This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json) Hash identifier: cADFZGd4/m4fNCLVlDan0I7vAY+2FS/mKInPdExdNlg= Subject key identifier: 10:F2:4B:6E:B7:93:07:19:94:24:09:63:C0:32:35:8E:03:03:0E:C0 Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Certificate serial: 019B3BD90D58DC4AD1A7EB6E03425CEFE127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 13:00:38 +0000 Manifest this update: Sat 20 Dec 2025 13:00:38 +0000 Manifest next update: Sun 21 Dec 2025 13:00:38 +0000 Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=) 2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: sC7/011uwm2HeuowcmCNNl/AYmpBxkr4ndNI8kNbLCI=) 3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=) 4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:0d:58:dc:4a:d1:a7:eb:6e:03:42:5c:ef:e1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Validity Not Before: Dec 20 13:00:38 2025 GMT Not After : Dec 21 13:00:38 2025 GMT Subject: CN=10f24b6eb793071994240963c032358e03030ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:d7:bb:bd:ee:0e:d8:3e:f2:f1:4a:e9:8b: 8b:24:f2:84:fc:3a:84:47:14:7c:e9:23:da:e0:8b: 93:e4:bb:1b:d0:97:b0:64:18:cd:b4:ef:ef:74:a8: 0c:42:63:31:2e:8e:21:1e:e7:a9:11:c2:51:fd:fe: d7:f6:3a:25:39:6e:2b:7d:71:26:fc:10:9c:3d:82: d0:15:66:1d:0c:1e:ab:e2:4e:50:a7:e0:60:09:6e: bb:09:e5:e2:3e:98:cf:93:08:d8:be:8f:28:9b:66: e2:a7:58:53:8c:e8:62:cb:55:80:00:b7:96:1f:a9: 15:4a:8a:a7:85:07:a0:d4:6e:ff:02:2b:f2:9c:11: 0f:ab:13:b7:d9:38:93:5a:62:88:cb:0b:18:ea:99: d3:f5:6a:cc:5f:d6:65:23:8e:2b:51:9f:93:68:83: 51:08:43:43:9f:52:67:33:65:77:19:6a:86:8e:69: 27:86:26:77:b5:51:c5:78:63:e9:6c:7f:27:15:54: 0b:fb:13:64:16:b8:4d:26:38:3a:e2:eb:f6:53:d7: 68:b9:7d:9e:12:01:f9:34:d1:eb:fd:3e:2a:eb:9b: 89:ca:97:b2:fe:cb:52:7c:06:69:7b:7b:d1:cf:4f: 99:1c:b6:70:7b:59:f0:09:8b:af:5c:75:ce:75:ff: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F2:4B:6E:B7:93:07:19:94:24:09:63:C0:32:35:8E:03:03:0E:C0 X509v3 Authority Key Identifier: keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:11:16:78:9f:4c:c1:7e:e6:55:71:58:87:53:eb:6b:11: a3:21:43:23:7a:58:27:f0:7d:31:92:f0:5a:bc:69:33:e8:a3: dc:e9:b3:00:64:e7:3e:97:35:73:fa:cc:77:3d:17:36:4a:13: 65:38:9b:70:83:7c:be:6e:7c:e5:06:eb:62:e1:d4:3d:a3:84: 5a:1a:27:d7:38:18:78:3b:55:eb:a9:d1:b1:a5:f1:f3:b4:ca: 62:b4:bc:5b:fd:8a:ba:f7:96:78:50:7a:f6:0d:d1:5f:a6:93: 5f:ee:38:31:3b:b5:6d:6b:74:82:de:ab:46:fd:a0:ee:2b:63: a2:50:2a:67:36:cf:17:c3:20:34:b7:c1:22:80:fc:3e:a8:63: 67:f2:5a:0c:f9:9d:4e:de:20:22:a3:c6:12:95:76:b3:28:64: 1b:18:31:cc:00:bc:61:ca:5f:35:6a:6b:bf:25:71:b2:1c:48: 35:7d:b4:4b:18:a5:86:44:96:5a:bb:d1:d6:48:29:a6:3b:2b: 8f:e2:1f:ff:e8:86:07:dc:7d:54:59:d2:2a:13:44:da:da:64: f5:8a:40:8d:2f:1a:05:12:00:0b:b3:78:5c:e8:92:a8:5d:17: d4:d1:97:13:d1:fb:ca:e5:e0:73:e8:66:0a:62:6d:97:8b:6b: 6e:05:b2:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Q1Y3ErRp+tuA0Jc7+EnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4 MDE0Y2YwHhcNMjUxMjIwMTMwMDM4WhcNMjUxMjIxMTMwMDM4WjAzMTEwLwYDVQQD EygxMGYyNGI2ZWI3OTMwNzE5OTQyNDA5NjNjMDMyMzU4ZTAzMDMwZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vPXu73uDtg+8vFK6YuLJPKE/DqE RxR86SPa4IuT5Lsb0JewZBjNtO/vdKgMQmMxLo4hHuepEcJR/f7X9jolOW4rfXEm /BCcPYLQFWYdDB6r4k5Qp+BgCW67CeXiPpjPkwjYvo8om2bip1hTjOhiy1WAALeW H6kVSoqnhQeg1G7/AivynBEPqxO32TiTWmKIywsY6pnT9WrMX9ZlI44rUZ+TaINR CENDn1JnM2V3GWqGjmknhiZ3tVHFeGPpbH8nFVQL+xNkFrhNJjg64uv2U9douX2e EgH5NNHr/T4q65uJypey/stSfAZpe3vRz0+ZHLZwe1nwCYuvXHXOdf+6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDyS263kwcZlCQJY8AyNY4DAw7AMB8GA1UdIwQY MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5 LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiQRFnif TMF+5lVxWIdT62sRoyFDI3pYJ/B9MZLwWrxpM+ij3OmzAGTnPpc1c/rMdz0XNkoT ZTibcIN8vm585QbrYuHUPaOEWhon1zgYeDtV66nRsaXx87TKYrS8W/2KuveWeFB6 9g3RX6aTX+44MTu1bWt0gt6rRv2g7itjolAqZzbPF8MgNLfBIoD8PqhjZ/JaDPmd Tt4gIqPGEpV2syhkGxgxzAC8YcpfNWprvyVxshxINX20SxilhkSWWrvR1kgppjsr j+If/+iGB9x9VFnSKhNE2tpk9YpAjS8aBRIAC7N4XOiSqF0X1NGXE9H7yuXgc+hm CmJtl4trbgWyEA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:39 2025 by rpki-client