This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json) Hash identifier: bmevIi+zz6aIDxV28R0cVd55yXb16lGORDni0SZDEJ4= Subject key identifier: A6:6E:41:FF:8C:46:4D:3E:31:BB:94:C2:74:26:1A:34:85:5B:11:E6 Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Certificate serial: 019AF38A12DCA409151A71CDB88773613014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft Manifest number: 0BE2 Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=) 2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: zSuYY9umyyj2v1YuKuT+Zqw0yUkIPJOGxYnKLa3vNBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:12:dc:a4:09:15:1a:71:cd:b8:87:73:61:30:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=a66e41ff8c464d3e31bb94c274261a34855b11e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:a9:25:7e:d5:91:b7:a1:04:8a:93:26:86: b5:dd:90:b8:57:b4:3d:19:d5:97:5b:f4:1e:9f:7c: 58:61:8e:d5:e4:0b:78:8b:d4:97:ce:01:a5:1a:b5: c0:59:90:07:84:d4:bf:43:91:df:3b:76:9d:97:38: c5:5c:3c:7d:d2:60:c4:24:ab:77:e3:c8:ce:72:c9: e3:f8:96:27:dc:e0:4c:ef:c4:0d:cd:e1:80:2a:9a: 42:c0:53:15:76:a3:67:60:02:72:c8:1e:e2:a7:55: 4e:14:5f:24:ab:f0:40:e3:94:43:a4:96:bb:61:4a: fe:03:ef:01:dd:bc:dc:4d:32:0a:2f:ab:b4:d4:cb: ba:5a:93:3d:2f:cd:36:38:06:33:d8:7f:01:6e:72: 7d:d1:fc:35:d5:c1:c9:25:91:b1:41:2e:04:d9:53: 40:85:3a:e6:32:f3:89:90:0f:f5:98:c9:94:ff:64: 1e:0a:4f:3c:7a:33:a9:f7:7b:a0:1d:62:51:17:a6: b2:d2:c3:90:05:0f:0e:33:94:83:cf:4b:0c:8e:63: f2:e2:6a:d1:30:1d:ff:c3:b1:98:b3:0a:b8:e3:e5: 23:65:4e:8a:f8:f6:28:52:ff:2b:9c:64:bb:48:a5: 83:92:44:7b:8b:6b:00:ca:ef:57:fe:17:58:dc:6d: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6E:41:FF:8C:46:4D:3E:31:BB:94:C2:74:26:1A:34:85:5B:11:E6 X509v3 Authority Key Identifier: keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:86:ea:a4:2f:90:2a:83:b1:f8:a2:33:20:2c:ad:a6:0f: 25:81:02:f7:6f:6a:7c:17:4a:f4:0c:65:0d:8d:d6:59:6b:90: 7a:42:e0:35:87:e4:a4:fd:bf:b3:e3:5d:59:03:98:08:00:1b: 73:b4:bf:fd:80:31:d2:9d:91:bf:86:f3:15:33:bb:96:31:09: 50:3f:64:36:2f:4e:a5:92:99:9d:1c:e5:a5:13:a4:3b:c3:9b: a9:d1:1b:89:68:e1:fd:5e:e1:cb:66:75:a2:0b:ee:e7:82:91: cb:b4:d8:10:61:6f:19:23:5c:5e:69:3a:04:ba:b0:a3:c7:59: ab:13:e8:ab:1e:16:52:84:0d:09:6f:40:0a:b8:dc:64:d9:53: 3e:a2:cf:f0:9e:5d:b9:d2:44:11:c6:9a:7d:e7:cf:77:d5:10: 2d:a2:34:73:bf:61:92:65:a7:fc:8c:af:67:7e:39:da:21:12: 9d:bc:8d:46:f9:04:b2:fa:9e:92:34:d0:3c:a4:b9:ce:bc:28: 84:49:06:3c:d1:8f:e3:14:c8:1a:76:83:3d:19:b3:bc:d1:6e: c3:75:de:2e:c1:ca:3e:12:3f:3f:a9:e4:d2:ae:10:09:11:5d: 31:68:90:98:26:a6:09:fc:36:29:1a:22:28:ee:1a:9a:b6:41: 84:ef:1b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihLcpAkVGnHNuIdzYTAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1 MzBiMzAwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD EyhhNjZlNDFmZjhjNDY0ZDNlMzFiYjk0YzI3NDI2MWEzNDg1NWIxMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJepJX7VkbehBIqTJoa13ZC4V7Q9 GdWXW/Qen3xYYY7V5At4i9SXzgGlGrXAWZAHhNS/Q5HfO3adlzjFXDx90mDEJKt3 48jOcsnj+JYn3OBM78QNzeGAKppCwFMVdqNnYAJyyB7ip1VOFF8kq/BA45RDpJa7 YUr+A+8B3bzcTTIKL6u01Mu6WpM9L802OAYz2H8BbnJ90fw11cHJJZGxQS4E2VNA hTrmMvOJkA/1mMmU/2QeCk88ejOp93ugHWJRF6ay0sOQBQ8OM5SDz0sMjmPy4mrR MB3/w7GYswq44+UjZU6K+PYoUv8rnGS7SKWDkkR7i2sAyu9X/hdY3G3ezwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZuQf+MRk0+MbuUwnQmGjSFWxHmMB8GA1UdIwQY MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiiG6qQv kCqDsfiiMyAsraYPJYEC929qfBdK9AxlDY3WWWuQekLgNYfkpP2/s+NdWQOYCAAb c7S//YAx0p2Rv4bzFTO7ljEJUD9kNi9OpZKZnRzlpROkO8ObqdEbiWjh/V7hy2Z1 ogvu54KRy7TYEGFvGSNcXmk6BLqwo8dZqxPoqx4WUoQNCW9ACrjcZNlTPqLP8J5d udJEEcaafefPd9UQLaI0c79hkmWn/IyvZ3452iESnbyNRvkEsvqekjTQPKS5zrwo hEkGPNGP4xTIGnaDPRmzvNFuw3XeLsHKPhI/P6nk0q4QCRFdMWiQmCamCfw2KRoi KO4amrZBhO8bFg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:25 2025 by rpki-client