This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json) Hash identifier: 7+Dh4T2ZmcHKfKdmvQGsXGIJuIBcAOTYsD4gIk1M1j4= Subject key identifier: 03:92:DB:86:4C:BA:E1:C6:5A:6B:84:C9:A3:88:4B:3A:4E:D9:0A:10 Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019AF49BA01EC525D344A071A0C43A2881A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=) 2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: MPCah531YXBy37jY0Aq9+poBxtegIjYKDgFHzESyCs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a0:1e:c5:25:d3:44:a0:71:a0:c4:3a:28:81:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=0392db864cbae1c65a6b84c9a3884b3a4ed90a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:99:41:c3:d0:cd:cc:6f:86:5e:f0:22:34: 48:40:61:28:84:b7:63:49:1e:a6:5a:48:14:f0:9a: 3b:53:19:da:a3:e8:3c:e5:d0:72:25:9d:d8:1c:8e: c0:a8:65:2d:21:59:c2:f9:ce:2a:c1:66:d0:7d:40: 46:e3:49:e8:46:77:e0:ad:8a:b5:ab:e2:6b:e9:94: 5e:93:d9:c1:09:11:36:9e:cf:71:4e:80:51:df:d9: 0f:ce:a6:a2:91:e5:21:6c:ed:e4:e6:a5:0a:24:3c: 98:5e:84:10:db:7c:69:30:12:c7:6e:2e:a1:2b:68: 66:0e:6f:2c:19:da:80:b1:3e:ac:30:a6:bd:05:3f: b2:b2:7b:2a:06:c7:fa:93:95:28:f6:dc:7c:34:01: 0e:f5:47:e2:75:f9:9e:a8:a8:71:68:3c:ab:10:03: a5:a6:2d:a2:28:2b:5a:d2:7b:00:08:56:cb:e5:e0: 24:aa:28:81:5f:38:f8:6b:19:cc:8d:00:a5:51:74: 6b:5c:ee:81:85:27:be:c7:3e:5a:a1:4d:9f:4a:60: 62:33:69:e4:04:3a:6f:98:2b:c6:72:9a:5a:a1:11: 9c:d3:eb:d9:38:46:c9:05:c3:71:45:45:22:fd:29: 84:22:ca:85:4c:a0:78:4a:c0:7f:63:26:00:5a:22: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:DB:86:4C:BA:E1:C6:5A:6B:84:C9:A3:88:4B:3A:4E:D9:0A:10 X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:80:00:a2:0f:75:bc:8f:fa:1a:5f:08:67:47:94:a4:60:f6: bb:b3:9e:d3:d1:18:77:59:89:5d:9f:fd:17:a2:27:b9:cf:f4: e4:4c:2c:45:c0:67:15:7c:2b:90:d5:33:87:ea:ca:8a:ae:69: 4f:7c:da:a9:11:27:0c:10:64:96:3f:21:5a:5e:3a:fe:05:3f: d4:79:f1:04:56:85:bf:19:5f:ec:a0:8e:df:1c:22:eb:07:92: 46:e6:b3:0e:d1:91:93:e1:73:67:48:ee:33:c1:15:e5:77:d8: 0e:55:68:b6:ab:55:a9:53:49:e7:b0:ee:c0:1b:92:a0:43:b9: 89:79:35:f5:16:48:07:69:f6:8e:42:95:3f:5d:ae:5d:49:8b: 7c:6a:9e:43:5f:56:c5:17:e6:13:83:2f:96:71:58:5c:07:19: 93:55:3a:33:9e:72:0e:d8:2f:f2:ef:c8:26:30:60:27:f0:b5: 8b:36:37:5f:7e:f0:1c:57:5c:6d:03:fe:97:e0:8e:d5:a4:6f: 86:d6:d5:b0:70:54:4e:96:07:0d:9f:4c:fe:51:f6:70:9a:dd: d0:fc:f9:27:31:6d:79:b4:e9:d1:25:3d:33:40:db:71:cf:39: 8e:9c:53:03:0b:65:87:22:7d:1b:ff:66:d6:24:30:30:e6:72: 36:b1:7d:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6AexSXTRKBxoMQ6KIGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD EygwMzkyZGI4NjRjYmFlMWM2NWE2Yjg0YzlhMzg4NGIzYTRlZDkwYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC2ZQcPQzcxvhl7wIjRIQGEohLdj SR6mWkgU8Jo7Uxnao+g85dByJZ3YHI7AqGUtIVnC+c4qwWbQfUBG40noRnfgrYq1 q+Jr6ZRek9nBCRE2ns9xToBR39kPzqaikeUhbO3k5qUKJDyYXoQQ23xpMBLHbi6h K2hmDm8sGdqAsT6sMKa9BT+ysnsqBsf6k5Uo9tx8NAEO9UfidfmeqKhxaDyrEAOl pi2iKCta0nsACFbL5eAkqiiBXzj4axnMjQClUXRrXO6BhSe+xz5aoU2fSmBiM2nk BDpvmCvGcppaoRGc0+vZOEbJBcNxRUUi/SmEIsqFTKB4SsB/YyYAWiJkbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOS24ZMuuHGWmuEyaOISzpO2QoQMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYAAog91 vI/6Gl8IZ0eUpGD2u7Oe09EYd1mJXZ/9F6Inuc/05EwsRcBnFXwrkNUzh+rKiq5p T3zaqREnDBBklj8hWl46/gU/1HnxBFaFvxlf7KCO3xwi6weSRuazDtGRk+FzZ0ju M8EV5XfYDlVotqtVqVNJ57DuwBuSoEO5iXk19RZIB2n2jkKVP12uXUmLfGqeQ19W xRfmE4MvlnFYXAcZk1U6M55yDtgv8u/IJjBgJ/C1izY3X37wHFdcbQP+l+CO1aRv htbVsHBUTpYHDZ9M/lH2cJrd0Pz5JzFtebTp0SU9M0Dbcc85jpxTAwtlhyJ9G/9m 1iQwMOZyNrF91g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:40 2025 by rpki-client