This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json) Hash identifier: +mT3pOhBVwciq6ZmsFb82awGOW1+PuBSgexIfCJKaFE= Subject key identifier: 94:E3:24:A3:45:D0:5F:23:29:BF:4B:CB:F0:98:D2:C7:27:6A:C7:A4 Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Certificate serial: 019AF61CD7DA3EF16754A0AC4F7DDBACF119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft Manifest number: 095A Signing time: Sun 07 Dec 2025 00:01:16 +0000 Manifest this update: Sun 07 Dec 2025 00:01:16 +0000 Manifest next update: Mon 08 Dec 2025 00:01:16 +0000 Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=) 2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: kyKfUWy3qjwUPDsgZS2A9K5/J5x7cKEMFz3elRUBKQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:d7:da:3e:f1:67:54:a0:ac:4f:7d:db:ac:f1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Validity Not Before: Dec 7 00:01:16 2025 GMT Not After : Dec 8 00:01:16 2025 GMT Subject: CN=94e324a345d05f2329bf4bcbf098d2c7276ac7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:50:aa:15:8a:aa:44:86:a9:25:92:5f:94: b3:4e:6d:48:ba:9e:9d:cc:ae:ad:89:45:6f:06:b4: 03:2d:e3:f6:f2:88:bd:fd:7b:67:2c:73:d6:a5:f3: c0:e2:af:08:30:cd:8d:a9:c7:8c:2e:dc:86:0c:94: dd:b4:2e:16:ba:10:4b:c7:82:98:ca:fa:34:be:33: e3:e5:50:25:b1:d2:c9:a7:84:17:85:65:15:31:4b: 31:e7:41:7f:fb:49:2a:a0:d4:37:be:74:00:9f:31: 1b:89:d6:9c:12:11:7f:36:9b:46:b2:14:06:a7:09: 99:a7:cb:c1:c8:e8:70:80:bc:83:c5:4d:7a:89:66: 99:a3:ec:5e:36:af:88:b5:49:54:9a:1d:04:41:f1: a2:b9:1f:fe:a9:b7:85:99:74:59:3b:13:c1:2f:d8: c6:8d:b1:21:19:38:29:2d:7e:ef:b3:7d:a3:88:e3: 31:33:2b:60:27:f2:d2:6d:cb:db:11:30:c8:a0:d5: 34:c2:e7:a8:9e:bf:c3:10:7d:fd:73:d7:f0:0a:51: e0:d2:1c:53:df:7d:ae:68:12:cb:45:74:00:63:ef: e5:6b:16:26:d7:fc:92:55:60:44:d9:9b:1f:d2:56: 9d:8f:2b:a5:d1:4e:00:0e:15:d1:3e:e7:31:2a:6b: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E3:24:A3:45:D0:5F:23:29:BF:4B:CB:F0:98:D2:C7:27:6A:C7:A4 X509v3 Authority Key Identifier: keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:96:28:1a:08:13:b9:09:23:76:e0:a5:ca:e9:2d:2a:e0: c3:72:6d:d0:a0:0c:bd:f0:d4:23:b4:c3:64:af:54:15:02:8e: bc:5c:83:e4:55:76:96:f1:6a:80:a0:4a:3c:bd:87:31:f5:9e: c7:b7:8e:5c:45:91:ce:1b:8e:4d:90:a2:28:c0:33:7e:74:2c: 16:e6:ac:1b:1f:d6:55:59:ec:c7:33:dc:a7:51:55:9c:17:9b: 77:53:ad:29:8a:e0:ad:77:07:21:e6:f7:f5:ee:2c:87:dd:3c: ae:cf:95:11:a1:25:ee:6a:0e:dd:20:80:ea:17:5b:80:aa:15: aa:1a:a7:04:57:52:b0:ee:47:2e:b1:7b:b0:4e:61:14:f2:40: 9a:8a:7f:6c:6a:0a:ff:ec:50:b8:1e:16:8b:6d:9e:01:11:dc: 31:46:f4:86:db:b4:bf:ec:db:b3:4c:ac:f8:73:fd:84:6a:19: 2c:44:36:b3:66:36:59:9f:ab:49:cd:bf:2c:fb:4c:21:f2:19: 61:81:33:aa:56:07:39:32:7f:a7:19:9a:82:32:4d:2c:d2:af: dc:b0:c3:2c:b1:3d:eb:84:cc:84:07:7b:9f:aa:5c:f1:47:96: 9e:0d:4c:27:d8:e7:cb:be:39:57:5f:da:17:30:2c:00:00:89: 9a:d8:63:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HNfaPvFnVKCsT33brPEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl MWI4MjUwHhcNMjUxMjA3MDAwMTE2WhcNMjUxMjA4MDAwMTE2WjAzMTEwLwYDVQQD Eyg5NGUzMjRhMzQ1ZDA1ZjIzMjliZjRiY2JmMDk4ZDJjNzI3NmFjN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLhQqhWKqkSGqSWSX5SzTm1Iup6d zK6tiUVvBrQDLeP28oi9/XtnLHPWpfPA4q8IMM2NqceMLtyGDJTdtC4WuhBLx4KY yvo0vjPj5VAlsdLJp4QXhWUVMUsx50F/+0kqoNQ3vnQAnzEbidacEhF/NptGshQG pwmZp8vByOhwgLyDxU16iWaZo+xeNq+ItUlUmh0EQfGiuR/+qbeFmXRZOxPBL9jG jbEhGTgpLX7vs32jiOMxMytgJ/LSbcvbETDIoNU0wueonr/DEH39c9fwClHg0hxT 332uaBLLRXQAY+/laxYm1/ySVWBE2Zsf0ladjyul0U4ADhXRPucxKmu6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTjJKNF0F8jKb9Ly/CY0scnasekMB8GA1UdIwQY MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt MGU1OWYyZWNiMTc1LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1 LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEmWKBoI E7kJI3bgpcrpLSrgw3Jt0KAMvfDUI7TDZK9UFQKOvFyD5FV2lvFqgKBKPL2HMfWe x7eOXEWRzhuOTZCiKMAzfnQsFuasGx/WVVnsxzPcp1FVnBebd1OtKYrgrXcHIeb3 9e4sh908rs+VEaEl7moO3SCA6hdbgKoVqhqnBFdSsO5HLrF7sE5hFPJAmop/bGoK /+xQuB4Wi22eARHcMUb0htu0v+zbs0ys+HP9hGoZLEQ2s2Y2WZ+rSc2/LPtMIfIZ YYEzqlYHOTJ/pxmagjJNLNKv3LDDLLE964TMhAd7n6pc8UeWng1MJ9jny745V1/a FzAsAACJmthjoQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:30 2025 by rpki-client