This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json) Hash identifier: gwfzyuGTra48n/qDRa21NPkrw+5q38DmDbLpvREjjfE= Subject key identifier: B8:4F:32:DC:7D:60:A8:60:9D:37:08:54:A3:5B:6F:AC:50:DB:74:6B Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af Certificate serial: 019B5185465E26D7A21B6809735D446D0D4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 18:00:47 +0000 Manifest this update: Wed 24 Dec 2025 18:00:47 +0000 Manifest next update: Thu 25 Dec 2025 18:00:47 +0000 Files and hashes: 1: OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa (hash: zJFIUz1mYifZofZ0Na7vRc0V1qQdfg8lAP69hFan3Gw=) 2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: W0AWjKDU3q7WSLOmdmi2HKfynmiTSj1K1r7lgIJnk2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:46:5e:26:d7:a2:1b:68:09:73:5d:44:6d:0d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af Validity Not Before: Dec 24 18:00:47 2025 GMT Not After : Dec 25 18:00:47 2025 GMT Subject: CN=b84f32dc7d60a8609d370854a35b6fac50db746b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:b2:4f:b8:3d:44:42:2c:fd:ce:11:de:d6: 70:33:29:df:52:d6:92:19:4e:92:b9:e3:db:fd:a3: 85:3c:24:20:b7:a9:76:63:d1:ab:5c:9b:ad:f4:00: d1:ca:e2:30:e3:9e:a0:f9:d4:66:57:20:8a:75:0f: c4:a0:78:46:f6:8c:42:7c:dd:d0:b5:82:93:38:b5: 56:2c:d0:a9:e2:36:c6:e8:32:8c:eb:a0:c1:55:a1: 30:5c:61:bc:36:56:a8:ed:6e:b5:f1:04:ab:e0:b9: 13:e7:7c:10:38:bf:ad:31:c1:ba:7c:bf:d7:95:ef: e2:6f:56:07:82:46:b8:01:d5:ad:e9:85:82:02:f8: da:20:89:58:01:52:a1:21:6d:48:4b:ad:01:dc:97: d5:01:69:c2:e4:b8:e8:68:d5:9f:3c:66:94:e2:de: 0e:8b:13:20:a7:e0:1c:8b:3f:be:58:3a:5e:90:d1: b2:2a:b1:7c:06:f8:6c:69:c1:6b:0d:62:27:9e:bf: f4:5a:4c:bb:58:02:c4:eb:87:5c:dc:2e:10:b8:12: 17:fd:94:f0:3c:31:84:91:6e:d9:86:cc:80:91:12: 1b:d0:e3:50:09:f3:4f:1a:d8:82:74:69:8a:4d:80: 28:ef:f6:26:5e:3b:b7:50:7f:bc:d9:40:19:8e:4f: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4F:32:DC:7D:60:A8:60:9D:37:08:54:A3:5B:6F:AC:50:DB:74:6B X509v3 Authority Key Identifier: keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cd:d2:2d:0b:7b:4e:77:06:43:c4:de:d1:4d:89:e2:13:c1: 4e:0e:eb:d8:0f:80:a0:21:5a:7e:97:83:38:3c:9f:eb:b0:3c: 91:bb:af:3e:ff:13:1d:72:91:80:c2:20:51:59:99:a4:97:e2: e8:cd:f0:fc:51:04:ba:0e:9a:cc:33:d9:07:62:d3:38:c5:0c: d3:38:97:c8:15:f3:56:ba:66:75:a5:f0:6a:17:ad:5a:c6:61: a3:1c:f4:3f:17:13:d1:bb:a0:67:ce:8a:d5:26:b6:32:89:be: 05:6f:6b:35:a7:3c:4e:25:91:36:71:06:ef:9d:da:4a:91:0c: 1c:e7:da:d1:be:87:64:c3:53:b5:45:c2:e4:fc:ef:5e:5b:65: 52:ea:86:00:76:cc:16:2e:b9:77:c4:83:13:51:c7:b6:5f:43: 39:13:94:23:af:7c:dc:a8:bf:53:aa:f7:4b:53:06:03:5f:01: ba:ff:21:ad:85:0c:fc:2e:95:6a:d8:92:b9:65:f2:33:17:04: 9c:53:de:21:8e:7c:2f:f3:64:0f:aa:1d:62:8d:92:b9:96:68: e1:95:49:8c:44:3a:24:5d:9a:44:10:7f:fa:51:18:ae:46:f9: 65:7f:cf:bb:03:15:83:85:b3:d0:33:12:cf:b8:2b:63:f4:ca: 49:c2:7f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhUZeJteiG2gJc11EbQ1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj MjM4YWYwHhcNMjUxMjI0MTgwMDQ3WhcNMjUxMjI1MTgwMDQ3WjAzMTEwLwYDVQQD EyhiODRmMzJkYzdkNjBhODYwOWQzNzA4NTRhMzViNmZhYzUwZGI3NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD6yT7g9REIs/c4R3tZwMynfUtaS GU6SuePb/aOFPCQgt6l2Y9GrXJut9ADRyuIw456g+dRmVyCKdQ/EoHhG9oxCfN3Q tYKTOLVWLNCp4jbG6DKM66DBVaEwXGG8Nlao7W618QSr4LkT53wQOL+tMcG6fL/X le/ib1YHgka4AdWt6YWCAvjaIIlYAVKhIW1IS60B3JfVAWnC5LjoaNWfPGaU4t4O ixMgp+Aciz++WDpekNGyKrF8BvhsacFrDWInnr/0Wky7WALE64dc3C4QuBIX/ZTw PDGEkW7ZhsyAkRIb0ONQCfNPGtiCdGmKTYAo7/YmXju3UH+82UAZjk+XuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhPMtx9YKhgnTcIVKNbb6xQ23RrMB8GA1UdIwQY MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs3SLQt7 TncGQ8Te0U2J4hPBTg7r2A+AoCFafpeDODyf67A8kbuvPv8THXKRgMIgUVmZpJfi 6M3w/FEEug6azDPZB2LTOMUM0ziXyBXzVrpmdaXwahetWsZhoxz0PxcT0bugZ86K 1Sa2Mom+BW9rNac8TiWRNnEG753aSpEMHOfa0b6HZMNTtUXC5PzvXltlUuqGAHbM Fi65d8SDE1HHtl9DOROUI6983Ki/U6r3S1MGA18Buv8hrYUM/C6VatiSuWXyMxcE nFPeIY58L/NkD6odYo2SuZZo4ZVJjEQ6JF2aRBB/+lEYrkb5ZX/PuwMVg4Wz0DMS z7grY/TKScJ/Wg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:03 2025 by rpki-client