This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft File: bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft (raw, json) Hash identifier: Mqe6QbhlI0HI7Gbgo6S2a4uOPLnQVXlHGpfj8Qn/tYY= Subject key identifier: A9:28:EB:CF:5B:EE:B1:21:1A:3C:6A:07:2E:1C:90:87:0B:D3:C3:88 Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Certificate serial: 019AF0F5CEFA483E7661C96F84838646DC46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft Manifest number: 3E Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: WcW1TLN1FcXWXE9VINsN3CfkGhc.roa (hash: yl9aMxUKV+0rM9piy+9fYY3ixIa7X94FbqyTuSYrSf0=) 2: bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl (hash: 5XzdXbwlLqyLP1IuNJ7j9L2IavFtxg89XJgdRdHUA9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ce:fa:48:3e:76:61:c9:6f:84:83:86:46:dc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=a928ebcf5beeb1211a3c6a072e1c90870bd3c388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:ab:69:73:64:66:0e:0b:45:e2:b3:06:f1: 99:06:92:4e:c7:0f:e5:36:cf:d0:e5:eb:db:bf:46: 17:c0:f6:f2:d3:de:63:36:f9:14:63:03:82:2a:a3: 8b:f0:a4:4f:fd:fa:11:72:e3:c1:2b:d3:a8:6e:98: 43:8a:7b:e2:87:f9:3c:07:7b:19:b3:1f:f0:80:e9: dc:2b:29:92:01:27:ff:f9:c5:b4:47:54:eb:ea:e2: 47:4f:12:dd:fb:34:2d:75:19:f4:4a:65:00:20:ed: 4e:b3:48:3c:80:04:6b:41:2c:37:3c:0a:20:ce:01: 22:66:ab:9d:f3:8a:74:20:9a:f4:44:68:9d:15:6b: a9:87:1d:b7:26:da:b2:dd:9b:a0:96:2c:02:e9:77: d3:74:b0:06:ae:9d:ea:75:04:61:97:99:63:ad:9c: 01:2d:0b:a9:64:b7:a2:2a:4f:f4:de:82:2a:23:ec: 00:e4:4d:cb:d1:53:8c:3f:26:e5:b3:5b:42:a8:2c: ab:d9:1c:09:01:b1:fd:41:66:f0:0a:ff:22:d7:69: ef:53:17:ba:d6:fe:14:53:a9:3a:76:d6:db:d3:c1: ce:a0:cc:03:56:fe:ed:19:22:43:75:18:03:07:6d: 74:d6:18:e0:3f:79:02:de:7b:ce:a0:db:8e:4f:9d: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:EB:CF:5B:EE:B1:21:1A:3C:6A:07:2E:1C:90:87:0B:D3:C3:88 X509v3 Authority Key Identifier: keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1e:8b:0f:57:e3:bd:92:4c:2d:ab:50:93:6d:ae:f2:35:48: de:ad:e8:eb:ee:50:07:b6:0d:07:68:4e:54:73:89:98:50:33: 23:0f:c6:1b:f6:c7:7d:7e:5e:1b:83:f0:5d:4c:20:d2:35:42: 18:60:47:48:e4:7e:9d:ab:d2:4b:f8:a3:7f:a7:39:6f:8e:e4: da:a4:c2:49:c8:62:bc:75:e6:29:c3:a8:d2:05:39:d9:99:0d: 41:0c:6c:bd:dd:79:07:92:40:d6:b6:0b:d8:2b:99:6c:80:bb: db:41:6e:92:60:29:6a:70:85:3e:fb:e0:5b:12:de:b6:e0:ae: 5d:eb:9c:c1:0c:b4:c5:6b:c0:fa:92:3a:12:54:ba:10:1e:23: f4:b4:37:fc:66:d0:4f:aa:9f:8e:28:6e:cc:3c:5e:35:93:b5: 94:0d:1d:fc:a8:6e:94:1c:54:13:19:6e:4a:13:6c:c8:1d:44: 64:f0:d6:56:27:01:b5:6c:36:5f:f5:b6:ba:4f:8d:02:68:c8: 3d:1d:fd:0b:56:a8:2e:4f:50:51:5b:6e:46:33:65:24:c0:6b: a0:74:51:a2:25:c1:9e:7d:40:ce:3b:8a:0f:b1:99:b5:e8:ba: ee:75:bf:ba:50:95:16:8c:fa:84:23:51:34:a1:d3:14:9a:b6: 77:5a:f7:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c76SD52YclvhIOGRtxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTc5YTYxNjdhYTNmY2JmZDQ0MDcwMTM0YzlkOTNhNmNl Mzk4YmMwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD EyhhOTI4ZWJjZjViZWViMTIxMWEzYzZhMDcyZTFjOTA4NzBiZDNjMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8qraXNkZg4LReKzBvGZBpJOxw/l Ns/Q5evbv0YXwPby095jNvkUYwOCKqOL8KRP/foRcuPBK9OobphDinvih/k8B3sZ sx/wgOncKymSASf/+cW0R1Tr6uJHTxLd+zQtdRn0SmUAIO1Os0g8gARrQSw3PAog zgEiZqud84p0IJr0RGidFWuphx23Jtqy3ZugliwC6XfTdLAGrp3qdQRhl5ljrZwB LQupZLeiKk/03oIqI+wA5E3L0VOMPybls1tCqCyr2RwJAbH9QWbwCv8i12nvUxe6 1v4UU6k6dtbb08HOoMwDVv7tGSJDdRgDB2101hjgP3kC3nvOoNuOT51l4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKko689b7rEhGjxqBy4ckIcL08OIMB8GA1UdIwQY MBaAFGznmmFnqj/L/UQHATTJ2Tps45i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAt NGY0MDE4NTA0OTYwLzEvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAtNGY0MDE4NTA0OTYw LzEvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh6LD1fj vZJMLatQk22u8jVI3q3o6+5QB7YNB2hOVHOJmFAzIw/GG/bHfX5eG4PwXUwg0jVC GGBHSOR+navSS/ijf6c5b47k2qTCSchivHXmKcOo0gU52ZkNQQxsvd15B5JA1rYL 2CuZbIC720FukmApanCFPvvgWxLetuCuXeucwQy0xWvA+pI6ElS6EB4j9LQ3/GbQ T6qfjihuzDxeNZO1lA0d/KhulBxUExluShNsyB1EZPDWVicBtWw2X/W2uk+NAmjI PR39C1aoLk9QUVtuRjNlJMBroHRRoiXBnn1AzjuKD7GZtei67nW/ulCVFoz6hCNR NKHTFJq2d1r38g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:30 2025 by rpki-client