rbPqz4iDJA7Ms8tj8/mfnFD5/NVn8o1OswwPli/9052 4f0fKyJUu5zKIx1/d771a7Rbdk1R2Al2W8agXh2bJ5M3AKiTWIvTaeC7p7L1GJus vyUNtNjRb7HYKG+4HX82LEMae40qnsk28eShcsiLI2YCCNv4RsR1vh58VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRWYigQspeOOh3Hw3CVIwuJk7YNMB8GA1UdIwQY MBaAFGybPhn9H0MPUUXW25JBpQV+2WyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgt MGJhYTc3NzhhY2U3LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgtMGJhYTc3NzhhY2U3 LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ77yRINP BoQJW7rVFMKLI+2eEPD38qraCbwvZdgRtI7LCSwl+Nn/ZaCvYP8ldhewvr8rpcKq dSHCXZ4oL62LwvnK3ewi+uRG5qGF6Wxazt25HJSGmeI9K8wlcZc61ieoHDM2z+h0 3nimfRlo868qnJjmTe09SxkloMbSknmQPZ7B8+vGffiSsFKwgqHPJjryzfECWFsq cSWekxokMdVd6/qOUs6nofoAFNp6pKYOaFTK6pkjobvsNYjZWdHRbCz71jUNCGR2 2DQ0GTIwfAWi6R3C1VlKLe22oFAZhnSwMTqQyYGSqYmZjB+OZfu4apyruo7dirB4 T5MfdLYNypVi5A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:20:56 2025 by rpki-client