This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json) Hash identifier: Kis57NWu7zLj2GZAJypa7fAVgk1ZLv6apUgTSNMo3mI= Subject key identifier: 83:22:8B:87:1C:4F:10:B9:10:9C:9A:4A:C8:57:6F:2F:9F:6C:FB:D3 Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c Certificate serial: 019B3DFE6AC1FAA5E50CBDDF2AA6ECAE2FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft Manifest number: 0889 Signing time: Sat 20 Dec 2025 23:00:42 +0000 Manifest this update: Sat 20 Dec 2025 23:00:42 +0000 Manifest next update: Sun 21 Dec 2025 23:00:42 +0000 Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=) 2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=) 3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 7O4CnCl3Fz6KT/SebbItYMCPgr6oYeMjgIpOSeeWRRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:6a:c1:fa:a5:e5:0c:bd:df:2a:a6:ec:ae:2f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c Validity Not Before: Dec 20 23:00:42 2025 GMT Not After : Dec 21 23:00:42 2025 GMT Subject: CN=83228b871c4f10b9109c9a4ac8576f2f9f6cfbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:82:27:e1:e8:ae:7e:84:80:34:42:f9:a6: c8:06:ed:89:57:78:9b:a9:11:dc:a3:4c:c1:5d:78: 10:ce:88:df:a8:1d:43:d1:d7:3d:b9:f9:7d:46:ab: ea:d3:1f:b2:c6:cb:2c:d0:ac:55:bb:f7:c2:57:fc: 92:a2:f7:91:04:32:6d:6a:c9:30:d5:18:db:03:ef: 98:18:56:f5:23:1c:86:a0:cb:25:a3:19:14:c3:cc: 75:f6:3f:47:c1:7b:4d:1c:45:fc:2c:0c:9c:24:bc: ed:8d:6e:88:6e:81:a4:a5:2a:d5:c7:81:a4:b0:b7: 70:bd:f7:66:c5:7c:57:16:36:45:88:13:7e:41:86: 72:16:5c:0a:1a:eb:22:90:e8:4b:c1:15:6b:e8:5d: b1:10:b9:f3:cf:6a:f3:8c:71:69:a9:1d:38:a4:53: a8:7d:a3:f3:22:48:c0:4c:ae:6a:5e:45:3e:93:18: 5a:44:29:c0:39:07:e9:ac:cd:21:69:14:10:86:3e: 62:66:a4:63:2d:03:77:11:f6:f5:0a:05:f4:e8:93: 84:fd:c5:b7:97:6c:81:ff:18:9d:9a:de:19:95:2a: 59:26:14:24:34:b8:43:5d:a0:9c:59:97:ce:3a:f6: 1b:3b:a9:b3:50:fe:e7:30:99:87:56:d3:0b:e2:f7: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:8B:87:1C:4F:10:B9:10:9C:9A:4A:C8:57:6F:2F:9F:6C:FB:D3 X509v3 Authority Key Identifier: keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f5:c6:5a:2d:d1:6c:30:bf:7d:62:be:f1:25:ea:42:60:0f: 67:26:fc:a0:43:d3:64:a2:a2:72:34:2e:ef:f9:0e:c8:3d:48: d7:14:8a:55:cb:21:a2:11:b0:b5:39:42:3a:20:47:92:bb:93: c2:08:68:49:63:af:ac:2f:81:2e:50:f5:5a:87:3f:10:bd:57: 6c:26:d6:04:d2:1b:23:9e:c1:64:4d:b0:43:3a:92:05:0c:2a: 6b:a6:1d:d1:b2:d6:3d:2e:8e:67:06:62:87:73:45:80:56:53: f4:fb:92:04:e9:8e:fd:a5:50:05:21:76:d9:dd:cd:ae:83:d5: 49:38:42:aa:23:8f:a2:6d:c1:43:a8:d4:2e:4f:1d:20:eb:ce: b4:20:ad:da:49:36:9b:f1:63:8f:fe:50:f1:aa:a3:5e:98:50: 8b:49:10:3a:60:54:73:6e:af:c4:78:19:3e:87:b1:05:0e:f5: ab:e3:a4:6e:c7:37:03:e8:60:c6:8e:e1:37:ee:1f:c5:45:c2: be:7f:e6:41:28:6d:f4:e6:16:d2:ff:95:bd:65:4e:b6:3b:06: 20:b0:50:7f:c6:d2:f8:b9:bb:1a:12:b7:be:34:6d:42:14:7c: ff:0e:33:aa:70:dc:5f:06:3d:72:f7:35:1d:d1:a9:9b:57:bb: 90:77:73:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/mrB+qXlDL3fKqbsri/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjUwYWYxNzI0NDRiNTIxMTZhN2E2N2Q3NGFhYzdkZjhh NTVlMWMwHhcNMjUxMjIwMjMwMDQyWhcNMjUxMjIxMjMwMDQyWjAzMTEwLwYDVQQD Eyg4MzIyOGI4NzFjNGYxMGI5MTA5YzlhNGFjODU3NmYyZjlmNmNmYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKSCJ+Horn6EgDRC+abIBu2JV3ib qRHco0zBXXgQzojfqB1D0dc9ufl9Rqvq0x+yxsss0KxVu/fCV/ySoveRBDJtaskw 1RjbA++YGFb1IxyGoMsloxkUw8x19j9HwXtNHEX8LAycJLztjW6IboGkpSrVx4Gk sLdwvfdmxXxXFjZFiBN+QYZyFlwKGusikOhLwRVr6F2xELnzz2rzjHFpqR04pFOo faPzIkjATK5qXkU+kxhaRCnAOQfprM0haRQQhj5iZqRjLQN3Efb1CgX06JOE/cW3 l2yB/xidmt4ZlSpZJhQkNLhDXaCcWZfOOvYbO6mzUP7nMJmHVtML4vdWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMii4ccTxC5EJyaSshXby+fbPvTMB8GA1UdIwQY MBaAFG1lCvFyREtSEWp6Z9dKrH34pV4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQt YjRhMGNiOGVkODIxLzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQtYjRhMGNiOGVkODIx LzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPXGWi3R bDC/fWK+8SXqQmAPZyb8oEPTZKKicjQu7/kOyD1I1xSKVcshohGwtTlCOiBHkruT wghoSWOvrC+BLlD1Woc/EL1XbCbWBNIbI57BZE2wQzqSBQwqa6Yd0bLWPS6OZwZi h3NFgFZT9PuSBOmO/aVQBSF22d3NroPVSThCqiOPom3BQ6jULk8dIOvOtCCt2kk2 m/Fjj/5Q8aqjXphQi0kQOmBUc26vxHgZPoexBQ71q+Okbsc3A+hgxo7hN+4fxUXC vn/mQSht9OYW0v+VvWVOtjsGILBQf8bS+Lm7GhK3vjRtQhR8/w4zqnDcXwY9cvc1 HdGpm1e7kHdzhg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:06 2025 by rpki-client