This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json) Hash identifier: rM2emymnzLyYOXKJHeToj6ztQvFljVyb4xhQ7ZoT0kA= Subject key identifier: B8:60:82:23:70:57:26:4F:A8:95:D3:F5:69:FF:22:14:E5:46:2B:9B Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Certificate serial: 019AF19B33E70BF07D6BBF290E279A79E9FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft Manifest number: 08CF Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=) 2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=) 3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: neNSCas39PHMF81ZLYdWtPyYgugm57olU0VdSPPHmdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:e7:0b:f0:7d:6b:bf:29:0e:27:9a:79:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=b86082237057264fa895d3f569ff2214e5462b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:d1:07:4a:be:22:73:41:10:ce:77:5e:0b: 82:b3:bf:db:fb:84:ee:b6:96:59:c2:d3:a8:c9:b4: 78:11:f2:b2:25:26:1b:5c:30:5c:a9:69:62:8e:02: 94:80:e4:23:c8:ac:81:eb:b1:ef:9e:44:22:c5:d6: cd:59:1a:cb:e5:71:f2:ca:67:c7:d7:92:de:00:69: 16:3a:9e:9a:2e:74:d7:21:dd:f6:a2:b2:f1:0d:47: 53:00:1c:62:20:15:f7:42:36:4a:37:c9:c8:de:a8: c6:59:8e:68:a8:21:4f:5b:f2:1e:78:ef:0b:c7:94: b3:cc:01:c1:b7:db:47:f6:55:99:0f:4d:6c:29:7c: 87:e7:7e:57:28:10:7a:e7:c0:a2:c8:d8:aa:af:58: 60:2f:61:a8:4f:07:df:48:98:0d:bc:14:13:d4:1c: c8:c5:2d:aa:a5:5d:8c:b4:65:36:ec:d4:dd:db:a6: 66:8d:40:54:f4:fd:30:3c:49:ff:63:ee:de:73:8d: 3e:7b:10:20:31:a9:68:49:a2:cb:20:a4:c7:0c:0f: 52:21:5a:1b:95:63:8c:0c:70:77:b6:b5:1a:5a:49: 9a:15:c3:93:21:47:76:33:54:cc:c0:98:f6:0a:c7: e7:d5:ba:dd:3f:05:dc:4b:fa:c7:41:2e:c0:e6:90: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:82:23:70:57:26:4F:A8:95:D3:F5:69:FF:22:14:E5:46:2B:9B X509v3 Authority Key Identifier: keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:01:b6:30:a5:d2:f1:a9:0a:87:ba:b1:c8:17:55:c4:d3: 74:af:07:50:11:a7:41:74:66:e8:cc:fe:18:b1:e6:77:cb:a6: c3:ce:d8:ae:3b:15:02:d3:7b:e9:fa:d0:c8:50:62:82:9d:e6: 65:55:67:1d:5d:3a:4f:bf:0a:79:ad:ec:5b:45:28:85:89:3c: 74:04:1f:bb:3d:cb:49:53:bd:b8:4f:7a:04:6f:71:0e:30:cc: c4:92:97:7f:6f:65:01:0a:ed:40:7a:ec:cf:10:3b:1d:1f:bf: e6:e4:76:6a:3e:d8:e3:9e:3b:13:47:a8:e1:91:04:38:fc:1e: f6:90:20:4c:1d:bf:b9:05:dd:a2:63:44:68:b5:ef:4a:f8:b8: 3c:02:79:36:5e:2a:da:45:a5:69:e7:65:4e:9d:c6:79:af:69: 44:5d:ee:01:90:29:02:c7:99:4e:93:8a:61:65:b0:88:1d:87: bc:65:56:12:d2:3f:05:87:0e:d6:00:67:24:e8:c3:3c:0b:27: 7c:62:21:bc:5f:34:09:bb:3b:ca:55:c6:5c:a9:1b:6c:e0:49: d5:5d:65:24:1a:c0:40:46:8e:d6:68:21:06:2a:ef:fd:88:9b: 13:28:08:d8:4a:6c:ee:c4:91:a7:30:c5:87:92:42:3f:06:ba: 44:12:87:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzPnC/B9a78pDieaeen7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0 NzZmOWEwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EyhiODYwODIyMzcwNTcyNjRmYTg5NWQzZjU2OWZmMjIxNGU1NDYyYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSHRB0q+InNBEM53XguCs7/b+4Tu tpZZwtOoybR4EfKyJSYbXDBcqWlijgKUgOQjyKyB67HvnkQixdbNWRrL5XHyymfH 15LeAGkWOp6aLnTXId32orLxDUdTABxiIBX3QjZKN8nI3qjGWY5oqCFPW/IeeO8L x5SzzAHBt9tH9lWZD01sKXyH535XKBB658CiyNiqr1hgL2GoTwffSJgNvBQT1BzI xS2qpV2MtGU27NTd26ZmjUBU9P0wPEn/Y+7ec40+exAgMaloSaLLIKTHDA9SIVob lWOMDHB3trUaWkmaFcOTIUd2M1TMwJj2Csfn1brdPwXcS/rHQS7A5pCgdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhggiNwVyZPqJXT9Wn/IhTlRiubMB8GA1UdIwQY MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFEBtjCl 0vGpCoe6scgXVcTTdK8HUBGnQXRm6Mz+GLHmd8umw87YrjsVAtN76frQyFBigp3m ZVVnHV06T78Kea3sW0UohYk8dAQfuz3LSVO9uE96BG9xDjDMxJKXf29lAQrtQHrs zxA7HR+/5uR2aj7Y4547E0eo4ZEEOPwe9pAgTB2/uQXdomNEaLXvSvi4PAJ5Nl4q 2kWlaedlTp3Gea9pRF3uAZApAseZTpOKYWWwiB2HvGVWEtI/BYcO1gBnJOjDPAsn fGIhvF80Cbs7ylXGXKkbbOBJ1V1lJBrAQEaO1mghBirv/YibEygI2Eps7sSRpzDF h5JCPwa6RBKHwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:52 2025 by rpki-client