This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json) Hash identifier: 5kXmKlZRyvlYaoRUA99L3RVTb+SuV+tEqI389cbZDVI= Subject key identifier: 6C:D5:66:40:AD:2D:FE:F0:3A:0C:93:4E:8B:7F:18:27:49:AE:59:48 Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c Certificate serial: 019B56E36963D71EB75F6A7D1372DC444E86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 19:01:42 +0000 Manifest this update: Thu 25 Dec 2025 19:01:42 +0000 Manifest next update: Fri 26 Dec 2025 19:01:42 +0000 Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: LfkSFwqUVXUKBm4PPAobNzYUrN8CWgZKfqFSwTogMYQ=) 2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e3:69:63:d7:1e:b7:5f:6a:7d:13:72:dc:44:4e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c Validity Not Before: Dec 25 19:01:42 2025 GMT Not After : Dec 26 19:01:42 2025 GMT Subject: CN=6cd56640ad2dfef03a0c934e8b7f182749ae5948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:6e:9a:36:09:cf:07:f3:70:75:af:c2:0b: 45:2c:4b:da:b3:29:82:32:0d:26:a7:62:a1:26:04: 77:31:cb:d9:92:95:57:68:8f:7d:f7:0d:12:30:52: 8a:36:86:59:06:b7:5d:e2:34:c7:65:d5:ad:f6:96: 84:9e:ab:6f:9c:61:28:99:24:0e:f1:fc:40:b3:62: 03:a2:a8:d4:58:bb:ca:35:d6:d9:f1:4d:59:35:97: 84:b8:37:32:c0:b3:f2:17:9d:15:46:6a:12:d6:21: 00:df:7b:de:74:32:58:21:50:64:88:58:69:66:86: 02:75:8d:51:0b:87:54:12:90:82:0f:b2:39:7c:99: 06:5e:45:58:43:ee:ac:d4:61:bb:51:5c:b1:8b:eb: a0:68:22:59:67:6e:31:c8:ec:37:5d:44:74:e1:1c: 25:32:50:c4:7a:66:77:7a:53:39:10:b3:f5:d3:37: d0:db:e2:12:29:56:99:fb:b3:af:af:aa:7f:35:7f: 55:a5:de:48:25:0a:53:42:c3:15:4c:be:a3:26:7b: 67:77:9c:d0:42:1f:c4:fb:0f:2b:eb:89:48:ad:ac: 3b:3a:87:c7:a2:9e:13:64:fa:6b:d8:b9:94:77:2c: 85:9f:92:0c:81:52:2f:64:27:df:77:5b:62:8b:25: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D5:66:40:AD:2D:FE:F0:3A:0C:93:4E:8B:7F:18:27:49:AE:59:48 X509v3 Authority Key Identifier: keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e3:33:41:c2:bc:1d:06:bc:40:02:86:69:01:49:55:41:be: 18:62:0c:aa:9c:91:9a:66:98:ea:ca:e9:85:7b:3e:5c:23:41: 4f:46:8c:9a:d9:10:18:16:76:e6:6d:50:c4:3d:f6:a3:d4:bf: 98:10:21:d5:b3:d4:30:ad:9c:52:84:d2:fc:41:83:15:99:63: 77:c3:7e:45:20:d9:84:76:cf:13:68:38:a7:66:5b:5a:9e:d0: 56:d8:7d:0d:1b:53:35:bb:77:f7:6a:cd:69:18:ca:85:52:ea: b8:5c:ae:93:2f:d4:c1:49:81:5d:10:c0:08:0a:60:69:ae:69: ce:91:04:a2:45:7d:a3:0d:24:77:19:00:c7:dd:31:53:11:2c: 08:a5:96:ac:2a:db:ca:1a:0e:26:4c:4e:07:19:e6:84:9a:b9: 42:db:69:dd:e1:61:3c:01:cb:aa:83:78:d6:89:22:5f:b0:6e: d6:bb:1a:b8:0e:45:b7:04:84:9b:c9:c1:24:bd:53:2b:2f:31: 67:04:d4:57:a3:26:e3:75:62:13:49:00:38:a2:f6:0f:12:ac: 83:9f:79:da:5f:da:7f:53:db:6b:b6:12:fe:c1:2f:14:79:8f: d0:27:b8:50:46:a9:a1:0e:5f:85:ab:ed:7c:97:0d:f7:65:7a: 9b:30:92:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW42lj1x63X2p9E3LcRE6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzNiOGI1ZjM3ZTIxMDY4MjUwNTcxZjRkYjgzYjQ3MTQ0 NjhhMmMwHhcNMjUxMjI1MTkwMTQyWhcNMjUxMjI2MTkwMTQyWjAzMTEwLwYDVQQD Eyg2Y2Q1NjY0MGFkMmRmZWYwM2EwYzkzNGU4YjdmMTgyNzQ5YWU1OTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T5umjYJzwfzcHWvwgtFLEvasymC Mg0mp2KhJgR3McvZkpVXaI999w0SMFKKNoZZBrdd4jTHZdWt9paEnqtvnGEomSQO 8fxAs2IDoqjUWLvKNdbZ8U1ZNZeEuDcywLPyF50VRmoS1iEA33vedDJYIVBkiFhp ZoYCdY1RC4dUEpCCD7I5fJkGXkVYQ+6s1GG7UVyxi+ugaCJZZ24xyOw3XUR04Rwl MlDEemZ3elM5ELP10zfQ2+ISKVaZ+7Ovr6p/NX9Vpd5IJQpTQsMVTL6jJntnd5zQ Qh/E+w8r64lIraw7OofHop4TZPpr2LmUdyyFn5IMgVIvZCffd1tiiyXuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzVZkCtLf7wOgyTTot/GCdJrllIMB8GA1UdIwQY MBaAFAbDuLXzfiEGglBXH024O0cURoosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEt ZTZlZmZkM2NlZjMyLzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEtZTZlZmZkM2NlZjMy LzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+MzQcK8 HQa8QAKGaQFJVUG+GGIMqpyRmmaY6srphXs+XCNBT0aMmtkQGBZ25m1QxD32o9S/ mBAh1bPUMK2cUoTS/EGDFZljd8N+RSDZhHbPE2g4p2ZbWp7QVth9DRtTNbt392rN aRjKhVLquFyuky/UwUmBXRDACApgaa5pzpEEokV9ow0kdxkAx90xUxEsCKWWrCrb yhoOJkxOBxnmhJq5Qttp3eFhPAHLqoN41okiX7Bu1rsauA5FtwSEm8nBJL1TKy8x ZwTUV6Mm43ViE0kAOKL2DxKsg5952l/af1Pba7YS/sEvFHmP0Ce4UEapoQ5fhavt fJcN92V6mzCSOQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:31:21 2025 by rpki-client