This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json) Hash identifier: 49MYhya1w+Uq7h/ElxQRcGAjA5xhBatmNe9/74Sj7dg= Subject key identifier: 54:C0:AC:78:FD:76:DF:A7:24:C9:10:B6:A9:ED:64:BD:F6:F9:5E:23 Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82 Certificate serial: 019AF0886F7FBBCAB9259DB31A71D0E55CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=) 2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: qy6wPq3iHx3quBbqbZiqpSOpUjHZ9ypc/eMYbJtpTgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6f:7f:bb:ca:b9:25:9d:b3:1a:71:d0:e5:5c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82 Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=54c0ac78fd76dfa724c910b6a9ed64bdf6f95e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:61:0b:09:7c:c0:e6:ef:99:43:f9:52:26: ea:f3:2d:ca:d8:d7:4a:ff:9c:32:d7:30:93:ec:80: 36:89:9c:a3:cb:2e:a9:b0:b9:05:e4:68:6a:12:ff: f7:96:fd:bf:f9:58:84:85:c5:13:6d:9e:9a:70:67: 4a:c7:64:7f:c3:00:12:76:38:5e:5e:46:cb:0e:31: 21:9c:85:d3:93:94:54:20:6b:e3:28:a3:61:3b:68: be:ed:eb:a4:97:05:3f:25:78:80:69:31:82:e9:b0: 1d:a4:c9:24:87:45:3a:9d:01:64:d9:a0:08:d1:49: ae:07:32:7a:3f:4f:75:3b:f5:63:f5:94:f7:0e:cd: a7:51:46:73:ea:de:67:85:36:72:18:39:c4:5a:56: f7:19:66:69:e5:59:7f:b1:e9:0a:29:4a:21:d3:8a: b3:fe:d4:d4:b5:51:23:bd:4a:87:fa:dc:1d:d7:bd: 76:af:e8:96:1c:14:af:43:f8:1e:cf:a3:be:ff:54: 25:06:a0:d4:fc:06:6a:58:22:1c:e9:64:05:14:2e: 6b:06:08:a3:c1:1a:20:0d:74:68:6d:34:98:b9:3b: 0a:10:3a:e5:9b:fb:99:4e:b8:39:a8:da:1a:53:cd: c0:2f:ac:ee:42:e8:4d:32:5a:7e:98:83:b2:58:32: 37:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:AC:78:FD:76:DF:A7:24:C9:10:B6:A9:ED:64:BD:F6:F9:5E:23 X509v3 Authority Key Identifier: keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9e:ad:11:76:e9:f7:ac:d4:82:f5:a7:97:df:13:ac:2c:37: 9d:07:19:77:10:19:e3:47:32:04:49:9a:ab:b6:7a:78:27:d0: 83:c5:c1:ad:68:2b:02:c2:33:b1:74:87:ec:e6:7e:cb:a4:85: 3d:bd:8a:23:67:72:01:32:a3:64:31:13:37:6b:52:ea:6c:8d: 84:5c:21:da:0b:10:0e:50:ee:20:c7:b2:ab:d3:a7:42:ec:b5: 2f:a5:53:96:ef:85:a2:9f:27:c6:23:f5:39:9a:0e:61:d2:6e: 31:8e:e4:70:2a:31:8f:0b:14:1b:57:9f:a6:5c:d4:cd:4a:0e: 0f:64:9e:04:c9:2b:2b:af:b3:e3:13:91:d0:6c:30:0a:50:38: d1:14:09:32:dd:02:88:cc:7d:09:fd:17:a5:87:1e:48:38:1b: cf:59:3d:86:cd:ae:3e:eb:fb:5b:e2:f9:02:cf:fc:34:06:8d: 69:62:3f:bf:c4:c8:77:e1:46:6c:df:85:ae:0a:55:b5:08:2b: f3:02:57:b5:94:46:41:bc:19:84:04:2e:46:d9:3a:de:5f:1e: 73:0e:12:db:92:29:c7:d3:66:68:88:72:fa:a9:e9:ce:cf:5d: e8:97:22:5a:c5:1e:b8:4c:55:e9:ec:0d:c2:69:7b:a8:e0:e7: f5:bc:7f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiG9/u8q5JZ2zGnHQ5VzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw MmFlODIwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg1NGMwYWM3OGZkNzZkZmE3MjRjOTEwYjZhOWVkNjRiZGY2Zjk1ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyZhCwl8wObvmUP5Uibq8y3K2NdK /5wy1zCT7IA2iZyjyy6psLkF5GhqEv/3lv2/+ViEhcUTbZ6acGdKx2R/wwASdjhe XkbLDjEhnIXTk5RUIGvjKKNhO2i+7euklwU/JXiAaTGC6bAdpMkkh0U6nQFk2aAI 0UmuBzJ6P091O/Vj9ZT3Ds2nUUZz6t5nhTZyGDnEWlb3GWZp5Vl/sekKKUoh04qz /tTUtVEjvUqH+twd1712r+iWHBSvQ/gez6O+/1QlBqDU/AZqWCIc6WQFFC5rBgij wRogDXRobTSYuTsKEDrlm/uZTrg5qNoaU83AL6zuQuhNMlp+mIOyWDI3eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTArHj9dt+nJMkQtqntZL32+V4jMB8GA1UdIwQY MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5 LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZ6tEXbp 96zUgvWnl98TrCw3nQcZdxAZ40cyBEmaq7Z6eCfQg8XBrWgrAsIzsXSH7OZ+y6SF Pb2KI2dyATKjZDETN2tS6myNhFwh2gsQDlDuIMeyq9OnQuy1L6VTlu+Fop8nxiP1 OZoOYdJuMY7kcCoxjwsUG1efplzUzUoOD2SeBMkrK6+z4xOR0GwwClA40RQJMt0C iMx9Cf0XpYceSDgbz1k9hs2uPuv7W+L5As/8NAaNaWI/v8TId+FGbN+FrgpVtQgr 8wJXtZRGQbwZhAQuRtk63l8ecw4S25Ipx9NmaIhy+qnpzs9d6JciWsUeuExV6ewN wml7qODn9bx/ug== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:51 2025 by rpki-client