This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json) Hash identifier: ql0JUyVdquO3fzBG07fuXMh50ZMfmFddFHpJcr9Pp64= Subject key identifier: 24:10:15:65:E0:11:CC:F2:18:ED:B2:8B:9D:44:33:71:43:14:01:16 Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Certificate serial: 019B44DC76B68C417DD1457383500E2FBEF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft Manifest number: 0B99 Signing time: Mon 22 Dec 2025 07:00:57 +0000 Manifest this update: Mon 22 Dec 2025 07:00:57 +0000 Manifest next update: Tue 23 Dec 2025 07:00:57 +0000 Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: w4cE6xZmJJawnKa+FZnOqLpq2uMZBs3MPvZoBHfVx38=) 2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:76:b6:8c:41:7d:d1:45:73:83:50:0e:2f:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Validity Not Before: Dec 22 07:00:57 2025 GMT Not After : Dec 23 07:00:57 2025 GMT Subject: CN=24101565e011ccf218edb28b9d44337143140116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:84:91:40:81:73:3e:a4:99:de:12:d3:f8: 44:ab:36:29:5e:c7:cb:d2:dc:f1:01:c9:da:90:e6: 1a:3d:13:cf:66:2a:38:e9:4b:90:da:e9:b7:4b:d6: 9d:d7:b4:9e:11:49:e7:ef:65:3d:26:e1:ed:f8:46: 75:fa:91:a9:f1:c8:ab:8b:93:0c:c6:14:64:a9:83: ec:9f:95:06:5c:36:de:1b:23:0e:c6:d4:31:bc:8e: 89:d0:8a:ce:03:c7:b3:d6:e8:46:f4:6b:1e:fd:64: 6e:08:a9:42:f6:b5:ef:58:c0:3e:fd:72:83:b2:e7: 1f:5a:90:41:46:e2:c2:11:44:fd:2b:46:69:56:c8: fc:25:37:09:4d:92:66:e6:54:2e:48:d1:af:03:d1: cd:d2:33:06:6c:86:f6:82:c0:93:f8:32:87:61:4a: 82:d1:01:86:07:2c:d1:90:75:6a:1c:ca:3a:d4:e3: 64:c3:a0:3f:34:e1:69:a6:8b:8c:09:26:28:60:5b: 9e:f7:ba:56:93:b5:8a:59:b9:85:b5:9d:07:06:6d: 39:8a:1a:2e:45:cd:c2:47:91:c4:13:99:d0:3b:19: d8:55:46:ec:1b:1f:6a:30:fd:ac:ba:8e:d2:66:fa: 98:64:05:dd:df:3a:4b:5e:4e:75:5c:9a:5d:40:32: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:10:15:65:E0:11:CC:F2:18:ED:B2:8B:9D:44:33:71:43:14:01:16 X509v3 Authority Key Identifier: keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:78:b1:a4:65:31:b7:f7:df:91:f5:73:5d:24:cc:01:f7:52: f5:cd:2e:22:f6:3f:8e:be:4b:80:8b:72:6c:07:65:23:41:8e: 4c:57:8b:4c:bd:72:6d:7d:69:d2:54:c2:ca:5d:ad:64:2d:2e: fe:4b:12:05:40:d4:3d:ec:b1:95:1d:1f:58:fa:d3:0e:1a:0a: 2c:14:d9:99:3f:db:30:3a:35:52:05:6e:f9:bf:b9:0d:ac:73: 4c:74:7b:7e:55:30:dd:f9:84:d7:a7:c7:91:93:36:e2:23:11: c4:8e:4c:49:8b:8e:62:7e:e7:67:9e:c0:30:8e:dd:68:38:16: 03:3d:fd:54:47:e9:c7:ab:07:46:01:3a:fa:70:ca:41:2b:da: 06:98:cb:26:00:91:ee:ef:45:3d:2e:35:a8:47:1a:db:46:05: 0a:c3:a2:3e:a9:d1:29:75:50:1f:4e:f1:ee:13:fc:26:11:b4: 68:77:f1:cc:29:51:19:26:39:db:64:2d:3c:83:84:38:62:95: 03:85:b1:f9:4b:dd:2f:cf:16:de:7d:19:8d:11:81:dd:0c:96: fc:77:f4:6c:03:7e:20:44:8f:a3:6d:63:38:1f:f1:41:dc:d7: 30:17:7b:d3:35:9f:da:61:b8:73:3e:d5:27:fb:f1:b1:48:8d: ad:0a:59:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3Ha2jEF90UVzg1AOL77wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0 OWFhNmMwHhcNMjUxMjIyMDcwMDU3WhcNMjUxMjIzMDcwMDU3WjAzMTEwLwYDVQQD EygyNDEwMTU2NWUwMTFjY2YyMThlZGIyOGI5ZDQ0MzM3MTQzMTQwMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmEkUCBcz6kmd4S0/hEqzYpXsfL 0tzxAcnakOYaPRPPZio46UuQ2um3S9ad17SeEUnn72U9JuHt+EZ1+pGp8ciri5MM xhRkqYPsn5UGXDbeGyMOxtQxvI6J0IrOA8ez1uhG9Gse/WRuCKlC9rXvWMA+/XKD sucfWpBBRuLCEUT9K0ZpVsj8JTcJTZJm5lQuSNGvA9HN0jMGbIb2gsCT+DKHYUqC 0QGGByzRkHVqHMo61ONkw6A/NOFppouMCSYoYFue97pWk7WKWbmFtZ0HBm05ihou Rc3CR5HEE5nQOxnYVUbsGx9qMP2suo7SZvqYZAXd3zpLXk51XJpdQDLAJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQQFWXgEczyGO2yi51EM3FDFAEWMB8GA1UdIwQY MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnixpGUx t/ffkfVzXSTMAfdS9c0uIvY/jr5LgItybAdlI0GOTFeLTL1ybX1p0lTCyl2tZC0u /ksSBUDUPeyxlR0fWPrTDhoKLBTZmT/bMDo1UgVu+b+5DaxzTHR7flUw3fmE16fH kZM24iMRxI5MSYuOYn7nZ57AMI7daDgWAz39VEfpx6sHRgE6+nDKQSvaBpjLJgCR 7u9FPS41qEca20YFCsOiPqnRKXVQH07x7hP8JhG0aHfxzClRGSY522QtPIOEOGKV A4Wx+UvdL88W3n0ZjRGB3QyW/Hf0bAN+IESPo21jOB/xQdzXMBd70zWf2mG4cz7V J/vxsUiNrQpZaw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:42 2025 by rpki-client