This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json) Hash identifier: yC9wNo1yR/+k4bZEN6tw6XLIEdjzeE9U1ukh4M6lnNg= Subject key identifier: 50:14:E5:FD:F3:98:0C:D7:75:5C:68:BF:E8:23:11:C5:98:A3:47:D1 Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97 Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397 Certificate serial: 019B24E40F01C82B37D01F0D5F9A4BC83732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft Manifest number: 0F30 Signing time: Tue 16 Dec 2025 02:01:24 +0000 Manifest this update: Tue 16 Dec 2025 02:01:24 +0000 Manifest next update: Wed 17 Dec 2025 02:01:24 +0000 Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=) 2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: zc5hFXyKrUJFIv+aCGPKrHq52n5i4SpYWGTRwzXqI6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e4:0f:01:c8:2b:37:d0:1f:0d:5f:9a:4b:c8:37:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397 Validity Not Before: Dec 16 02:01:24 2025 GMT Not After : Dec 17 02:01:24 2025 GMT Subject: CN=5014e5fdf3980cd7755c68bfe82311c598a347d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:d2:5e:73:dd:56:bf:73:a7:01:9f:15:7a: de:40:b7:94:dc:74:43:1d:84:f9:19:ca:49:44:ea: e7:0d:c4:3c:78:61:88:ec:51:13:05:b5:64:4f:0f: 54:d2:39:5d:1a:8a:44:d0:26:7e:24:1b:45:8a:8a: 60:38:81:18:33:65:00:00:d3:be:1a:dc:95:4b:6a: c1:43:c3:7c:f2:e8:c8:4d:5f:09:73:db:14:01:cc: db:ce:5c:fb:dc:84:7a:5e:16:22:28:9d:1c:ef:27: 56:9e:76:4b:bd:7f:05:f7:d3:19:13:ce:bc:c0:fa: 70:75:b6:e2:06:25:8b:7d:72:aa:15:57:4a:6b:01: 8d:86:0f:a6:08:45:7d:cb:f9:6e:97:f9:89:82:ff: a3:25:87:01:a9:f4:d1:6b:09:65:be:e6:f6:4c:15: 5b:53:79:7b:4d:7f:75:8a:63:89:5c:54:75:e9:d6: 38:a9:51:6d:d7:a8:3e:c1:ca:0a:e2:8f:5b:94:61: ef:55:86:e2:78:9c:e6:f1:65:13:92:4a:57:e5:47: 0e:cd:e8:a0:4b:91:95:20:4f:2d:84:0b:79:56:1d: 76:1c:9d:5c:47:4b:e8:80:51:96:5a:f1:f2:46:e2: 0b:e8:2a:a3:d3:e1:a8:9d:22:eb:33:07:d9:55:53: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:E5:FD:F3:98:0C:D7:75:5C:68:BF:E8:23:11:C5:98:A3:47:D1 X509v3 Authority Key Identifier: keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ae:21:fd:e3:86:75:fa:b2:ec:cd:75:74:de:bf:96:d6:10: f2:78:1f:9a:91:94:3a:a2:d4:7b:6d:16:1f:13:83:36:de:be: 2b:f1:45:88:6e:f1:ef:59:95:06:c7:87:65:68:9c:0a:eb:d5: 06:6f:08:05:3c:51:81:8d:05:51:22:af:09:11:79:20:30:ea: 77:df:ad:90:06:09:d1:17:81:11:3d:b2:21:88:8b:0d:56:0d: 5e:aa:bf:89:55:5b:e8:f5:62:3c:18:0e:0b:b8:e7:6f:07:c3: ca:34:5b:45:97:65:1e:65:b7:8b:87:ac:13:b0:5c:b6:58:43: 9f:40:1d:5a:84:cf:bb:5d:2d:64:7c:b0:75:5b:dd:02:46:63: 1e:13:89:33:bc:b9:3c:9d:fb:9f:16:ea:0d:3d:c3:e4:0f:3a: e2:9e:4f:f2:00:9f:b9:7d:0e:c9:55:49:83:d1:d2:a3:c6:7d: 26:ea:bc:cf:8a:80:27:09:59:83:ac:40:76:36:a2:f0:8c:5e: 67:57:cc:4c:da:6e:e9:cb:fa:5e:0e:54:8b:02:a1:d3:59:a7: 6d:39:a4:f4:db:d1:09:83:7b:ef:62:bf:22:fb:3b:f3:5f:6c: d5:e8:93:6a:6c:e9:93:e6:b3:98:b7:91:5d:e3:32:c3:06:11: fd:eb:0f:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk5A8ByCs30B8NX5pLyDcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm ZWUzOTcwHhcNMjUxMjE2MDIwMTI0WhcNMjUxMjE3MDIwMTI0WjAzMTEwLwYDVQQD Eyg1MDE0ZTVmZGYzOTgwY2Q3NzU1YzY4YmZlODIzMTFjNTk4YTM0N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktfSXnPdVr9zpwGfFXreQLeU3HRD HYT5GcpJROrnDcQ8eGGI7FETBbVkTw9U0jldGopE0CZ+JBtFiopgOIEYM2UAANO+ GtyVS2rBQ8N88ujITV8Jc9sUAczbzlz73IR6XhYiKJ0c7ydWnnZLvX8F99MZE868 wPpwdbbiBiWLfXKqFVdKawGNhg+mCEV9y/lul/mJgv+jJYcBqfTRawllvub2TBVb U3l7TX91imOJXFR16dY4qVFt16g+wcoK4o9blGHvVYbieJzm8WUTkkpX5UcOzeig S5GVIE8thAt5Vh12HJ1cR0vogFGWWvHyRuIL6Cqj0+GonSLrMwfZVVPvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAU5f3zmAzXdVxov+gjEcWYo0fRMB8GA1UdIwQY MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq4h/eOG dfqy7M11dN6/ltYQ8ngfmpGUOqLUe20WHxODNt6+K/FFiG7x71mVBseHZWicCuvV Bm8IBTxRgY0FUSKvCRF5IDDqd9+tkAYJ0ReBET2yIYiLDVYNXqq/iVVb6PViPBgO C7jnbwfDyjRbRZdlHmW3i4esE7BctlhDn0AdWoTPu10tZHywdVvdAkZjHhOJM7y5 PJ37nxbqDT3D5A864p5P8gCfuX0OyVVJg9HSo8Z9Juq8z4qAJwlZg6xAdjai8Ixe Z1fMTNpu6cv6Xg5UiwKh01mnbTmk9NvRCYN772K/Ivs7819s1eiTamzpk+azmLeR XeMywwYR/esPTA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:28 2025 by rpki-client