This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json) Hash identifier: A01fX0DoNtJ7u5P0hKwceMXhpGAM4sg/kIvb2tGPBYs= Subject key identifier: 25:97:CC:9B:14:7C:B1:CA:69:D7:F7:7C:93:2A:13:56:9D:28:80:92 Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9 Certificate serial: 019AF27724F57DB13C6153384938A07623B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=) 2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: MRAxVMWNre5aoZsV8v1jK7CEu9B7iud+HNHdas9pmug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:24:f5:7d:b1:3c:61:53:38:49:38:a0:76:23:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=2597cc9b147cb1ca69d7f77c932a13569d288092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:49:5e:9d:a3:ad:72:bd:6e:bb:1d:7e:aa: 72:b8:c1:36:0a:84:04:0b:dc:64:75:5d:f4:ab:ba: 01:b2:ce:02:0f:53:b7:18:18:b0:a8:c4:5c:4a:2e: fc:55:4d:fb:8c:86:bc:48:f6:95:f1:83:8f:b0:7c: 7a:14:c2:0e:85:37:8e:15:35:3a:01:d9:64:56:8e: 49:d1:ea:f9:3f:24:88:a3:c0:37:17:88:93:03:df: d4:7d:cf:60:2f:57:81:ca:50:0e:33:2f:4a:cb:a0: 6f:14:6f:61:19:93:fa:42:28:fa:5a:2b:be:b9:5f: ca:32:10:3d:fc:c9:23:2f:96:bd:f2:7c:dc:03:77: 8e:64:d4:9b:cb:d5:31:40:e7:98:fe:e7:ab:69:c8: c8:76:ab:97:9d:c7:1f:52:96:66:cc:86:3f:f0:99: 78:16:59:61:05:74:69:a5:87:3e:9c:c5:f5:1c:79: 63:ae:77:d8:44:ca:3a:a0:5c:4d:c9:d4:ff:c7:5d: 70:14:8d:c7:4e:e5:fe:12:fd:d1:45:6f:1b:51:30: 48:bc:5c:b3:6f:90:7a:97:e9:e5:34:b6:a7:88:3b: 07:fa:ef:c1:52:8d:3c:54:cf:53:75:83:6b:02:0d: 4c:49:95:d3:06:cf:46:02:38:d5:d3:ed:60:b4:23: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:97:CC:9B:14:7C:B1:CA:69:D7:F7:7C:93:2A:13:56:9D:28:80:92 X509v3 Authority Key Identifier: keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:17:f5:ee:ed:ac:b9:31:92:09:48:16:d0:1f:85:58:fc: 6c:24:82:a3:57:a5:9b:38:0f:ba:0a:3a:f6:9e:7d:a3:c4:71: 97:c0:f7:59:42:09:c6:10:59:d8:c6:15:91:a3:17:25:87:0e: 37:f7:e0:44:c4:4b:79:22:a6:b8:b8:1e:c0:7e:07:a8:d7:a0: 43:07:19:e1:b4:c1:69:c0:e6:be:88:2f:e9:66:55:87:4e:60: 4c:6e:76:ab:61:5e:17:a6:b8:7a:00:ba:f0:d4:29:dd:79:3e: 33:6d:fb:91:c6:c1:63:bd:d4:70:22:2e:cc:69:b2:5a:30:c5: 90:2a:ba:be:6b:de:56:53:7b:5f:1f:42:18:e0:9a:72:13:49: 2e:b1:c5:e1:ae:85:54:56:be:a5:da:5e:95:54:94:a2:d4:a6: 65:d2:83:6f:dc:ae:10:5d:db:9f:95:a4:2e:55:eb:5b:aa:b0: 00:06:dc:3b:e1:81:a1:b1:b0:df:6e:5f:fc:14:7e:2f:62:a4: a4:24:14:6b:cb:63:35:1b:94:73:36:1f:26:09:e4:6a:e7:96: 7c:40:96:a4:c7:f1:7f:46:93:db:fb:07:06:fc:ac:7e:5d:dc: ea:a4:02:8e:12:b0:44:f5:f1:95:2e:f7:38:89:d9:34:17:07: c3:ed:36:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyT1fbE8YVM4STigdiO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj ODllZjkwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD EygyNTk3Y2M5YjE0N2NiMWNhNjlkN2Y3N2M5MzJhMTM1NjlkMjg4MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySlJXp2jrXK9brsdfqpyuME2CoQE C9xkdV30q7oBss4CD1O3GBiwqMRcSi78VU37jIa8SPaV8YOPsHx6FMIOhTeOFTU6 AdlkVo5J0er5PySIo8A3F4iTA9/Ufc9gL1eBylAOMy9Ky6BvFG9hGZP6Qij6Wiu+ uV/KMhA9/MkjL5a98nzcA3eOZNSby9UxQOeY/ueracjIdquXnccfUpZmzIY/8Jl4 FllhBXRppYc+nMX1HHljrnfYRMo6oFxNydT/x11wFI3HTuX+Ev3RRW8bUTBIvFyz b5B6l+nlNLaniDsH+u/BUo08VM9TdYNrAg1MSZXTBs9GAjjV0+1gtCP1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWXzJsUfLHKadf3fJMqE1adKICSMB8GA1UdIwQY MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt ZjVhZDE2N2Q4NDk0LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0 LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPkX9e7t rLkxkglIFtAfhVj8bCSCo1elmzgPugo69p59o8Rxl8D3WUIJxhBZ2MYVkaMXJYcO N/fgRMRLeSKmuLgewH4HqNegQwcZ4bTBacDmvogv6WZVh05gTG52q2FeF6a4egC6 8NQp3Xk+M237kcbBY73UcCIuzGmyWjDFkCq6vmveVlN7Xx9CGOCachNJLrHF4a6F VFa+pdpelVSUotSmZdKDb9yuEF3bn5WkLlXrW6qwAAbcO+GBobGw325f/BR+L2Kk pCQUa8tjNRuUczYfJgnkaueWfECWpMfxf0aT2/sHBvysfl3c6qQCjhKwRPXxlS73 OInZNBcHw+02ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:44 2025 by rpki-client