This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json) Hash identifier: EW6EcPH9MSeX43WcGD+Ra2BqJC/toEpm4s4jMB+xU6Y= Subject key identifier: 76:1A:5D:E2:BE:21:00:70:5E:A2:BA:5A:77:5C:2C:72:DD:F3:BC:87 Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019B2B1CA621BB2CEC7CEEFEC941B3A47BCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft Manifest number: 16E6 Signing time: Wed 17 Dec 2025 07:00:56 +0000 Manifest this update: Wed 17 Dec 2025 07:00:56 +0000 Manifest next update: Thu 18 Dec 2025 07:00:56 +0000 Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=) 2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=) 3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=) 4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: pKo7Rv+xWSctc+6sNZsgPFHCA/uZfFvdWxe//oHrxuQ=) 5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:a6:21:bb:2c:ec:7c:ee:fe:c9:41:b3:a4:7b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Dec 17 07:00:56 2025 GMT Not After : Dec 18 07:00:56 2025 GMT Subject: CN=761a5de2be2100705ea2ba5a775c2c72ddf3bc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:2b:d9:da:53:b9:6a:e9:7a:e5:2f:b6:78: 7d:4f:e0:e2:89:57:33:cb:5a:7f:d1:96:64:d7:20: bc:ab:02:c6:59:c2:4b:51:19:f3:56:bf:09:ff:65: 34:dd:08:ea:fc:69:18:eb:fa:b3:5e:44:fe:7c:f9: 26:3b:b6:6e:37:c5:4b:72:89:77:77:06:86:d2:3e: 7d:12:38:cf:93:d6:06:11:31:67:d1:07:cc:5c:1a: e3:b6:41:49:e4:59:19:53:e6:a0:a0:c7:78:2a:0e: 3c:29:b3:08:71:ed:e8:96:6e:3e:9e:ca:8c:3c:bb: cc:56:cf:41:90:52:54:a3:b5:a8:33:35:30:ff:3a: ec:52:79:f2:df:01:bc:3d:d7:ef:83:93:2b:4b:7c: eb:9a:0c:6b:fa:38:60:e3:dc:c0:92:18:e2:3f:74: 46:59:22:62:ee:be:3b:52:bd:87:f2:13:11:8e:28: b5:5b:d6:0f:1b:bd:8a:80:70:8b:eb:d3:16:e7:94: 31:8c:f8:c2:39:38:9d:0d:df:89:e7:7b:70:79:70: 93:fe:21:a7:c2:d7:de:bf:6d:ba:af:a2:ce:74:fd: 7c:2a:f0:5f:ae:f8:a7:a2:3c:7d:68:f4:83:6f:52: f4:56:80:b7:ce:a5:a8:a3:92:79:fd:5f:78:b0:53: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:5D:E2:BE:21:00:70:5E:A2:BA:5A:77:5C:2C:72:DD:F3:BC:87 X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:36:09:bf:da:e0:0f:c8:59:00:66:17:33:66:ec:23:43:9d: db:d4:62:e8:bb:81:80:87:97:37:1b:89:4c:5c:90:91:11:fd: 71:c0:35:95:04:38:58:f3:8a:6e:e5:5c:c5:a4:6b:4a:8a:c2: 49:27:0b:a1:94:43:9e:f1:b6:43:00:5b:0a:52:dc:4d:53:42: 3a:13:8d:9f:b7:d7:84:46:83:5c:84:20:be:0a:e7:a1:30:81: 7c:84:1b:31:8c:71:c1:d5:1e:1a:5b:6a:64:cb:26:b6:4a:8d: 88:df:bf:9b:72:81:b5:01:af:cc:e1:fe:10:a5:69:d9:88:cf: 9e:1b:08:f0:31:fc:be:8f:50:7c:ea:89:05:0f:0e:ce:57:ac: b4:26:df:4b:8e:d3:30:15:7e:26:6a:d1:fe:6b:10:a9:cf:77: fe:7d:03:48:77:69:c6:64:96:aa:de:5f:61:80:73:61:9c:0b: f4:4d:5f:2d:98:10:05:20:26:23:8c:82:38:96:c0:af:d5:1e: af:03:73:de:2c:0f:88:f0:9d:e7:de:59:01:b7:d7:26:e6:6e: c0:5b:1f:86:7b:17:db:a4:71:ad:78:70:c5:70:7c:41:da:17: 5f:47:b9:75:a7:cc:c4:b4:92:dd:ac:51:b1:40:c1:4d:80:a2: c1:f8:fc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHKYhuyzsfO7+yUGzpHvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjUxMjE3MDcwMDU2WhcNMjUxMjE4MDcwMDU2WjAzMTEwLwYDVQQD Eyg3NjFhNWRlMmJlMjEwMDcwNWVhMmJhNWE3NzVjMmM3MmRkZjNiYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Ir2dpTuWrpeuUvtnh9T+DiiVcz y1p/0ZZk1yC8qwLGWcJLURnzVr8J/2U03Qjq/GkY6/qzXkT+fPkmO7ZuN8VLcol3 dwaG0j59EjjPk9YGETFn0QfMXBrjtkFJ5FkZU+agoMd4Kg48KbMIce3olm4+nsqM PLvMVs9BkFJUo7WoMzUw/zrsUnny3wG8Pdfvg5MrS3zrmgxr+jhg49zAkhjiP3RG WSJi7r47Ur2H8hMRjii1W9YPG72KgHCL69MW55QxjPjCOTidDd+J53tweXCT/iGn wtfev226r6LOdP18KvBfrvinojx9aPSDb1L0VoC3zqWoo5J5/V94sFMcaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYaXeK+IQBwXqK6WndcLHLd87yHMB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszYJv9rg D8hZAGYXM2bsI0Od29Ri6LuBgIeXNxuJTFyQkRH9ccA1lQQ4WPOKbuVcxaRrSorC SScLoZRDnvG2QwBbClLcTVNCOhONn7fXhEaDXIQgvgrnoTCBfIQbMYxxwdUeGltq ZMsmtkqNiN+/m3KBtQGvzOH+EKVp2YjPnhsI8DH8vo9QfOqJBQ8OzlestCbfS47T MBV+JmrR/msQqc93/n0DSHdpxmSWqt5fYYBzYZwL9E1fLZgQBSAmI4yCOJbAr9Ue rwNz3iwPiPCd595ZAbfXJuZuwFsfhnsX26RxrXhwxXB8QdoXX0e5dafMxLSS3axR sUDBTYCiwfj86w== -----END CERTIFICATE-----Generated at Wed Dec 17 15:08:42 2025 by rpki-client