This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json) Hash identifier: FCAucho90W5WbbK6ryJ3v65XI7lrRFRaGIFMM6Zzn34= Subject key identifier: 00:61:A6:2C:C9:31:C9:AE:24:86:2D:86:0B:E8:41:DE:0A:9B:A0:6E Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399 Certificate serial: 019B24E3E0834A5D93E973BB7AB87B5F7148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft Manifest number: 10 Signing time: Tue 16 Dec 2025 02:01:12 +0000 Manifest this update: Tue 16 Dec 2025 02:01:12 +0000 Manifest next update: Wed 17 Dec 2025 02:01:12 +0000 Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: Q3+KfqyZnZH/T0krkar9NBt6wu4eGkP1t3LrAJox9uE=) 2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=) 3: hYmSi25XUGnjWR73oqXMhHs3evw.roa (hash: E/NTf9mHDmz6rv/YaAtOrx9G+CXju60gRbX5A1kuIbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:e0:83:4a:5d:93:e9:73:bb:7a:b8:7b:5f:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399 Validity Not Before: Dec 16 02:01:12 2025 GMT Not After : Dec 17 02:01:12 2025 GMT Subject: CN=0061a62cc931c9ae24862d860be841de0a9ba06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:cd:f6:48:4d:b2:47:cd:4f:81:f0:0d:b7: 2e:a3:e6:51:7b:14:43:39:0f:db:b5:21:a0:27:4e: ea:26:25:e8:8a:fa:99:f9:67:ec:61:ac:cd:5f:27: c7:3a:91:29:43:a9:1d:10:71:8c:db:10:d9:e5:38: b6:20:2b:3a:ba:9d:74:49:3c:4f:75:ae:07:6b:75: 68:25:fc:7a:b1:2b:5d:b7:a2:fb:79:3d:12:3e:12: 3c:16:32:f9:e5:b5:fa:2c:ea:55:d6:2c:53:b5:f8: 4d:1c:bd:7e:8f:42:70:d9:26:d8:11:6a:5c:29:14: 03:d8:22:71:19:4a:6b:18:d2:cf:36:53:dd:ca:b8: aa:ea:9c:4d:15:44:db:e0:41:a0:3d:01:79:7e:70: eb:56:49:6a:ed:79:dc:77:39:17:0c:5b:82:ec:a1: 42:bc:0b:f9:ea:ef:85:03:ec:85:73:df:c7:03:75: d2:98:61:89:cc:cb:2c:c5:23:53:0b:71:81:21:2c: 2a:12:11:0e:10:5d:78:bb:cb:30:f5:c2:f4:8f:ad: 0f:0e:d5:a6:a2:81:a0:00:38:92:40:d5:25:f4:d7: ad:79:26:7d:9b:e3:5d:8e:87:4b:0f:2d:d9:72:a7: 1d:59:5f:1d:5f:d8:fb:fd:46:0d:47:8f:b7:c7:ff: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:A6:2C:C9:31:C9:AE:24:86:2D:86:0B:E8:41:DE:0A:9B:A0:6E X509v3 Authority Key Identifier: keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d5:76:c4:2e:71:7b:04:13:56:a1:e5:d7:71:b4:17:fb:1b: 45:af:fb:a0:1d:49:59:7b:76:46:30:64:ce:93:4a:04:96:a0: e6:c4:99:37:86:b5:f1:b0:92:ce:95:75:09:1a:4c:19:4a:4b: 7a:c9:c8:3e:c8:94:04:02:74:e3:d7:7d:29:f0:e5:64:82:7c: 7d:bc:4f:88:a3:b3:27:70:c4:1a:d8:f6:58:92:37:2f:39:fc: e4:fc:b3:c9:05:64:bb:e2:7a:82:29:81:92:51:6b:34:e8:c4: 9c:1e:89:fa:8f:3b:64:3b:36:a3:01:7a:92:84:b4:9d:3c:92: ce:3a:e8:ff:07:ba:37:ff:7e:44:95:ed:53:1c:7c:14:0d:80: ea:95:08:84:33:14:25:0e:db:94:50:6c:6b:56:15:05:fd:63: ed:d7:f2:00:4d:28:ce:05:76:df:70:ba:da:53:40:0b:b1:2c: 66:a4:03:4a:04:6b:08:3b:e3:ed:bb:be:a3:09:c4:d7:d9:45: 4e:ff:dd:ed:98:24:69:c2:fc:22:c7:52:a8:c5:17:80:02:7e: 5d:b4:56:82:e1:98:b4:18:af:75:58:61:fb:18:20:01:99:38: 29:e1:ff:85:cc:bb:0d:17:67:8b:e9:0a:99:ab:b5:23:f4:6e: be:3a:8a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4+CDSl2T6XO7erh7X3FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2IzZjg0MjE4NDhmMTEzOTUxZTkwNzBiM2Y3NjM5NTkz MzEzOTkwHhcNMjUxMjE2MDIwMTEyWhcNMjUxMjE3MDIwMTEyWjAzMTEwLwYDVQQD EygwMDYxYTYyY2M5MzFjOWFlMjQ4NjJkODYwYmU4NDFkZTBhOWJhMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ/N9khNskfNT4HwDbcuo+ZRexRD OQ/btSGgJ07qJiXoivqZ+WfsYazNXyfHOpEpQ6kdEHGM2xDZ5Ti2ICs6up10STxP da4Ha3VoJfx6sStdt6L7eT0SPhI8FjL55bX6LOpV1ixTtfhNHL1+j0Jw2SbYEWpc KRQD2CJxGUprGNLPNlPdyriq6pxNFUTb4EGgPQF5fnDrVklq7XncdzkXDFuC7KFC vAv56u+FA+yFc9/HA3XSmGGJzMssxSNTC3GBISwqEhEOEF14u8sw9cL0j60PDtWm ooGgADiSQNUl9NeteSZ9m+NdjodLDy3ZcqcdWV8dX9j7/UYNR4+3x/9KwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABhpizJMcmuJIYthgvoQd4Km6BuMB8GA1UdIwQY MBaAFGzLP4QhhI8ROVHpBws/djlZMxOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQt NDU5ZTM0ZTZmZjIwLzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQtNDU5ZTM0ZTZmZjIw LzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNV2xC5x ewQTVqHl13G0F/sbRa/7oB1JWXt2RjBkzpNKBJag5sSZN4a18bCSzpV1CRpMGUpL esnIPsiUBAJ049d9KfDlZIJ8fbxPiKOzJ3DEGtj2WJI3Lzn85PyzyQVku+J6gimB klFrNOjEnB6J+o87ZDs2owF6koS0nTySzjro/we6N/9+RJXtUxx8FA2A6pUIhDMU JQ7blFBsa1YVBf1j7dfyAE0ozgV233C62lNAC7EsZqQDSgRrCDvj7bu+ownE19lF Tv/d7ZgkacL8IsdSqMUXgAJ+XbRWguGYtBivdVhh+xggAZk4KeH/hcy7DRdni+kK mau1I/RuvjqKbA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:16 2025 by rpki-client