This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json) Hash identifier: tRd1LG0hx9vGCkzbPVNMWKo7FWQO02PnPZFZewj8mEk= Subject key identifier: D0:1E:B2:35:73:A0:39:9B:4E:AE:89:C9:D9:5B:50:1B:50:F4:27:58 Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Certificate serial: 019B25BFC1AA17B3B5F8B19619FAE8E01528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft Manifest number: 0BFC Signing time: Tue 16 Dec 2025 06:01:22 +0000 Manifest this update: Tue 16 Dec 2025 06:01:22 +0000 Manifest next update: Wed 17 Dec 2025 06:01:22 +0000 Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=) 2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: r7YtW+/uM51o/pTYy297/b4U+lDh9B20MvuFX80zYwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:c1:aa:17:b3:b5:f8:b1:96:19:fa:e8:e0:15:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Validity Not Before: Dec 16 06:01:22 2025 GMT Not After : Dec 17 06:01:22 2025 GMT Subject: CN=d01eb23573a0399b4eae89c9d95b501b50f42758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:fd:97:c1:d8:a4:5d:84:55:83:fa:a6:1f: 93:88:da:aa:1b:46:ca:c0:c8:3d:6a:d0:ad:ed:a1: 92:20:f4:08:83:dd:cb:5c:ba:c2:f8:42:a2:6c:df: 9c:73:c3:6d:ed:e6:62:84:ef:2e:28:5a:82:37:11: 00:08:fd:13:e9:08:d4:82:37:40:cb:ed:a5:9c:f9: 9a:d8:3e:e5:eb:74:00:0b:eb:d0:d8:b8:6b:f3:4c: bd:73:38:dd:43:40:58:c1:ea:9b:b2:44:00:f7:76: 74:64:75:0f:09:6b:cd:67:9b:f5:54:6c:06:61:46: 43:3d:d2:cd:ec:af:83:2f:51:23:41:2b:65:35:00: 1c:bc:96:c5:40:62:f2:4d:a3:68:b7:ef:7b:22:3a: 7f:15:e3:f8:6d:d8:cf:7d:ea:09:e5:55:c4:5d:3d: ea:0f:e5:6b:31:e2:87:a5:60:5c:d2:f9:89:48:c9: f4:de:5d:f5:97:3f:9f:d2:7f:16:b8:32:d2:0e:95: 63:5a:eb:e5:5f:8e:17:63:6e:10:93:e7:3d:ab:b2: 59:aa:58:e7:dd:35:4c:8f:c6:7d:40:47:79:d5:5b: f2:70:c4:0b:18:f3:84:42:3a:95:8c:0c:b7:be:c1: 08:88:f5:28:7a:3d:12:aa:35:46:3e:f0:b9:57:d4: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:B2:35:73:A0:39:9B:4E:AE:89:C9:D9:5B:50:1B:50:F4:27:58 X509v3 Authority Key Identifier: keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ab:09:01:df:6d:b3:45:58:ae:d2:85:67:9b:9b:48:f1:01: 41:0a:1d:34:f5:de:25:a2:c7:57:56:71:9a:80:39:0c:11:15: a0:0c:85:68:c2:8b:33:b6:ab:1d:59:9f:ce:19:ce:17:64:99: b4:6f:4a:27:37:19:a4:eb:62:7f:d4:4b:a9:f0:5a:a6:df:f4: d2:f6:2c:4f:2a:e0:ed:93:06:5a:b1:19:88:3e:d2:f7:e2:b6: 86:56:7d:11:5c:9e:ca:99:44:2d:05:1f:fd:2b:46:75:3d:97: 3a:04:1b:59:d8:05:d7:3c:95:67:4c:d4:6f:ca:a7:c5:24:f8: b0:2c:0f:53:3a:07:e6:de:f7:ea:85:8a:91:8b:b1:71:c8:17: bd:c4:18:33:ec:de:dc:15:c6:8d:11:5d:39:7a:c8:11:24:75: 5a:57:f7:e9:0a:a4:ad:ad:99:a5:f0:d6:28:77:63:dc:13:f7: b9:53:68:34:7a:8e:13:79:1a:28:54:27:53:20:8a:1b:68:4d: c2:87:c2:d2:0e:83:1b:a6:4d:a8:c5:f9:3d:94:cd:9e:2c:7a: 44:ac:41:0d:65:83:ea:a4:d0:ea:a2:7e:4c:5f:6b:41:32:e1: 50:ec:94:6f:ce:f4:45:e9:00:74:5f:ae:f0:7c:cd:37:5e:55: bd:b0:13:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv8GqF7O1+LGWGfro4BUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1 MzBiMzAwHhcNMjUxMjE2MDYwMTIyWhcNMjUxMjE3MDYwMTIyWjAzMTEwLwYDVQQD EyhkMDFlYjIzNTczYTAzOTliNGVhZTg5YzlkOTViNTAxYjUwZjQyNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m39l8HYpF2EVYP6ph+TiNqqG0bK wMg9atCt7aGSIPQIg93LXLrC+EKibN+cc8Nt7eZihO8uKFqCNxEACP0T6QjUgjdA y+2lnPma2D7l63QAC+vQ2Lhr80y9czjdQ0BYweqbskQA93Z0ZHUPCWvNZ5v1VGwG YUZDPdLN7K+DL1EjQStlNQAcvJbFQGLyTaNot+97Ijp/FeP4bdjPfeoJ5VXEXT3q D+VrMeKHpWBc0vmJSMn03l31lz+f0n8WuDLSDpVjWuvlX44XY24Qk+c9q7JZqljn 3TVMj8Z9QEd51VvycMQLGPOEQjqVjAy3vsEIiPUoej0SqjVGPvC5V9SyQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAesjVzoDmbTq6JydlbUBtQ9CdYMB8GA1UdIwQY MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6sJAd9t s0VYrtKFZ5ubSPEBQQodNPXeJaLHV1ZxmoA5DBEVoAyFaMKLM7arHVmfzhnOF2SZ tG9KJzcZpOtif9RLqfBapt/00vYsTyrg7ZMGWrEZiD7S9+K2hlZ9EVyeyplELQUf /StGdT2XOgQbWdgF1zyVZ0zUb8qnxST4sCwPUzoH5t736oWKkYuxccgXvcQYM+ze 3BXGjRFdOXrIESR1Wlf36Qqkra2ZpfDWKHdj3BP3uVNoNHqOE3kaKFQnUyCKG2hN wofC0g6DG6ZNqMX5PZTNnix6RKxBDWWD6qTQ6qJ+TF9rQTLhUOyUb870RekAdF+u 8HzNN15VvbAThA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:07:27 2025 by rpki-client