This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json) Hash identifier: 3yVucxBMBB2dWQE7jxDMggCrGd1HEcpj79Af8lvFyo8= Subject key identifier: 65:1F:98:F1:CA:09:52:1F:80:02:E8:C3:3D:DD:C5:0A:7E:CA:9A:D0 Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Certificate serial: 019B2BC187D7E271209A31EF14A145E099F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft Manifest number: 0A57 Signing time: Wed 17 Dec 2025 10:01:01 +0000 Manifest this update: Wed 17 Dec 2025 10:01:01 +0000 Manifest next update: Thu 18 Dec 2025 10:01:01 +0000 Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=) 2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: p+Qn0ph6zGlElF/EYs/b2tCTKNCoK2/vDVelS0qTtQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:87:d7:e2:71:20:9a:31:ef:14:a1:45:e0:99:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de Validity Not Before: Dec 17 10:01:01 2025 GMT Not After : Dec 18 10:01:01 2025 GMT Subject: CN=651f98f1ca09521f8002e8c33dddc50a7eca9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:0f:a1:01:24:b6:ee:07:d9:a3:85:b0:ea: 70:df:a9:d5:63:53:e5:e4:6e:44:bd:a1:6f:42:19: 60:c4:3a:d4:01:82:dc:56:b0:1b:b1:17:4c:3f:92: 58:c2:f3:ba:ba:ba:dd:30:fa:54:5c:d3:e1:48:99: 71:af:a2:46:aa:e4:e0:9e:9d:44:de:69:19:9b:94: 5b:05:67:5c:71:d1:2b:05:6f:e2:78:4d:07:9f:2d: 94:1b:c5:60:39:12:46:0d:43:52:fa:0d:25:8f:af: 55:e0:c5:c1:11:76:0a:8f:e5:e0:9a:2f:bc:91:d0: 64:60:b7:64:5b:81:3a:e8:52:54:9e:2c:78:eb:aa: ad:62:5e:fd:6d:6a:a4:7a:24:33:fb:63:d6:ec:40: 71:d3:51:7c:76:b4:ef:96:b8:af:42:3c:f7:6f:97: 51:68:c9:83:b1:dc:16:89:5c:2f:d8:bd:90:f9:49: 01:d9:c5:11:92:50:52:9a:06:58:d2:92:f4:1c:49: 6f:01:a1:99:8a:01:08:13:4d:32:11:ce:57:a0:d5: cb:38:78:cb:37:c3:47:26:a7:04:d3:8f:38:95:95: dd:a4:12:95:f4:38:7e:02:8f:d9:be:31:86:cb:65: 7c:db:49:0a:cd:ff:fb:b8:6b:67:21:48:69:cc:2d: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:98:F1:CA:09:52:1F:80:02:E8:C3:3D:DD:C5:0A:7E:CA:9A:D0 X509v3 Authority Key Identifier: keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bd:f9:0c:f7:ba:9d:bf:23:c2:89:eb:65:3c:10:fb:f3:4a: 8d:52:76:3e:88:69:cd:23:55:2e:d1:5d:b5:42:d4:50:ef:b8: e8:69:1b:dc:96:a0:63:b0:11:39:2d:b9:2b:ca:8e:ba:6c:97: 00:14:51:9c:5f:b6:41:24:2d:5d:46:fa:7b:f9:ac:af:f9:30: 74:54:69:de:cf:13:21:c5:29:da:20:ef:65:2f:9a:22:94:a2: d8:e6:c8:d9:ca:f7:c7:8d:49:73:e9:bc:ca:5f:60:84:11:54: b3:a7:52:a7:92:91:66:76:9f:ae:05:e8:17:36:df:79:a1:bb: 95:56:8c:45:b4:6f:7e:0b:b3:b8:ef:47:e1:1f:65:aa:cf:ff: 59:26:dd:0b:62:10:42:d5:e0:19:28:d7:20:5e:fe:de:48:47: 6f:86:e5:4d:42:14:01:05:c6:f0:a1:a3:cd:bb:e0:b3:5a:3e: e9:99:7b:c7:a6:bb:05:36:2c:b0:96:09:35:e1:bf:28:d2:fd: b0:87:60:0e:81:ef:72:8e:ad:13:11:b3:14:99:22:b0:f4:f6: b6:69:d9:8f:cb:27:6b:37:ea:f2:c9:03:72:ce:cf:3f:fd:6e: cf:d4:5f:1b:7f:c3:1e:23:5b:74:77:72:6e:60:fa:3d:4c:13: 40:c4:dd:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwYfX4nEgmjHvFKFF4JnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzFmYWMyNGUzMGQ5MjU4ZWIyZWY3MmYzMWVkOWJkNjA4 ZmUwZGUwHhcNMjUxMjE3MTAwMTAxWhcNMjUxMjE4MTAwMTAxWjAzMTEwLwYDVQQD Eyg2NTFmOThmMWNhMDk1MjFmODAwMmU4YzMzZGRkYzUwYTdlY2E5YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fIPoQEktu4H2aOFsOpw36nVY1Pl 5G5EvaFvQhlgxDrUAYLcVrAbsRdMP5JYwvO6urrdMPpUXNPhSJlxr6JGquTgnp1E 3mkZm5RbBWdccdErBW/ieE0Hny2UG8VgORJGDUNS+g0lj69V4MXBEXYKj+Xgmi+8 kdBkYLdkW4E66FJUnix466qtYl79bWqkeiQz+2PW7EBx01F8drTvlrivQjz3b5dR aMmDsdwWiVwv2L2Q+UkB2cURklBSmgZY0pL0HElvAaGZigEIE00yEc5XoNXLOHjL N8NHJqcE0484lZXdpBKV9Dh+Ao/ZvjGGy2V820kKzf/7uGtnIUhpzC1GtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUfmPHKCVIfgALowz3dxQp+yprQMB8GA1UdIwQY MBaAFAbB+sJOMNkljrLvcvMe2b1gj+DeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDIt MzQ2YTNjY2U1ZjA5LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDItMzQ2YTNjY2U1ZjA5 LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL35DPe6 nb8jwonrZTwQ+/NKjVJ2PohpzSNVLtFdtULUUO+46Gkb3JagY7AROS25K8qOumyX ABRRnF+2QSQtXUb6e/msr/kwdFRp3s8TIcUp2iDvZS+aIpSi2ObI2cr3x41Jc+m8 yl9ghBFUs6dSp5KRZnafrgXoFzbfeaG7lVaMRbRvfguzuO9H4R9lqs//WSbdC2IQ QtXgGSjXIF7+3khHb4blTUIUAQXG8KGjzbvgs1o+6Zl7x6a7BTYssJYJNeG/KNL9 sIdgDoHvco6tExGzFJkisPT2tmnZj8snazfq8skDcs7PP/1uz9RfG3/DHiNbdHdy bmD6PUwTQMTdZg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:34 2025 by rpki-client