This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json) Hash identifier: 9PwWECOpak7vD+22LZ5Fl7A+evuPLVSu7qRWJL6sENg= Subject key identifier: 07:2E:23:53:70:7A:EE:5E:B1:E4:BD:A1:76:5B:E1:62:D7:0D:E3:F1 Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c Certificate serial: 019B3FED021FB7B766F0E3E168644DCF4F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft Manifest number: 088A Signing time: Sun 21 Dec 2025 08:00:55 +0000 Manifest this update: Sun 21 Dec 2025 08:00:55 +0000 Manifest next update: Mon 22 Dec 2025 08:00:55 +0000 Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=) 2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=) 3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: TyD8h/zizRRkpuMAuCDul7lrxDvpMPunn5z3eQ9Xing=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:02:1f:b7:b7:66:f0:e3:e1:68:64:4d:cf:4f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c Validity Not Before: Dec 21 08:00:55 2025 GMT Not After : Dec 22 08:00:55 2025 GMT Subject: CN=072e2353707aee5eb1e4bda1765be162d70de3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:f0:fe:de:9c:30:a1:64:cb:30:39:5b:72: 79:d8:30:3d:db:16:56:49:51:ef:9e:3e:a2:d4:7c: 48:e1:bb:57:61:a9:68:51:f0:9b:d5:d6:25:0b:92: d5:a3:ce:70:ed:73:28:56:45:09:fe:a4:11:6f:0b: 28:88:69:9a:c6:80:18:f5:c4:be:2d:13:f0:32:ed: 8d:62:7b:eb:79:48:f7:d4:46:f5:60:c0:c2:59:fa: a4:fe:ef:37:27:91:7b:8c:3c:67:78:63:e6:34:d1: a2:c2:51:16:48:9b:18:d2:f4:16:7b:26:5a:4b:02: 9c:cf:94:8c:c5:d3:82:96:f4:82:9d:5d:5e:5b:9e: 35:07:e6:33:52:ab:9b:0c:aa:1e:65:a7:04:45:43: f0:9f:59:cd:e9:5d:57:6f:63:4e:06:a4:1c:cc:f5: cb:a3:be:b3:90:01:92:fa:90:84:f1:98:6e:a9:d8: 3d:c2:e3:96:5a:0a:a0:af:cb:a3:a9:39:3c:53:71: 36:90:39:fb:f7:57:04:20:7a:e4:a5:70:89:87:e4: e8:40:31:59:f5:a4:af:2b:11:1c:36:cd:c6:29:92: 3d:28:a1:2c:0f:b0:06:7e:40:e7:83:15:38:e0:f8: b6:dc:8b:c2:63:1f:cb:60:84:c1:a6:75:f0:15:9f: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:23:53:70:7A:EE:5E:B1:E4:BD:A1:76:5B:E1:62:D7:0D:E3:F1 X509v3 Authority Key Identifier: keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:10:39:3a:fc:4f:7f:74:24:ed:24:db:bb:86:1b:85:5b:94: 0e:a6:3a:10:82:f7:05:bb:fa:43:31:3c:e8:d1:7e:98:5e:c1: 83:3a:98:21:55:73:a1:93:56:b4:84:d6:b0:bc:e7:09:5a:64: 34:b4:c4:e6:f9:76:b6:b6:88:6e:6e:e3:3d:79:27:5c:52:1f: 6b:a2:b7:3f:0e:e4:5c:2e:dc:c5:bc:64:ee:b0:7a:45:7a:17: 3c:33:c5:c2:6c:f8:82:64:aa:e6:aa:29:3f:f6:92:65:ac:5c: 6f:e3:8a:5c:6e:32:79:06:5a:55:e1:9e:9d:cd:a9:83:22:85: 3d:05:0c:ed:c2:20:b1:ef:3d:f2:1c:ba:06:a1:38:a4:62:3c: 76:1d:ca:56:d1:e9:4d:9d:f5:19:ef:92:06:c4:64:23:8e:4d: 86:33:4e:65:27:f0:ef:b3:69:a3:58:71:c6:43:f4:68:e6:d4: c6:fc:e1:78:21:10:a6:5b:ba:a2:ea:63:a3:49:50:e3:ec:26: e9:20:6e:76:65:af:2d:1a:c7:45:f2:01:99:f3:d8:62:60:c1: 1f:b9:e0:95:1d:b9:cc:77:cf:6b:9c:e1:4a:cb:d8:1f:dc:d9: 8d:97:f9:ac:f5:bf:0c:e9:36:32:7d:01:8c:e3:12:cb:91:61: 38:e9:f4:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7QIft7dm8OPhaGRNz0+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjUwYWYxNzI0NDRiNTIxMTZhN2E2N2Q3NGFhYzdkZjhh NTVlMWMwHhcNMjUxMjIxMDgwMDU1WhcNMjUxMjIyMDgwMDU1WjAzMTEwLwYDVQQD EygwNzJlMjM1MzcwN2FlZTVlYjFlNGJkYTE3NjViZTE2MmQ3MGRlM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z7w/t6cMKFkyzA5W3J52DA92xZW SVHvnj6i1HxI4btXYaloUfCb1dYlC5LVo85w7XMoVkUJ/qQRbwsoiGmaxoAY9cS+ LRPwMu2NYnvreUj31Eb1YMDCWfqk/u83J5F7jDxneGPmNNGiwlEWSJsY0vQWeyZa SwKcz5SMxdOClvSCnV1eW541B+YzUqubDKoeZacERUPwn1nN6V1Xb2NOBqQczPXL o76zkAGS+pCE8Zhuqdg9wuOWWgqgr8ujqTk8U3E2kDn791cEIHrkpXCJh+ToQDFZ 9aSvKxEcNs3GKZI9KKEsD7AGfkDngxU44Pi23IvCYx/LYITBpnXwFZ8+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcuI1Nweu5eseS9oXZb4WLXDePxMB8GA1UdIwQY MBaAFG1lCvFyREtSEWp6Z9dKrH34pV4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQt YjRhMGNiOGVkODIxLzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQtYjRhMGNiOGVkODIx LzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxA5OvxP f3Qk7STbu4YbhVuUDqY6EIL3Bbv6QzE86NF+mF7BgzqYIVVzoZNWtITWsLznCVpk NLTE5vl2traIbm7jPXknXFIfa6K3Pw7kXC7cxbxk7rB6RXoXPDPFwmz4gmSq5qop P/aSZaxcb+OKXG4yeQZaVeGenc2pgyKFPQUM7cIgse898hy6BqE4pGI8dh3KVtHp TZ31Ge+SBsRkI45NhjNOZSfw77Npo1hxxkP0aObUxvzheCEQplu6oupjo0lQ4+wm 6SBudmWvLRrHRfIBmfPYYmDBH7nglR25zHfPa5zhSsvYH9zZjZf5rPW/DOk2Mn0B jOMSy5FhOOn0kg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:16 2025 by rpki-client