$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: WBmTKe8/osG+ENm8VSPlSsG4WWyNgWCg3K8peH1+TnI= Subject key identifier: B3:C7:31:CA:FE:0B:7D:FF:7C:CD:47:89:5E:74:18:8B:BE:59:FC:EB Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019E1DFDDF1CDFB2F043372C0D2EF67317ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 19FA Signing time: Tue 12 May 2026 21:00:37 +0000 Manifest this update: Tue 12 May 2026 21:00:37 +0000 Manifest next update: Wed 13 May 2026 21:00:37 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 3: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 4: CwSwlWEMxKmEbm7Fh8341EL5WPo.roa (hash: pVWBYLZnlT9dlcF7UUyaYY/PT+2NOHTf0E1fdydOrro=) 5: DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa (hash: RjKMh5gW8pzBFR6f7By8eZXYSn1q9xeUUivYB7s0Dqk=) 6: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 7: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 8: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 9: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 10: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 11: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 12: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 13: _NYoKUb2N9O5Kuha08Z6TeOlAr8.roa (hash: hBPKH/sFoPLiqzPdXoKvs5WcXNHmeMzZr7pF/u9rRGI=) 14: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: dn+ujA0Ri7/ExkHEnsRSsxrhntMezvuYVxwH+SXtdl0=) 15: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 16: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 17: nFyN-ptamRmcdnuqyi6zn2Q097U.roa (hash: HAKMJDx55YclCFLSNlNj682x77+ElstqJrsvd8bsK8A=) 18: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 19: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fd:df:1c:df:b2:f0:43:37:2c:0d:2e:f6:73:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: May 12 21:00:37 2026 GMT Not After : May 13 21:00:37 2026 GMT Subject: CN=b3c731cafe0b7dff7ccd47895e74188bbe59fceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:a2:86:28:cd:ea:e2:2d:eb:3e:32:67:14: 00:f1:27:25:b8:d1:61:95:df:ae:66:28:a5:88:73: b7:fe:8e:4d:ee:58:05:54:1a:ce:fe:88:45:fe:bb: dd:4f:c3:a9:70:ae:47:10:82:44:f0:75:7b:99:2c: 07:45:8e:58:17:4a:c2:30:3f:f4:4d:86:fe:86:5d: 86:f7:0e:98:c1:6c:b2:aa:24:bd:6c:81:bd:4d:54: f2:7a:15:f7:88:16:4c:48:4e:dc:71:77:0d:52:08: 2f:b8:63:79:12:6f:a1:11:f3:00:7e:17:ea:5a:ca: f5:89:d3:95:2b:03:e8:71:bd:8c:ca:72:9d:17:a0: f1:f7:67:d1:3b:50:c6:e6:e5:66:07:49:81:6d:95: c5:7b:68:1f:79:66:62:f2:4d:56:c1:5c:6f:e0:61: e6:7d:03:21:ab:48:c1:9d:ef:95:ca:7f:50:d1:d5: 3c:ce:a0:c2:de:e8:f5:32:5d:3b:f6:34:c9:36:ec: 62:da:9b:39:f1:6a:2a:d9:85:91:02:28:87:a4:9a: ef:f9:49:12:33:d7:7e:ed:43:fa:4f:f1:3d:77:56: 50:b0:6e:54:ad:e0:28:26:f9:de:da:ab:c6:b7:64: 28:81:45:94:25:14:ff:ce:0b:a5:bc:0f:9c:b3:13: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C7:31:CA:FE:0B:7D:FF:7C:CD:47:89:5E:74:18:8B:BE:59:FC:EB X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:64:5a:25:b5:e3:fd:14:63:b2:0c:e6:7a:e0:71:65:ab:91: 1e:2b:e9:bc:95:e0:74:01:9d:78:02:48:87:a3:d3:10:59:66: e7:4c:32:71:85:af:03:6b:c0:cc:59:3a:fc:95:0b:0e:e8:fb: 57:0b:2c:11:92:14:0a:a8:15:55:87:c9:2b:9e:9e:0a:ed:ab: 7d:c0:43:92:3f:4e:f3:b7:9e:06:aa:67:38:96:61:83:64:72: db:4c:ae:7f:a4:54:6d:2f:01:1c:12:a4:db:c9:d9:51:f2:f7: 11:82:3a:bf:ef:94:60:e2:0e:04:7d:e0:09:e7:17:70:a8:d2: 8d:ee:ba:59:98:85:13:3c:12:9c:f4:8f:a5:e9:6a:73:46:20: b6:5c:b0:14:75:be:ea:2b:e9:e1:87:9a:38:ad:e4:14:82:91: 49:ef:d0:ab:25:92:fa:63:9a:58:c6:f8:4a:23:88:c2:a5:e0: 0a:20:28:7b:cf:96:20:41:9a:22:c4:4d:d1:43:88:18:3c:47: 5b:74:2a:c9:57:f5:e6:5b:47:7b:5e:5a:92:53:0a:d0:50:95: 83:9a:ae:de:2d:b9:dc:aa:b0:e2:e3:38:e4:14:c5:23:d5:5b: 93:f1:e8:4e:15:20:66:ac:9f:d6:96:e4:0d:ef:62:58:2a:67: 9e:21:ae:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/d8c37LwQzcsDS72cxftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwNTEyMjEwMDM3WhcNMjYwNTEzMjEwMDM3WjAzMTEwLwYDVQQD EyhiM2M3MzFjYWZlMGI3ZGZmN2NjZDQ3ODk1ZTc0MTg4YmJlNTlmY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DSihijN6uIt6z4yZxQA8ScluNFh ld+uZiiliHO3/o5N7lgFVBrO/ohF/rvdT8OpcK5HEIJE8HV7mSwHRY5YF0rCMD/0 TYb+hl2G9w6YwWyyqiS9bIG9TVTyehX3iBZMSE7ccXcNUggvuGN5Em+hEfMAfhfq Wsr1idOVKwPocb2MynKdF6Dx92fRO1DG5uVmB0mBbZXFe2gfeWZi8k1WwVxv4GHm fQMhq0jBne+Vyn9Q0dU8zqDC3uj1Ml079jTJNuxi2ps58Woq2YWRAiiHpJrv+UkS M9d+7UP6T/E9d1ZQsG5UreAoJvne2qvGt2QogUWUJRT/zgulvA+csxOeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPHMcr+C33/fM1HiV50GIu+WfzrMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWRaJbXj /RRjsgzmeuBxZauRHivpvJXgdAGdeAJIh6PTEFlm50wycYWvA2vAzFk6/JULDuj7 VwssEZIUCqgVVYfJK56eCu2rfcBDkj9O87eeBqpnOJZhg2Ry20yuf6RUbS8BHBKk 28nZUfL3EYI6v++UYOIOBH3gCecXcKjSje66WZiFEzwSnPSPpelqc0YgtlywFHW+ 6ivp4YeaOK3kFIKRSe/QqyWS+mOaWMb4SiOIwqXgCiAoe8+WIEGaIsRN0UOIGDxH W3QqyVf15ltHe15aklMK0FCVg5qu3i253Kqw4uM45BTFI9Vbk/HoThUgZqyf1pbk De9iWCpnniGuLg== -----END CERTIFICATE-----Generated at Wed May 13 01:30:03 2026 by rpki-client