This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: RpsxYYbWiWtY3RZNANhvrY+2ITlY2Zg5QHijHRS3CjA= Subject key identifier: 32:CF:45:FB:C8:C1:1D:DC:1E:96:23:14:00:99:CE:E7:72:05:1A:26 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019AF164846C9C6F22169EC6B1C1C1ADD9C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 17A5 Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (hash: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=) 2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 3: MtUNZWuEtv_AgAvU3cIWhKTi-Gg.roa (hash: ySbSia2jLKcCoCeLqt1N9qsuOZJeTIf7i11M9Z0B4Zw=) 4: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (hash: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=) 5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: nHeQgMecjvVLRAoeGP9Hged27omckPzHUViuCfNDu/8=) 6: exu2V3MDMWUgQoAAO324t6RZezE.roa (hash: vzXnLaEVU/+BdpdjEE/HgCx55xSHkRHFXGxKZLhvrto=) 7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=) 8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:84:6c:9c:6f:22:16:9e:c6:b1:c1:c1:ad:d9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=32cf45fbc8c11ddc1e9623140099cee772051a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:d3:2c:f5:ec:d2:bc:76:48:2e:cd:06:50: bd:c1:0a:ab:70:86:b1:96:54:b9:f6:d0:bc:1e:37: 7e:3e:1d:93:0b:8b:3b:38:af:cb:32:31:37:d5:7b: 04:53:6d:fb:15:93:dc:81:c0:01:1a:3c:0e:d4:06: 32:b4:bf:fd:57:b8:26:1b:62:9a:fc:93:ef:7a:13: 13:85:49:d8:df:b2:34:e5:2f:bb:74:f5:e2:7d:df: ac:0f:db:73:33:1b:f7:ef:11:58:f8:da:a7:01:c8: ba:0d:44:56:a1:59:25:f7:f2:7c:d8:fb:94:6d:7a: 4b:f4:4b:09:f6:88:a0:e1:f6:62:b3:de:f6:99:50: d6:95:1f:15:d7:a9:71:d3:f0:b8:a4:ee:a3:6a:ba: ca:25:57:93:de:77:53:1b:fd:7c:1d:ae:3f:d1:97: 0e:23:40:0a:80:ab:8c:48:e0:de:17:5c:05:ec:15: 76:58:4f:5f:17:f5:24:92:58:c9:f9:bf:e8:cd:8a: 61:1a:0a:34:83:e4:60:04:b2:4b:16:83:42:51:f4: 1b:35:73:09:5c:ee:40:07:f9:c7:f8:25:e6:55:ee: 69:68:56:a5:f3:f3:bf:88:f1:d4:a4:14:23:5d:59: 92:e8:9c:3c:8f:8d:09:83:09:46:31:b7:fc:70:f0: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CF:45:FB:C8:C1:1D:DC:1E:96:23:14:00:99:CE:E7:72:05:1A:26 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:38:af:b7:e9:9c:d8:91:cc:a9:0a:96:f3:d4:af:f9:87:10: 34:d9:c8:4e:1c:5f:1b:a4:39:fa:83:ac:72:ee:83:30:00:23: 9c:d0:1d:bb:48:50:87:19:17:2c:bd:a5:da:b0:ca:c7:75:15: db:e6:d5:39:fa:54:29:18:a6:b8:95:01:dc:ac:06:e8:74:f7: 98:70:b2:d3:28:1b:f2:31:1a:af:10:a3:3d:67:e7:c1:61:23: 98:7e:32:d8:1d:d8:a3:80:23:00:c5:61:4b:50:48:64:a4:a0: 84:3c:82:1d:ca:bd:b9:14:9e:5a:a8:41:6f:ac:1e:66:b7:7d: b0:bd:d4:07:a2:9a:2e:0d:5e:0f:7c:bb:d9:31:fb:ea:be:2b: 09:e6:b4:80:25:89:22:ae:da:87:c5:39:cb:13:dd:0f:b0:dd: 92:14:8e:3d:31:8f:af:c1:57:f3:dd:d6:c6:d4:1c:a1:02:f9: d9:ba:11:e6:34:ef:f4:71:2a:87:e9:6d:b0:94:44:b7:3e:e5: cc:10:10:e4:ab:8f:e2:b2:27:03:5b:43:6c:d7:a9:e3:5e:d4: 8f:73:3e:97:8f:dd:d0:30:13:01:1c:36:47:ef:28:09:d1:33: 1a:30:54:02:e2:3a:80:aa:f0:b5:88:f6:9d:4b:c9:01:88:a0: c8:b2:5b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIRsnG8iFp7GscHBrdnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD EygzMmNmNDVmYmM4YzExZGRjMWU5NjIzMTQwMDk5Y2VlNzcyMDUxYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPLTLPXs0rx2SC7NBlC9wQqrcIax llS59tC8Hjd+Ph2TC4s7OK/LMjE31XsEU237FZPcgcABGjwO1AYytL/9V7gmG2Ka /JPvehMThUnY37I05S+7dPXifd+sD9tzMxv37xFY+NqnAci6DURWoVkl9/J82PuU bXpL9EsJ9oig4fZis972mVDWlR8V16lx0/C4pO6jarrKJVeT3ndTG/18Ha4/0ZcO I0AKgKuMSODeF1wF7BV2WE9fF/UkkljJ+b/ozYphGgo0g+RgBLJLFoNCUfQbNXMJ XO5AB/nH+CXmVe5paFal8/O/iPHUpBQjXVmS6Jw8j40JgwlGMbf8cPChhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLPRfvIwR3cHpYjFACZzudyBRomMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTivt+mc 2JHMqQqW89Sv+YcQNNnIThxfG6Q5+oOscu6DMAAjnNAdu0hQhxkXLL2l2rDKx3UV 2+bVOfpUKRimuJUB3KwG6HT3mHCy0ygb8jEarxCjPWfnwWEjmH4y2B3Yo4AjAMVh S1BIZKSghDyCHcq9uRSeWqhBb6weZrd9sL3UB6KaLg1eD3y72TH76r4rCea0gCWJ Iq7ah8U5yxPdD7DdkhSOPTGPr8FX893WxtQcoQL52boR5jTv9HEqh+ltsJREtz7l zBAQ5KuP4rInA1tDbNep417Uj3M+l4/d0DATARw2R+8oCdEzGjBUAuI6gKrwtYj2 nUvJAYigyLJbPw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:49 2025 by rpki-client