This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json) Hash identifier: yw6Po3G5+u87XY/W/C+OVB3Wwz7V7iWunu5a0NdB43U= Subject key identifier: FF:B0:B2:72:96:20:26:AE:CC:89:DF:F5:63:BF:96:A3:AD:33:53:B7 Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Certificate serial: 019B2B1C971890AC105D046BF5FBF967332F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft Manifest number: 0916 Signing time: Wed 17 Dec 2025 07:00:52 +0000 Manifest this update: Wed 17 Dec 2025 07:00:52 +0000 Manifest next update: Thu 18 Dec 2025 07:00:52 +0000 Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=) 2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=) 3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: G9NsNJbbSte4WIXLskOT9T4aDGI3JnlX7AdsHoGdBsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:97:18:90:ac:10:5d:04:6b:f5:fb:f9:67:33:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Validity Not Before: Dec 17 07:00:52 2025 GMT Not After : Dec 18 07:00:52 2025 GMT Subject: CN=ffb0b272962026aecc89dff563bf96a3ad3353b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:e5:e0:38:c7:70:28:c9:3f:71:06:9b:7c: af:79:47:45:91:e4:7c:cf:4f:04:28:17:2c:6f:9a: a3:cf:8b:9c:d3:38:40:df:78:38:83:81:eb:9e:32: ce:50:0e:14:d1:c4:94:61:d1:ae:a6:70:c7:70:40: d5:ae:d0:88:65:0f:e5:e0:b4:59:93:83:35:6f:e6: 64:d9:24:d8:51:f0:8a:a9:ee:92:b5:74:bd:b1:e3: a3:10:1d:35:b7:de:04:1e:6b:4d:0d:20:77:be:de: 2a:c7:a3:d8:76:45:ac:89:b8:e4:8e:e7:1f:2b:6e: 08:ea:6f:97:be:90:f7:f0:61:a1:aa:f4:ab:ce:90: 34:77:80:84:32:26:bc:5a:5f:25:d1:7e:22:2d:4b: 57:7d:e7:7b:76:ab:6b:1d:e9:a8:2d:6e:9f:5b:17: 43:2d:81:38:7f:fc:1a:6a:a3:37:e4:88:a4:9a:d8: 4d:6e:e5:41:5c:ed:1b:ba:11:44:db:38:b1:09:00: 5f:44:a7:c0:1c:1b:f5:e7:6d:6b:50:16:ab:70:65: 64:ad:27:df:09:3b:43:14:32:ca:d9:d9:fc:4d:a1: 26:fa:3b:83:ff:14:7c:62:83:b1:d1:2b:d3:a0:14: 18:a3:2e:fe:b7:b0:a4:7a:f2:39:9f:1c:8d:03:23: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:B2:72:96:20:26:AE:CC:89:DF:F5:63:BF:96:A3:AD:33:53:B7 X509v3 Authority Key Identifier: keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d0:77:51:cb:98:2c:3e:40:d1:a5:04:fa:56:84:13:fc:59: 91:23:f8:20:24:43:93:92:fa:bb:b5:9f:52:20:96:99:ab:ec: b9:2a:12:41:79:b1:24:9e:ce:1c:fd:ed:9d:0f:fa:82:3c:03: f0:cf:67:9c:9d:a3:91:c0:c9:da:20:61:d4:a9:8f:2e:2a:b4: 33:17:79:cd:93:45:0a:30:4f:9c:a1:02:69:90:68:cb:6e:77: e0:9d:b0:da:af:90:d7:98:88:12:2f:6c:ba:f4:e3:16:d9:d3: 07:dd:c2:ee:87:66:61:46:55:e0:47:89:be:bf:51:b2:cb:7d: be:40:74:bc:d7:7d:81:6d:cb:a9:ff:eb:91:00:50:dc:ff:4f: 3f:92:07:31:2a:00:41:2b:38:e0:a8:23:47:60:f9:12:48:fb: 0a:d9:51:58:1f:5f:5a:72:04:2b:8a:b5:4f:32:47:54:5f:27: 4c:a5:99:4f:20:0c:43:90:fa:6c:56:6b:91:02:70:06:93:dc: f5:59:44:00:b3:c3:6c:fb:a0:e8:dc:69:e6:ea:2c:8e:3e:be: 69:d8:9b:53:e7:42:9b:b3:8d:27:44:d6:3d:bd:64:1b:c3:05: 21:2f:df:fa:9f:fa:bd:2a:a2:75:6d:78:3e:80:50:53:f1:d2: 5a:5c:d0:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHJcYkKwQXQRr9fv5ZzMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl NTJmN2EwHhcNMjUxMjE3MDcwMDUyWhcNMjUxMjE4MDcwMDUyWjAzMTEwLwYDVQQD EyhmZmIwYjI3Mjk2MjAyNmFlY2M4OWRmZjU2M2JmOTZhM2FkMzM1M2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDnl4DjHcCjJP3EGm3yveUdFkeR8 z08EKBcsb5qjz4uc0zhA33g4g4HrnjLOUA4U0cSUYdGupnDHcEDVrtCIZQ/l4LRZ k4M1b+Zk2STYUfCKqe6StXS9seOjEB01t94EHmtNDSB3vt4qx6PYdkWsibjkjucf K24I6m+XvpD38GGhqvSrzpA0d4CEMia8Wl8l0X4iLUtXfed7dqtrHemoLW6fWxdD LYE4f/waaqM35IikmthNbuVBXO0buhFE2zixCQBfRKfAHBv1521rUBarcGVkrSff CTtDFDLK2dn8TaEm+juD/xR8YoOx0SvToBQYoy7+t7CkevI5nxyNAyNPPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+wsnKWICauzInf9WO/lqOtM1O3MB8GA1UdIwQY MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2 LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNB3UcuY LD5A0aUE+laEE/xZkSP4ICRDk5L6u7WfUiCWmavsuSoSQXmxJJ7OHP3tnQ/6gjwD 8M9nnJ2jkcDJ2iBh1KmPLiq0Mxd5zZNFCjBPnKECaZBoy2534J2w2q+Q15iIEi9s uvTjFtnTB93C7odmYUZV4EeJvr9Rsst9vkB0vNd9gW3Lqf/rkQBQ3P9PP5IHMSoA QSs44KgjR2D5Ekj7CtlRWB9fWnIEK4q1TzJHVF8nTKWZTyAMQ5D6bFZrkQJwBpPc 9VlEALPDbPug6Nxp5uosjj6+adibU+dCm7ONJ0TWPb1kG8MFIS/f+p/6vSqidW14 PoBQU/HSWlzQvQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:44 2025 by rpki-client