This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json) Hash identifier: a92/Ep8DrI0QddgbqNTMMdRzSIUEwGNYrdMkKV9e2Ts= Subject key identifier: 4C:6E:5C:87:FA:7A:AB:C9:2D:56:36:65:2E:1A:C9:F7:92:FC:6C:34 Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Certificate serial: 019B3A8F58C6FB0AA0B099ECA80DD3F78896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft Manifest number: 0EF9 Signing time: Sat 20 Dec 2025 07:00:31 +0000 Manifest this update: Sat 20 Dec 2025 07:00:31 +0000 Manifest next update: Sun 21 Dec 2025 07:00:31 +0000 Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=) 2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: I/TduXOjQ5SbyIYO0Xf+mn6uR11Nq74DAfLUSxlA9ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:58:c6:fb:0a:a0:b0:99:ec:a8:0d:d3:f7:88:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Validity Not Before: Dec 20 07:00:31 2025 GMT Not After : Dec 21 07:00:31 2025 GMT Subject: CN=4c6e5c87fa7aabc92d5636652e1ac9f792fc6c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:05:4a:02:09:85:a4:8c:c9:be:f4:1c:72:9c: 46:fd:8c:f5:97:32:63:0e:99:bc:ac:18:04:50:ab: 5f:7e:5d:49:49:ef:bd:29:c9:c7:d4:8d:44:8f:16: 8c:99:c9:fa:32:a3:ff:f7:bc:93:84:9f:03:e9:2c: 86:1a:57:eb:aa:7a:9d:e4:c2:b7:8b:9d:8d:35:07: cd:51:4c:18:88:69:2d:c5:de:7d:05:18:0c:23:55: 4b:9e:40:f9:b5:cb:58:46:ed:96:f3:db:f9:7f:ed: cc:74:c6:13:39:9d:49:57:82:4f:0b:41:85:ce:e5: 7d:9e:16:bb:aa:f9:1f:d4:d9:e9:d7:ce:74:e1:62: cf:11:60:e2:c2:76:92:97:0e:ee:de:5e:26:44:68: 24:71:1e:27:ff:67:1e:a0:06:49:f8:a7:61:0a:58: 50:22:00:16:74:32:44:95:69:8e:59:98:d9:66:34: 7a:b0:57:2b:a8:8e:34:97:2a:c8:0f:f9:c2:f8:02: 5d:ff:c0:47:46:75:3f:1d:b4:61:10:aa:18:d2:71: 61:00:1c:cc:b0:a0:a0:57:48:27:36:c5:c2:7d:82: 4c:5e:c4:9c:a2:0f:48:54:c3:10:f5:4e:c7:22:b1: 15:fc:99:50:b4:85:3a:fd:32:8c:a3:9a:b9:e9:ba: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6E:5C:87:FA:7A:AB:C9:2D:56:36:65:2E:1A:C9:F7:92:FC:6C:34 X509v3 Authority Key Identifier: keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c3:84:ff:6b:54:99:8a:ea:f5:59:50:5e:01:ac:3c:3b:d2: 31:10:c3:14:3a:7f:34:6c:da:62:df:8e:f4:3f:c3:f8:98:07: 83:e6:0d:7b:cd:4f:be:2c:fe:f7:39:7d:25:a9:6a:eb:9c:15: 66:04:01:64:d5:eb:89:33:3a:25:bb:0c:28:2f:68:f7:94:5b: d3:c4:ad:50:db:59:82:fc:40:20:99:97:ee:73:52:54:24:3f: b0:55:4f:ce:af:a3:06:16:19:ca:f1:66:65:6e:de:6e:39:f0: bb:10:73:89:24:28:83:d8:ee:3f:e3:aa:fc:0c:32:76:9a:60: a8:3e:0e:4d:31:00:28:71:ce:6f:b8:56:10:9f:92:e9:b2:00: 13:94:55:7b:7b:a4:cb:24:c6:8f:d7:a7:b7:80:ea:ef:d5:3b: ec:e3:d9:55:8a:81:03:64:7d:dc:ce:5f:d9:a7:35:06:5e:e3: 56:6e:5a:8a:06:1c:96:13:1a:52:57:f6:e7:63:7b:2d:81:2d: 30:21:de:c8:6f:0f:8e:46:1d:a9:50:d7:a4:61:a3:62:ff:64: f5:5d:e8:f3:48:5c:8a:43:4c:85:19:cc:aa:68:b1:37:bf:2f: dd:17:09:3c:35:d6:64:42:9f:27:ae:d3:5a:74:7d:1e:5a:72: 64:bb:69:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j1jG+wqgsJnsqA3T94iWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw YTdmNmUwHhcNMjUxMjIwMDcwMDMxWhcNMjUxMjIxMDcwMDMxWjAzMTEwLwYDVQQD Eyg0YzZlNWM4N2ZhN2FhYmM5MmQ1NjM2NjUyZTFhYzlmNzkyZmM2YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QVKAgmFpIzJvvQccpxG/Yz1lzJj Dpm8rBgEUKtffl1JSe+9KcnH1I1EjxaMmcn6MqP/97yThJ8D6SyGGlfrqnqd5MK3 i52NNQfNUUwYiGktxd59BRgMI1VLnkD5tctYRu2W89v5f+3MdMYTOZ1JV4JPC0GF zuV9nha7qvkf1Nnp18504WLPEWDiwnaSlw7u3l4mRGgkcR4n/2ceoAZJ+KdhClhQ IgAWdDJElWmOWZjZZjR6sFcrqI40lyrID/nC+AJd/8BHRnU/HbRhEKoY0nFhABzM sKCgV0gnNsXCfYJMXsScog9IVMMQ9U7HIrEV/JlQtIU6/TKMo5q56boa+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExuXIf6eqvJLVY2ZS4ayfeS/Gw0MB8GA1UdIwQY MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8OE/2tU mYrq9VlQXgGsPDvSMRDDFDp/NGzaYt+O9D/D+JgHg+YNe81Pviz+9zl9Jalq65wV ZgQBZNXriTM6JbsMKC9o95Rb08StUNtZgvxAIJmX7nNSVCQ/sFVPzq+jBhYZyvFm ZW7ebjnwuxBziSQog9juP+Oq/AwydppgqD4OTTEAKHHOb7hWEJ+S6bIAE5RVe3uk yyTGj9ent4Dq79U77OPZVYqBA2R93M5f2ac1Bl7jVm5aigYclhMaUlf252N7LYEt MCHeyG8PjkYdqVDXpGGjYv9k9V3o80hcikNMhRnMqmixN78v3RcJPDXWZEKfJ67T WnR9HlpyZLtpLw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:45:07 2025 by rpki-client