This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json) Hash identifier: iWU0XkF5ZEu0JHgujhYamGavpEAcNAs4skWX5Wfn1dM= Subject key identifier: 50:AF:15:A0:57:B8:D2:44:5B:C3:8E:A9:F6:3B:1A:50:54:26:93:35 Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Certificate serial: 019B3F7EF7C7892AC2106AA17846922367D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft Manifest number: 0980 Signing time: Sun 21 Dec 2025 06:00:44 +0000 Manifest this update: Sun 21 Dec 2025 06:00:44 +0000 Manifest next update: Mon 22 Dec 2025 06:00:44 +0000 Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=) 2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: sdQLs+LdPIBURxlkPkQY7yCv18Bb24V2r8nfqjLm7j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f7:c7:89:2a:c2:10:6a:a1:78:46:92:23:67:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Validity Not Before: Dec 21 06:00:44 2025 GMT Not After : Dec 22 06:00:44 2025 GMT Subject: CN=50af15a057b8d2445bc38ea9f63b1a5054269335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:6e:c9:ba:9a:de:3d:96:f3:fa:0b:dc:d0: 6b:9b:05:f3:a3:2a:4e:0b:75:29:2b:1e:38:64:07: 10:1d:d6:23:3e:08:a5:2a:28:54:71:c1:8e:e7:44: 7f:86:16:c0:a2:0a:1d:ff:7a:72:e0:14:d1:09:42: 25:33:96:f6:56:95:44:fe:d7:02:86:bf:3b:96:6b: cf:35:cb:f7:11:fa:fb:63:fd:f3:b4:96:9d:2e:34: 13:78:01:9d:b3:86:e5:88:bb:15:b0:99:93:db:fa: 2c:32:21:03:87:6f:c8:e1:0e:3e:7c:bb:77:3f:c7: de:92:13:f2:36:37:78:93:09:90:94:cf:99:31:f9: ae:4a:e2:f0:f4:d0:1e:d8:e3:20:5a:bd:9c:73:cb: 49:7f:46:f3:19:83:5f:bb:3c:67:e3:82:fe:c7:77: 87:2b:44:4f:43:fe:92:82:49:0d:a3:a4:82:a4:2f: c4:45:8d:0d:a2:d9:bc:69:14:fd:3f:a1:e5:aa:b1: 16:02:f5:93:dd:df:2d:ec:3a:76:22:98:73:5e:82: 50:2e:a2:ac:e8:74:5e:29:bd:d1:45:a9:a9:db:7b: 74:d5:da:98:d7:e8:1a:3c:ae:9d:8e:90:bd:94:68: fa:1e:72:3b:d2:47:6f:e8:ed:26:11:1f:47:9e:46: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:15:A0:57:B8:D2:44:5B:C3:8E:A9:F6:3B:1A:50:54:26:93:35 X509v3 Authority Key Identifier: keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:fe:80:3a:21:f8:50:2c:fc:b3:45:fe:b9:6f:e3:aa:f6:a4: c1:7a:ed:3e:3f:14:b0:c1:f6:80:2a:8e:94:5b:34:7d:47:f0: 3f:ae:81:d4:dd:dc:8d:b1:5b:c4:4b:65:76:2c:be:41:71:88: b3:b5:3b:41:65:d2:0c:1d:90:06:4e:ac:48:0c:80:82:e0:8a: cc:76:c7:01:47:8a:3a:82:87:0a:6d:77:4e:12:ae:d3:ec:71: 89:9c:78:1b:c9:4d:97:1d:b4:54:98:7c:08:ad:64:77:ab:db: e9:22:1b:f3:1b:3e:b3:dc:1a:d3:6f:00:61:8b:18:61:7c:5c: 2b:52:a7:ba:7a:14:7c:98:c8:81:0c:91:5b:61:c8:7b:9d:1d: 3a:3b:17:71:ba:dd:33:d2:0c:03:34:21:2c:ea:b0:94:ca:82: 5c:27:49:3c:18:ab:0e:3e:90:2c:99:ec:59:5b:d9:3a:4f:22: e2:e7:b5:25:9a:63:32:de:e7:7a:53:ee:36:2b:6c:70:bb:4b: ba:be:35:b1:ae:ef:19:58:cf:99:5e:eb:c4:44:66:1d:38:c0: 4d:b5:71:09:8d:bd:06:0e:d5:6d:f6:56:4e:74:cd:b7:a0:f6: dd:9e:5c:3e:db:62:b1:b6:bf:3d:32:ef:2c:d8:05:f9:92:f7: ae:10:0c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvfHiSrCEGqheEaSI2fWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl MWI4MjUwHhcNMjUxMjIxMDYwMDQ0WhcNMjUxMjIyMDYwMDQ0WjAzMTEwLwYDVQQD Eyg1MGFmMTVhMDU3YjhkMjQ0NWJjMzhlYTlmNjNiMWE1MDU0MjY5MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux9uybqa3j2W8/oL3NBrmwXzoypO C3UpKx44ZAcQHdYjPgilKihUccGO50R/hhbAogod/3py4BTRCUIlM5b2VpVE/tcC hr87lmvPNcv3Efr7Y/3ztJadLjQTeAGds4bliLsVsJmT2/osMiEDh2/I4Q4+fLt3 P8fekhPyNjd4kwmQlM+ZMfmuSuLw9NAe2OMgWr2cc8tJf0bzGYNfuzxn44L+x3eH K0RPQ/6SgkkNo6SCpC/ERY0Notm8aRT9P6HlqrEWAvWT3d8t7Dp2IphzXoJQLqKs 6HReKb3RRamp23t01dqY1+gaPK6djpC9lGj6HnI70kdv6O0mER9HnkZOZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCvFaBXuNJEW8OOqfY7GlBUJpM1MB8GA1UdIwQY MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt MGU1OWYyZWNiMTc1LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1 LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2/6AOiH4 UCz8s0X+uW/jqvakwXrtPj8UsMH2gCqOlFs0fUfwP66B1N3cjbFbxEtldiy+QXGI s7U7QWXSDB2QBk6sSAyAguCKzHbHAUeKOoKHCm13ThKu0+xxiZx4G8lNlx20VJh8 CK1kd6vb6SIb8xs+s9wa028AYYsYYXxcK1KnunoUfJjIgQyRW2HIe50dOjsXcbrd M9IMAzQhLOqwlMqCXCdJPBirDj6QLJnsWVvZOk8i4ue1JZpjMt7nelPuNitscLtL ur41sa7vGVjPmV7rxERmHTjATbVxCY29Bg7VbfZWTnTNt6D23Z5cPttisba/PTLv LNgF+ZL3rhAMcw== -----END CERTIFICATE-----Generated at Sun Dec 21 16:00:40 2025 by rpki-client