This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json) Hash identifier: tkT+BCQzIrEY4j1WNJUdXnCt8vtdEisitNTBk3dIEOA= Subject key identifier: BC:41:ED:96:00:EA:1B:0B:D8:BC:0C:7C:11:8E:74:4F:F6:9F:81:63 Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Certificate serial: 019B3DC819D60A66DAD895FD7376A4B4D448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft Manifest number: B2 Signing time: Sat 20 Dec 2025 22:01:22 +0000 Manifest this update: Sat 20 Dec 2025 22:01:22 +0000 Manifest next update: Sun 21 Dec 2025 22:01:22 +0000 Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=) 2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: F9kiAK45t5alQpd1I8dDOjKTc8SpX3utXK4yNnvuFLg=) 3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:19:d6:0a:66:da:d8:95:fd:73:76:a4:b4:d4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Validity Not Before: Dec 20 22:01:22 2025 GMT Not After : Dec 21 22:01:22 2025 GMT Subject: CN=bc41ed9600ea1b0bd8bc0c7c118e744ff69f8163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:a6:3b:f5:94:29:3b:d1:92:b7:35:78:ca: 95:63:7d:87:72:90:5a:3c:fc:95:70:51:c0:5a:5e: 5d:98:dd:72:f4:c4:42:2b:1b:a3:4e:64:60:f4:cd: 72:80:ed:5d:f4:61:48:9c:a9:78:05:f9:38:22:09: 3e:29:77:e6:25:43:8e:6f:c5:ea:7a:13:39:de:a1: a4:1c:b9:6f:92:b4:39:99:83:cc:e1:a4:c8:46:35: c6:63:a5:94:27:87:93:20:55:55:47:94:3a:c0:95: 3f:d1:cc:a9:1d:04:a6:99:93:0b:7e:05:59:c0:3e: 4e:f5:9c:43:30:3e:40:eb:96:91:07:80:e8:31:94: f3:03:87:32:66:60:3c:49:24:cb:e2:f6:99:b0:71: a2:b5:1b:47:f0:61:ee:bf:34:92:df:47:22:a3:ad: e7:a3:dd:ff:6e:ec:96:91:72:91:39:d6:1e:2d:c2: 59:15:29:df:82:5b:b4:c5:87:52:e3:dc:47:84:94: 57:f7:0a:bc:e2:a2:6c:7a:6b:5d:84:4f:fb:e9:9e: e1:41:70:90:27:af:2b:63:f7:7c:0f:c8:5f:84:c6: 7c:7c:fc:b1:6a:bb:54:07:55:64:7a:71:b4:9c:2a: cc:83:f8:0b:4e:c8:ad:bc:9e:71:ee:9e:1d:62:3a: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:41:ED:96:00:EA:1B:0B:D8:BC:0C:7C:11:8E:74:4F:F6:9F:81:63 X509v3 Authority Key Identifier: keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:e5:5a:df:9e:47:09:91:f2:19:18:f4:66:1e:83:39:6d: d2:f3:2f:2b:ae:04:2e:76:66:2d:84:e9:62:20:7c:f9:32:6e: 45:ae:a4:ab:78:64:2a:57:cf:c7:57:1f:c3:b9:30:4c:50:ce: ea:5a:e2:9f:3e:2d:9f:25:62:6e:4c:d3:c7:e8:75:94:a8:37: 81:9a:99:16:35:06:be:8b:c3:66:ca:f5:0c:5c:d6:83:10:7e: 8e:ef:2b:1c:43:41:71:60:d4:df:42:93:9a:44:39:50:6d:f2: 88:b5:4a:a5:d1:3b:cb:d7:d0:15:2a:40:e0:57:26:df:bb:a0: 29:0d:61:7e:e7:e6:85:aa:58:c0:3a:19:81:19:4d:3f:f4:b1: 20:57:eb:e9:11:e9:6d:c5:22:fe:04:dd:3b:d6:42:0d:06:7d: 20:8b:cf:90:a6:bb:e2:81:65:7f:b9:d1:a1:c7:4b:e2:50:c7: 77:36:5d:d0:09:90:2c:f9:6c:70:9d:b3:5d:e9:f4:a1:5d:46: 4b:a7:6c:c5:47:74:98:7c:a3:36:24:6f:93:96:10:a6:19:43: 4e:05:31:82:05:af:04:93:10:b6:96:04:33:65:a5:0a:0d:ea: 2f:46:34:49:cf:ca:c5:0c:f7:88:42:bc:5f:7c:51:14:41:c8: 94:ef:e0:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBnWCmba2JX9c3aktNRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNkMjI0NzhlYzg2Yjg1NDRkZmI5OGFkZGVhYzIyNmY4 ZjA3ZTAwHhcNMjUxMjIwMjIwMTIyWhcNMjUxMjIxMjIwMTIyWjAzMTEwLwYDVQQD EyhiYzQxZWQ5NjAwZWExYjBiZDhiYzBjN2MxMThlNzQ0ZmY2OWY4MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA192mO/WUKTvRkrc1eMqVY32HcpBa PPyVcFHAWl5dmN1y9MRCKxujTmRg9M1ygO1d9GFInKl4Bfk4Igk+KXfmJUOOb8Xq ehM53qGkHLlvkrQ5mYPM4aTIRjXGY6WUJ4eTIFVVR5Q6wJU/0cypHQSmmZMLfgVZ wD5O9ZxDMD5A65aRB4DoMZTzA4cyZmA8SSTL4vaZsHGitRtH8GHuvzSS30cio63n o93/buyWkXKROdYeLcJZFSnfglu0xYdS49xHhJRX9wq84qJsemtdhE/76Z7hQXCQ J68rY/d8D8hfhMZ8fPyxartUB1VkenG0nCrMg/gLTsitvJ5x7p4dYjquGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxB7ZYA6hsL2LwMfBGOdE/2n4FjMB8GA1UdIwQY MBaAFGwD0iR47Ia4VE37mK3erCJvjwfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTIt ZWI2ZWU1MzU2NjEzLzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTItZWI2ZWU1MzU2NjEz LzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRflWt+e RwmR8hkY9GYegzlt0vMvK64ELnZmLYTpYiB8+TJuRa6kq3hkKlfPx1cfw7kwTFDO 6lrinz4tnyVibkzTx+h1lKg3gZqZFjUGvovDZsr1DFzWgxB+ju8rHENBcWDU30KT mkQ5UG3yiLVKpdE7y9fQFSpA4Fcm37ugKQ1hfufmhapYwDoZgRlNP/SxIFfr6RHp bcUi/gTdO9ZCDQZ9IIvPkKa74oFlf7nRocdL4lDHdzZd0AmQLPlscJ2zXen0oV1G S6dsxUd0mHyjNiRvk5YQphlDTgUxggWvBJMQtpYEM2WlCg3qL0Y0Sc/KxQz3iEK8 X3xRFEHIlO/gqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:37 2025 by rpki-client