This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json) Hash identifier: vNiNSIPRAxKH9SMfGuKWY11qsnMBFoD7Kq9zhcTFTIc= Subject key identifier: B8:2A:E6:8C:88:02:D5:41:E8:64:8E:55:64:D0:A9:9C:B9:D3:FB:0C Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff Certificate serial: 019AF3897573F2B2C8D26015D0991400FBA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 12:01:03 +0000 Manifest this update: Sat 06 Dec 2025 12:01:03 +0000 Manifest next update: Sun 07 Dec 2025 12:01:03 +0000 Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=) 2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: VWccG/kcFI2sj/Xiq1wBqCi5SWH2+czxw7GR5NvR3hU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:75:73:f2:b2:c8:d2:60:15:d0:99:14:00:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff Validity Not Before: Dec 6 12:01:03 2025 GMT Not After : Dec 7 12:01:03 2025 GMT Subject: CN=b82ae68c8802d541e8648e5564d0a99cb9d3fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:43:70:06:e8:52:ed:2a:e6:6c:89:c3:d0: 08:7d:3d:78:81:b6:00:6d:25:f6:43:b2:66:d0:22: b2:60:c8:31:7a:7e:9f:e3:d0:2c:e9:0f:f9:cf:00: 69:84:d6:5b:dc:95:4e:9b:e1:7e:12:5f:6e:f4:85: 9a:51:73:47:70:3c:c8:ae:2e:16:6f:f3:a7:fe:18: 3a:9e:c8:9a:34:c2:a8:46:74:4b:e7:b4:c7:71:4a: b5:09:49:99:d5:be:e1:5f:53:d3:92:f3:70:59:aa: 38:c4:73:7b:ef:61:3e:f3:ad:1c:25:2a:dd:09:9e: b7:e5:a1:d5:da:f4:5e:39:d4:9c:02:38:df:80:f6: e5:95:3d:c4:c4:4f:ef:3a:de:d7:72:7d:71:b4:a7: d9:fb:8a:ad:ab:e8:03:3a:b5:d1:70:ec:2b:cc:56: 59:32:ce:40:bb:55:10:a5:55:1c:c0:11:93:1a:f8: 5e:0e:82:00:de:b1:79:b6:7c:9c:36:7b:8d:e4:89: dd:72:a0:be:63:ff:8e:46:54:3d:4d:7e:43:21:ad: 9e:21:f3:e3:94:35:0c:c1:20:bf:71:2c:3d:53:2b: e6:a9:50:30:e5:29:8f:e7:41:7b:c1:03:8c:48:1a: b8:fc:14:19:9e:5e:0f:87:ea:20:1e:61:0c:29:87: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:E6:8C:88:02:D5:41:E8:64:8E:55:64:D0:A9:9C:B9:D3:FB:0C X509v3 Authority Key Identifier: keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b4:4a:b4:05:8f:d8:55:a7:87:7a:03:88:dd:ac:49:1b:95: 0b:d6:26:75:84:9a:04:47:4f:8e:3c:5b:9c:e4:29:ee:42:1b: 93:f8:8d:51:c0:71:ef:38:61:f7:8c:36:47:cc:8e:5f:b3:4a: 4e:3f:d7:fd:f2:36:8c:bc:60:f5:ba:43:3e:dc:e7:ab:c1:8b: d3:16:fa:4d:9f:0c:c4:27:92:79:f5:0d:9c:14:9e:3b:e1:2f: 1e:81:29:59:39:d8:c4:7a:3c:4b:84:2f:78:60:8a:83:45:38: fa:e3:8b:1f:37:81:95:21:e1:fd:53:86:fc:7b:f1:b6:57:0a: d0:6c:4f:c0:21:f1:fd:7b:78:ae:9d:ad:b4:5a:5e:7d:f9:05: 30:9c:42:d7:79:f6:85:0d:76:34:1c:84:e5:37:04:6a:f2:e9: 48:22:d7:19:ee:33:1a:d1:bf:57:bd:4c:4f:cc:6b:20:b6:6d: b1:d7:4b:d8:6c:aa:9a:1e:ec:19:9d:da:4b:9c:0c:54:4f:4a: be:5a:75:39:c1:77:fe:46:ed:7f:c5:03:1d:ee:04:96:d5:07: 3e:70:36:10:ee:60:0c:39:f7:da:37:89:91:01:ba:85:51:2d: 46:35:07:97:c1:fd:3d:1a:1a:dc:b8:8a:72:63:e1:d6:5a:de: 6f:5c:b2:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXVz8rLI0mAV0JkUAPugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy YjhmZmYwHhcNMjUxMjA2MTIwMTAzWhcNMjUxMjA3MTIwMTAzWjAzMTEwLwYDVQQD EyhiODJhZTY4Yzg4MDJkNTQxZTg2NDhlNTU2NGQwYTk5Y2I5ZDNmYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs95DcAboUu0q5myJw9AIfT14gbYA bSX2Q7Jm0CKyYMgxen6f49As6Q/5zwBphNZb3JVOm+F+El9u9IWaUXNHcDzIri4W b/On/hg6nsiaNMKoRnRL57THcUq1CUmZ1b7hX1PTkvNwWao4xHN772E+860cJSrd CZ635aHV2vReOdScAjjfgPbllT3ExE/vOt7Xcn1xtKfZ+4qtq+gDOrXRcOwrzFZZ Ms5Au1UQpVUcwBGTGvheDoIA3rF5tnycNnuN5IndcqC+Y/+ORlQ9TX5DIa2eIfPj lDUMwSC/cSw9UyvmqVAw5SmP50F7wQOMSBq4/BQZnl4Ph+ogHmEMKYfpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgq5oyIAtVB6GSOVWTQqZy50/sMMB8GA1UdIwQY MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt YWVjOTZmNDMxMDE4LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4 LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbRKtAWP 2FWnh3oDiN2sSRuVC9YmdYSaBEdPjjxbnOQp7kIbk/iNUcBx7zhh94w2R8yOX7NK Tj/X/fI2jLxg9bpDPtznq8GL0xb6TZ8MxCeSefUNnBSeO+EvHoEpWTnYxHo8S4Qv eGCKg0U4+uOLHzeBlSHh/VOG/HvxtlcK0GxPwCHx/Xt4rp2ttFpeffkFMJxC13n2 hQ12NByE5TcEavLpSCLXGe4zGtG/V71MT8xrILZtsddL2Gyqmh7sGZ3aS5wMVE9K vlp1OcF3/kbtf8UDHe4EltUHPnA2EO5gDDn32jeJkQG6hVEtRjUHl8H9PRoa3LiK cmPh1lreb1yyIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:28 2025 by rpki-client