This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: Fapv+p50F/Q3oTLCSkGnE6OzYW5b1/ECWFJ5l+1HgJ4= Subject key identifier: 2E:0B:36:CA:50:EE:08:EF:97:BF:D1:00:8A:5B:9E:4D:89:98:9D:E8 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019AF240048E05E245261562F279A25BE191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: 3EGyKy0mfLf9Ps1zOk80Z_LVvpg.roa (hash: i1F2if6l28Z1RGt9a9L7x+hC5ecOfRxlCor3EIVpKP4=) 2: 8oBoddXfq5WQIOR9BAD0MLlQStQ.roa (hash: W/vNLrn9Q1IaOdZkGTVXj1JEa3UDztdzNPeCSH3oCMc=) 3: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 4: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 5: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 6: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 7: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 8: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 9: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 10: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 11: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 12: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: mRjdh7rul0Vb1gWuyvzk8b2MYdsJAas+o1NQAYB6YDk=) 13: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 14: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 15: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 16: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 17: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 18: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 19: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:04:8e:05:e2:45:26:15:62:f2:79:a2:5b:e1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=2e0b36ca50ee08ef97bfd1008a5b9e4d89989de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:77:3b:9e:ba:7b:84:2e:4b:77:95:aa:9a: 51:dc:5e:6b:d1:d1:4c:6a:97:6b:68:b7:d5:8f:23: 8b:33:39:fa:e3:b6:5a:27:9d:98:68:ed:9c:47:ee: f1:ab:39:d2:9b:25:cf:13:a2:6d:99:33:9d:77:c6: 68:48:68:94:5c:5c:17:16:95:7a:2b:4c:da:37:93: 46:c4:6a:5e:a5:64:af:40:88:ad:e8:8b:32:4a:b2: 10:ef:23:3a:63:8d:96:e6:9a:63:d8:12:24:68:0a: d7:cb:05:34:4b:4f:96:80:d3:57:a4:f2:4b:9b:37: 68:80:e8:5e:36:5a:61:97:0d:71:30:dc:ed:9b:00: a3:d3:4d:b3:0d:10:23:3d:6c:87:99:9c:77:eb:df: e8:45:79:6e:cb:09:5e:5e:8a:64:d0:85:3f:16:c1: e3:99:4c:72:35:70:8f:85:bb:c6:44:a9:83:68:a5: 4f:05:41:91:b9:e5:02:93:60:2d:2e:10:b6:53:fd: ff:05:41:c8:e1:47:c6:48:5e:4d:c6:10:d5:a8:a7: a4:53:ae:42:97:78:c9:c5:9e:d1:25:6e:c8:12:ce: a6:c9:23:03:c3:81:fe:da:79:f3:70:f4:6e:8c:e4: 59:db:7e:0e:6f:c1:03:85:95:69:d4:f4:d6:1a:20: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0B:36:CA:50:EE:08:EF:97:BF:D1:00:8A:5B:9E:4D:89:98:9D:E8 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9f:c8:8a:13:59:24:44:55:5e:2c:ec:ee:4f:bf:f9:f8:de: 21:fc:ed:3d:e4:0e:bd:6a:dc:a4:cf:8f:44:b2:58:54:eb:57: f3:db:ba:24:57:0d:74:85:51:9b:a1:a3:91:45:77:b1:83:b2: f3:d4:73:03:66:8f:93:e7:c5:55:1a:c2:ab:3a:e2:ae:e2:4a: 4b:28:69:36:d6:e7:c2:8d:59:3b:30:79:45:8b:0f:75:74:65: 68:87:57:d8:61:96:a6:93:18:20:82:a9:c7:b2:5e:03:cd:14: c9:96:11:6d:18:86:71:cd:d5:26:89:bd:d2:84:5b:3c:93:ec: 92:c9:9f:69:50:ac:00:1c:65:9f:c6:30:d6:02:09:bf:91:f5: a6:0b:07:c4:7d:55:19:11:0f:cb:ae:07:20:75:00:85:57:d5: 80:1c:de:77:1b:40:cf:df:d1:54:18:28:3a:78:72:dd:de:9c: cc:7e:1a:c3:3c:4d:51:51:7f:2c:74:dc:19:89:4a:54:fa:02: 08:a6:a9:df:ee:90:8a:d7:68:2a:0f:55:38:08:76:cb:8e:c6: 72:e0:65:9e:23:59:ae:19:3d:88:01:c2:66:c7:ec:37:30:1b: a1:e3:2c:65:38:6a:8a:88:d6:84:f4:09:e9:ec:21:a4:a1:9f: 98:b9:a8:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQASOBeJFJhVi8nmiW+GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD EygyZTBiMzZjYTUwZWUwOGVmOTdiZmQxMDA4YTViOWU0ZDg5OTg5ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWd3O566e4QuS3eVqppR3F5r0dFM apdraLfVjyOLMzn647ZaJ52YaO2cR+7xqznSmyXPE6JtmTOdd8ZoSGiUXFwXFpV6 K0zaN5NGxGpepWSvQIit6IsySrIQ7yM6Y42W5ppj2BIkaArXywU0S0+WgNNXpPJL mzdogOheNlphlw1xMNztmwCj002zDRAjPWyHmZx369/oRXluywleXopk0IU/FsHj mUxyNXCPhbvGRKmDaKVPBUGRueUCk2AtLhC2U/3/BUHI4UfGSF5NxhDVqKekU65C l3jJxZ7RJW7IEs6mySMDw4H+2nnzcPRujORZ234Ob8EDhZVp1PTWGiB6bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4LNspQ7gjvl7/RAIpbnk2JmJ3oMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ/IihNZ JERVXizs7k+/+fjeIfztPeQOvWrcpM+PRLJYVOtX89u6JFcNdIVRm6GjkUV3sYOy 89RzA2aPk+fFVRrCqzriruJKSyhpNtbnwo1ZOzB5RYsPdXRlaIdX2GGWppMYIIKp x7JeA80UyZYRbRiGcc3VJom90oRbPJPsksmfaVCsABxln8Yw1gIJv5H1pgsHxH1V GREPy64HIHUAhVfVgBzedxtAz9/RVBgoOnhy3d6czH4awzxNUVF/LHTcGYlKVPoC CKap3+6QitdoKg9VOAh2y47GcuBlniNZrhk9iAHCZsfsNzAboeMsZThqiojWhPQJ 6ewhpKGfmLmoHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:30 2025 by rpki-client