This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json) Hash identifier: N3bWHXZayneITXa9sf3UpGOWEXzD9P34MUuCBUolN8o= Subject key identifier: 16:86:F2:D6:52:5D:BC:99:16:EF:77:E0:8A:F2:1E:DB:5F:1A:D4:C6 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019B533CFBCFDBBA1F2D95211C785FC1ED42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft Manifest number: 1696 Signing time: Thu 25 Dec 2025 02:01:04 +0000 Manifest this update: Thu 25 Dec 2025 02:01:04 +0000 Manifest next update: Fri 26 Dec 2025 02:01:04 +0000 Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: kt7AVKOIGZG8aZczLoAsC38s/eeYHXGkKQbPwuzUCY8=) 2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:fb:cf:db:ba:1f:2d:95:21:1c:78:5f:c1:ed:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Dec 25 02:01:04 2025 GMT Not After : Dec 26 02:01:04 2025 GMT Subject: CN=1686f2d6525dbc9916ef77e08af21edb5f1ad4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:46:7f:b1:2f:2e:11:9a:f2:cd:42:57:42: 08:bb:e8:ad:b1:de:b0:d5:50:c1:9a:e1:a9:fd:d0: 32:37:33:38:ac:62:c3:a5:89:77:49:7e:4f:e0:af: 85:fe:a8:b4:da:1d:4d:3f:8e:56:7f:2a:f8:f1:d3: da:d2:0b:9e:cf:2d:0a:fb:2f:3d:8b:f2:d7:a8:81: ee:8a:26:db:43:22:51:dd:98:16:8a:45:88:4a:c7: e0:e9:cd:6d:22:b5:ac:ce:37:6b:ad:37:17:bb:d4: 15:2e:0a:cf:a0:ba:c6:37:e7:f5:e8:ae:e6:48:ea: ad:9d:c2:72:bb:91:34:91:7e:b6:3d:b9:53:e4:be: 0b:40:27:85:98:7d:57:60:09:ef:df:2a:62:9b:85: 15:9d:69:34:37:eb:43:fa:56:5c:e0:8e:d7:50:15: 2f:41:80:ff:b0:03:56:0d:e9:ba:ce:74:0e:4f:5b: 9a:d8:60:59:cc:21:6d:1a:22:04:4b:6c:15:00:c0: 27:68:61:16:18:bb:33:12:5a:67:3c:19:b2:69:27: 56:ef:a2:cd:e4:4b:a2:22:e9:3f:c9:0e:bf:6a:80: eb:68:f4:40:dd:28:70:86:8e:3b:f5:5a:6b:fd:75: ed:ab:85:9a:b4:b8:ba:3d:45:1c:c5:fb:15:e4:7d: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:F2:D6:52:5D:BC:99:16:EF:77:E0:8A:F2:1E:DB:5F:1A:D4:C6 X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:60:01:86:05:4b:a5:fa:53:5d:00:79:6b:fe:d2:76:df:10: 22:b8:3c:bc:d5:a5:bb:62:6c:a0:26:9e:93:6a:f4:5d:27:3c: ee:4b:be:09:ea:62:48:7f:87:7c:cc:07:07:d7:4a:84:02:45: f6:58:79:a5:7c:e5:e6:c4:f6:b8:8b:a8:8d:13:e6:41:52:de: 2e:85:5a:b9:4b:1f:2f:c8:4e:e0:17:50:b6:ed:3f:e6:a7:76: ed:a7:2d:19:04:2d:3d:7c:f8:6e:2a:00:c9:b3:24:41:44:d2: c1:33:a8:54:3a:01:4d:51:84:51:09:50:dd:d1:16:d2:e9:60: ef:21:ba:57:fa:dc:94:14:d5:dd:b5:b9:a7:0a:16:5b:14:7c: 23:03:28:e2:05:c0:c1:81:f6:89:8e:b4:85:78:b7:b4:01:bb: a1:60:1a:e4:7d:07:ea:d9:fd:10:d7:0b:13:ad:87:4d:47:00: 75:d5:e4:6b:cf:6c:ae:ff:d2:6b:47:82:4f:2f:b0:0c:48:ba: cb:8a:d0:9d:70:5f:85:66:f2:28:52:68:9f:f4:9d:c1:58:78: 01:c8:2e:fc:3f:c1:4d:fc:bf:84:d4:cb:f4:9c:d0:53:4e:f4: e6:26:fd:d7:6e:1b:ca:94:74:be:2a:22:fb:66:44:fa:31:d6: 9a:ff:93:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPPvP27ofLZUhHHhfwe1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjUxMjI1MDIwMTA0WhcNMjUxMjI2MDIwMTA0WjAzMTEwLwYDVQQD EygxNjg2ZjJkNjUyNWRiYzk5MTZlZjc3ZTA4YWYyMWVkYjVmMWFkNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cNGf7EvLhGa8s1CV0IIu+itsd6w 1VDBmuGp/dAyNzM4rGLDpYl3SX5P4K+F/qi02h1NP45Wfyr48dPa0guezy0K+y89 i/LXqIHuiibbQyJR3ZgWikWISsfg6c1tIrWszjdrrTcXu9QVLgrPoLrGN+f16K7m SOqtncJyu5E0kX62PblT5L4LQCeFmH1XYAnv3ypim4UVnWk0N+tD+lZc4I7XUBUv QYD/sANWDem6znQOT1ua2GBZzCFtGiIES2wVAMAnaGEWGLszElpnPBmyaSdW76LN 5EuiIuk/yQ6/aoDraPRA3Shwho479Vpr/XXtq4WatLi6PUUcxfsV5H2y6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaG8tZSXbyZFu934IryHttfGtTGMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2ABhgVL pfpTXQB5a/7Sdt8QIrg8vNWlu2JsoCaek2r0XSc87ku+CepiSH+HfMwHB9dKhAJF 9lh5pXzl5sT2uIuojRPmQVLeLoVauUsfL8hO4BdQtu0/5qd27actGQQtPXz4bioA ybMkQUTSwTOoVDoBTVGEUQlQ3dEW0ulg7yG6V/rclBTV3bW5pwoWWxR8IwMo4gXA wYH2iY60hXi3tAG7oWAa5H0H6tn9ENcLE62HTUcAddXka89srv/Sa0eCTy+wDEi6 y4rQnXBfhWbyKFJon/SdwVh4Acgu/D/BTfy/hNTL9JzQU0705ib9124bypR0vioi +2ZE+jHWmv+TfA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:43 2025 by rpki-client