This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json) Hash identifier: oeoHwxBT0VxZHFdI4ftq7nbsULFGXQ4XxiHLLMK+7WQ= Subject key identifier: EC:82:A6:96:47:A8:34:FA:B6:E0:4C:36:67:02:09:87:93:94:4B:A5 Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31 Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031 Certificate serial: 019AF31B3612D7EB5791B41135E30AEAA724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=) 2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: BbD2pGGMnBIuToSXfz+0qwK5aJHM2R/fHh7RIr4Nv9g=) 3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:36:12:d7:eb:57:91:b4:11:35:e3:0a:ea:a7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=ec82a69647a834fab6e04c366702098793944ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:1b:31:c3:d6:b9:68:7e:9f:7e:29:b0:5b: d9:3d:0f:6b:c0:69:5b:2a:4b:dc:9d:50:03:32:bb: 15:fb:87:5e:a6:99:4a:71:71:8d:cd:10:9d:b9:cb: 6b:f7:dc:d6:86:1e:b8:f7:0c:71:22:35:c4:34:a6: f9:3d:4b:d8:2d:f1:9e:00:45:1f:b0:af:10:7f:e0: 82:23:56:48:e1:0c:77:57:89:f3:04:15:9d:bf:65: 2b:0f:f0:39:3f:6f:12:dc:9a:0b:ab:37:bf:9d:52: 54:77:85:fb:4c:2c:82:98:32:3d:56:ff:86:33:c9: ea:e6:b4:b1:5d:27:4b:33:58:25:1c:28:82:78:83: ca:bd:68:35:73:a7:34:75:ee:f6:e7:dc:1f:9b:78: 79:50:f2:a0:43:73:cf:a8:1a:93:a4:8e:92:12:0c: 24:bc:16:2a:d6:13:59:64:8f:9c:49:21:8d:cc:24: 71:57:0e:b7:9d:f2:54:fe:3c:f5:0f:50:35:96:be: d7:a9:0d:82:ab:f8:c4:de:26:bf:00:c9:32:52:62: 26:15:dc:99:48:c5:44:9f:3d:51:15:1b:22:5b:43: 8a:d6:15:d8:2f:21:1e:16:a7:23:ca:40:b6:da:2e: f2:fc:22:68:ac:7a:e9:84:40:34:65:18:6d:f3:29: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:A6:96:47:A8:34:FA:B6:E0:4C:36:67:02:09:87:93:94:4B:A5 X509v3 Authority Key Identifier: keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:b4:0f:89:a7:e9:bd:46:93:a8:a2:5a:e8:26:da:30:0c: ef:e0:7f:eb:90:80:f8:23:c9:59:0a:fc:ca:7a:43:cd:9d:c6: e5:b7:2a:87:18:53:d8:14:66:57:fc:f2:7c:55:0b:29:81:1d: 7a:a0:a7:ea:76:3a:50:6d:7d:6b:40:1b:a5:c8:d6:83:9b:49: 1a:87:6a:93:65:f8:3e:9a:62:9f:3c:72:6a:7e:9a:58:70:38: 5c:29:dc:e9:dd:75:f7:f5:c2:ec:75:c5:a2:3c:07:f4:bb:b3: d6:9c:a8:ec:cd:2b:8f:51:29:92:80:39:49:d8:84:5f:ad:71: 75:06:a9:b8:2c:67:1b:e3:17:d4:f2:66:6a:a7:98:c6:f8:c8: f2:fc:a6:1c:75:ce:37:02:01:de:35:18:ca:19:6c:c3:17:98: f3:90:da:a7:ac:17:34:26:c7:9d:51:b8:f6:ba:5f:c6:4b:60: 7b:db:30:6e:12:68:02:79:8a:6f:7b:9a:b7:5c:e3:90:6b:5b: 25:1c:e5:c6:a9:87:c0:18:2b:ca:0e:18:94:d3:81:14:35:77: 0b:26:76:82:66:8e:64:3b:23:90:62:43:1c:7e:cb:87:1f:bb: de:58:9d:7a:7c:ce:28:cc:4c:e8:02:ea:19:16:00:cd:96:e7: 29:56:14:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzYS1+tXkbQRNeMK6qckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx NjEwMzEwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EyhlYzgyYTY5NjQ3YTgzNGZhYjZlMDRjMzY2NzAyMDk4NzkzOTQ0YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66QbMcPWuWh+n34psFvZPQ9rwGlb KkvcnVADMrsV+4depplKcXGNzRCductr99zWhh649wxxIjXENKb5PUvYLfGeAEUf sK8Qf+CCI1ZI4Qx3V4nzBBWdv2UrD/A5P28S3JoLqze/nVJUd4X7TCyCmDI9Vv+G M8nq5rSxXSdLM1glHCiCeIPKvWg1c6c0de7259wfm3h5UPKgQ3PPqBqTpI6SEgwk vBYq1hNZZI+cSSGNzCRxVw63nfJU/jz1D1A1lr7XqQ2Cq/jE3ia/AMkyUmImFdyZ SMVEnz1RFRsiW0OK1hXYLyEeFqcjykC22i7y/CJorHrphEA0ZRht8ym2zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyCppZHqDT6tuBMNmcCCYeTlEulMB8GA1UdIwQY MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK20D4mn 6b1Gk6iiWugm2jAM7+B/65CA+CPJWQr8ynpDzZ3G5bcqhxhT2BRmV/zyfFULKYEd eqCn6nY6UG19a0AbpcjWg5tJGodqk2X4Pppinzxyan6aWHA4XCnc6d119/XC7HXF ojwH9Luz1pyo7M0rj1EpkoA5SdiEX61xdQapuCxnG+MX1PJmaqeYxvjI8vymHHXO NwIB3jUYyhlswxeY85Dap6wXNCbHnVG49rpfxktge9swbhJoAnmKb3uat1zjkGtb JRzlxqmHwBgryg4YlNOBFDV3CyZ2gmaOZDsjkGJDHH7Lhx+73lidenzOKMxM6ALq GRYAzZbnKVYUYg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:40 2025 by rpki-client