This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json) Hash identifier: UcwuvRmm679dQTFXKozHg+pbtIDIGCa6HgqeE188NNU= Subject key identifier: 9B:86:D9:8A:AD:E1:EB:97:81:39:D9:18:44:8C:73:29:98:34:13:1F Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Certificate serial: 019B3F1119D5D59CA454442CA6CB3914B3C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft Manifest number: 0CA5 Signing time: Sun 21 Dec 2025 04:00:43 +0000 Manifest this update: Sun 21 Dec 2025 04:00:43 +0000 Manifest next update: Mon 22 Dec 2025 04:00:43 +0000 Files and hashes: 1: 1R6uhc2wPnqKxnOesvRg3wWNwhk.roa (hash: Vk3vRGCge4uXoZ+eQOPQfiJoFgTM6J3DonWOQ6myT5g=) 2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: JdUMNhkrjhjnzPAumrEar4D1oma4+0Z7cbLFHYsynUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:19:d5:d5:9c:a4:54:44:2c:a6:cb:39:14:b3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Validity Not Before: Dec 21 04:00:43 2025 GMT Not After : Dec 22 04:00:43 2025 GMT Subject: CN=9b86d98aade1eb978139d918448c73299834131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:a3:2c:e6:ff:06:c9:d4:ca:ce:a3:ed:cf: 75:9e:24:44:ec:91:9a:97:f4:cf:19:a1:13:f0:19: 3c:62:4c:98:7a:f5:de:de:32:73:08:01:e7:bf:c4: 35:10:15:72:83:47:1b:c2:fb:a9:57:84:73:02:80: fc:88:41:07:ea:23:06:60:fd:e2:54:34:ef:62:b1: c9:3f:b1:60:46:2d:7d:de:9a:46:00:85:3e:00:60: f4:d4:8c:77:c4:2b:60:8c:23:f6:a0:48:b8:3b:00: 3e:65:01:70:67:16:6b:3e:32:8c:c7:50:ae:ea:20: 13:b6:84:ea:41:01:cc:35:ae:bb:a3:fe:5e:1c:26: dc:67:c0:f4:55:2f:aa:ff:85:14:df:5b:f7:3e:32: 7d:31:8b:f8:d1:43:4f:64:a0:69:ea:71:7b:c7:ed: 76:a9:b7:3a:e6:11:a3:cd:62:08:2a:c2:fc:1d:fe: 27:44:61:ee:a7:e8:f6:2a:04:8a:a7:25:d4:85:65: 4e:f7:29:c9:0f:f8:1c:f2:e7:7a:aa:1d:a0:44:3f: be:ab:41:87:8c:01:ad:56:0c:b1:2c:a9:2f:5f:43: 10:b0:18:a3:97:bc:87:b3:8d:4a:c9:c5:1c:99:81: 9c:7e:51:ca:25:a5:e0:ea:1f:86:a3:15:cc:b0:e0: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:86:D9:8A:AD:E1:EB:97:81:39:D9:18:44:8C:73:29:98:34:13:1F X509v3 Authority Key Identifier: keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:0b:84:69:25:58:b5:d5:3f:fe:a8:17:3e:e2:e5:8a:95:ff: e2:6b:77:d5:70:74:32:9a:88:0f:7c:a8:91:d5:77:e9:b1:f6: 93:be:38:f3:b7:81:2d:b1:e3:fc:3c:b7:21:f7:84:52:28:cd: cc:5d:6c:eb:84:40:73:f7:28:ce:89:85:0a:f0:b8:63:0b:c3: b1:fb:66:9e:91:ef:c6:9e:52:0f:37:1c:e3:81:e9:b2:6c:2d: 8b:88:89:fc:c0:93:42:f1:0b:eb:4a:3b:99:c4:5b:1c:f1:4c: 7c:ef:dc:40:70:3c:e4:a4:d7:ac:e5:6f:04:ec:74:51:b6:db: 51:08:e4:34:5b:90:14:52:b7:14:5e:f4:6b:80:f6:84:57:86: 2e:58:7b:14:ad:bf:f4:d0:5b:5c:73:69:34:56:6d:c1:eb:3d: 5d:38:6d:e3:8d:af:7f:1a:18:c3:df:86:9f:5d:bc:eb:19:04: 75:7e:36:47:46:96:ed:fe:a0:7f:04:04:07:e4:25:d3:35:08: 09:ab:22:83:8f:8d:a1:46:fb:4e:9f:c0:d1:0e:45:98:94:f5: 4f:5e:9d:dd:7f:50:c7:52:9d:d7:89:d4:fa:21:e8:05:de:42: b7:1a:1a:57:8a:90:d4:63:8b:be:b3:76:4c:be:f5:6b:db:1c: 7d:26:8c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERnV1ZykVEQspss5FLPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4 ZDVjYTUwHhcNMjUxMjIxMDQwMDQzWhcNMjUxMjIyMDQwMDQzWjAzMTEwLwYDVQQD Eyg5Yjg2ZDk4YWFkZTFlYjk3ODEzOWQ5MTg0NDhjNzMyOTk4MzQxMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kCjLOb/BsnUys6j7c91niRE7JGa l/TPGaET8Bk8YkyYevXe3jJzCAHnv8Q1EBVyg0cbwvupV4RzAoD8iEEH6iMGYP3i VDTvYrHJP7FgRi193ppGAIU+AGD01Ix3xCtgjCP2oEi4OwA+ZQFwZxZrPjKMx1Cu 6iATtoTqQQHMNa67o/5eHCbcZ8D0VS+q/4UU31v3PjJ9MYv40UNPZKBp6nF7x+12 qbc65hGjzWIIKsL8Hf4nRGHup+j2KgSKpyXUhWVO9ynJD/gc8ud6qh2gRD++q0GH jAGtVgyxLKkvX0MQsBijl7yHs41KycUcmYGcflHKJaXg6h+GoxXMsOAvjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuG2Yqt4euXgTnZGESMcymYNBMfMB8GA1UdIwQY MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2 LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3guEaSVY tdU//qgXPuLlipX/4mt31XB0MpqID3yokdV36bH2k74487eBLbHj/Dy3IfeEUijN zF1s64RAc/cozomFCvC4YwvDsftmnpHvxp5SDzcc44Hpsmwti4iJ/MCTQvEL60o7 mcRbHPFMfO/cQHA85KTXrOVvBOx0UbbbUQjkNFuQFFK3FF70a4D2hFeGLlh7FK2/ 9NBbXHNpNFZtwes9XTht442vfxoYw9+Gn1286xkEdX42R0aW7f6gfwQEB+Ql0zUI Casig4+NoUb7Tp/A0Q5FmJT1T16d3X9Qx1Kd14nU+iHoBd5CtxoaV4qQ1GOLvrN2 TL71a9scfSaMQg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:52 2025 by rpki-client