This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json) Hash identifier: UKzaI0zC9S4BuCEO5PwCGzYp20mWhU343sL3rf3ELdk= Subject key identifier: BC:6F:6A:C5:71:EF:23:14:9E:C7:8A:87:7E:2F:14:6E:F1:FB:70:EE Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0 Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0 Certificate serial: 019AF276F6450C3AC526076C9BE0E7DE7E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=) 2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: oNxGi8S0mN/9NpcDq9LR1jzCjqRxzp2CWJ9HUlrQY5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f6:45:0c:3a:c5:26:07:6c:9b:e0:e7:de:7e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=bc6f6ac571ef23149ec78a877e2f146ef1fb70ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:19:4f:ec:92:bc:12:fb:56:02:c8:49:3b: 31:d3:74:04:28:43:5a:7a:53:e3:63:b1:f2:d9:cd: 2f:31:84:37:aa:f4:41:83:09:c3:bc:92:63:87:e7: 0c:c5:be:fe:93:7f:0b:dc:40:90:3f:cd:fc:87:9b: c4:76:3a:29:61:34:c1:ea:fb:de:18:8e:70:3c:5d: a8:94:13:ad:8a:4d:5b:eb:f5:f1:81:08:ab:ea:a2: 50:cc:6f:f5:39:20:2f:e0:46:8d:b6:1d:26:ca:92: 48:05:9b:12:0c:80:40:44:84:0b:9c:35:5e:ac:b6: a4:36:82:ef:cb:cc:f1:60:4c:23:9c:96:2c:90:82: 4f:3a:0f:f9:10:8f:bd:7e:44:a4:3b:9c:13:fa:f6: c9:ac:3a:0c:1c:c5:51:49:45:c2:4a:c0:f8:59:2d: aa:7e:8d:e8:00:64:73:96:86:ad:2c:c4:21:40:6f: 15:18:5a:c8:a8:eb:27:58:a4:9f:63:f5:c9:24:a3: bf:ac:8f:86:76:83:2e:1c:ae:25:ea:0c:b7:c9:7a: b4:95:41:45:f8:cb:fb:0e:bb:d8:d2:a6:8e:14:a2: aa:75:82:27:c5:c5:5c:36:b0:6f:ed:12:17:5d:d2: 16:66:68:44:20:b4:40:ae:f6:2c:70:fa:4a:24:af: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:6A:C5:71:EF:23:14:9E:C7:8A:87:7E:2F:14:6E:F1:FB:70:EE X509v3 Authority Key Identifier: keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:55:3a:70:02:26:bd:3e:92:ca:8b:23:bd:f0:67:9c:de: 09:60:a1:51:bb:d0:2d:93:6a:c4:c7:f9:b8:45:eb:28:f7:e4: 16:9b:de:46:09:ab:09:88:87:f9:ce:42:f1:fd:f6:2d:5b:21: 64:53:b5:89:0c:4f:d9:0c:6c:a9:f3:fc:71:7e:77:16:62:94: 61:d8:ae:ce:89:96:ef:2a:fe:bd:6a:87:a2:4a:ba:28:cf:ce: fa:dd:47:7b:26:60:9a:de:39:22:87:4c:97:9a:c9:c5:b7:19: e4:59:c3:20:2c:0c:e8:64:b9:e7:0a:ea:1b:0c:2b:e6:bc:89: 83:fe:49:b1:72:45:f7:ba:fd:ca:fb:9d:b7:69:f3:41:f3:fd: ff:1f:2f:a9:5e:f0:45:8d:bb:5f:43:54:4b:c6:6c:c4:4b:2d: 4f:44:6e:9b:bb:27:28:a8:2a:56:5d:37:7e:b1:fb:c4:db:87: e1:f3:5e:b4:17:eb:e6:88:cc:0c:59:46:e1:72:1d:5b:0d:c3: 72:70:5e:99:29:af:fc:94:c4:d7:83:58:a4:34:b2:61:55:9f: 94:91:87:57:c5:c1:77:f4:78:ef:e3:15:0a:99:e9:b1:46:c5: 6b:62:e9:d7:33:19:28:ca:eb:bf:a8:69:d1:5b:4e:24:c3:61: 05:ab:45:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvZFDDrFJgdsm+Dn3n6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjNjZTdiMGMxMDA2OGZiYzQ0YzAyMTk0M2UzMzkwMTNm MmFlZTAwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhiYzZmNmFjNTcxZWYyMzE0OWVjNzhhODc3ZTJmMTQ2ZWYxZmI3MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VgZT+ySvBL7VgLISTsx03QEKENa elPjY7Hy2c0vMYQ3qvRBgwnDvJJjh+cMxb7+k38L3ECQP838h5vEdjopYTTB6vve GI5wPF2olBOtik1b6/XxgQir6qJQzG/1OSAv4EaNth0mypJIBZsSDIBARIQLnDVe rLakNoLvy8zxYEwjnJYskIJPOg/5EI+9fkSkO5wT+vbJrDoMHMVRSUXCSsD4WS2q fo3oAGRzloatLMQhQG8VGFrIqOsnWKSfY/XJJKO/rI+GdoMuHK4l6gy3yXq0lUFF +Mv7DrvY0qaOFKKqdYInxcVcNrBv7RIXXdIWZmhEILRArvYscPpKJK8huwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxvasVx7yMUnseKh34vFG7x+3DuMB8GA1UdIwQY MBaAFG0jznsMEAaPvETAIZQ+M5AT8q7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYt NDBjNWViYzZmNzM2LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYtNDBjNWViYzZmNzM2 LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWpVOnAC Jr0+ksqLI73wZ5zeCWChUbvQLZNqxMf5uEXrKPfkFpveRgmrCYiH+c5C8f32LVsh ZFO1iQxP2QxsqfP8cX53FmKUYdiuzomW7yr+vWqHokq6KM/O+t1HeyZgmt45IodM l5rJxbcZ5FnDICwM6GS55wrqGwwr5ryJg/5JsXJF97r9yvudt2nzQfP9/x8vqV7w RY27X0NUS8ZsxEstT0Rum7snKKgqVl03frH7xNuH4fNetBfr5ojMDFlG4XIdWw3D cnBemSmv/JTE14NYpDSyYVWflJGHV8XBd/R47+MVCpnpsUbFa2Lp1zMZKMrrv6hp 0VtOJMNhBatFZw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:47 2025 by rpki-client