This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json) Hash identifier: l3mnpqcise3tCAbguferS8hk9soHAqPJpZdrdnkJnF8= Subject key identifier: 04:C0:89:D8:8B:70:B7:42:7E:A5:04:B2:30:94:43:A4:53:DA:E2:98 Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82 Certificate serial: 019B3042FD3B23532586DECB6838BE3727E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 07:00:55 +0000 Manifest this update: Thu 18 Dec 2025 07:00:55 +0000 Manifest next update: Fri 19 Dec 2025 07:00:55 +0000 Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=) 2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 9dla4VMPeG0rWALKyZi6htq6Wi39zgtGUqUL95DXPnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:fd:3b:23:53:25:86:de:cb:68:38:be:37:27:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82 Validity Not Before: Dec 18 07:00:55 2025 GMT Not After : Dec 19 07:00:55 2025 GMT Subject: CN=04c089d88b70b7427ea504b2309443a453dae298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:ad:42:fe:1f:e9:20:08:90:c8:22:4c:4f: 95:f9:ea:74:06:9d:da:16:34:5c:50:99:4a:43:f0: 2c:3e:f6:f1:4d:90:84:0c:1e:ea:f8:ff:4b:53:f7: a3:e2:fe:56:76:ef:a1:42:19:d4:34:96:1a:5b:08: 1d:21:08:75:29:b9:0a:f9:de:ea:6b:42:51:bd:25: c0:39:5b:5e:12:33:87:5f:08:b3:06:ea:97:56:81: 99:85:f6:ad:47:4d:5f:fb:f5:fe:8e:b7:73:07:48: cd:30:63:b8:ef:38:6b:bb:10:59:3b:00:85:3a:c0: a6:fc:b5:87:32:f7:52:3b:fd:8a:a6:de:7a:e5:d6: 41:0e:18:ce:d6:dc:27:9c:61:0f:32:57:5e:b3:b7: 1a:99:d0:78:da:27:bd:04:3f:22:21:75:a4:e4:3b: 0f:16:0a:c0:f5:cb:43:1c:12:be:8f:f2:b8:77:4b: e0:e1:ed:af:f0:5d:8a:70:2b:36:e3:57:6d:57:6e: dc:5c:e2:6a:e6:56:59:51:d2:92:3a:5d:21:45:0c: 5e:39:f7:5c:f8:88:07:b6:2e:4f:55:47:57:bb:d7: 9c:1c:9e:30:d2:73:cc:41:0f:97:5d:a1:d0:d7:66: 2d:fe:78:4f:13:69:51:c2:ee:70:4a:69:ed:e1:26: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:89:D8:8B:70:B7:42:7E:A5:04:B2:30:94:43:A4:53:DA:E2:98 X509v3 Authority Key Identifier: keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:24:1d:4f:b3:7c:ae:6a:c9:47:79:7f:56:6d:60:ef:aa:93: 41:6a:38:4f:c6:6c:bc:71:a5:5b:fb:9d:40:20:d6:1f:37:ec: 1e:14:8f:70:b5:6a:37:8a:a1:12:c1:fd:53:66:ef:c1:1a:a3: aa:2b:97:c3:87:68:a0:d5:ab:07:87:81:66:a3:3c:1c:67:b4: ad:51:93:ac:70:1c:57:60:f6:07:40:50:9f:70:9c:7d:f3:e0: f4:05:56:8b:2d:89:ae:25:70:f9:f4:bc:d7:66:63:05:0c:19: 6e:de:ab:96:e2:76:c4:74:35:7a:b2:b4:39:02:55:4a:67:8c: fc:b3:9e:4d:0d:f3:76:49:54:2d:42:8b:24:f6:a9:09:94:ce: ae:67:98:6c:1c:75:a4:9e:50:53:e9:96:cd:21:5b:7a:c6:4b: ab:db:33:8d:e4:1a:6b:3e:fb:85:b1:49:b1:94:ae:b3:39:ae: 04:0c:d6:c2:5d:3b:8e:d7:73:52:72:ff:c1:b6:8b:4c:ef:63: c4:30:5b:e1:af:c8:fc:52:77:3c:a6:f3:1b:c3:fe:7d:33:9a: 92:fc:84:d4:9a:37:a8:09:60:bb:8f:30:ae:98:8f:e7:60:10: a4:64:eb:93:37:69:fa:70:22:56:5f:7f:2f:12:5e:04:87:97: 83:c0:ce:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQv07I1Mlht7LaDi+NyfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw MmFlODIwHhcNMjUxMjE4MDcwMDU1WhcNMjUxMjE5MDcwMDU1WjAzMTEwLwYDVQQD EygwNGMwODlkODhiNzBiNzQyN2VhNTA0YjIzMDk0NDNhNDUzZGFlMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfOtQv4f6SAIkMgiTE+V+ep0Bp3a FjRcUJlKQ/AsPvbxTZCEDB7q+P9LU/ej4v5Wdu+hQhnUNJYaWwgdIQh1KbkK+d7q a0JRvSXAOVteEjOHXwizBuqXVoGZhfatR01f+/X+jrdzB0jNMGO47zhruxBZOwCF OsCm/LWHMvdSO/2Kpt565dZBDhjO1twnnGEPMldes7camdB42ie9BD8iIXWk5DsP FgrA9ctDHBK+j/K4d0vg4e2v8F2KcCs241dtV27cXOJq5lZZUdKSOl0hRQxeOfdc +IgHti5PVUdXu9ecHJ4w0nPMQQ+XXaHQ12Yt/nhPE2lRwu5wSmnt4SYbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATAidiLcLdCfqUEsjCUQ6RT2uKYMB8GA1UdIwQY MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5 LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviQdT7N8 rmrJR3l/Vm1g76qTQWo4T8ZsvHGlW/udQCDWHzfsHhSPcLVqN4qhEsH9U2bvwRqj qiuXw4dooNWrB4eBZqM8HGe0rVGTrHAcV2D2B0BQn3CcffPg9AVWiy2JriVw+fS8 12ZjBQwZbt6rluJ2xHQ1erK0OQJVSmeM/LOeTQ3zdklULUKLJPapCZTOrmeYbBx1 pJ5QU+mWzSFbesZLq9szjeQaaz77hbFJsZSuszmuBAzWwl07jtdzUnL/wbaLTO9j xDBb4a/I/FJ3PKbzG8P+fTOakvyE1Jo3qAlgu48wrpiP52AQpGTrkzdp+nAiVl9/ LxJeBIeXg8DOMA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:57 2025 by rpki-client