This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json) Hash identifier: s2ZJJPxaVgVHroWuyBFNwEz0Q+pD97aWv1SHLdkrf2k= Subject key identifier: 80:4D:36:33:9F:39:EB:01:90:C9:E6:6F:3D:96:35:05:E3:41:09:12 Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Certificate serial: 019B6FC672947D2FF2E7C38FA8F616A72FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft Manifest number: 0999 Signing time: Tue 30 Dec 2025 15:00:34 +0000 Manifest this update: Tue 30 Dec 2025 15:00:34 +0000 Manifest next update: Wed 31 Dec 2025 15:00:34 +0000 Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=) 2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: Ww4qjL+7DBt1Wsl60rYsxRKNQGrLfPq/nYaeT//6HtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:72:94:7d:2f:f2:e7:c3:8f:a8:f6:16:a7:2f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Validity Not Before: Dec 30 15:00:34 2025 GMT Not After : Dec 31 15:00:34 2025 GMT Subject: CN=804d36339f39eb0190c9e66f3d963505e3410912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:ae:a0:46:83:6e:8c:c5:27:e3:38:33:03: 18:e3:b6:ef:13:f6:64:70:48:33:b5:aa:73:02:f1: 49:66:4e:a7:c1:83:fd:e0:36:67:13:04:c3:49:a3: 02:ea:6d:3e:fc:48:f9:f6:47:49:7d:75:d2:3d:ff: 70:1b:42:9b:35:b0:f8:34:cf:ef:b8:ed:04:a6:51: 0a:37:55:66:4e:20:09:9e:25:93:ad:c4:36:fc:f9: eb:ce:38:62:d3:72:14:d7:7b:2a:ba:b6:52:1a:4b: c4:27:04:ee:4c:8c:0f:e3:07:d0:f0:4f:e8:d0:56: b7:48:ec:29:ec:56:d4:77:70:55:44:f9:6e:e6:d5: 23:6a:7e:fe:f8:1a:00:b2:68:05:e1:11:51:94:24: ac:87:1d:6f:ab:b4:8d:3c:3b:b3:63:4f:1b:03:c1: 35:aa:27:5c:9d:c2:b1:f2:41:8b:f2:ea:ef:00:86: 61:e6:8c:bb:79:0c:d6:85:2c:1f:e0:53:7d:0b:bb: 49:db:1f:00:90:c6:d2:c2:f4:f9:6f:ba:c5:b2:db: 7a:6c:78:20:da:b2:84:5c:21:8f:33:de:96:c9:87: 7e:c3:ea:47:4e:6e:2e:63:d7:5e:ea:9b:a1:cf:95: 85:8c:08:43:dd:70:0a:b7:63:52:0d:df:97:61:72: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4D:36:33:9F:39:EB:01:90:C9:E6:6F:3D:96:35:05:E3:41:09:12 X509v3 Authority Key Identifier: keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9d:73:ab:9e:b6:be:a1:af:25:3e:df:2d:9a:6c:01:92:bf: 42:49:4e:8e:54:50:4d:bf:42:c9:32:0d:07:89:77:8d:fb:d8: 95:e4:a3:45:11:04:4c:3b:0c:5b:76:fb:67:97:41:e8:43:0f: 45:7b:7b:d8:45:f6:ea:ef:ab:69:c9:3e:f3:aa:70:16:e5:16: c3:d4:17:15:4e:ab:62:bb:b8:16:2e:f8:a2:41:71:31:2a:73: 0f:eb:a9:97:bf:86:bc:08:23:6a:b3:2a:30:b0:f2:c6:40:60: 4a:16:0a:0a:e7:c2:ff:bd:bd:12:96:06:0e:c4:ab:0a:ea:00: 3f:61:80:20:7a:cb:a0:95:d6:cb:7d:02:0a:2d:07:26:3e:f2: dc:37:a8:bf:3b:d1:d0:9b:07:70:f0:17:47:eb:79:8b:fa:5e: 33:42:19:fd:00:94:e9:cf:dc:38:9b:d1:22:0c:df:14:17:fe: 64:9a:20:3a:dd:8e:85:9c:d0:e8:1b:4e:bd:4b:0b:c1:52:49: c3:f8:0a:6b:a5:d0:ca:f6:a3:99:c8:bf:6a:b3:cb:da:fb:ae: 39:bb:2a:0e:b7:e1:74:91:53:5a:8a:61:30:bd:2a:1e:c8:6d: ec:fb:bf:1d:b9:c9:36:be:97:a6:bf:c2:f2:ba:0a:db:57:32: 5c:2d:e4:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxnKUfS/y58OPqPYWpy+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl MWI4MjUwHhcNMjUxMjMwMTUwMDM0WhcNMjUxMjMxMTUwMDM0WjAzMTEwLwYDVQQD Eyg4MDRkMzYzMzlmMzllYjAxOTBjOWU2NmYzZDk2MzUwNWUzNDEwOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNCuoEaDbozFJ+M4MwMY47bvE/Zk cEgztapzAvFJZk6nwYP94DZnEwTDSaMC6m0+/Ej59kdJfXXSPf9wG0KbNbD4NM/v uO0EplEKN1VmTiAJniWTrcQ2/Pnrzjhi03IU13squrZSGkvEJwTuTIwP4wfQ8E/o 0Fa3SOwp7FbUd3BVRPlu5tUjan7++BoAsmgF4RFRlCSshx1vq7SNPDuzY08bA8E1 qidcncKx8kGL8urvAIZh5oy7eQzWhSwf4FN9C7tJ2x8AkMbSwvT5b7rFstt6bHgg 2rKEXCGPM96WyYd+w+pHTm4uY9de6puhz5WFjAhD3XAKt2NSDd+XYXJi9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBNNjOfOesBkMnmbz2WNQXjQQkSMB8GA1UdIwQY MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt MGU1OWYyZWNiMTc1LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1 LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp1zq562 vqGvJT7fLZpsAZK/QklOjlRQTb9CyTINB4l3jfvYleSjRREETDsMW3b7Z5dB6EMP RXt72EX26u+rack+86pwFuUWw9QXFU6rYru4Fi74okFxMSpzD+upl7+GvAgjarMq MLDyxkBgShYKCufC/729EpYGDsSrCuoAP2GAIHrLoJXWy30CCi0HJj7y3DeovzvR 0JsHcPAXR+t5i/peM0IZ/QCU6c/cOJvRIgzfFBf+ZJogOt2OhZzQ6BtOvUsLwVJJ w/gKa6XQyvajmci/arPL2vuuObsqDrfhdJFTWophML0qHsht7Pu/HbnJNr6Xpr/C 8roK21cyXC3kFA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:48 2025 by rpki-client