This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json) Hash identifier: HKx0RnBpo+a2iLEYw4NoDO6R45RO8e00K3jujmkIyi8= Subject key identifier: 92:32:63:25:33:DC:54:46:E1:DC:EA:4B:DE:11:0B:F5:14:0E:96:D0 Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612 Certificate serial: 019AF1648CF2EADC1D9BC26026EC3000E89B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=) 2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: qJoDtPIPA29NHQFz55M4PJsN+dHdd2XDD1a2pW6BCsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8c:f2:ea:dc:1d:9b:c2:60:26:ec:30:00:e8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e94cdea9365612adf7611144668254b388fa612 Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=9232632533dc5446e1dcea4bde110bf5140e96d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:0a:e8:8e:79:c6:c3:04:35:82:16:72:4c: c2:27:bc:6b:dc:5a:c3:24:f3:28:b6:8a:11:bb:d3: 08:20:7a:ce:29:93:1d:22:42:af:c1:e7:75:1c:7a: c1:38:4a:24:3f:2e:84:89:dc:7e:0e:47:bd:db:6f: bd:4f:7b:ff:1a:78:e8:38:ea:59:18:c8:fa:0a:57: 89:5e:41:aa:53:fd:6a:7f:80:05:be:83:40:80:99: 0b:6f:55:4c:86:63:dd:a5:d6:28:d6:e2:22:62:53: 1b:97:10:a0:92:c3:78:0b:16:44:8f:d3:d6:66:38: 9c:cc:60:fd:70:2c:4e:c8:3e:29:f9:95:6c:8b:cb: e0:2b:50:74:68:81:a4:b6:d6:b2:b0:5c:7a:6d:76: d9:48:c0:9d:3e:71:19:a9:29:20:48:fb:03:a2:8b: 7b:06:ef:f5:84:fe:2a:ab:1b:f4:3c:c8:48:5c:c3: 37:f3:c3:5b:22:48:97:ff:d8:84:37:f1:87:ab:23: b1:12:29:81:17:cb:e0:48:de:7d:e2:b6:85:7c:96: aa:0f:1f:2b:4b:61:e3:9f:1d:fc:b8:69:d5:74:de: 43:f2:fa:d5:36:b5:87:59:a3:28:52:d3:0a:87:7d: 62:55:1f:04:d9:88:8f:44:0d:38:91:60:b1:5b:f5: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:32:63:25:33:DC:54:46:E1:DC:EA:4B:DE:11:0B:F5:14:0E:96:D0 X509v3 Authority Key Identifier: keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0d:83:c7:38:05:50:9a:21:f4:eb:b8:1d:73:91:63:a1:86: db:1c:56:a8:9f:31:2a:26:8a:ab:bb:e8:96:9f:59:8c:5f:7d: de:3e:63:2b:8b:1b:44:41:ee:6f:be:3a:c2:81:1f:ee:f2:1b: 4a:fe:24:f7:7a:9a:f9:3d:42:88:86:77:e3:ca:2d:71:45:d0: 7f:23:ff:e0:1d:f2:11:cd:cd:d9:d9:e8:9a:ff:e2:42:57:45: c5:df:25:50:4a:d9:c8:97:f1:4f:6c:7e:06:ff:d7:18:ac:fb: 06:12:20:52:fe:70:14:e5:14:fc:e2:50:3b:ca:d8:79:94:01: 10:ad:f1:e7:6b:8b:7a:a1:bf:5c:61:12:19:bd:03:08:68:9f: b9:0a:1e:7b:93:79:b6:17:72:30:07:97:76:f8:d8:46:08:bf: 17:d8:d7:7e:21:9c:2d:e5:d1:40:32:4a:19:16:ba:dd:67:7d: 65:4e:80:89:1f:78:50:13:3f:a3:28:83:69:1a:e4:b2:1a:c3: 59:96:79:c3:42:25:4b:46:98:1b:cd:68:cd:ec:8a:42:db:72: 2c:47:f1:83:5f:e7:f9:bf:db:ee:3d:3d:f4:c6:d1:40:ec:57: 16:77:dc:2b:28:d1:8e:9c:53:6d:29:03:f9:78:83:77:09:5e: ef:40:9d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIzy6twdm8JgJuwwAOibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOTRjZGVhOTM2NTYxMmFkZjc2MTExNDQ2NjgyNTRiMzg4 ZmE2MTIwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD Eyg5MjMyNjMyNTMzZGM1NDQ2ZTFkY2VhNGJkZTExMGJmNTE0MGU5NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQUK6I55xsMENYIWckzCJ7xr3FrD JPMotooRu9MIIHrOKZMdIkKvwed1HHrBOEokPy6Eidx+Dke922+9T3v/GnjoOOpZ GMj6CleJXkGqU/1qf4AFvoNAgJkLb1VMhmPdpdYo1uIiYlMblxCgksN4CxZEj9PW ZjiczGD9cCxOyD4p+ZVsi8vgK1B0aIGkttaysFx6bXbZSMCdPnEZqSkgSPsDoot7 Bu/1hP4qqxv0PMhIXMM388NbIkiX/9iEN/GHqyOxEimBF8vgSN594raFfJaqDx8r S2Hjnx38uGnVdN5D8vrVNrWHWaMoUtMKh31iVR8E2YiPRA04kWCxW/UTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIyYyUz3FRG4dzqS94RC/UUDpbQMB8GA1UdIwQY MBaAFG6UzeqTZWEq33YRFEZoJUs4j6YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2Njgt OWFmN2QyYjU5YTRjLzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2NjgtOWFmN2QyYjU5YTRj LzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPA2DxzgF UJoh9Ou4HXORY6GG2xxWqJ8xKiaKq7volp9ZjF993j5jK4sbREHub746woEf7vIb Sv4k93qa+T1CiIZ348otcUXQfyP/4B3yEc3N2dnomv/iQldFxd8lUErZyJfxT2x+ Bv/XGKz7BhIgUv5wFOUU/OJQO8rYeZQBEK3x52uLeqG/XGESGb0DCGifuQoee5N5 thdyMAeXdvjYRgi/F9jXfiGcLeXRQDJKGRa63Wd9ZU6AiR94UBM/oyiDaRrkshrD WZZ5w0IlS0aYG81ozeyKQttyLEfxg1/n+b/b7j099MbRQOxXFnfcKyjRjpxTbSkD +XiDdwle70CdAg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:15 2025 by rpki-client