This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json) Hash identifier: 4buaCoHBy8/3GrSZLAmkI95OIx34hJBLIFau9BqcwQs= Subject key identifier: 68:16:FB:68:6B:3A:1A:9B:63:D8:32:74:31:D4:46:28:57:9F:F5:9E Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a Certificate serial: 019AF163F3B4B768A319DCCF53703AF20CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=) 2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: kA0jHXdWnqMYjt10FcYSZhIIIkmOBuFV2EBZuXv8C3I=) 3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f3:b4:b7:68:a3:19:dc:cf:53:70:3a:f2:0c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=6816fb686b3a1a9b63d8327431d44628579ff59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:a3:9c:e3:1b:75:af:25:f8:6b:1c:c5:32: bd:9f:e1:67:5c:9e:aa:8b:37:ff:e4:48:ba:c7:57: ed:db:64:c1:20:e8:90:02:18:2e:a5:f9:86:f6:9f: f6:4b:f0:60:17:f8:ba:de:00:8a:fe:c3:92:90:05: 7f:f6:cc:4b:10:b9:d8:1d:86:52:c5:18:b3:38:a7: 3e:e6:cf:99:6e:b2:53:2c:cd:0b:0b:73:99:d3:15: 50:b1:dc:66:00:b9:e9:81:2c:24:cc:39:b7:c2:68: 58:e9:b7:dc:98:98:b4:0f:fe:d0:c0:c8:e4:22:cc: bc:79:0f:36:02:c0:b1:42:da:f9:f2:ce:7b:34:ff: 27:c9:90:ea:7e:ff:b2:ee:2e:71:26:14:2a:5b:16: 38:38:a1:fb:de:f5:a9:be:6a:7b:ff:51:95:9a:df: 74:db:9b:1a:78:48:43:aa:12:86:0c:9c:7a:ab:cc: d5:c8:e7:71:57:65:1a:67:6a:84:68:97:66:18:4e: d9:a7:c8:51:fa:49:d3:5e:4f:8c:60:b4:31:6f:6d: 22:33:5d:7d:df:b4:6c:53:77:30:8f:09:ac:d8:93: fb:41:09:65:f5:3a:bd:ee:59:4d:1c:70:7f:7f:d2: c2:46:22:70:e6:cb:e1:3d:54:43:38:5e:b8:a0:a7: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:FB:68:6B:3A:1A:9B:63:D8:32:74:31:D4:46:28:57:9F:F5:9E X509v3 Authority Key Identifier: keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f0:9a:39:56:90:fc:60:d4:fe:6c:0f:f2:b5:44:93:0e:ba: 50:47:dc:0a:1d:34:94:7e:ae:0e:09:da:cf:a1:bb:b4:97:26: dc:2e:7e:a4:8b:5f:55:df:61:4b:be:ed:df:0b:c7:26:7c:a0: ac:de:f8:e1:64:fe:d7:f5:3b:93:a2:13:e8:67:91:d7:1b:54: cc:61:e9:4c:9a:30:8f:52:bf:14:cb:09:01:0a:89:55:63:0a: 25:23:c7:af:18:7d:9b:52:71:68:a2:68:d9:46:ce:f1:c6:71: 4d:5b:2d:6d:60:24:03:e4:62:0b:c5:6c:97:18:49:f6:79:a1: c7:cf:d4:e3:6c:27:82:6f:5c:83:c3:5c:de:72:b3:4f:33:f9: 65:b1:af:46:4c:35:aa:ae:79:1b:a1:36:10:6b:28:f2:78:e7: e0:3e:1b:d4:52:90:b9:09:b7:32:ee:2d:8b:84:7e:54:4a:0d: 90:ef:e1:13:2c:0d:b3:a1:3c:12:47:b0:ef:70:12:0f:73:43: df:7f:de:9b:05:1d:05:91:e4:90:f3:3e:77:27:53:96:dc:da: 2b:c0:44:f5:16:f1:06:21:9f:ab:8c:9c:a7:68:8c:53:e9:c8: a9:cc:91:96:13:de:6b:93:a9:ec:ed:66:d1:83:f5:07:32:55: e3:b2:c7:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/O0t2ijGdzPU3A68gy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTAyNGEwYmRmYmFkOTVmMDEwNjRkNTE4Y2Y2ZWE5NjZi NDQ4OGEwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD Eyg2ODE2ZmI2ODZiM2ExYTliNjNkODMyNzQzMWQ0NDYyODU3OWZmNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWjnOMbda8l+GscxTK9n+FnXJ6q izf/5Ei6x1ft22TBIOiQAhgupfmG9p/2S/BgF/i63gCK/sOSkAV/9sxLELnYHYZS xRizOKc+5s+ZbrJTLM0LC3OZ0xVQsdxmALnpgSwkzDm3wmhY6bfcmJi0D/7QwMjk Isy8eQ82AsCxQtr58s57NP8nyZDqfv+y7i5xJhQqWxY4OKH73vWpvmp7/1GVmt90 25saeEhDqhKGDJx6q8zVyOdxV2UaZ2qEaJdmGE7Zp8hR+knTXk+MYLQxb20iM119 37RsU3cwjwms2JP7QQll9Tq97llNHHB/f9LCRiJw5svhPVRDOF64oKdQfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgW+2hrOhqbY9gydDHURihXn/WeMB8GA1UdIwQY MBaAFGwQJKC9+62V8BBk1RjPbqlmtEiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2Ut MjgzYmIwOTIzODE3LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2UtMjgzYmIwOTIzODE3 LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvCaOVaQ /GDU/mwP8rVEkw66UEfcCh00lH6uDgnaz6G7tJcm3C5+pItfVd9hS77t3wvHJnyg rN744WT+1/U7k6IT6GeR1xtUzGHpTJowj1K/FMsJAQqJVWMKJSPHrxh9m1JxaKJo 2UbO8cZxTVstbWAkA+RiC8VslxhJ9nmhx8/U42wngm9cg8Nc3nKzTzP5ZbGvRkw1 qq55G6E2EGso8njn4D4b1FKQuQm3Mu4ti4R+VEoNkO/hEywNs6E8Ekew73ASD3ND 33/emwUdBZHkkPM+dydTltzaK8BE9RbxBiGfq4ycp2iMU+nIqcyRlhPea5Op7O1m 0YP1BzJV47LHMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:58 2025 by rpki-client