This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: IjYQ/yet0ICkzqdhGgZAa1KRm4QESkHXgP9P2mYDmWk= Subject key identifier: 5D:55:38:20:C5:56:FD:D3:18:2F:9A:C6:EE:DF:E6:2F:F6:9C:DA:3D Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B39EB6F9A63EA3ABD9AE4A010B9F36284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 12ED Signing time: Sat 20 Dec 2025 04:01:29 +0000 Manifest this update: Sat 20 Dec 2025 04:01:29 +0000 Manifest next update: Sun 21 Dec 2025 04:01:29 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 6: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: lf51PSfni72fB9Ig13shXKecGD1NE6mojsjfFJLsFyw=) 8: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 9: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 10: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 11: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 12: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 13: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 14: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (hash: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:6f:9a:63:ea:3a:bd:9a:e4:a0:10:b9:f3:62:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Dec 20 04:01:29 2025 GMT Not After : Dec 21 04:01:29 2025 GMT Subject: CN=5d553820c556fdd3182f9ac6eedfe62ff69cda3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:b7:f7:0e:37:f7:8a:df:9f:f9:32:cf:db: c1:50:0d:11:07:fa:7b:e6:8c:6a:eb:ed:59:ce:bb: 51:14:2f:e9:94:25:ed:79:5a:f5:81:47:df:85:9a: 37:f5:8b:e0:74:d6:ba:7e:f3:9d:d4:8e:bd:f7:4a: 50:1f:3f:62:5e:76:e4:6b:f7:b0:5c:ab:ee:c9:13: 0a:5d:f8:2e:20:46:22:44:66:20:ec:a4:8b:08:36: f3:bc:9d:dd:09:ba:f0:8b:f4:b4:6a:10:6a:11:a3: 57:33:cf:fe:2c:57:d0:f7:ee:23:c6:bc:e7:49:2d: 1f:96:4a:c6:8d:e0:c8:e0:f6:ec:bc:56:04:1e:41: 14:7d:79:12:2a:0e:30:22:6d:c1:68:9a:af:4a:b0: fb:7e:6d:84:24:6d:b4:2c:d7:31:01:0e:81:9b:f2: 51:4b:c9:26:df:76:f6:21:5f:8a:9a:65:ea:48:60: bf:16:73:9d:09:58:c2:8b:e9:1d:f9:b5:be:39:97: e1:46:cc:88:3c:a0:29:2b:53:54:8d:a5:14:ac:01: 84:a6:b2:ec:04:34:2d:dd:26:66:28:0a:7b:24:9d: 38:00:6b:37:3f:b4:b9:2b:40:77:91:2d:0b:5c:35: d0:09:a6:c2:eb:41:37:64:d8:0f:69:79:c6:c6:67: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:55:38:20:C5:56:FD:D3:18:2F:9A:C6:EE:DF:E6:2F:F6:9C:DA:3D X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bc:0c:1b:1d:9b:9b:09:a2:3c:a8:fd:a6:49:33:46:7d:77: f5:45:b2:87:63:44:36:db:02:a0:31:ae:96:4d:86:8b:ba:57: c2:65:00:50:16:40:55:cc:b5:94:29:50:56:50:ca:e8:56:41: 18:ae:9a:af:2c:a8:c0:c6:a3:74:29:ab:8d:b5:4a:11:c5:51: 59:9f:57:70:bf:b3:d1:61:cd:8d:dc:33:88:60:4b:e6:df:16: 83:5a:4e:ff:e7:b1:36:f8:48:db:81:cc:0f:32:e4:d4:96:3f: a8:a4:83:c0:2b:a1:af:f6:6c:c5:c3:b7:96:12:c4:3f:6a:75: 21:31:3f:78:9c:6a:2a:1d:43:9b:e0:33:1e:88:d3:e5:7a:1c: 07:42:16:4f:da:ce:76:ba:a7:7e:e3:9f:5c:d1:ea:1b:e7:f1: f6:db:45:c0:a5:1d:9b:15:4c:64:14:db:20:a0:a7:8a:20:49: 84:9d:df:49:72:d8:fc:8d:d6:b5:43:60:77:7b:93:fb:59:85: f8:6f:ae:ad:c2:9b:9d:a1:6d:10:53:b1:b5:1a:1f:35:03:a4: 51:00:56:a0:e2:c3:d1:26:85:d4:07:ec:bf:a6:d5:09:87:55: 5d:f1:4e:d9:c2:77:39:2b:c8:75:f0:93:eb:40:62:f2:b5:e4: 20:61:22:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562+aY+o6vZrkoBC582KEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUxMjIwMDQwMTI5WhcNMjUxMjIxMDQwMTI5WjAzMTEwLwYDVQQD Eyg1ZDU1MzgyMGM1NTZmZGQzMTgyZjlhYzZlZWRmZTYyZmY2OWNkYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6+39w4394rfn/kyz9vBUA0RB/p7 5oxq6+1ZzrtRFC/plCXteVr1gUffhZo39YvgdNa6fvOd1I6990pQHz9iXnbka/ew XKvuyRMKXfguIEYiRGYg7KSLCDbzvJ3dCbrwi/S0ahBqEaNXM8/+LFfQ9+4jxrzn SS0flkrGjeDI4PbsvFYEHkEUfXkSKg4wIm3BaJqvSrD7fm2EJG20LNcxAQ6Bm/JR S8km33b2IV+KmmXqSGC/FnOdCVjCi+kd+bW+OZfhRsyIPKApK1NUjaUUrAGEprLs BDQt3SZmKAp7JJ04AGs3P7S5K0B3kS0LXDXQCabC60E3ZNgPaXnGxmfEFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1VOCDFVv3TGC+axu7f5i/2nNo9MB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLwMGx2b mwmiPKj9pkkzRn139UWyh2NENtsCoDGulk2Gi7pXwmUAUBZAVcy1lClQVlDK6FZB GK6aryyowMajdCmrjbVKEcVRWZ9XcL+z0WHNjdwziGBL5t8Wg1pO/+exNvhI24HM DzLk1JY/qKSDwCuhr/ZsxcO3lhLEP2p1ITE/eJxqKh1Dm+AzHojT5XocB0IWT9rO drqnfuOfXNHqG+fx9ttFwKUdmxVMZBTbIKCniiBJhJ3fSXLY/I3WtUNgd3uT+1mF +G+urcKbnaFtEFOxtRofNQOkUQBWoOLD0SaF1Afsv6bVCYdVXfFO2cJ3OSvIdfCT 60Bi8rXkIGEiiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:14 2025 by rpki-client