This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json) Hash identifier: E2uC4VFtjgRojMj/F5H8tBs1DRfE19zkk1HCIefaJ0M= Subject key identifier: 51:9C:1E:21:ED:84:53:FA:E8:9A:CD:E8:0A:3F:03:34:E1:25:D7:8C Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Certificate serial: 019AF0517766F1AA8258714A65D10D96AE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft Manifest number: 0851 Signing time: Fri 05 Dec 2025 21:01:02 +0000 Manifest this update: Fri 05 Dec 2025 21:01:02 +0000 Manifest next update: Sat 06 Dec 2025 21:01:02 +0000 Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=) 2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: qH5NrC+z53rin3n3YJLKo7IQyhJ8AWyRwCMyDrhnu3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:77:66:f1:aa:82:58:71:4a:65:d1:0d:96:ae:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Validity Not Before: Dec 5 21:01:02 2025 GMT Not After : Dec 6 21:01:02 2025 GMT Subject: CN=519c1e21ed8453fae89acde80a3f0334e125d78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:89:1c:e3:fd:a2:9e:b8:0c:15:59:b5:b2: 29:7a:34:44:93:0b:95:0f:77:d3:aa:c9:c4:0a:d8: 8e:d7:b0:93:0f:5e:d8:28:22:cc:38:40:2a:f7:99: 9a:5f:31:06:a7:da:d1:47:43:80:a9:43:8b:1c:ed: cb:ac:3a:fe:87:1b:c8:e0:03:8c:af:24:fe:a2:c7: d8:2e:11:ce:82:5a:34:6c:27:1e:3a:9b:0b:a1:f6: 45:99:c8:b5:e5:6f:3d:6d:06:a2:c8:52:0c:af:82: 80:35:20:17:82:64:22:6e:d8:93:cb:89:33:5e:53: 62:21:43:67:fb:8c:90:50:80:f5:f0:8a:87:f8:19: 28:f1:96:89:c4:c7:49:8b:b3:48:fd:99:c9:9b:87: d4:b5:ec:bd:d2:64:90:72:6d:1a:a0:5d:af:97:10: 9b:50:9b:f4:80:fc:26:62:70:67:51:f3:a3:4e:7d: a3:e4:1e:f6:78:0d:b8:7a:23:46:4e:e0:6e:68:b8: 00:6b:2e:f2:ad:ef:25:b4:dc:48:44:5f:00:9e:93: 0d:c7:59:f1:ee:71:93:1a:d1:35:03:c9:ae:8b:9d: c8:08:b7:59:55:9a:d6:5d:e8:d1:0a:35:2d:7e:9e: 85:86:f8:97:d8:0e:09:8a:ec:5b:ea:32:2e:88:23: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9C:1E:21:ED:84:53:FA:E8:9A:CD:E8:0A:3F:03:34:E1:25:D7:8C X509v3 Authority Key Identifier: keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:da:0a:19:54:76:f9:d3:a9:7e:d8:14:a7:7a:8f:01:a0:21: cb:c4:76:14:4a:b0:47:80:94:54:52:b9:1e:90:14:ed:f4:48: a3:4f:da:1a:e4:f6:fb:64:88:ad:a0:db:c5:10:8d:7c:06:63: 79:80:c8:48:79:82:d5:89:f7:14:a4:b6:d3:44:3c:f5:90:de: 3e:b6:70:ad:0f:68:d8:1a:7f:19:f2:b6:e8:88:0d:9e:e8:26: b6:b7:0b:bd:f1:d4:61:c7:25:25:e4:e2:b9:ae:1a:34:e5:69: e8:79:26:1e:eb:da:57:99:65:0b:05:6b:30:86:fa:01:d4:b7: f8:b5:14:7e:6b:f1:fa:e6:1e:03:84:f2:4f:81:16:e3:53:e7: b1:db:61:f5:83:9b:67:30:82:7c:34:d7:b8:b7:2f:a0:07:df: ad:32:6c:3d:2e:7e:0f:4c:69:6d:de:1b:d2:54:56:1c:64:f0: 2c:5a:a6:06:4a:e7:15:65:32:10:f7:2e:7e:7a:dc:7d:d4:f7: 02:3f:84:2c:cf:c1:ec:3e:ce:e5:d4:ce:93:d7:97:a5:85:1e: 08:5a:7a:66:ba:59:cd:97:d1:47:14:c8:00:24:7b:5a:6e:04: 38:1e:eb:9d:49:b9:2a:d2:c2:6b:32:f6:22:a5:fa:70:06:8c: f2:02:20:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUXdm8aqCWHFKZdENlq5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTkyNTM2Y2UwNmZkYWE1YWMyZWU0ODExN2NmNTdhYTNi NGM4ZDAwHhcNMjUxMjA1MjEwMTAyWhcNMjUxMjA2MjEwMTAyWjAzMTEwLwYDVQQD Eyg1MTljMWUyMWVkODQ1M2ZhZTg5YWNkZTgwYTNmMDMzNGUxMjVkNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNuJHOP9op64DBVZtbIpejREkwuV D3fTqsnECtiO17CTD17YKCLMOEAq95maXzEGp9rRR0OAqUOLHO3LrDr+hxvI4AOM ryT+osfYLhHOglo0bCceOpsLofZFmci15W89bQaiyFIMr4KANSAXgmQibtiTy4kz XlNiIUNn+4yQUID18IqH+Bko8ZaJxMdJi7NI/ZnJm4fUtey90mSQcm0aoF2vlxCb UJv0gPwmYnBnUfOjTn2j5B72eA24eiNGTuBuaLgAay7yre8ltNxIRF8AnpMNx1nx 7nGTGtE1A8mui53ICLdZVZrWXejRCjUtfp6FhviX2A4Jiuxb6jIuiCPrrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGcHiHthFP66JrN6Ao/AzThJdeMMB8GA1UdIwQY MBaAFGxZJTbOBv2qWsLuSBF89XqjtMjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWIt MGEyZWM1YTIzYjk4LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWItMGEyZWM1YTIzYjk4 LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtoKGVR2 +dOpftgUp3qPAaAhy8R2FEqwR4CUVFK5HpAU7fRIo0/aGuT2+2SIraDbxRCNfAZj eYDISHmC1Yn3FKS200Q89ZDePrZwrQ9o2Bp/GfK26IgNnugmtrcLvfHUYcclJeTi ua4aNOVp6HkmHuvaV5llCwVrMIb6AdS3+LUUfmvx+uYeA4TyT4EW41Pnsdth9YOb ZzCCfDTXuLcvoAffrTJsPS5+D0xpbd4b0lRWHGTwLFqmBkrnFWUyEPcufnrcfdT3 Aj+ELM/B7D7O5dTOk9eXpYUeCFp6ZrpZzZfRRxTIACR7Wm4EOB7rnUm5KtLCazL2 IqX6cAaM8gIgMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:38 2025 by rpki-client