This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json) Hash identifier: Hw4EElUkvGCRU8dq2bsqgimm3TWdxgyUydiOfJ7RsLU= Subject key identifier: F5:7A:53:0D:68:01:12:63:DC:6C:0F:C1:CC:C5:EF:51:B9:73:2D:1B Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Certificate serial: 019B360E58568BEC629498505E367A9E3382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft Manifest number: 147E Signing time: Fri 19 Dec 2025 10:01:08 +0000 Manifest this update: Fri 19 Dec 2025 10:01:08 +0000 Manifest next update: Sat 20 Dec 2025 10:01:08 +0000 Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=) 2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: FunBK0LsD7l2suyuyIp181FIGQnQsakrgUwY1wINg+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:58:56:8b:ec:62:94:98:50:5e:36:7a:9e:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Validity Not Before: Dec 19 10:01:08 2025 GMT Not After : Dec 20 10:01:08 2025 GMT Subject: CN=f57a530d68011263dc6c0fc1ccc5ef51b9732d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:b5:55:21:32:ad:2d:ed:98:c8:2b:53:4e: aa:95:95:8d:23:68:59:60:bd:9d:5f:2a:81:26:37: 16:d8:e1:3c:e6:95:c2:4f:98:88:88:02:7c:e1:d6: 09:05:7c:45:25:04:00:40:e0:a9:68:b9:ea:b6:ea: 91:a7:36:14:da:ab:75:e6:55:d1:55:3b:c4:83:ab: 10:31:91:7f:c0:c1:a0:dc:ae:bc:d1:bc:ab:c9:61: a1:1f:f5:21:70:e3:cf:12:3a:59:1f:15:4d:d2:5e: a0:84:3d:e4:c1:0d:46:c6:cc:06:9c:a1:70:e8:61: d0:d9:d7:af:9e:87:41:1e:02:bf:d8:7a:0d:cb:38: 4d:7a:0f:f3:b3:55:c9:46:55:e2:66:d9:76:e3:0a: 32:48:8d:79:6f:05:c4:98:a6:4d:7b:d6:8b:17:6e: 7b:da:93:cd:99:70:61:ac:22:8a:64:39:92:44:d6: ed:03:54:8a:fc:0a:93:32:55:1a:2b:fc:f0:db:34: 0f:a0:aa:1f:68:8e:b7:d6:15:8d:86:0d:5f:cb:e2: 06:65:76:0b:03:ad:bd:39:96:e1:bf:e0:e6:e8:fa: e1:c4:52:86:50:3f:98:4e:7c:ee:d1:e1:56:ff:9d: 8f:4c:a4:5b:b4:7e:b3:a9:e0:fe:db:01:8b:80:3c: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7A:53:0D:68:01:12:63:DC:6C:0F:C1:CC:C5:EF:51:B9:73:2D:1B X509v3 Authority Key Identifier: keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:26:29:e3:c6:70:95:6a:3b:a3:d4:49:9e:39:3f:0c:77:b3: 41:e7:fc:ab:84:43:e3:5f:79:d3:47:dd:da:25:19:b1:68:d7: 4e:7f:ad:ae:4a:6f:9e:48:a2:1d:97:83:e4:00:92:0d:25:61: 05:c1:cd:67:49:52:7d:d2:f6:45:1c:64:90:9c:44:1d:cb:f5: 93:9a:72:a1:53:d5:5f:82:55:57:49:98:82:21:7b:c7:0f:63: b3:77:13:72:82:f2:ec:64:6b:d3:56:69:0b:7a:dd:4e:51:81: 49:8d:88:1f:3e:88:49:b2:69:33:7e:37:16:cf:ed:01:0f:b5: 5d:26:ac:ab:17:92:ee:2c:17:d3:15:27:6b:0b:c9:a9:6c:95: a4:dd:9e:81:f9:10:de:5c:8c:47:d7:d5:6b:70:15:03:1e:75: f3:cd:bf:0c:c1:a1:ff:f3:cd:90:b1:c8:fb:5e:8a:ab:d2:2d: 4e:41:aa:ab:48:b3:d7:71:db:41:1d:ca:d7:c7:0c:46:ca:22: 78:52:da:2d:c0:66:c2:49:95:94:39:1b:a2:ff:6a:b3:40:0e: c5:f0:bb:d9:df:a4:b8:7e:2e:01:ab:28:d7:27:ad:f1:ae:5c: 19:6e:4e:ea:ab:6a:37:45:20:90:8d:5c:1a:3b:8d:a5:3d:70: 6b:fd:de:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlhWi+xilJhQXjZ6njOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmY1OGU2MzZkOGJiMWRkMTAzOTZjODI0NGRjMTE5MjE1 ZTc5MTQwHhcNMjUxMjE5MTAwMTA4WhcNMjUxMjIwMTAwMTA4WjAzMTEwLwYDVQQD EyhmNTdhNTMwZDY4MDExMjYzZGM2YzBmYzFjY2M1ZWY1MWI5NzMyZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn621VSEyrS3tmMgrU06qlZWNI2hZ YL2dXyqBJjcW2OE85pXCT5iIiAJ84dYJBXxFJQQAQOCpaLnqtuqRpzYU2qt15lXR VTvEg6sQMZF/wMGg3K680byryWGhH/UhcOPPEjpZHxVN0l6ghD3kwQ1GxswGnKFw 6GHQ2devnodBHgK/2HoNyzhNeg/zs1XJRlXiZtl24woySI15bwXEmKZNe9aLF257 2pPNmXBhrCKKZDmSRNbtA1SK/AqTMlUaK/zw2zQPoKofaI631hWNhg1fy+IGZXYL A629OZbhv+Dm6PrhxFKGUD+YTnzu0eFW/52PTKRbtH6zqeD+2wGLgDxY5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPV6Uw1oARJj3GwPwczF71G5cy0bMB8GA1UdIwQY MBaAFG0vWOY22Lsd0QOWyCRNwRkhXnkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTct Y2U2YjdjOWQ1NTliLzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTctY2U2YjdjOWQ1NTli LzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSYp48Zw lWo7o9RJnjk/DHezQef8q4RD419500fd2iUZsWjXTn+trkpvnkiiHZeD5ACSDSVh BcHNZ0lSfdL2RRxkkJxEHcv1k5pyoVPVX4JVV0mYgiF7xw9js3cTcoLy7GRr01Zp C3rdTlGBSY2IHz6ISbJpM343Fs/tAQ+1XSasqxeS7iwX0xUnawvJqWyVpN2egfkQ 3lyMR9fVa3AVAx51882/DMGh//PNkLHI+16Kq9ItTkGqq0iz13HbQR3K18cMRsoi eFLaLcBmwkmVlDkbov9qs0AOxfC72d+kuH4uAaso1yet8a5cGW5O6qtqN0UgkI1c GjuNpT1wa/3eVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:57:20 2025 by rpki-client