This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft File: bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft (raw, json) Hash identifier: 8eEF35R8jO2VZnkd6v61B8FRfrtr6hpEitdK9x/2s+w= Subject key identifier: 82:57:71:12:A6:BA:F1:08:86:82:B3:61:FE:E2:F3:E3:CE:89:EB:F4 Authority key identifier: 6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 Certificate issuer: /CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Certificate serial: 019AF19B65A4CE643A0DA00E188C6F28061D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft Manifest number: 030C Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: ZX73IV0uGk2ob4VktyJV9wBSBac.roa (hash: Z5WvoiItJu0epzg3OUDQ1qokvJ24J2oFtkaMgOd6bHY=) 2: bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl (hash: 51o7xXtINeEtGdWV8TSScl9aNRmCD0V43v7N7SId+/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:65:a4:ce:64:3a:0d:a0:0e:18:8c:6f:28:06:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=82577112a6baf1088682b361fee2f3e3ce89ebf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:74:dc:9e:50:3f:ef:36:d5:7a:fb:55:b6: ed:44:19:3f:ee:8c:56:7e:32:96:e5:6e:a6:d6:e8: dc:0d:0a:9f:1e:40:14:34:66:53:f6:bf:c2:f5:98: 69:5c:49:08:61:21:d7:29:e0:13:dc:51:52:50:93: e6:3c:6d:01:76:ba:22:69:99:a7:fa:78:cd:0a:a6: 60:b4:b0:53:08:32:17:92:77:88:9a:29:ae:83:d4: 14:88:03:5b:f3:2f:65:78:58:8e:3a:77:02:ea:7d: 42:b2:fb:79:f3:46:c2:87:f2:7d:4a:cc:cd:88:09: 9c:b1:4a:4c:6b:f4:ac:45:62:1e:bb:63:7e:88:87: e2:8d:93:63:57:df:1f:c0:c9:3e:ae:47:92:dd:78: 89:4e:f8:39:62:1b:0f:49:da:9e:5d:03:e4:01:a4: e1:71:d2:3a:f4:ef:63:d3:70:44:ad:ef:27:08:28: 35:94:ac:59:7f:b8:50:04:3c:78:cb:1d:62:ec:05: 4e:63:a6:27:bf:5f:e1:8c:c3:1b:43:ca:4c:14:fa: 9f:07:b3:11:0b:f4:51:70:d1:07:cf:a7:02:22:2b: d5:9a:e8:b3:2e:d1:b4:63:04:e6:23:f4:09:81:3d: 9d:71:2d:6b:91:04:e9:e3:cb:91:06:cf:a9:69:0b: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:71:12:A6:BA:F1:08:86:82:B3:61:FE:E2:F3:E3:CE:89:EB:F4 X509v3 Authority Key Identifier: keyid:6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:53:6c:c7:e6:a6:56:e8:cf:7e:85:a0:e9:75:b8:e7:1c:86: 09:46:59:17:c1:fb:f2:71:94:f6:09:c4:37:93:fc:25:18:80: f7:7f:eb:d6:7f:32:52:42:34:40:20:98:1a:45:b6:c4:7b:8b: 98:7c:56:e8:df:21:94:76:b4:85:52:83:e8:f4:8f:21:f5:0a: 53:d1:3c:dd:19:69:12:7a:39:c8:fc:39:b2:a3:0b:dc:fb:2d: 24:0d:92:53:54:9f:24:20:dd:30:0d:22:b6:80:f3:b8:1c:bf: aa:01:cc:f2:ea:86:9b:23:8f:27:7d:38:c6:14:e9:9a:92:46: b9:50:d0:bd:af:da:dd:ee:00:f8:c1:a0:03:1a:15:d0:7a:69: 5b:d8:07:89:33:f5:3f:2d:1a:b1:17:0c:df:36:b1:16:c8:23: a0:3a:1f:69:2d:c2:6e:a8:56:81:a5:5b:e6:73:f7:84:6d:a2: 98:52:79:4b:8a:f7:02:2f:62:e5:69:c5:35:1b:af:3b:1d:a5: 03:95:22:27:ba:ac:75:e5:27:12:9f:f5:65:6f:06:56:6c:7c: 8a:4a:74:b6:e0:05:3e:05:9e:f0:ed:40:b1:e3:14:5c:59:95: 2c:a2:bf:1e:2f:65:63:9c:86:57:3f:80:7b:b5:88:5c:9d:6c: 19:da:19:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2WkzmQ6DaAOGIxvKAYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjRhODY3ZjQ1YzQ4ZjIwMjdiMDBiODNjNzc3OTZmYmJi ZTAzMjgwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD Eyg4MjU3NzExMmE2YmFmMTA4ODY4MmIzNjFmZWUyZjNlM2NlODllYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30Z03J5QP+821Xr7VbbtRBk/7oxW fjKW5W6m1ujcDQqfHkAUNGZT9r/C9ZhpXEkIYSHXKeAT3FFSUJPmPG0BdroiaZmn +njNCqZgtLBTCDIXkneImimug9QUiANb8y9leFiOOncC6n1Csvt580bCh/J9SszN iAmcsUpMa/SsRWIeu2N+iIfijZNjV98fwMk+rkeS3XiJTvg5YhsPSdqeXQPkAaTh cdI69O9j03BEre8nCCg1lKxZf7hQBDx4yx1i7AVOY6Ynv1/hjMMbQ8pMFPqfB7MR C/RRcNEHz6cCIivVmuizLtG0YwTmI/QJgT2dcS1rkQTp48uRBs+paQv6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJXcRKmuvEIhoKzYf7i8+POiev0MB8GA1UdIwQY MBaAFG1kqGf0XEjyAnsAuDx3eW+7vgMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUt YjA2MjNlYTdmYjAxLzEvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUtYjA2MjNlYTdmYjAx LzEvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlNsx+am VujPfoWg6XW45xyGCUZZF8H78nGU9gnEN5P8JRiA93/r1n8yUkI0QCCYGkW2xHuL mHxW6N8hlHa0hVKD6PSPIfUKU9E83RlpEno5yPw5sqML3PstJA2SU1SfJCDdMA0i toDzuBy/qgHM8uqGmyOPJ304xhTpmpJGuVDQva/a3e4A+MGgAxoV0HppW9gHiTP1 Py0asRcM3zaxFsgjoDofaS3CbqhWgaVb5nP3hG2imFJ5S4r3Ai9i5WnFNRuvOx2l A5UiJ7qsdeUnEp/1ZW8GVmx8ikp0tuAFPgWe8O1AseMUXFmVLKK/Hi9lY5yGVz+A e7WIXJ1sGdoZ/w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:03 2025 by rpki-client