This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json) Hash identifier: QW2K2kFbC41deNA2DuEM75l8BRtgJ1VbtNQES+asy8c= Subject key identifier: EE:60:05:7A:D4:B3:92:35:62:E1:B5:F5:BC:46:92:8C:F6:33:8F:0E Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Certificate serial: 019B3BA2706CBE8460279FAB0FE2DE256A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft Manifest number: 08F0 Signing time: Sat 20 Dec 2025 12:00:59 +0000 Manifest this update: Sat 20 Dec 2025 12:00:59 +0000 Manifest next update: Sun 21 Dec 2025 12:00:59 +0000 Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=) 2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: Y9PT3CM/5DbigKVoGalNYi3IaoIaeQhuNELj7uPveN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:70:6c:be:84:60:27:9f:ab:0f:e2:de:25:6a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Validity Not Before: Dec 20 12:00:59 2025 GMT Not After : Dec 21 12:00:59 2025 GMT Subject: CN=ee60057ad4b3923562e1b5f5bc46928cf6338f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:fe:16:93:89:a9:93:c7:25:b0:52:02:6f: 82:d4:9b:7c:33:49:71:2a:24:e7:09:7c:c2:53:83: 77:e8:ce:b6:86:f6:8d:d5:fc:e5:87:da:6d:2c:04: d2:e4:06:0b:3c:5e:bc:b2:48:f6:b7:9a:0e:72:a2: a7:d7:4e:df:9a:f8:c3:4e:05:90:01:49:f6:e1:15: f1:1d:d5:98:30:e6:34:f8:4d:61:81:63:ab:08:30: 68:bb:21:c8:17:92:b7:cf:f7:97:c8:1d:b5:be:d8: 7d:36:ff:25:4f:27:f9:c6:34:e3:02:0c:e0:c9:cd: cb:f9:16:22:a8:c1:3f:4f:ab:63:cf:f8:53:2f:f5: 97:8f:82:e6:f4:df:b7:6e:f9:07:78:75:7d:a6:3f: 77:dc:ef:c5:24:e3:e2:8a:f2:c9:89:69:90:83:65: 7a:a6:b3:b4:83:f8:fc:67:5b:0d:06:5b:6e:23:8a: c1:72:b7:2c:06:4f:2e:f2:25:d2:1a:3f:75:a0:e4: 51:13:b5:b2:a2:13:f7:f7:43:a8:ae:42:7a:3b:38: 71:60:ab:74:d9:29:e8:23:69:32:a7:0d:73:e9:e0: 8f:af:c1:23:09:64:a7:e5:3a:8c:cb:9d:82:a6:98: 5f:2f:5f:95:84:d6:4b:28:5c:72:06:0a:47:aa:a7: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:05:7A:D4:B3:92:35:62:E1:B5:F5:BC:46:92:8C:F6:33:8F:0E X509v3 Authority Key Identifier: keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e5:d9:ca:a1:c1:54:d3:4d:25:32:60:05:be:4c:89:21:92: a4:28:7b:a8:91:a9:42:27:74:9e:b9:87:ab:43:76:e2:f8:c8: 83:14:38:b9:7f:04:cf:29:48:0f:eb:13:f1:f1:3e:f0:34:c7: 3e:ff:c4:a5:47:50:81:8b:e7:16:e6:19:af:01:aa:4d:90:a5: 20:d1:23:6b:b2:32:0c:b5:78:ab:58:84:2a:00:f5:91:a9:27: 85:a6:36:35:ce:af:52:a7:44:44:d5:14:fe:3e:61:c0:04:db: 93:76:8d:da:eb:11:04:f2:3f:30:12:0d:b7:aa:ea:67:c2:74: 8b:ae:47:57:8e:9f:0e:46:42:94:bc:14:46:34:46:e7:16:5c: db:f1:5a:d7:29:57:24:45:8f:7d:e5:79:01:47:4f:9b:7c:3b: 05:17:40:c8:a3:62:e9:81:b1:7b:fd:19:e3:b7:7f:30:59:a2: 8e:fc:ab:d6:b4:c9:ea:ed:f4:8a:be:b8:65:1b:80:d5:4f:06: 4c:67:d4:d3:de:0b:cf:9c:fd:61:0b:45:98:a2:4b:96:4a:88: f3:23:4f:c9:df:9e:a7:fd:c7:4e:0c:53:c2:27:bd:87:02:03: 6d:23:73:bc:82:24:95:37:1f:c3:b9:4d:78:e3:ec:a2:8c:42: 17:6f:dc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onBsvoRgJ5+rD+LeJWqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx YjNlMjYwHhcNMjUxMjIwMTIwMDU5WhcNMjUxMjIxMTIwMDU5WjAzMTEwLwYDVQQD EyhlZTYwMDU3YWQ0YjM5MjM1NjJlMWI1ZjViYzQ2OTI4Y2Y2MzM4ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptL+FpOJqZPHJbBSAm+C1Jt8M0lx KiTnCXzCU4N36M62hvaN1fzlh9ptLATS5AYLPF68skj2t5oOcqKn107fmvjDTgWQ AUn24RXxHdWYMOY0+E1hgWOrCDBouyHIF5K3z/eXyB21vth9Nv8lTyf5xjTjAgzg yc3L+RYiqME/T6tjz/hTL/WXj4Lm9N+3bvkHeHV9pj933O/FJOPiivLJiWmQg2V6 prO0g/j8Z1sNBltuI4rBcrcsBk8u8iXSGj91oORRE7WyohP390OorkJ6OzhxYKt0 2SnoI2kypw1z6eCPr8EjCWSn5TqMy52CpphfL1+VhNZLKFxyBgpHqqdcYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5gBXrUs5I1YuG19bxGkoz2M48OMB8GA1UdIwQY MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+XZyqHB VNNNJTJgBb5MiSGSpCh7qJGpQid0nrmHq0N24vjIgxQ4uX8EzylID+sT8fE+8DTH Pv/EpUdQgYvnFuYZrwGqTZClINEja7IyDLV4q1iEKgD1kaknhaY2Nc6vUqdERNUU /j5hwATbk3aN2usRBPI/MBINt6rqZ8J0i65HV46fDkZClLwURjRG5xZc2/Fa1ylX JEWPfeV5AUdPm3w7BRdAyKNi6YGxe/0Z47d/MFmijvyr1rTJ6u30ir64ZRuA1U8G TGfU094Lz5z9YQtFmKJLlkqI8yNPyd+ep/3HTgxTwie9hwIDbSNzvIIklTcfw7lN eOPsooxCF2/cJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:45:21 2025 by rpki-client