This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft File: bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft (raw, json) Hash identifier: DRorTdHCWC5fOkucwAGmncBPWXEp6I3B4RFZZkORyH0= Subject key identifier: A3:76:A8:7E:2F:45:35:F6:82:F1:DC:92:C1:7D:83:58:D9:6F:5D:DB Authority key identifier: 6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 Certificate issuer: /CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Certificate serial: 019B27AD955F8760327AC0513123F7ED2A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft Manifest number: 0328 Signing time: Tue 16 Dec 2025 15:00:45 +0000 Manifest this update: Tue 16 Dec 2025 15:00:45 +0000 Manifest next update: Wed 17 Dec 2025 15:00:45 +0000 Files and hashes: 1: ZX73IV0uGk2ob4VktyJV9wBSBac.roa (hash: Z5WvoiItJu0epzg3OUDQ1qokvJ24J2oFtkaMgOd6bHY=) 2: bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl (hash: MDXpRQHRFTxbFAdXfYyfR15cXHu0K8wd35KwJDCTpPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:95:5f:87:60:32:7a:c0:51:31:23:f7:ed:2a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Validity Not Before: Dec 16 15:00:45 2025 GMT Not After : Dec 17 15:00:45 2025 GMT Subject: CN=a376a87e2f4535f682f1dc92c17d8358d96f5ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:f7:09:1b:c5:87:6a:4d:19:76:d5:bf:e0: ac:87:6c:86:03:07:5d:d5:8f:95:d3:74:fa:aa:97: 0d:ad:da:39:48:90:4b:ce:a4:35:c6:80:99:09:76: 02:b7:2e:82:2f:f9:20:04:10:76:81:dd:60:2d:cb: f0:34:9b:99:ed:e6:b0:51:27:ed:af:66:e9:ad:40: 40:85:06:eb:da:4c:23:a0:6b:38:44:d1:12:7c:f0: 17:1e:57:4b:45:6b:a7:07:e6:1a:06:44:9b:c0:0b: c9:e4:71:8c:63:76:ed:6e:a2:d7:d3:59:17:a1:66: 45:2e:1b:4d:f8:91:2c:48:6f:df:38:a9:6c:27:59: 23:3e:62:07:31:e8:8f:1b:90:3f:3c:32:ce:d6:9a: c2:a7:15:49:8a:6d:03:93:9b:bf:7a:5e:dd:40:d5: e0:d4:99:27:e7:d8:ce:0c:ad:95:00:2a:3b:13:5b: f4:2a:9b:e7:da:a5:77:8c:80:40:3b:6c:30:4f:ff: f9:26:20:56:a9:e4:4c:f2:f5:01:70:86:31:2f:84: 28:57:a9:2e:7d:df:ea:fc:c3:be:ee:a1:71:e7:b0: ad:dd:8f:9b:fc:7c:41:7f:66:da:a5:96:e6:ee:b6: 6f:2b:f0:ce:2c:02:56:ee:63:00:53:b9:df:c2:e1: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:76:A8:7E:2F:45:35:F6:82:F1:DC:92:C1:7D:83:58:D9:6F:5D:DB X509v3 Authority Key Identifier: keyid:6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9b:73:bc:6c:f4:3b:db:ce:5c:19:6d:3e:40:e1:ab:7b:44: 95:8a:2c:37:c2:bf:e5:1c:66:46:d3:00:3c:49:0c:7a:73:ea: ac:af:ee:58:37:ec:c5:6f:a7:98:e6:8c:e1:be:cf:b3:70:da: 9a:d8:f5:82:2e:3b:34:91:b3:6f:f9:10:c6:74:1d:be:7c:82: 60:8c:00:6d:44:10:bb:14:a2:a1:0e:83:c6:2e:a9:db:ed:92: e2:2f:a1:6d:97:55:fd:16:3a:81:52:ca:3a:99:52:de:92:38: e5:06:e1:30:f6:9e:a0:56:15:af:4a:32:dc:3e:78:da:ca:14: 1e:15:2c:45:7b:fa:64:ff:34:45:b1:4f:5d:d4:47:66:ce:80: 32:0c:42:95:e1:d9:98:e0:31:88:cb:46:50:60:a9:50:6e:8b: 98:2a:be:16:0a:bc:b4:01:17:88:32:13:7a:21:4e:bc:75:3f: 49:cc:07:bf:56:9d:95:f5:d7:13:f4:e7:36:5e:04:c8:1f:6e: ab:7f:00:b6:18:b4:b4:8e:b9:6c:d8:63:1e:dd:6e:56:a7:af: 14:3d:1d:ef:76:d2:b6:6e:49:14:f9:7d:28:81:5c:51:49:60: 0e:ec:4c:a9:6e:1f:fa:30:3d:ab:f8:5a:0a:73:52:55:dd:11: 04:57:d5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrZVfh2AyesBRMSP37SpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjRhODY3ZjQ1YzQ4ZjIwMjdiMDBiODNjNzc3OTZmYmJi ZTAzMjgwHhcNMjUxMjE2MTUwMDQ1WhcNMjUxMjE3MTUwMDQ1WjAzMTEwLwYDVQQD EyhhMzc2YTg3ZTJmNDUzNWY2ODJmMWRjOTJjMTdkODM1OGQ5NmY1ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIX3CRvFh2pNGXbVv+Csh2yGAwdd 1Y+V03T6qpcNrdo5SJBLzqQ1xoCZCXYCty6CL/kgBBB2gd1gLcvwNJuZ7eawUSft r2bprUBAhQbr2kwjoGs4RNESfPAXHldLRWunB+YaBkSbwAvJ5HGMY3btbqLX01kX oWZFLhtN+JEsSG/fOKlsJ1kjPmIHMeiPG5A/PDLO1prCpxVJim0Dk5u/el7dQNXg 1Jkn59jODK2VACo7E1v0Kpvn2qV3jIBAO2wwT//5JiBWqeRM8vUBcIYxL4QoV6ku fd/q/MO+7qFx57Ct3Y+b/HxBf2bapZbm7rZvK/DOLAJW7mMAU7nfwuFWWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN2qH4vRTX2gvHcksF9g1jZb13bMB8GA1UdIwQY MBaAFG1kqGf0XEjyAnsAuDx3eW+7vgMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUt YjA2MjNlYTdmYjAxLzEvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUtYjA2MjNlYTdmYjAx LzEvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbptzvGz0 O9vOXBltPkDhq3tElYosN8K/5RxmRtMAPEkMenPqrK/uWDfsxW+nmOaM4b7Ps3Da mtj1gi47NJGzb/kQxnQdvnyCYIwAbUQQuxSioQ6Dxi6p2+2S4i+hbZdV/RY6gVLK OplS3pI45QbhMPaeoFYVr0oy3D542soUHhUsRXv6ZP80RbFPXdRHZs6AMgxCleHZ mOAxiMtGUGCpUG6LmCq+Fgq8tAEXiDITeiFOvHU/ScwHv1adlfXXE/TnNl4EyB9u q38Athi0tI65bNhjHt1uVqevFD0d73bStm5JFPl9KIFcUUlgDuxMqW4f+jA9q/ha CnNSVd0RBFfVFA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:44:03 2025 by rpki-client