This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json) Hash identifier: nFAY/t9/sw/m4JW32vt6CBo/DAm2p0Mrnyem/vgbQHk= Subject key identifier: EF:F8:D3:80:F3:99:6E:1F:AC:DE:6E:2B:13:D7:10:97:F1:5E:6F:69 Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a Certificate serial: 019B3155729BF3DE20757B9C16CE4F453B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft Manifest number: 12C5 Signing time: Thu 18 Dec 2025 12:00:42 +0000 Manifest this update: Thu 18 Dec 2025 12:00:42 +0000 Manifest next update: Fri 19 Dec 2025 12:00:42 +0000 Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: Gdjkis4+jgAIz/M1InOB+U5Ty4y6kJg13RPOhTAp2m4=) 2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:72:9b:f3:de:20:75:7b:9c:16:ce:4f:45:3b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a Validity Not Before: Dec 18 12:00:42 2025 GMT Not After : Dec 19 12:00:42 2025 GMT Subject: CN=eff8d380f3996e1facde6e2b13d71097f15e6f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3e:9f:bd:b8:ff:52:43:f6:72:14:70:67:7a: 04:41:33:24:dd:af:3e:05:59:74:cd:9e:28:2c:ee: 59:55:cc:27:ae:47:eb:9f:79:14:11:f5:1d:b9:34: cc:8a:d0:17:7a:56:c8:7b:19:87:60:a6:9d:fe:fa: f7:65:14:bf:ae:c5:33:ae:d1:8d:82:4a:33:99:fc: d8:e4:e7:83:ea:9c:28:01:4a:08:d3:4e:47:a8:a8: 9b:6b:1f:65:90:5f:96:f0:f1:66:06:ca:4a:53:1b: da:98:80:a0:91:0a:b9:f9:40:21:85:1e:8d:47:16: 1e:c9:9e:4f:1f:e9:91:9f:7f:e1:e5:e2:b6:8c:12: 7d:66:87:01:ee:0d:39:ca:7d:b3:e2:d0:9c:e5:64: 00:b2:5e:fb:56:41:76:76:0a:8a:e3:f7:ee:ff:46: 60:43:80:37:1d:a3:cb:48:9e:c2:58:a1:2a:fa:d8: 92:25:2b:30:9e:8b:32:26:5b:72:28:1f:9c:36:54: 57:3d:6c:11:7d:d8:ca:23:f0:2f:31:7c:41:65:11: c9:3c:28:d4:47:8e:0b:32:49:f0:ff:8e:de:93:24: fe:f6:79:db:81:d8:6a:dd:2c:8d:4a:9e:9e:28:6b: 0b:01:7c:6a:d0:d8:ea:64:6a:41:42:03:ef:44:91: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F8:D3:80:F3:99:6E:1F:AC:DE:6E:2B:13:D7:10:97:F1:5E:6F:69 X509v3 Authority Key Identifier: keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:0f:4a:b3:3b:10:d5:c5:3f:7d:e7:30:3a:61:6e:00:22:55: 97:29:ca:4e:21:4b:a7:f1:ea:5e:d4:3f:b2:64:b9:2c:4d:ea: 43:45:18:b4:52:3c:9b:42:20:56:67:0b:f2:30:e8:18:3f:31: 83:48:e2:40:25:80:3a:f4:9b:7e:9b:cd:a6:a0:4f:d1:4b:84: e7:07:8a:b8:d9:31:2b:07:2b:d6:f8:f8:e0:09:30:3e:c7:c5: 76:ef:cb:03:e3:8c:47:af:5f:4c:11:a7:f5:4d:28:8e:8c:58: 39:50:b0:61:6b:c4:64:cb:00:00:c4:dc:08:8f:0b:cf:0e:82: ea:b2:58:2f:f0:cf:77:e7:9f:93:3b:88:a2:a3:dd:77:89:88: 35:b9:36:01:20:64:d5:25:62:b0:34:b3:8d:d2:dc:28:7d:35: b0:8d:70:4d:1f:f0:6d:c9:b9:08:eb:7f:5a:84:35:f3:da:49: e5:0f:60:9a:12:94:6c:f7:c7:88:61:be:bb:b9:46:59:b9:6a: 2e:6b:b2:20:b9:cf:a3:cb:a6:07:ae:f1:97:79:ae:ad:1e:9c: fb:25:be:fe:12:2d:5c:10:aa:85:fb:28:69:37:fe:29:17:ff: c1:a7:3a:a5:4e:38:93:66:dd:f9:8b:a5:21:f0:49:aa:ec:49: ed:92:0b:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVXKb894gdXucFs5PRTsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTJlZTg0Y2NmNTZjZGMwMGZjMmNhYTU5MjkyNzlkYWUx NDg4OGEwHhcNMjUxMjE4MTIwMDQyWhcNMjUxMjE5MTIwMDQyWjAzMTEwLwYDVQQD EyhlZmY4ZDM4MGYzOTk2ZTFmYWNkZTZlMmIxM2Q3MTA5N2YxNWU2ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z6fvbj/UkP2chRwZ3oEQTMk3a8+ BVl0zZ4oLO5ZVcwnrkfrn3kUEfUduTTMitAXelbIexmHYKad/vr3ZRS/rsUzrtGN gkozmfzY5OeD6pwoAUoI005HqKibax9lkF+W8PFmBspKUxvamICgkQq5+UAhhR6N RxYeyZ5PH+mRn3/h5eK2jBJ9ZocB7g05yn2z4tCc5WQAsl77VkF2dgqK4/fu/0Zg Q4A3HaPLSJ7CWKEq+tiSJSswnosyJltyKB+cNlRXPWwRfdjKI/AvMXxBZRHJPCjU R44LMknw/47ekyT+9nnbgdhq3SyNSp6eKGsLAXxq0NjqZGpBQgPvRJFCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/404DzmW4frN5uKxPXEJfxXm9pMB8GA1UdIwQY MBaAFGzi7oTM9WzcAPwsqlkpJ52uFIiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2It NDk1YzZmMmM1MTczLzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2ItNDk1YzZmMmM1MTcz LzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQ9KszsQ 1cU/fecwOmFuACJVlynKTiFLp/HqXtQ/smS5LE3qQ0UYtFI8m0IgVmcL8jDoGD8x g0jiQCWAOvSbfpvNpqBP0UuE5weKuNkxKwcr1vj44AkwPsfFdu/LA+OMR69fTBGn 9U0ojoxYOVCwYWvEZMsAAMTcCI8Lzw6C6rJYL/DPd+efkzuIoqPdd4mINbk2ASBk 1SVisDSzjdLcKH01sI1wTR/wbcm5COt/WoQ189pJ5Q9gmhKUbPfHiGG+u7lGWblq LmuyILnPo8umB67xl3murR6c+yW+/hItXBCqhfsoaTf+KRf/wac6pU44k2bd+Yul IfBJquxJ7ZILOg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:30:58 2025 by rpki-client