This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json) Hash identifier: 0XnMTyGMJLKeBtEcFZQkoUS+FprRWW67R8eCmGh1gII= Subject key identifier: 0F:CB:94:2D:18:CB:C1:09:34:9C:25:59:B0:2D:DF:5B:A8:EC:D7:BE Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Certificate serial: 019B4B150ED172E77FFC404EB2F7D76B94BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft Manifest number: 0E21 Signing time: Tue 23 Dec 2025 12:00:29 +0000 Manifest this update: Tue 23 Dec 2025 12:00:29 +0000 Manifest next update: Wed 24 Dec 2025 12:00:29 +0000 Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=) 2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: WKLBwFCpp1KswHwQbUerQlBkGFAM19WMULiLpiBvTb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:0e:d1:72:e7:7f:fc:40:4e:b2:f7:d7:6b:94:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Validity Not Before: Dec 23 12:00:29 2025 GMT Not After : Dec 24 12:00:29 2025 GMT Subject: CN=0fcb942d18cbc109349c2559b02ddf5ba8ecd7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:e7:25:d2:a1:1f:4d:6a:fb:c5:97:82:de: a1:82:5d:bf:a0:05:fa:24:53:1c:67:c6:24:f8:c7: 72:ce:66:b9:21:10:15:56:03:ef:79:72:24:00:de: a8:c7:f7:c0:3d:21:6a:b4:85:4c:0b:1b:de:63:7d: a9:d4:f9:ad:ae:97:96:ac:1b:d3:77:9b:08:0f:03: 64:e1:4c:f9:8f:bd:ed:b9:62:3d:de:75:45:a9:f7: 34:48:09:68:44:8a:9f:3b:c0:2c:a5:cf:0c:aa:35: c3:db:b8:8d:b0:a6:04:21:bc:66:d0:ab:cd:8f:24: 15:7d:0f:79:dd:50:c9:ba:81:bd:b2:56:55:29:33: 61:f5:68:1e:cb:7e:63:e4:96:4c:a9:32:5c:dd:32: 76:bd:73:b6:0a:25:49:b8:14:34:42:3d:4d:40:36: 18:2b:17:38:d7:96:36:77:e4:8c:76:c5:d5:2f:2c: c6:f3:fe:d2:fd:b8:5c:fe:49:35:73:44:f2:8a:f0: 04:ac:5e:68:93:86:1a:f4:7d:67:27:31:87:ce:78: d5:80:9e:d4:0e:94:c9:82:5d:ed:dd:db:a3:bb:a4: 57:10:44:ad:fe:4c:7e:94:39:1b:89:22:23:78:b4: 70:c4:80:90:76:86:26:da:0e:fc:ca:07:f0:a2:01: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:94:2D:18:CB:C1:09:34:9C:25:59:B0:2D:DF:5B:A8:EC:D7:BE X509v3 Authority Key Identifier: keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d2:f6:48:5f:03:7c:4a:27:67:7b:e6:33:ac:f1:19:60:1b: e5:ed:0f:fc:14:f8:53:d5:36:10:07:dd:63:94:89:44:0d:67: 42:a9:1e:84:a8:59:37:fe:76:ae:79:82:58:ca:51:91:3f:cd: 5b:48:5b:3d:00:b1:67:41:84:ab:75:85:eb:0e:6c:6f:db:77: ff:2e:fd:98:37:69:28:76:03:5b:e8:81:34:75:25:73:b6:b1: ac:26:97:86:5d:16:9c:48:b3:18:85:56:ae:42:b4:fa:5b:a1: 3d:63:f7:42:be:ba:a2:b0:d2:6a:34:45:d2:ab:9f:8b:31:e3: 52:ec:15:25:cd:e4:82:49:b2:c3:c0:18:18:0d:cc:18:92:13: 88:10:82:27:10:39:f2:63:d0:14:96:fc:f3:81:4f:7d:14:03: 16:5c:a1:7d:bd:8a:98:44:ce:d0:e1:45:c7:1b:f4:0b:fa:d0: 87:20:ab:f8:8e:0d:44:57:b3:c7:23:0e:4c:e6:c1:80:6f:3d: 22:19:26:ee:00:1d:1b:c7:2c:cf:c9:a7:45:2f:60:01:1a:75: b5:3e:a0:02:60:c0:56:eb:be:62:95:11:42:a7:cd:47:53:66: e4:1e:05:d4:5e:9f:92:44:bb:27:ff:a4:29:bd:38:dd:b5:ca: d3:24:1a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFQ7Rcud//EBOsvfXa5S/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOWIzZTE5ZmQxZjQzMGY1MTQ1ZDZkYjkyNDFhNTA1N2Vk OTZjYjMwHhcNMjUxMjIzMTIwMDI5WhcNMjUxMjI0MTIwMDI5WjAzMTEwLwYDVQQD EygwZmNiOTQyZDE4Y2JjMTA5MzQ5YzI1NTliMDJkZGY1YmE4ZWNkN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqybnJdKhH01q+8WXgt6hgl2/oAX6 JFMcZ8Yk+Mdyzma5IRAVVgPveXIkAN6ox/fAPSFqtIVMCxveY32p1PmtrpeWrBvT d5sIDwNk4Uz5j73tuWI93nVFqfc0SAloRIqfO8Aspc8MqjXD27iNsKYEIbxm0KvN jyQVfQ953VDJuoG9slZVKTNh9Wgey35j5JZMqTJc3TJ2vXO2CiVJuBQ0Qj1NQDYY Kxc415Y2d+SMdsXVLyzG8/7S/bhc/kk1c0TyivAErF5ok4Ya9H1nJzGHznjVgJ7U DpTJgl3t3duju6RXEESt/kx+lDkbiSIjeLRwxICQdoYm2g78ygfwogGGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/LlC0Yy8EJNJwlWbAt31uo7Ne+MB8GA1UdIwQY MBaAFGybPhn9H0MPUUXW25JBpQV+2WyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgt MGJhYTc3NzhhY2U3LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgtMGJhYTc3NzhhY2U3 LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatL2SF8D fEonZ3vmM6zxGWAb5e0P/BT4U9U2EAfdY5SJRA1nQqkehKhZN/52rnmCWMpRkT/N W0hbPQCxZ0GEq3WF6w5sb9t3/y79mDdpKHYDW+iBNHUlc7axrCaXhl0WnEizGIVW rkK0+luhPWP3Qr66orDSajRF0qufizHjUuwVJc3kgkmyw8AYGA3MGJITiBCCJxA5 8mPQFJb884FPfRQDFlyhfb2KmETO0OFFxxv0C/rQhyCr+I4NRFezxyMOTObBgG89 Ihkm7gAdG8csz8mnRS9gARp1tT6gAmDAVuu+YpURQqfNR1Nm5B4F1F6fkkS7J/+k Kb043bXK0yQa1A== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:52 2025 by rpki-client