This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json) Hash identifier: A6fxfPrZGrGBCVy833FLWGcfDOu9ZlN6TLWc/2CRGC4= Subject key identifier: A0:4B:12:18:FB:6C:23:FE:9E:15:59:4F:99:54:95:07:99:EA:1A:46 Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Certificate serial: 019B2F9E22A1ED7E0972C1BC55463532113C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft Manifest number: 0A59 Signing time: Thu 18 Dec 2025 04:00:51 +0000 Manifest this update: Thu 18 Dec 2025 04:00:51 +0000 Manifest next update: Fri 19 Dec 2025 04:00:51 +0000 Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=) 2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: cRbLkBE2vwDq8Rka3EOyXJyHmu2dR/X+p1aWh3g8+nM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:22:a1:ed:7e:09:72:c1:bc:55:46:35:32:11:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Validity Not Before: Dec 18 04:00:51 2025 GMT Not After : Dec 19 04:00:51 2025 GMT Subject: CN=a04b1218fb6c23fe9e15594f9954950799ea1a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:bb:aa:af:5d:38:cb:5f:80:07:aa:e3:88: 9b:db:f9:98:d8:9f:65:fa:8e:da:d5:8d:1c:65:df: 95:53:bb:3b:4c:5a:fb:1e:94:41:56:4b:a1:c4:6a: a8:ef:e4:c0:6a:37:d6:62:ff:48:60:0a:3e:dd:fa: f8:09:08:db:e0:46:c0:2a:63:c7:c6:6f:ed:ba:18: 1b:30:fc:5c:3b:f4:f8:f4:ff:6f:dd:f8:97:b0:c8: 75:76:4d:33:90:14:8c:7b:71:db:b9:e8:7b:62:27: e0:96:44:27:ff:ef:92:89:78:65:83:69:9f:47:f4: 89:cd:95:9d:40:8d:b1:aa:8b:4a:33:d0:bf:4c:0a: c2:33:20:a9:a3:8f:64:4c:e5:a0:34:08:27:53:d5: 01:27:c6:28:c8:5a:1d:75:78:43:1a:f5:00:9f:f9: 8a:83:7b:d2:bc:04:b2:e2:2e:32:9f:9c:bb:2f:4f: c3:00:bd:5b:d3:59:32:63:3f:c4:35:4e:cc:ff:98: 98:85:d4:ce:22:f3:0c:44:da:b4:93:0c:13:fb:b9: 37:19:09:da:4e:80:65:ef:c0:96:b2:e4:ee:da:53: 9f:4b:36:a8:e6:16:12:07:af:2b:f2:ae:83:1d:56: bd:3a:f9:b2:f5:df:cb:77:42:00:e5:4e:6c:94:a8: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:12:18:FB:6C:23:FE:9E:15:59:4F:99:54:95:07:99:EA:1A:46 X509v3 Authority Key Identifier: keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:8c:d1:ac:d6:62:49:5b:73:bb:45:18:1d:69:91:d8:4a: b5:f1:71:8b:32:fa:ca:50:b2:21:4e:0e:f6:b9:82:f7:cb:41: 7b:29:ba:e8:44:88:44:c8:a4:8b:72:2b:50:78:45:10:a7:ca: 2c:d2:8e:e0:63:b3:ca:e6:c6:05:39:b2:b5:8a:58:83:d1:39: e6:2e:2a:1a:f4:4c:e9:b0:8a:1e:67:f9:77:b3:34:5c:bc:b9: b0:cf:9f:b6:48:ca:a0:8c:54:52:8f:12:cb:f3:e0:ef:d5:fb: 4a:81:fe:f1:94:8a:7a:fd:00:3d:0d:eb:0c:be:05:f3:bf:15: 5f:29:e6:f4:dc:0d:a2:45:e8:52:f5:76:c9:0c:63:24:9c:14: 9e:10:8e:35:7e:6b:d7:3b:90:a9:70:6e:94:81:59:aa:53:f6: bb:b0:ac:95:b3:75:a7:05:11:6d:93:64:07:16:8c:13:e3:75: fe:77:3f:4d:f4:44:e3:6b:83:69:c2:83:3c:f4:61:db:f2:c2: f4:31:cd:69:46:3b:c0:5f:da:10:e2:2e:f5:34:5e:3a:c1:46: ab:96:e4:93:d3:1f:95:8a:5a:a0:37:d2:c1:c7:f0:7c:e8:86: 67:7c:a5:bf:f3:d2:d0:92:fe:ac:59:7d:ce:e7:1e:48:40:ce: 9b:84:dc:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvniKh7X4JcsG8VUY1MhE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzFmYWMyNGUzMGQ5MjU4ZWIyZWY3MmYzMWVkOWJkNjA4 ZmUwZGUwHhcNMjUxMjE4MDQwMDUxWhcNMjUxMjE5MDQwMDUxWjAzMTEwLwYDVQQD EyhhMDRiMTIxOGZiNmMyM2ZlOWUxNTU5NGY5OTU0OTUwNzk5ZWExYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydO7qq9dOMtfgAeq44ib2/mY2J9l +o7a1Y0cZd+VU7s7TFr7HpRBVkuhxGqo7+TAajfWYv9IYAo+3fr4CQjb4EbAKmPH xm/tuhgbMPxcO/T49P9v3fiXsMh1dk0zkBSMe3Hbueh7YifglkQn/++SiXhlg2mf R/SJzZWdQI2xqotKM9C/TArCMyCpo49kTOWgNAgnU9UBJ8YoyFoddXhDGvUAn/mK g3vSvASy4i4yn5y7L0/DAL1b01kyYz/ENU7M/5iYhdTOIvMMRNq0kwwT+7k3GQna ToBl78CWsuTu2lOfSzao5hYSB68r8q6DHVa9Ovmy9d/Ld0IA5U5slKiEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBLEhj7bCP+nhVZT5lUlQeZ6hpGMB8GA1UdIwQY MBaAFAbB+sJOMNkljrLvcvMe2b1gj+DeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDIt MzQ2YTNjY2U1ZjA5LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDItMzQ2YTNjY2U1ZjA5 LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD2M0azW Yklbc7tFGB1pkdhKtfFxizL6ylCyIU4O9rmC98tBeym66ESIRMiki3IrUHhFEKfK LNKO4GOzyubGBTmytYpYg9E55i4qGvRM6bCKHmf5d7M0XLy5sM+ftkjKoIxUUo8S y/Pg79X7SoH+8ZSKev0APQ3rDL4F878VXynm9NwNokXoUvV2yQxjJJwUnhCONX5r 1zuQqXBulIFZqlP2u7CslbN1pwURbZNkBxaME+N1/nc/TfRE42uDacKDPPRh2/LC 9DHNaUY7wF/aEOIu9TReOsFGq5bkk9MflYpaoDfSwcfwfOiGZ3ylv/PS0JL+rFl9 zuceSEDOm4TcBw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:46 2025 by rpki-client