This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json) Hash identifier: IocjrPqFU/SOkTB62tFiHEHiD8/uld4WNzKgUhnbHhM= Subject key identifier: F9:85:9A:A5:EF:D4:E3:25:D3:07:77:F1:47:E8:AF:62:71:71:4C:8B Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Certificate serial: 019AF209A45B3105D58CA4F2306044AA4AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft Manifest number: 04 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: NuJpRF5J3Htz7cWdgH1UXYMDGck.roa (hash: HbAwpyAroslRNiC7LzlkeCES+JwGY9JPqe8c8RZrPKk=) 2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: HRvNCCAGd1tevGVnYgc4JbVTmNlHW1BlPZ1FF+NF8Po=) 3: qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa (hash: sSWarW85n1Eqs9mnUdnPntZW0uPBSKr4hbBJ8eGToSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a4:5b:31:05:d5:8c:a4:f2:30:60:44:aa:4a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=f9859aa5efd4e325d30777f147e8af6271714c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e7:0c:b9:63:c1:86:f3:93:aa:30:27:87:19: cb:1c:a0:4d:2d:d7:2e:c3:3c:50:20:ef:3b:11:5a: a6:a9:99:35:a6:1b:7b:40:c7:8c:55:bf:ed:c0:9f: e8:88:a0:6a:57:db:64:13:70:30:44:e6:b6:96:b3: 01:7b:3d:ce:eb:91:1b:81:c2:d9:5d:e0:a8:9d:ea: a6:3f:0d:d7:a5:cc:20:06:fb:fe:d1:0e:b6:26:b3: f6:00:04:a1:19:43:e3:62:56:9f:fd:83:93:28:59: 70:6a:6b:66:ff:95:2d:93:32:4a:e0:ec:a5:2a:6f: b5:7b:64:95:d8:f3:c2:d2:20:64:11:fb:6b:ae:e7: 2f:db:50:67:e2:01:7e:7c:83:0d:58:34:30:6e:d7: fb:fc:f6:8c:4c:a9:53:86:04:eb:7c:4d:41:42:36: fc:1e:54:d8:33:47:d7:1d:50:22:6d:27:a2:8e:d8: cb:a3:47:b1:c5:fd:82:a4:57:ac:af:c8:54:fe:f9: d5:24:37:85:8b:31:e6:32:bc:e4:cd:f5:df:59:d6: 8a:5a:89:f9:01:74:9a:f5:e2:97:c5:49:f9:2f:98: 43:ab:94:32:d5:44:7a:bd:b0:6f:20:d4:54:ca:a5: 8c:4c:c9:79:9b:ca:60:c0:b8:6c:04:f3:8d:08:7e: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:9A:A5:EF:D4:E3:25:D3:07:77:F1:47:E8:AF:62:71:71:4C:8B X509v3 Authority Key Identifier: keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:d2:43:bd:d7:22:88:9a:5c:5e:eb:44:fe:4e:47:76:70: 78:d5:6e:51:49:55:8e:db:54:0a:79:85:d1:c8:13:81:08:36: 6f:ef:1b:33:98:59:15:b8:a0:cb:ca:aa:cc:8e:26:f2:7a:c7: 4c:73:44:07:90:7a:8f:cf:74:15:6c:f2:d5:eb:97:5c:b6:cf: 5d:da:86:c1:2d:a1:52:f5:31:ea:26:8e:c1:02:15:67:ea:7b: b3:a5:4c:08:c8:52:b1:85:21:34:57:53:70:d7:cc:c3:03:de: 6b:d1:05:50:58:18:5d:4a:96:c5:ba:c7:aa:af:e4:72:41:cf: 82:d1:38:70:e8:be:1b:03:ee:03:0f:27:37:4c:dc:49:a4:21: 0d:9e:82:c2:f9:62:af:00:ff:1b:b1:4d:57:74:0c:c7:4d:2b: 96:91:ed:29:1a:86:99:f9:52:b5:7d:7d:d0:ae:6f:dd:c3:ea: c4:ff:48:a9:ca:7d:56:1d:4f:8e:d8:a0:42:d7:42:b6:a5:48: d4:c1:10:64:f1:be:8d:15:d9:52:8a:1a:cd:c9:70:66:9e:72: 89:74:fe:78:74:4f:ef:9c:f1:e8:dc:f1:55:86:52:d5:86:bd: fc:1a:1a:34:f1:61:97:00:4b:fa:f2:41:22:1b:64:8f:6c:04: 97:30:5e:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaRbMQXVjKTyMGBEqkrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmYzNWQ4OTkwYTdiMjk0YzQ1Mzk1NmUwZTgyNDJjMGFh Y2IwMzEwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhmOTg1OWFhNWVmZDRlMzI1ZDMwNzc3ZjE0N2U4YWY2MjcxNzE0YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ucMuWPBhvOTqjAnhxnLHKBNLdcu wzxQIO87EVqmqZk1pht7QMeMVb/twJ/oiKBqV9tkE3AwROa2lrMBez3O65EbgcLZ XeConeqmPw3XpcwgBvv+0Q62JrP2AAShGUPjYlaf/YOTKFlwamtm/5UtkzJK4Oyl Km+1e2SV2PPC0iBkEftrrucv21Bn4gF+fIMNWDQwbtf7/PaMTKlThgTrfE1BQjb8 HlTYM0fXHVAibSeijtjLo0exxf2CpFesr8hU/vnVJDeFizHmMrzkzfXfWdaKWon5 AXSa9eKXxUn5L5hDq5Qy1UR6vbBvINRUyqWMTMl5m8pgwLhsBPONCH7OFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmFmqXv1OMl0wd38Ufor2JxcUyLMB8GA1UdIwQY MBaAFG1vNdiZCnspTEU5VuDoJCwKrLAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUt N2EwOTZmNjA3ZTI2LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUtN2EwOTZmNjA3ZTI2 LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhePSQ73X IoiaXF7rRP5OR3ZweNVuUUlVjttUCnmF0cgTgQg2b+8bM5hZFbigy8qqzI4m8nrH THNEB5B6j890FWzy1euXXLbPXdqGwS2hUvUx6iaOwQIVZ+p7s6VMCMhSsYUhNFdT cNfMwwPea9EFUFgYXUqWxbrHqq/kckHPgtE4cOi+GwPuAw8nN0zcSaQhDZ6Cwvli rwD/G7FNV3QMx00rlpHtKRqGmflStX190K5v3cPqxP9Iqcp9Vh1PjtigQtdCtqVI 1MEQZPG+jRXZUooazclwZp5yiXT+eHRP75zx6NzxVYZS1Ya9/BoaNPFhlwBL+vJB Ihtkj2wElzBeWg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:41 2025 by rpki-client