This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json) Hash identifier: SMe0sZkBSQUpiUWmiS4h1fJHLpp80fBYrorcVcnIon8= Subject key identifier: 96:0B:86:0F:61:0A:D1:EC:75:06:5A:7E:25:39:2E:05:33:7C:24:FF Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70 Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70 Certificate serial: 019B3D5A11B032A447B0229D3D7D248B03D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft Manifest number: 0539 Signing time: Sat 20 Dec 2025 20:01:11 +0000 Manifest this update: Sat 20 Dec 2025 20:01:11 +0000 Manifest next update: Sun 21 Dec 2025 20:01:11 +0000 Files and hashes: 1: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: R82T+KjzmDDnDDzyVnsVrdHCzK8JK4usdCLEX54kxPY=) 2: r5LfqFNzBSvkVNYj6vVDPex2eII.roa (hash: zD3Y+yhvhdTCP2LNWWBpR2SBF00RvRC4BFmgCTYqEsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:11:b0:32:a4:47:b0:22:9d:3d:7d:24:8b:03:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70 Validity Not Before: Dec 20 20:01:11 2025 GMT Not After : Dec 21 20:01:11 2025 GMT Subject: CN=960b860f610ad1ec75065a7e25392e05337c24ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fe:ee:92:c1:b5:09:7e:be:bc:30:57:2c:f1: 6d:d7:3f:9b:8e:56:00:e0:ae:b2:f5:de:95:50:e4: 81:0d:7b:2d:96:da:99:02:de:ed:50:63:7e:5a:18: 97:6d:39:c0:23:de:00:5f:ca:fc:83:54:37:84:ce: f2:c2:2d:86:82:14:92:32:b0:af:86:c8:7e:ea:8b: 71:29:aa:a5:16:9c:7b:32:2b:d2:b6:09:11:a3:d2: 57:0b:16:47:9d:79:e5:bf:23:5f:16:4c:a8:80:69: b1:4b:e3:4c:60:fc:55:77:06:a9:c0:28:dd:d7:fb: 50:9b:da:06:32:1d:5f:8e:7b:6c:d8:8d:87:d4:f2: f2:c9:de:db:3a:d9:7f:62:37:64:31:87:b4:65:69: 48:35:f3:da:4b:95:7d:b3:54:82:2d:69:8e:4b:3a: 90:e0:8c:a6:34:9d:49:be:36:d3:6a:65:c9:43:50: 67:42:ae:d8:85:58:0c:bb:54:62:85:20:81:18:81: bb:12:e4:8d:4c:13:7a:0c:f5:d7:bf:45:b4:db:e2: b6:ee:90:b1:c2:62:dc:84:fd:09:f0:d2:5b:41:2e: 73:07:10:3f:c7:08:65:21:26:8f:17:e6:a2:47:a3: c3:c1:97:db:5a:c4:85:96:c9:5b:72:b1:54:f3:d1: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:86:0F:61:0A:D1:EC:75:06:5A:7E:25:39:2E:05:33:7C:24:FF X509v3 Authority Key Identifier: keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:be:3a:45:4f:d0:62:58:2c:40:df:6c:b1:e9:4a:01:8c:16: fd:d0:55:62:4a:a7:9e:ef:b4:1c:71:28:0c:c9:9e:ec:f0:d8: 7f:fa:96:78:7f:f3:ad:cd:f3:35:3f:22:2a:df:3f:19:44:5f: ea:d2:77:ee:d1:a0:64:39:8f:41:fc:da:70:0d:d3:dd:cd:8b: 66:48:fc:02:2f:94:7d:3f:99:4e:4d:5d:ef:6d:a4:34:b4:02: 17:b2:b7:2d:8a:12:ed:d9:d8:a6:4f:ec:ec:4d:dd:cd:c3:cb: 29:a0:a6:4a:39:29:de:c5:66:61:e7:a0:f9:1b:f7:9a:17:0d: 02:a2:5a:52:95:49:89:e3:76:b8:15:79:f9:43:48:af:7c:b1: 99:45:42:6c:bf:03:09:c6:00:87:96:25:cc:dc:53:90:3f:ea: 46:8c:8d:b2:9d:b3:7b:95:f3:2f:6a:be:95:e6:61:27:89:69: 67:2a:9e:7a:57:a0:8a:aa:82:c3:43:9f:a4:b5:8e:36:14:c9: ab:f0:22:26:7d:43:7c:2b:ed:f3:bd:ef:73:30:41:39:1c:bf: ae:60:8e:d3:7e:1b:11:48:62:78:a7:08:7e:53:f2:5a:37:41: 91:f3:b0:c2:c2:4e:21:e4:6c:c7:6e:6e:84:d4:58:24:cc:bd: f9:e8:53:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhGwMqRHsCKdPX0kiwPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDQyOGY3ZjE3YjE5YzE1MDY4Y2FiOTM5ZDM3Nzk0MGU4 ZDRjNzAwHhcNMjUxMjIwMjAwMTExWhcNMjUxMjIxMjAwMTExWjAzMTEwLwYDVQQD Eyg5NjBiODYwZjYxMGFkMWVjNzUwNjVhN2UyNTM5MmUwNTMzN2MyNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f7uksG1CX6+vDBXLPFt1z+bjlYA 4K6y9d6VUOSBDXstltqZAt7tUGN+WhiXbTnAI94AX8r8g1Q3hM7ywi2GghSSMrCv hsh+6otxKaqlFpx7MivStgkRo9JXCxZHnXnlvyNfFkyogGmxS+NMYPxVdwapwCjd 1/tQm9oGMh1fjnts2I2H1PLyyd7bOtl/YjdkMYe0ZWlINfPaS5V9s1SCLWmOSzqQ 4IymNJ1JvjbTamXJQ1BnQq7YhVgMu1RihSCBGIG7EuSNTBN6DPXXv0W02+K27pCx wmLchP0J8NJbQS5zBxA/xwhlISaPF+aiR6PDwZfbWsSFlslbcrFU89HvgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYLhg9hCtHsdQZafiU5LgUzfCT/MB8GA1UdIwQY MBaAFG5EKPfxexnBUGjKuTnTd5QOjUxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82Y2Y1ZjQtM2Q2MC00MWQ3LWFlMWEt Y2JjMzMxYmZjZGIyLzEvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82Y2Y1ZjQtM2Q2MC00MWQ3LWFlMWEtY2JjMzMxYmZjZGIy LzEvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr46RU/Q YlgsQN9sselKAYwW/dBVYkqnnu+0HHEoDMme7PDYf/qWeH/zrc3zNT8iKt8/GURf 6tJ37tGgZDmPQfzacA3T3c2LZkj8Ai+UfT+ZTk1d722kNLQCF7K3LYoS7dnYpk/s 7E3dzcPLKaCmSjkp3sVmYeeg+Rv3mhcNAqJaUpVJieN2uBV5+UNIr3yxmUVCbL8D CcYAh5YlzNxTkD/qRoyNsp2ze5XzL2q+leZhJ4lpZyqeelegiqqCw0OfpLWONhTJ q/AiJn1DfCvt873vczBBORy/rmCO034bEUhieKcIflPyWjdBkfOwwsJOIeRsx25u hNRYJMy9+ehTbA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:07 2025 by rpki-client