This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json) Hash identifier: bS2ePZnMLuahvanyoBBn26TABvq/JL1lkq9qy0G9Pqg= Subject key identifier: 55:0D:3C:44:ED:B2:2B:8B:31:21:07:09:B3:89:B9:E8:FA:3D:9E:8A Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96 Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96 Certificate serial: 019AF12D39AA77901B3DDC9660FA12891A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft Manifest number: 15CE Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=) 2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=) 3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: /W+apXZrLpJKxCBBAnLeFXMQA5hg+Xt9M7wTagXatwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:39:aa:77:90:1b:3d:dc:96:60:fa:12:89:1a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=550d3c44edb22b8b31210709b389b9e8fa3d9e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:65:ce:52:d7:dd:6a:b3:c4:58:80:e3:08: 13:da:1c:c1:00:6a:7b:10:3b:73:3a:8d:37:e0:13: 95:74:70:b0:c6:23:0e:a0:89:e4:9e:22:45:b3:f1: d9:a5:27:3f:a4:60:66:bc:89:d9:8b:45:9c:d9:ca: 40:86:47:9a:b9:ea:f9:cc:28:41:89:92:ec:c9:0b: 65:06:62:42:be:54:07:a6:69:65:26:74:72:ec:1a: 1b:35:2e:97:a1:63:76:f1:d7:61:f2:f6:45:3a:db: f6:b0:37:c9:1f:8c:2c:1a:2b:0a:d0:7c:8f:9f:d3: d6:b2:d3:0a:86:a2:2f:74:67:0c:80:95:47:93:55: bc:ee:51:1b:92:59:2a:37:7e:81:d7:76:54:76:24: 70:31:de:9b:d0:72:2a:79:80:5c:a0:b1:20:df:0c: 1f:70:4a:c8:9d:58:ed:ff:b3:17:f2:41:03:a2:a4: 80:9a:67:b1:f4:af:15:6c:7f:30:b5:6b:dd:fe:eb: 78:92:9f:a5:ac:74:70:99:13:02:6b:4e:ab:2b:c7: e8:a3:6a:e6:59:57:67:85:80:61:07:93:53:3d:52: a6:48:6d:41:49:cd:13:e1:83:d3:ad:9c:cd:34:b6: 73:40:cb:d9:5a:20:41:d6:aa:be:34:d0:ec:bc:0b: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0D:3C:44:ED:B2:2B:8B:31:21:07:09:B3:89:B9:E8:FA:3D:9E:8A X509v3 Authority Key Identifier: keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c5:62:80:c2:37:4e:ff:f8:c7:bc:7e:5a:58:6b:27:e2:fa: 90:6c:11:a8:89:08:5d:07:39:12:c1:79:a7:d0:ff:68:2a:d3: c8:37:8b:35:e3:14:f2:35:04:8d:99:46:ec:07:6b:ce:50:21: 9a:f5:9a:10:c7:c4:ed:c0:d6:ac:c5:6f:64:74:d5:5d:fb:d6: a2:94:09:63:db:c6:54:b7:a6:38:3e:56:bd:85:d4:f1:ba:ae: cf:41:ea:65:e8:68:1a:d0:a6:11:61:58:ce:4b:be:12:c2:9e: 0b:ba:91:34:fc:b6:6d:58:fd:86:80:57:d9:4d:77:2e:ff:fb: 2b:35:a2:e5:d6:88:a3:a1:fc:7f:d2:b5:d8:2c:cc:37:f0:69: 0d:9f:5d:80:21:f2:a3:ac:6f:c9:73:c2:90:8b:0b:e1:ed:35: 11:56:58:7c:48:22:d9:aa:d6:0e:e6:3a:86:71:27:f3:b9:72: 4e:d3:48:e8:8a:02:1c:d2:7f:48:70:d5:50:6c:ae:fa:d1:a0: fc:d6:67:a2:41:09:39:ea:05:b4:cf:27:8f:72:a3:5d:f2:f8: 0e:a7:66:34:dd:03:cb:5c:0c:cd:c9:11:83:a1:2e:c3:37:fe: 15:f7:57:66:55:f8:34:22:78:b8:75:f7:e6:69:ab:dd:0b:6a: 11:4d:f0:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTmqd5AbPdyWYPoSiRo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzcwMWQ1ODUwNDkxZjUwMjk5ZWY5M2YyZDc0MDliNzhj ZDZjOTYwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD Eyg1NTBkM2M0NGVkYjIyYjhiMzEyMTA3MDliMzg5YjllOGZhM2Q5ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMZlzlLX3WqzxFiA4wgT2hzBAGp7 EDtzOo034BOVdHCwxiMOoInkniJFs/HZpSc/pGBmvInZi0Wc2cpAhkeauer5zChB iZLsyQtlBmJCvlQHpmllJnRy7BobNS6XoWN28ddh8vZFOtv2sDfJH4wsGisK0HyP n9PWstMKhqIvdGcMgJVHk1W87lEbklkqN36B13ZUdiRwMd6b0HIqeYBcoLEg3wwf cErInVjt/7MX8kEDoqSAmmex9K8VbH8wtWvd/ut4kp+lrHRwmRMCa06rK8foo2rm WVdnhYBhB5NTPVKmSG1BSc0T4YPTrZzNNLZzQMvZWiBB1qq+NNDsvAsmeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUNPETtsiuLMSEHCbOJuej6PZ6KMB8GA1UdIwQY MBaAFG13AdWFBJH1Apnvk/LXQJt4zWyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAt NjZhMzI5YjZhZmFkLzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAtNjZhMzI5YjZhZmFk LzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcVigMI3 Tv/4x7x+WlhrJ+L6kGwRqIkIXQc5EsF5p9D/aCrTyDeLNeMU8jUEjZlG7AdrzlAh mvWaEMfE7cDWrMVvZHTVXfvWopQJY9vGVLemOD5WvYXU8bquz0HqZehoGtCmEWFY zku+EsKeC7qRNPy2bVj9hoBX2U13Lv/7KzWi5daIo6H8f9K12CzMN/BpDZ9dgCHy o6xvyXPCkIsL4e01EVZYfEgi2arWDuY6hnEn87lyTtNI6IoCHNJ/SHDVUGyu+tGg /NZnokEJOeoFtM8nj3KjXfL4DqdmNN0Dy1wMzckRg6Euwzf+FfdXZlX4NCJ4uHX3 5mmr3QtqEU3wNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:57 2025 by rpki-client