This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json) Hash identifier: RBnAQfXc4ZYo2uIOcb3G+aoFJPaiAJcsjli8NGyMUuM= Subject key identifier: 36:3A:FA:32:68:17:2D:AB:9D:28:35:04:7D:58:54:A6:64:AE:08:AC Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6 Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6 Certificate serial: 019B3E6D134D2869D29FFE73955E37C595A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft Manifest number: 087A Signing time: Sun 21 Dec 2025 01:01:34 +0000 Manifest this update: Sun 21 Dec 2025 01:01:34 +0000 Manifest next update: Mon 22 Dec 2025 01:01:34 +0000 Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=) 2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=) 3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: LOEFGAZb8n99fJCUF3tD1SSQN99qUNBQ2u5Wkhsjy8s=) 4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:13:4d:28:69:d2:9f:fe:73:95:5e:37:c5:95:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6 Validity Not Before: Dec 21 01:01:34 2025 GMT Not After : Dec 22 01:01:34 2025 GMT Subject: CN=363afa3268172dab9d2835047d5854a664ae08ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:80:0b:96:63:4c:8e:46:b3:f4:b8:66:ce: 6a:5e:3d:30:d4:e8:44:86:db:cd:03:ca:95:4a:28: 58:05:d8:53:6d:8a:48:a1:9d:d8:40:f8:15:b8:8d: 32:e0:f2:64:dd:96:d6:0e:0e:b8:61:62:0a:c5:4d: 2e:29:93:76:e7:ad:59:7b:df:fb:07:70:aa:bb:57: 21:29:7d:b8:19:16:18:73:4c:ab:fe:9e:00:05:7f: 35:64:46:9b:cd:ea:00:49:75:90:6b:d8:71:91:03: ee:1b:29:77:79:9a:62:27:57:14:19:5d:53:a0:1a: f3:41:d0:cc:dc:24:53:1e:a5:14:40:23:c3:d2:7a: f1:c7:aa:a1:d4:3c:1a:76:57:1e:1d:d3:85:de:9b: 95:26:f2:6d:4a:9b:aa:9d:f2:a8:3f:ee:e4:e9:35: 26:5d:a9:e7:c6:25:4f:9d:f0:d2:2a:b3:34:49:25: ee:a7:dd:52:9e:a5:fb:4d:c3:98:31:63:63:93:5c: 98:e8:38:2c:56:58:b4:19:46:36:c6:30:35:10:0f: 79:4c:dc:1d:32:f6:1a:31:d3:7d:77:86:47:ff:c4: b4:6f:50:c1:6a:b1:e6:61:0b:4b:91:df:e7:4b:aa: 9d:1f:02:f6:82:88:d0:b0:54:b0:6f:57:18:1a:1f: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3A:FA:32:68:17:2D:AB:9D:28:35:04:7D:58:54:A6:64:AE:08:AC X509v3 Authority Key Identifier: keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2f:21:d1:23:8f:43:b4:16:b5:62:96:ec:49:4d:ed:f4:66: 00:74:6b:54:9c:d2:d9:c0:cb:42:ac:c7:02:38:54:2d:7d:8d: 51:8d:ae:91:ed:7f:df:ef:3c:77:4d:06:38:4d:1f:aa:fa:e2: 67:f6:07:af:1d:2a:48:1b:62:a2:cc:d7:c0:66:1d:5b:9d:43: 78:ac:f3:0f:e9:85:f3:6f:89:2b:56:0c:65:9c:82:1a:5c:d8: 5d:4e:f5:b3:a4:18:e3:02:28:e8:5c:97:a5:f0:a6:47:07:66: e5:c0:f5:70:96:e2:90:e6:3c:71:98:54:0b:c6:f8:86:d3:ea: 38:13:30:04:87:aa:e3:c6:57:24:9a:ec:41:91:bb:18:cb:64: 1a:0c:17:80:d9:5e:dc:d6:de:fa:95:b1:86:be:0b:84:dd:01: fb:41:36:1a:c2:41:85:10:9d:39:93:79:70:84:70:90:79:94: 6b:2a:b8:2d:cf:cc:47:96:22:53:6f:4f:2b:17:df:f5:0d:1c: 02:9f:d0:c5:c3:8a:19:68:f6:7c:35:96:61:b5:7c:30:40:87: 38:f3:98:db:e9:e3:6b:c9:01:70:b1:8e:d1:d8:49:b8:fc:c3: 04:67:2c:a0:36:07:ed:55:86:eb:95:11:9b:d7:c8:91:a3:34: e2:11:f8:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRNNKGnSn/5zlV43xZWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMWJhNmUxNGQ4M2E4YjE0YjA1MDI2ZTcxMGM4NmM0NmI3 M2MzYTYwHhcNMjUxMjIxMDEwMTM0WhcNMjUxMjIyMDEwMTM0WjAzMTEwLwYDVQQD EygzNjNhZmEzMjY4MTcyZGFiOWQyODM1MDQ3ZDU4NTRhNjY0YWUwOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKAC5ZjTI5Gs/S4Zs5qXj0w1OhE htvNA8qVSihYBdhTbYpIoZ3YQPgVuI0y4PJk3ZbWDg64YWIKxU0uKZN2561Ze9/7 B3Cqu1chKX24GRYYc0yr/p4ABX81ZEabzeoASXWQa9hxkQPuGyl3eZpiJ1cUGV1T oBrzQdDM3CRTHqUUQCPD0nrxx6qh1DwadlceHdOF3puVJvJtSpuqnfKoP+7k6TUm XannxiVPnfDSKrM0SSXup91SnqX7TcOYMWNjk1yY6DgsVli0GUY2xjA1EA95TNwd MvYaMdN9d4ZH/8S0b1DBarHmYQtLkd/nS6qdHwL2gojQsFSwb1cYGh/gMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY6+jJoFy2rnSg1BH1YVKZkrgisMB8GA1UdIwQY MBaAFG8bpuFNg6ixSwUCbnEMhsRrc8OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmIt ZGFlOWZiOGJmMGIxLzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmItZGFlOWZiOGJmMGIx LzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC8h0SOP Q7QWtWKW7ElN7fRmAHRrVJzS2cDLQqzHAjhULX2NUY2uke1/3+88d00GOE0fqvri Z/YHrx0qSBtioszXwGYdW51DeKzzD+mF82+JK1YMZZyCGlzYXU71s6QY4wIo6FyX pfCmRwdm5cD1cJbikOY8cZhUC8b4htPqOBMwBIeq48ZXJJrsQZG7GMtkGgwXgNle 3Nbe+pWxhr4LhN0B+0E2GsJBhRCdOZN5cIRwkHmUayq4Lc/MR5YiU29PKxff9Q0c Ap/QxcOKGWj2fDWWYbV8MECHOPOY2+nja8kBcLGO0dhJuPzDBGcsoDYH7VWG65UR m9fIkaM04hH40A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:22 2025 by rpki-client