This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json) Hash identifier: J7bzK66aX/HwN28WLTbxFd1ybRS7GkmQXds6O4GTogQ= Subject key identifier: 9E:25:0F:ED:9A:88:79:6F:5F:E7:44:E7:35:0F:28:68:1D:90:1A:16 Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73 Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73 Certificate serial: 019AF3F7564A19BCC501434A77B191482E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft Manifest number: 15CE Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: RkkfRDvJLRFCzQehPHyE+ILCGSTG0m4/9wTGh/dfHwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:56:4a:19:bc:c5:01:43:4a:77:b1:91:48:2e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73 Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=9e250fed9a88796f5fe744e7350f28681d901a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:f7:15:a9:df:f5:55:e4:1c:bf:a2:43:10: 1c:29:4a:82:4b:f7:6c:6b:03:7d:e2:e1:ee:c1:b5: b1:e9:cf:96:fe:91:36:c8:b4:9f:db:80:87:16:39: 39:1f:ac:fd:77:01:e6:6f:6d:37:f4:16:f2:9a:bf: 5b:e9:48:48:fb:03:42:a5:76:6c:47:d7:a6:77:a4: a5:dd:b1:d2:a7:b2:f2:7f:c5:16:ef:a6:6d:f6:ca: 22:ed:82:a2:c0:33:d2:60:49:d0:d5:ac:d5:69:88: ec:bc:d5:e0:45:e9:39:e5:cd:66:1d:e2:2d:c6:0f: f6:1d:5f:0d:f1:6e:1f:a3:88:0d:22:f0:c1:77:be: 43:00:ed:2c:50:92:94:d3:ac:3c:86:8f:81:97:94: a8:7d:4b:3f:0a:04:6a:38:4e:e3:f9:e1:db:76:06: 74:a5:83:4e:ca:18:00:7c:48:8c:88:d2:44:86:0f: 69:25:7a:01:18:e4:c6:de:d3:44:7d:35:db:8d:17: b9:b1:2e:e3:aa:41:97:60:0e:af:bb:82:a5:de:0d: c1:51:dc:b6:2f:90:63:d7:41:d1:85:7d:68:81:1a: 7e:86:5c:bd:2a:c3:cf:42:ff:b6:9d:de:19:8c:55: 11:71:b9:0e:31:f4:7c:05:63:d9:36:9e:fa:7f:99: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:0F:ED:9A:88:79:6F:5F:E7:44:E7:35:0F:28:68:1D:90:1A:16 X509v3 Authority Key Identifier: keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ba:6b:49:13:da:04:22:29:af:2f:66:e6:fd:fc:37:c3:2a: 94:a9:81:b3:3d:b7:03:20:ba:9f:c0:a0:fd:19:30:78:57:87: cd:8b:83:e7:28:92:25:08:f0:cf:35:03:0a:35:43:55:48:51: 80:66:bd:ee:36:36:f1:d2:d9:1a:33:2e:1c:84:ef:7a:8c:cd: ab:51:0a:16:51:35:c4:ca:a5:99:d5:ea:51:d4:56:8f:ce:65: cd:cb:11:95:a5:38:54:66:7e:d6:a0:2a:ed:b5:59:a3:57:5d: bd:51:31:dd:fd:9a:bd:35:df:c5:3b:e0:f0:98:08:0f:0e:08: 09:10:30:03:4f:22:cd:2f:d6:6b:08:22:e3:40:21:3f:43:cc: cd:94:f7:bd:fa:f7:c6:80:38:d2:42:ac:cd:a8:af:56:df:17: 43:dd:3d:42:2e:c6:3c:d4:f3:ad:6b:32:be:cb:d0:ae:88:7f: 4f:c8:66:eb:61:df:9e:36:20:15:5f:a0:4f:12:af:78:cd:f0: c4:3e:37:1d:00:3f:ec:56:41:1a:c4:8e:b8:7b:3f:8b:b7:e8: a9:db:3e:e2:7e:57:fa:2e:46:6d:11:73:09:89:27:81:ce:2e: 34:c0:b1:b6:cc:c4:ec:99:08:3a:6c:33:ab:11:a6:52:40:11: 96:a5:23:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91ZKGbzFAUNKd7GRSC4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzZlYzI4ZGIxMTRhODYyNzY0MjZkMWY0OGQyYjZhMzVk NWZlNzMwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD Eyg5ZTI1MGZlZDlhODg3OTZmNWZlNzQ0ZTczNTBmMjg2ODFkOTAxYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXv3Fanf9VXkHL+iQxAcKUqCS/ds awN94uHuwbWx6c+W/pE2yLSf24CHFjk5H6z9dwHmb2039Bbymr9b6UhI+wNCpXZs R9emd6Sl3bHSp7Lyf8UW76Zt9soi7YKiwDPSYEnQ1azVaYjsvNXgRek55c1mHeIt xg/2HV8N8W4fo4gNIvDBd75DAO0sUJKU06w8ho+Bl5SofUs/CgRqOE7j+eHbdgZ0 pYNOyhgAfEiMiNJEhg9pJXoBGOTG3tNEfTXbjRe5sS7jqkGXYA6vu4Kl3g3BUdy2 L5Bj10HRhX1ogRp+hly9KsPPQv+2nd4ZjFURcbkOMfR8BWPZNp76f5kSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4lD+2aiHlvX+dE5zUPKGgdkBoWMB8GA1UdIwQY MBaAFAbG7CjbEUqGJ2Qm0fSNK2o11f5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEt Mzc2YmY5ZTYzMDU5LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEtMzc2YmY5ZTYzMDU5 LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7prSRPa BCIpry9m5v38N8MqlKmBsz23AyC6n8Cg/RkweFeHzYuD5yiSJQjwzzUDCjVDVUhR gGa97jY28dLZGjMuHITveozNq1EKFlE1xMqlmdXqUdRWj85lzcsRlaU4VGZ+1qAq 7bVZo1ddvVEx3f2avTXfxTvg8JgIDw4ICRAwA08izS/Wawgi40AhP0PMzZT3vfr3 xoA40kKszaivVt8XQ909Qi7GPNTzrWsyvsvQroh/T8hm62HfnjYgFV+gTxKveM3w xD43HQA/7FZBGsSOuHs/i7foqds+4n5X+i5GbRFzCYkngc4uNMCxtszE7JkIOmwz qxGmUkARlqUjjg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:57 2025 by rpki-client