This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json) Hash identifier: 5EgyvgBFvXQnRQpJ6cReTF+zmcFi6omWLSqxIcsoto0= Subject key identifier: 6D:10:BF:47:56:40:CB:B2:9E:21:83:C8:4D:AE:C9:02:80:46:67:5D Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Certificate serial: 019AF27658898F0F2D6E3F02252788271594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft Manifest number: 145B Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=) 2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: fc3HRL64c1Re+zcT1KS98MkcvwtCigdQmkp5kfrZT5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:58:89:8f:0f:2d:6e:3f:02:25:27:88:27:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=6d10bf475640cbb29e2183c84daec9028046675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:25:18:5e:3a:a2:3b:e9:d8:2a:1d:a2:10: 65:f3:e8:1c:83:2c:1e:bb:3b:b0:bf:ec:2f:89:50: 8e:1d:12:e1:f7:18:d3:a5:27:85:e7:20:ac:d8:49: b7:13:93:5f:e6:94:d5:cd:67:b7:53:63:cf:35:41: e8:27:cf:c9:e7:0d:7a:59:3f:bd:51:f8:aa:8e:e9: 9d:3f:c4:94:53:65:19:7b:61:a7:34:cd:e6:0b:06: 0b:f5:23:40:5b:3f:c9:d0:6a:4a:62:8b:92:8f:6d: 0f:22:e8:c0:99:b6:bc:c2:66:25:3c:83:61:cc:bd: 3e:58:2d:83:66:6f:95:2f:0d:00:70:1e:27:53:0e: 2a:22:d3:00:17:d9:5d:72:b8:55:38:6b:29:df:1b: 8e:2a:54:36:92:97:39:45:f0:e3:e2:7d:dc:ca:17: 1a:f9:55:07:86:1a:b3:92:30:99:cb:0c:dc:56:c2: 81:51:72:f0:f6:59:e2:60:cc:76:37:d2:99:e6:c9: 61:0c:90:b4:cc:e0:fa:20:96:5f:ce:0c:36:15:62: e8:8c:65:89:21:12:9d:c2:5c:20:d0:ee:b2:ce:bd: 88:77:fb:82:46:6c:22:d8:70:70:d9:d7:dc:1f:81: 3b:ad:ad:cd:89:81:4d:85:03:c5:d7:a5:1e:53:6d: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:10:BF:47:56:40:CB:B2:9E:21:83:C8:4D:AE:C9:02:80:46:67:5D X509v3 Authority Key Identifier: keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3a:1c:e0:31:4e:c7:ae:10:b8:72:d4:a9:83:f9:a0:10:f2: e6:4d:04:9b:b8:4e:8d:2c:1b:c4:4d:b5:96:4e:c9:93:bb:47: ea:31:5f:89:7a:e8:f0:eb:63:3d:68:09:a3:ae:81:b4:2c:81: 29:b4:40:38:1e:2a:55:78:e0:3b:d9:c8:47:3b:13:91:47:0e: 70:0a:89:02:04:25:55:cb:a5:6e:fd:77:59:a8:af:5c:b9:19: 3d:50:8f:b2:e2:e8:d5:6a:ac:e8:b0:c8:c2:35:5a:01:f0:50: 27:d2:b7:f4:e0:9b:5f:84:83:8b:c8:c7:d4:5b:9a:28:6d:52: 0d:33:c0:53:16:70:7e:f7:ee:7e:53:e0:32:aa:83:f3:f8:ba: 8b:32:ed:13:79:80:46:bf:61:90:c0:86:41:34:b7:d7:a5:23: 2c:26:fe:8b:58:42:ed:eb:b7:f7:6f:e5:6d:85:9b:1c:54:f2: c3:a5:15:86:89:10:f9:a7:3a:f6:d0:8b:6a:f3:9d:37:aa:62: 04:1b:7a:35:ff:10:c2:50:3d:5f:8d:23:5e:c0:9c:58:df:c6: 5d:ac:88:fb:97:5d:df:55:62:a1:6b:c3:93:0d:ce:ca:5a:00: ae:32:da:e0:22:53:f8:08:86:ea:65:b6:6b:2a:85:22:ca:29: 24:8f:b1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydliJjw8tbj8CJSeIJxWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmY1OGU2MzZkOGJiMWRkMTAzOTZjODI0NGRjMTE5MjE1 ZTc5MTQwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD Eyg2ZDEwYmY0NzU2NDBjYmIyOWUyMTgzYzg0ZGFlYzkwMjgwNDY2NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu14lGF46ojvp2CodohBl8+gcgywe uzuwv+wviVCOHRLh9xjTpSeF5yCs2Em3E5Nf5pTVzWe3U2PPNUHoJ8/J5w16WT+9 UfiqjumdP8SUU2UZe2GnNM3mCwYL9SNAWz/J0GpKYouSj20PIujAmba8wmYlPINh zL0+WC2DZm+VLw0AcB4nUw4qItMAF9ldcrhVOGsp3xuOKlQ2kpc5RfDj4n3cyhca +VUHhhqzkjCZywzcVsKBUXLw9lniYMx2N9KZ5slhDJC0zOD6IJZfzgw2FWLojGWJ IRKdwlwg0O6yzr2Id/uCRmwi2HBw2dfcH4E7ra3NiYFNhQPF16UeU214sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0Qv0dWQMuyniGDyE2uyQKARmddMB8GA1UdIwQY MBaAFG0vWOY22Lsd0QOWyCRNwRkhXnkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTct Y2U2YjdjOWQ1NTliLzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTctY2U2YjdjOWQ1NTli LzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfToc4DFO x64QuHLUqYP5oBDy5k0Em7hOjSwbxE21lk7Jk7tH6jFfiXro8OtjPWgJo66BtCyB KbRAOB4qVXjgO9nIRzsTkUcOcAqJAgQlVculbv13WaivXLkZPVCPsuLo1Wqs6LDI wjVaAfBQJ9K39OCbX4SDi8jH1FuaKG1SDTPAUxZwfvfuflPgMqqD8/i6izLtE3mA Rr9hkMCGQTS316UjLCb+i1hC7eu392/lbYWbHFTyw6UVhokQ+ac69tCLavOdN6pi BBt6Nf8QwlA9X40jXsCcWN/GXayI+5dd31VioWvDkw3OyloArjLa4CJT+AiG6mW2 ayqFIsopJI+xeg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:35 2025 by rpki-client