This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft File: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json) Hash identifier: e28Q8An42vjqi05P7Zfyrbf7bOGcF0IXt3oskon5E2s= Subject key identifier: 4A:CC:85:B8:88:A6:FE:D4:24:E7:28:7F:F2:71:79:98:10:78:96:4C Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Certificate serial: 019AF3F7120C574D5DCC8E2A474C677A01DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (hash: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=) 2: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: q171Tc+xcQZZwqQ7n1sT0UwvYDrlDtrmTjjlGdqoV/4=) 3: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (hash: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=) 4: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (hash: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=) 5: RUBK6YgAvaDdWQcnoq_c2QP-xe4.roa (hash: Uqv+aEnH2dA3s4zAi+ZXrmM5vUYHFe7H5OkNDJW1qSI=) 6: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (hash: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:12:0c:57:4d:5d:cc:8e:2a:47:4c:67:7a:01:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=4acc85b888a6fed424e7287ff27179981078964c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:61:c8:a3:95:0f:c1:01:b3:44:69:ad:0d: 6e:21:c2:47:38:cb:d1:99:de:8e:5e:86:ee:3e:b6: 30:7d:ec:15:8a:cf:29:62:65:d8:a7:9e:63:d5:ad: 28:f0:14:22:01:06:df:96:c3:b0:89:36:da:b3:62: bd:0d:fe:c8:11:d7:f2:4c:93:b1:69:17:aa:55:0b: ab:32:ca:ab:88:67:8c:ca:03:8c:b0:92:a2:9c:8f: c7:a9:8f:cf:7e:ac:d3:05:e4:b5:f3:28:6e:b2:5d: 22:5e:b7:75:31:89:cc:d8:47:d6:c7:ee:40:96:b0: f2:89:a9:2d:c7:08:4a:af:05:e4:44:2c:07:e6:76: 1e:86:fa:df:56:6f:e2:d4:81:4b:76:f8:13:9e:a6: e9:ce:d2:f0:13:e0:05:64:cc:63:f4:c1:d3:d9:20: 46:18:c6:40:61:03:db:c2:74:ef:49:ee:e2:62:62: 9f:91:ac:1a:72:73:12:45:21:30:7e:61:b7:10:23: d0:7c:cd:ec:37:87:3a:6a:e1:0a:38:7e:e6:bb:39: f4:34:05:f1:7d:87:95:6c:13:16:24:4a:eb:f8:46: 73:18:7a:5e:d6:18:67:05:51:a5:7c:42:57:89:7d: 94:99:e3:c2:ec:32:78:01:d7:a2:c8:5c:ff:03:52: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CC:85:B8:88:A6:FE:D4:24:E7:28:7F:F2:71:79:98:10:78:96:4C X509v3 Authority Key Identifier: keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:bf:15:1e:21:cc:c9:50:59:e6:c3:ab:66:c4:b6:8f:b2:ab: 38:29:6a:bf:1a:5e:c4:95:51:bc:30:3e:bc:5d:09:cd:95:11: bb:1e:00:c7:70:50:a8:b6:c5:55:ff:2f:6b:b9:4f:f9:7e:da: 00:ef:82:7b:f4:f3:13:4e:45:f6:81:09:0e:02:6a:e9:21:ff: b9:37:38:a6:1a:35:2a:98:7b:ad:33:ea:7b:ab:f5:b3:ff:e7: 33:88:70:58:86:72:a9:21:3c:05:ac:94:57:42:46:1b:55:f4: 65:fd:6c:d5:df:5e:70:49:39:17:9d:fc:2a:51:27:59:fe:15: 6c:b4:41:97:b0:9d:54:a9:b1:a6:f0:f8:2e:30:9c:40:82:b5: 88:d6:39:77:e1:6a:c1:97:ac:ef:e1:fa:af:2c:81:7e:59:c1: 2b:dc:4d:26:62:00:ec:50:33:29:04:71:cc:3a:aa:f7:48:09: 69:d7:26:4f:eb:d4:56:2f:ee:17:01:aa:3b:2e:f9:eb:bc:a1: 98:af:98:8a:50:9e:bb:2b:9e:9d:92:4e:d4:b3:27:42:fd:61: 52:45:9b:e9:8c:3d:cb:12:1e:1f:ca:5f:10:cb:0f:7c:63:08: 0f:60:46:35:fb:d1:83:1f:c6:1f:e1:6e:7d:45:95:0e:40:31: fa:a9:10:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xIMV01dzI4qR0xnegHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3 NzdmMjQwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD Eyg0YWNjODViODg4YTZmZWQ0MjRlNzI4N2ZmMjcxNzk5ODEwNzg5NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzFhyKOVD8EBs0RprQ1uIcJHOMvR md6OXobuPrYwfewVis8pYmXYp55j1a0o8BQiAQbflsOwiTbas2K9Df7IEdfyTJOx aReqVQurMsqriGeMygOMsJKinI/HqY/PfqzTBeS18yhusl0iXrd1MYnM2EfWx+5A lrDyiaktxwhKrwXkRCwH5nYehvrfVm/i1IFLdvgTnqbpztLwE+AFZMxj9MHT2SBG GMZAYQPbwnTvSe7iYmKfkawacnMSRSEwfmG3ECPQfM3sN4c6auEKOH7muzn0NAXx fYeVbBMWJErr+EZzGHpe1hhnBVGlfEJXiX2UmePC7DJ4AdeiyFz/A1KmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErMhbiIpv7UJOcof/JxeZgQeJZMMB8GA1UdIwQY MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw78VHiHM yVBZ5sOrZsS2j7KrOClqvxpexJVRvDA+vF0JzZURux4Ax3BQqLbFVf8va7lP+X7a AO+Ce/TzE05F9oEJDgJq6SH/uTc4pho1Kph7rTPqe6v1s//nM4hwWIZyqSE8BayU V0JGG1X0Zf1s1d9ecEk5F538KlEnWf4VbLRBl7CdVKmxpvD4LjCcQIK1iNY5d+Fq wZes7+H6ryyBflnBK9xNJmIA7FAzKQRxzDqq90gJadcmT+vUVi/uFwGqOy7567yh mK+YilCeuyuenZJO1LMnQv1hUkWb6Yw9yxIeH8pfEMsPfGMID2BGNfvRgx/GH+Fu fUWVDkAx+qkQlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:06 2025 by rpki-client