This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: ISpC8w42xnvGViU4Myi3oUwk/wW9P5YhBYfHJP+OrPI= Subject key identifier: 9A:90:BD:64:9A:11:88:C0:A3:24:A8:39:E0:8E:99:78:76:D4:2F:67 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019AF2AD57A5E4F260B14A8EBFE697B79CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1817 Signing time: Sat 06 Dec 2025 08:00:37 +0000 Manifest this update: Sat 06 Dec 2025 08:00:37 +0000 Manifest next update: Sun 07 Dec 2025 08:00:37 +0000 Files and hashes: 1: 0SqzGu12mDjFCGhzy8gHIULllqg.roa (hash: q/N5B3QV4KYlMCuam0x9LaRBbkHiisoMmXCRQH3slec=) 2: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=) 3: 96ar9m-bGL-MgyLfFLGB37-jKJw.roa (hash: Th24yD0i3kvTxzcR1uGKbyFN4whCra0flQBFeq2u56c=) 4: DMU_aIcyb1Vc75XYJcX4vi2cDvU.roa (hash: pjI6X+pQOe2R09LsK8L6Rawer2dh9ao4xbJxBTO+JTo=) 5: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=) 6: HAicZvITeyleor-6egpXMr7Qpw4.roa (hash: e7xMYcGEuBR+nLo70n2qEgYYrjFEpdzgW97wkgGJRs0=) 7: K4j3TVsL4gnmFiz9srl9RAcBvvY.roa (hash: wFXlK8wv1SsW+ShrU0Dc1r1iGz+dGvdi49gKuqhv10g=) 8: Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa (hash: QyWcllmsgsfma+CXqtcPhBcL7qxdhG/KE09cbC5TDFE=) 9: RKnIbaV6UL_9ANWtNqGZZQu3yts.roa (hash: jyYhVILnHC5qMnxjfXjvdXIkELevKM9iXOHgHKyLBGQ=) 10: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=) 11: VWCKQLWfEJArBPgjqn1y3QF-M0s.roa (hash: Pvnjz6Z1kdnTY2B8V2B0JwmeucbK2OLPuOj7UzzKFk8=) 12: Wxba01eGRfIHYvB1oPclxJQ4A0o.roa (hash: sSvWgZ3B4RqSdjjqU7MubuyAeeaSCSvFOe1guspwNLI=) 13: _h9AODovq2GhOGrjLkPm9SyWyx8.roa (hash: dbOF0jcoU5VY3U2UHZU8nNHTXtw4IMS6DIod3uhn5e4=) 14: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (hash: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=) 15: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=) 16: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: MP/yhI8jFr7mglXImPAV78xDOrzl56slqqM+S+AKk9w=) 17: dNq1dUWXo15xfK5j2ALgaL9-X9M.roa (hash: mGCrS09whic27p0ypY0pInzSeZzWepSv0K6RiezO+4c=) 18: djMikuYz3yCm97P-DzPXL9TYHjc.roa (hash: 0IBcSqAWmogWwXBfEY0I/B7VyxtvIhIyNl18CRYGvtc=) 19: ehzoTGjbNkpnmtN3df5RDTE7dsQ.roa (hash: 8+V1yBR2+wN28LqaXOLpfqGe3IHXdmal6QzIanPbirA=) 20: kE5nlhJvTfIzLJZVXVNcpDU2q48.roa (hash: /vsjwwIo0DhK7AoxraX/xZA1x2+X4AIcHmKTnqNfNoE=) 21: mazjpEOiTRGyO0IL263f_3CQd1U.roa (hash: MKiEFvVqubL0G1YHY988sj28nrhwlcgHnMA3zXfPogY=) 22: n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa (hash: yMYv0kAJ/QEz5fR9SrsfYu/yiezyRaShWj8NQosvLuo=) 23: oDvyhw0Z5BzGywcGv613xbb1a04.roa (hash: TggFNJyRaWKwfnI72CJfFi7OzR+7gBXBZSwCOfYLwgM=) 24: vvKX9oflY3swSadfJukjOxOYg3M.roa (hash: wjPx8ZTmwvSDu1PVRFMY+WcMogZCOGW5+T7IBF9kYL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:57:a5:e4:f2:60:b1:4a:8e:bf:e6:97:b7:9c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Dec 6 08:00:37 2025 GMT Not After : Dec 7 08:00:37 2025 GMT Subject: CN=9a90bd649a1188c0a324a839e08e997876d42f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:95:f3:61:cd:38:d1:79:8d:a3:8b:73:45: d6:ed:38:38:aa:80:6a:2b:97:87:5c:2b:95:70:ad: b1:18:58:3d:45:a1:2d:b0:9a:31:22:c4:74:af:e4: e8:c9:0e:53:f2:eb:d7:ee:84:0e:c2:c0:c3:dd:25: 3b:bd:af:b3:97:ad:87:be:ce:f7:05:3b:d8:ca:b2: 3e:9f:b3:7d:e0:6f:83:f6:d3:32:d8:df:8f:5d:d9: ee:09:9e:01:e7:13:82:0c:ef:40:97:cb:76:b8:ff: 75:6b:51:43:35:28:96:2e:10:16:80:51:de:cc:8e: 7d:80:39:ee:dc:b3:48:01:08:ce:ce:5d:f5:51:11: 45:46:34:d2:63:3b:69:5e:51:60:f7:68:78:0e:13: 6f:16:14:6d:46:77:d3:d5:93:63:54:e5:44:21:66: 77:07:06:f6:08:a2:ec:3e:e5:ca:b3:a8:83:2c:f4: e4:30:1a:c7:bf:85:d3:b6:68:d4:4e:3d:21:33:bf: 6b:61:3b:26:72:59:e3:46:d7:8c:f8:cf:c2:63:1e: e6:f3:c6:2f:8f:9b:a1:e2:a1:24:84:28:c1:5b:7f: 52:c4:61:f5:e1:f4:30:1d:3d:90:be:d0:2f:91:7e: 40:ac:aa:7b:ac:64:4b:c0:1f:2a:a2:0e:6c:ce:cf: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:90:BD:64:9A:11:88:C0:A3:24:A8:39:E0:8E:99:78:76:D4:2F:67 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c5:dc:a2:5c:e8:7e:f7:40:bb:02:79:d7:d3:22:0a:23:36: 82:41:02:85:be:1c:52:a5:d0:d4:5b:af:e8:10:b2:13:09:dc: 22:7d:d0:5e:33:6b:f7:cf:c9:f5:63:c5:b0:3f:d6:26:e8:9f: dd:ae:c6:4b:d1:1f:42:55:a8:bc:ac:e8:f4:75:4b:e8:e8:f8: 3c:af:73:4c:28:bb:0d:f8:9e:e3:54:6b:64:ac:a9:8b:40:81: ad:d2:e9:63:10:6a:ca:3b:04:9f:5a:34:98:a7:65:a3:d7:89: 88:24:e6:f9:9c:9f:a4:f4:c2:c2:2e:15:31:50:67:45:27:c7: d8:1b:80:43:c3:03:04:07:c5:b9:60:a6:ac:fc:bc:5d:7c:1b: ba:90:e4:15:f2:98:57:84:c8:db:66:53:aa:bb:c7:eb:d4:e3: e2:e3:54:91:de:18:da:20:b9:55:61:d4:2b:1f:ad:3a:4e:f7: 27:98:cc:e6:c5:58:9f:aa:cc:f0:3a:03:76:de:ba:15:b3:af: fc:57:e5:3c:a7:2e:29:d5:09:08:81:c5:d2:38:8e:c5:d8:92: 4f:27:17:38:06:d9:ca:74:82:2a:84:92:8e:52:3a:07:c0:12: 12:53:1a:51:ee:08:48:53:a8:d4:c1:61:68:d0:23:28:31:3a: 5b:9a:7f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVel5PJgsUqOv+aXt5yyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD Eyg5YTkwYmQ2NDlhMTE4OGMwYTMyNGE4MzllMDhlOTk3ODc2ZDQyZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX2V82HNONF5jaOLc0XW7Tg4qoBq K5eHXCuVcK2xGFg9RaEtsJoxIsR0r+ToyQ5T8uvX7oQOwsDD3SU7va+zl62Hvs73 BTvYyrI+n7N94G+D9tMy2N+PXdnuCZ4B5xOCDO9Al8t2uP91a1FDNSiWLhAWgFHe zI59gDnu3LNIAQjOzl31URFFRjTSYztpXlFg92h4DhNvFhRtRnfT1ZNjVOVEIWZ3 Bwb2CKLsPuXKs6iDLPTkMBrHv4XTtmjUTj0hM79rYTsmclnjRteM+M/CYx7m88Yv j5uh4qEkhCjBW39SxGH14fQwHT2QvtAvkX5ArKp7rGRLwB8qog5szs+bawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqQvWSaEYjAoySoOeCOmXh21C9nMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsXcolzo fvdAuwJ519MiCiM2gkEChb4cUqXQ1Fuv6BCyEwncIn3QXjNr98/J9WPFsD/WJuif 3a7GS9EfQlWovKzo9HVL6Oj4PK9zTCi7Dfie41RrZKypi0CBrdLpYxBqyjsEn1o0 mKdlo9eJiCTm+ZyfpPTCwi4VMVBnRSfH2BuAQ8MDBAfFuWCmrPy8XXwbupDkFfKY V4TI22ZTqrvH69Tj4uNUkd4Y2iC5VWHUKx+tOk73J5jM5sVYn6rM8DoDdt66FbOv /FflPKcuKdUJCIHF0jiOxdiSTycXOAbZynSCKoSSjlI6B8ASElMaUe4ISFOo1MFh aNAjKDE6W5p/Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:16 2025 by rpki-client