This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json) Hash identifier: 1KasarsBHkpVe0h4mZRlgu78Xr1ApwWv0acXz1ZEzUM= Subject key identifier: 25:10:1F:59:16:E5:5F:8B:CD:14:64:B7:7B:27:A7:75:76:18:B4:4E Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Certificate serial: 019AF31B91F4EF128595FEC1A03F6D47D1CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft Manifest number: 08F9 Signing time: Sat 06 Dec 2025 10:01:01 +0000 Manifest this update: Sat 06 Dec 2025 10:01:01 +0000 Manifest next update: Sun 07 Dec 2025 10:01:01 +0000 Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=) 2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=) 3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: OZVkzkuEEYIyYe7/MFUNF5+eCm+vpJdhicv3JTuC88s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:91:f4:ef:12:85:95:fe:c1:a0:3f:6d:47:d1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Validity Not Before: Dec 6 10:01:01 2025 GMT Not After : Dec 7 10:01:01 2025 GMT Subject: CN=25101f5916e55f8bcd1464b77b27a7757618b44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:20:44:d1:22:b4:a1:dc:2b:67:1b:f2:52: 6d:4e:d7:4d:03:f0:b5:f8:a1:62:e7:90:fa:70:c7: 2b:38:17:8d:c3:d4:54:bf:53:68:32:28:6d:00:5c: ba:97:0a:dd:49:80:6f:aa:44:0a:ea:70:a9:ff:a2: 0a:de:7b:2d:03:f3:ec:2b:6a:7f:68:6e:ab:3d:8b: 56:9e:3b:d1:37:80:c7:61:c0:c5:c4:18:06:c6:02: 70:0e:ff:ae:5c:2d:cb:3a:fd:f9:04:e7:26:20:86: 9e:48:d1:11:24:1d:47:18:da:c1:ee:1b:d9:17:86: cb:94:81:ac:82:b0:1f:94:96:e8:3c:56:56:80:7d: fb:28:61:e9:9c:be:9c:76:d6:dc:0e:ba:cc:14:6a: 78:85:e6:1d:1d:0c:ba:5c:c6:d0:71:41:cf:c1:32: 75:2a:7a:c2:a9:97:c7:3a:7a:35:03:67:7e:c1:71: 83:c2:99:56:48:9d:00:18:32:e5:92:c4:c4:13:e1: 76:c4:57:84:d1:65:a5:84:3c:57:19:38:14:28:c7: cc:ed:b5:ef:4e:a7:c3:50:a2:f8:c9:f8:90:13:a9: d3:ad:85:40:17:0d:e6:94:15:b3:d2:bf:35:26:23: fd:c6:3a:cc:71:78:fa:a5:d4:a0:97:c1:4c:9c:7f: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:10:1F:59:16:E5:5F:8B:CD:14:64:B7:7B:27:A7:75:76:18:B4:4E X509v3 Authority Key Identifier: keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:1b:9d:21:fc:4a:4f:9c:db:12:0c:13:c3:97:48:b5:69: d8:2e:50:fa:87:97:90:01:e8:2a:02:e2:d3:1f:a8:4e:e7:45: 17:3c:41:b6:f0:9b:70:94:f1:6a:f1:c4:1f:c9:a6:45:4b:22: 71:64:00:18:b4:33:02:ba:4c:bc:7f:af:aa:74:71:73:a2:c0: 7c:fe:a1:1c:23:11:42:33:45:a7:9c:ae:55:8f:92:47:57:61: 49:68:b9:84:09:a9:a4:87:dc:9a:a5:08:78:a3:3d:be:a5:b4: 92:25:f7:ec:04:5d:d9:c9:b7:94:5d:44:d1:0d:10:d1:cf:de: 47:19:ee:fe:96:77:f7:f6:88:6a:f8:49:72:7b:d5:33:d0:bf: ef:aa:a8:fa:7c:03:1b:5c:30:30:ad:69:99:1a:52:0c:09:51: 59:a3:40:64:eb:d7:75:0a:8e:88:c9:cd:d1:e6:40:bc:b6:ec: 71:4a:d5:74:4d:87:03:e1:ab:65:56:c8:84:04:d2:89:bb:a4: 95:32:f9:38:7f:dc:0e:87:0a:15:5e:45:aa:24:e9:d8:41:af: 50:0e:ba:54:a3:13:39:66:04:cb:e0:58:d3:07:70:e4:3d:ef: c8:36:b2:23:3b:ae:03:da:5f:0a:97:da:84:6e:eb:de:5c:23: 16:a6:51:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5H07xKFlf7BoD9tR9HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl NTJmN2EwHhcNMjUxMjA2MTAwMTAxWhcNMjUxMjA3MTAwMTAxWjAzMTEwLwYDVQQD EygyNTEwMWY1OTE2ZTU1ZjhiY2QxNDY0Yjc3YjI3YTc3NTc2MThiNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GYgRNEitKHcK2cb8lJtTtdNA/C1 +KFi55D6cMcrOBeNw9RUv1NoMihtAFy6lwrdSYBvqkQK6nCp/6IK3nstA/PsK2p/ aG6rPYtWnjvRN4DHYcDFxBgGxgJwDv+uXC3LOv35BOcmIIaeSNERJB1HGNrB7hvZ F4bLlIGsgrAflJboPFZWgH37KGHpnL6cdtbcDrrMFGp4heYdHQy6XMbQcUHPwTJ1 KnrCqZfHOno1A2d+wXGDwplWSJ0AGDLlksTEE+F2xFeE0WWlhDxXGTgUKMfM7bXv TqfDUKL4yfiQE6nTrYVAFw3mlBWz0r81JiP9xjrMcXj6pdSgl8FMnH88fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUQH1kW5V+LzRRkt3snp3V2GLROMB8GA1UdIwQY MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2 LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlgbnSH8 Sk+c2xIME8OXSLVp2C5Q+oeXkAHoKgLi0x+oTudFFzxBtvCbcJTxavHEH8mmRUsi cWQAGLQzArpMvH+vqnRxc6LAfP6hHCMRQjNFp5yuVY+SR1dhSWi5hAmppIfcmqUI eKM9vqW0kiX37ARd2cm3lF1E0Q0Q0c/eRxnu/pZ39/aIavhJcnvVM9C/76qo+nwD G1wwMK1pmRpSDAlRWaNAZOvXdQqOiMnN0eZAvLbscUrVdE2HA+GrZVbIhATSibuk lTL5OH/cDocKFV5FqiTp2EGvUA66VKMTOWYEy+BY0wdw5D3vyDayIzuuA9pfCpfa hG7r3lwjFqZRwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:39 2025 by rpki-client