This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json) Hash identifier: ep3XjBSena8r41BwJmm0/JwPSIebbQeaS7CI+k9L49s= Subject key identifier: 57:49:4B:66:15:E4:68:1E:C9:5D:21:16:F5:DC:E2:5E:D1:AE:71:84 Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Certificate serial: 019AF50A69D391B8942D0C6A0E38630F80DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft Manifest number: 0DFC Signing time: Sat 06 Dec 2025 19:01:31 +0000 Manifest this update: Sat 06 Dec 2025 19:01:31 +0000 Manifest next update: Sun 07 Dec 2025 19:01:31 +0000 Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=) 2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: JJNyFmtioVm2mVYbzxJL4gCnRnuskLL4l8RdekATszo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:69:d3:91:b8:94:2d:0c:6a:0e:38:63:0f:80:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Validity Not Before: Dec 6 19:01:31 2025 GMT Not After : Dec 7 19:01:31 2025 GMT Subject: CN=57494b6615e4681ec95d2116f5dce25ed1ae7184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:5b:98:ec:43:86:b0:92:10:3d:04:f8:06: e5:ed:9f:f4:87:e1:94:d2:c7:c9:ff:8b:24:32:b3: 4e:97:32:4f:75:34:86:4b:f8:a3:00:d7:ea:12:b6: 9f:9d:9f:5f:8e:3b:20:d5:6b:e5:d2:7d:c9:bf:95: 3e:28:4e:b4:23:7f:4b:dd:fc:0e:d0:ac:00:df:70: 8c:37:a4:a1:5e:57:c0:7e:fd:08:a0:92:ee:2d:bc: f6:e3:75:24:de:e5:31:1e:56:f2:4b:6d:b5:d0:b5: e1:c7:76:03:62:d3:a7:c2:6f:ed:67:71:44:8e:e2: a4:06:36:8a:e3:9a:ed:81:92:c0:e9:07:b9:9c:98: 92:63:3a:5f:9f:cf:71:e2:41:c5:1a:b3:93:20:c8: e1:50:a4:97:0d:e6:b7:98:10:11:0e:2a:be:8d:cc: 5a:5f:65:af:d3:03:fd:18:b9:39:fa:1c:9d:a0:db: d6:c4:ca:3e:34:d9:20:51:e1:90:d7:2a:b0:09:50: 37:35:8a:26:ba:2e:b2:1d:93:d2:59:b5:f7:dd:5d: c1:97:7c:06:ea:a7:dc:32:46:1d:d5:d2:19:14:c5: 68:e0:51:06:90:da:8e:ee:81:ab:98:33:03:a5:ba: 86:7b:c5:b1:7c:ef:c7:4f:6c:f5:06:09:fa:7d:d0: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:49:4B:66:15:E4:68:1E:C9:5D:21:16:F5:DC:E2:5E:D1:AE:71:84 X509v3 Authority Key Identifier: keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:30:31:0d:cd:1c:6b:43:ef:f6:77:e3:a8:21:68:f9:eb:81: 8e:b5:42:e9:34:c3:0a:26:3f:21:60:09:96:d7:96:44:ef:ab: b2:de:fb:ed:89:cf:d5:b4:96:8c:b2:e4:0a:80:56:b6:92:e4: 0e:9d:b5:b8:16:96:85:f4:8a:b5:7a:34:1d:a7:69:25:67:f6: 1c:df:e1:97:fa:5a:66:77:c4:1a:11:39:1f:8e:96:63:b8:f0: 2f:32:89:83:11:81:c2:f0:f3:f2:c1:67:94:7b:8b:bf:30:df: 0e:27:7a:88:13:c7:cd:47:88:d8:0e:3f:02:13:7d:78:ae:4c: c6:16:74:b1:5b:11:1d:b5:de:a7:50:6c:3b:26:f8:cf:50:80: ed:6f:47:a6:b4:6e:f5:80:fb:7b:3c:ce:83:80:75:37:73:a0: 66:56:fd:5f:7e:9d:29:bd:bf:a5:65:03:b6:61:60:65:8f:99: d2:2b:7b:9b:7c:20:c9:91:37:df:d4:cd:f4:04:32:44:d4:a2: 04:2c:a9:c7:74:b3:e5:eb:56:4e:09:77:03:9b:dd:02:17:94: a4:c0:3c:0d:80:41:7a:75:2d:aa:0f:84:b3:de:e2:29:a9:2e: a9:ce:5c:e4:a1:f4:43:45:9b:42:91:ac:60:08:25:03:46:1f: 2c:85:74:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmnTkbiULQxqDjhjD4DbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw YzZhNDgwHhcNMjUxMjA2MTkwMTMxWhcNMjUxMjA3MTkwMTMxWjAzMTEwLwYDVQQD Eyg1NzQ5NGI2NjE1ZTQ2ODFlYzk1ZDIxMTZmNWRjZTI1ZWQxYWU3MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUFbmOxDhrCSED0E+Abl7Z/0h+GU 0sfJ/4skMrNOlzJPdTSGS/ijANfqErafnZ9fjjsg1Wvl0n3Jv5U+KE60I39L3fwO 0KwA33CMN6ShXlfAfv0IoJLuLbz243Uk3uUxHlbyS2210LXhx3YDYtOnwm/tZ3FE juKkBjaK45rtgZLA6Qe5nJiSYzpfn89x4kHFGrOTIMjhUKSXDea3mBARDiq+jcxa X2Wv0wP9GLk5+hydoNvWxMo+NNkgUeGQ1yqwCVA3NYomui6yHZPSWbX33V3Bl3wG 6qfcMkYd1dIZFMVo4FEGkNqO7oGrmDMDpbqGe8WxfO/HT2z1Bgn6fdBL4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdJS2YV5GgeyV0hFvXc4l7RrnGEMB8GA1UdIwQY MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt ZGEyMzEyYjY1YTUwLzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDAxDc0c a0Pv9nfjqCFo+euBjrVC6TTDCiY/IWAJlteWRO+rst777YnP1bSWjLLkCoBWtpLk Dp21uBaWhfSKtXo0HadpJWf2HN/hl/paZnfEGhE5H46WY7jwLzKJgxGBwvDz8sFn lHuLvzDfDid6iBPHzUeI2A4/AhN9eK5MxhZ0sVsRHbXep1BsOyb4z1CA7W9HprRu 9YD7ezzOg4B1N3OgZlb9X36dKb2/pWUDtmFgZY+Z0it7m3wgyZE339TN9AQyRNSi BCypx3Sz5etWTgl3A5vdAheUpMA8DYBBenUtqg+Es97iKakuqc5c5KH0Q0WbQpGs YAglA0YfLIV0PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:04 2025 by rpki-client