This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json) Hash identifier: mlJt04Yh9XSsSPiuOtoDLp47hkuxBFYasdtZfroSATk= Subject key identifier: 08:4E:AD:D6:D7:81:4D:BE:37:18:DC:8C:AE:A2:CE:C5:14:F8:C5:49 Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Certificate serial: 019AF2767067E839BC093CAE34D282040F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft Manifest number: 1334 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=) 2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: +FsVHNZhxchq9X/OlGlMOGqQq1V6ufiAt8DYktlkhyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:70:67:e8:39:bc:09:3c:ae:34:d2:82:04:0f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=084eadd6d7814dbe3718dc8caea2cec514f8c549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:4c:00:22:d0:d4:b3:c1:9e:58:09:62:99: 0d:c1:db:ff:03:8e:be:a4:87:b2:90:8e:10:24:e5: 65:7e:4a:4c:00:e3:54:d4:2d:8e:c5:34:1b:42:07: 86:de:3b:35:e7:6a:4c:a9:35:b8:72:f2:44:8c:38: dc:10:5a:e4:4c:bf:7d:22:85:9f:8a:72:2c:54:29: 4e:0a:0d:e9:33:fb:ec:6b:45:61:ac:2d:e0:2c:e6: ad:8e:30:7d:92:94:49:bd:e8:64:4d:d3:58:82:06: 16:ab:cd:ca:f1:9a:71:c9:ec:5a:7a:b8:e9:ce:87: 70:41:fa:b3:2f:6e:25:4c:34:e1:a3:86:63:fb:f4: fa:c5:48:4c:0e:28:00:85:df:3e:73:2d:62:12:05: ec:8a:d0:f5:2f:aa:dc:b7:7e:63:ea:7e:19:0e:bd: 65:a4:70:87:4f:34:f2:65:26:96:ec:c2:2d:1c:f7: a0:48:8f:c0:77:18:89:62:34:39:f9:ab:be:61:94: a6:ac:bc:c1:21:8b:5e:ee:2a:a5:eb:6e:f4:82:7d: fe:7d:05:ee:a0:49:1e:ae:49:73:2b:37:ba:31:e1: 08:60:a3:e6:4e:30:17:bd:24:7a:48:19:65:9e:ef: 3d:34:20:bc:ec:d7:8e:d1:48:94:b6:fc:1f:c1:46: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:AD:D6:D7:81:4D:BE:37:18:DC:8C:AE:A2:CE:C5:14:F8:C5:49 X509v3 Authority Key Identifier: keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2e:db:ea:40:50:5a:ba:38:93:51:3e:39:5d:54:e6:a9:c4: 15:dc:34:cc:ce:d6:16:79:31:37:10:6c:81:1f:8b:fa:99:8a: cb:af:9f:e4:f1:66:4b:83:74:89:6a:8c:cf:1f:a6:51:7b:99: 69:59:5f:58:ed:49:37:fb:b4:f5:56:6e:7f:81:8a:19:73:15: c1:51:5c:78:e0:a9:40:41:5f:35:02:29:f5:b7:a5:4d:60:9c: c6:a5:9d:1a:b9:23:57:74:79:22:41:2c:e7:7e:7c:62:05:02: 21:3e:ab:66:13:4c:1b:4b:ec:31:eb:3a:a4:7b:93:3e:e8:c6: 20:74:e1:72:2b:28:69:56:51:da:ac:25:28:bf:9b:10:f5:b3: 74:7b:67:79:77:3e:9d:86:f7:97:20:43:24:85:ce:6d:23:72: 13:d3:d4:62:76:dc:20:2d:6c:cd:87:b3:a6:f2:61:d8:3e:8c: ca:1d:3e:26:6c:bf:59:98:db:e9:ef:93:97:c8:2d:0e:e6:cd: dd:01:3e:f2:c4:7d:e2:60:64:b5:65:ea:29:9e:7e:d5:de:96: 1f:de:cc:a5:d5:09:c4:85:a7:66:81:d2:e7:aa:f7:f1:b3:50: 86:1a:d1:8b:93:de:e1:4e:41:72:83:1d:3e:9b:10:7f:b1:08: f6:8e:51:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnBn6Dm8CTyuNNKCBA85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4 OTZhMDAwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EygwODRlYWRkNmQ3ODE0ZGJlMzcxOGRjOGNhZWEyY2VjNTE0ZjhjNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl1MACLQ1LPBnlgJYpkNwdv/A46+ pIeykI4QJOVlfkpMAONU1C2OxTQbQgeG3js152pMqTW4cvJEjDjcEFrkTL99IoWf inIsVClOCg3pM/vsa0VhrC3gLOatjjB9kpRJvehkTdNYggYWq83K8Zpxyexaerjp zodwQfqzL24lTDTho4Zj+/T6xUhMDigAhd8+cy1iEgXsitD1L6rct35j6n4ZDr1l pHCHTzTyZSaW7MItHPegSI/AdxiJYjQ5+au+YZSmrLzBIYte7iql6270gn3+fQXu oEkerklzKze6MeEIYKPmTjAXvSR6SBllnu89NCC87NeO0UiUtvwfwUZjbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhOrdbXgU2+NxjcjK6izsUU+MVJMB8GA1UdIwQY MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3 LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy7b6kBQ Wro4k1E+OV1U5qnEFdw0zM7WFnkxNxBsgR+L+pmKy6+f5PFmS4N0iWqMzx+mUXuZ aVlfWO1JN/u09VZuf4GKGXMVwVFceOCpQEFfNQIp9belTWCcxqWdGrkjV3R5IkEs 5358YgUCIT6rZhNMG0vsMes6pHuTPujGIHThcisoaVZR2qwlKL+bEPWzdHtneXc+ nYb3lyBDJIXObSNyE9PUYnbcIC1szYezpvJh2D6Myh0+Jmy/WZjb6e+Tl8gtDubN 3QE+8sR94mBktWXqKZ5+1d6WH97MpdUJxIWnZoHS56r38bNQhhrRi5Pe4U5BcoMd PpsQf7EI9o5RCg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:00 2025 by rpki-client