This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json) Hash identifier: KOwgn380RyHFa81na4pYf1RLALSrKchUb9B8KQc2aYI= Subject key identifier: 33:E3:F9:23:7A:08:EE:CC:E3:DF:5D:A6:F4:4C:0C:2B:52:F2:9F:C7 Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Certificate serial: 019B3CEBD124E80D8E5FB1AE2453D80D787A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft Manifest number: 0C08 Signing time: Sat 20 Dec 2025 18:00:46 +0000 Manifest this update: Sat 20 Dec 2025 18:00:46 +0000 Manifest next update: Sun 21 Dec 2025 18:00:46 +0000 Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=) 2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: jjG5Qb98B/o6P1G17SoQZmJnlRL75tuX4ALBFEmR7hE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d1:24:e8:0d:8e:5f:b1:ae:24:53:d8:0d:78:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30 Validity Not Before: Dec 20 18:00:46 2025 GMT Not After : Dec 21 18:00:46 2025 GMT Subject: CN=33e3f9237a08eecce3df5da6f44c0c2b52f29fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:7f:bd:16:81:03:0c:6b:f5:2a:2a:77:0f: 59:53:a8:95:7e:e6:a1:e3:8d:a9:14:88:ae:56:fc: eb:8b:fe:be:ce:f6:35:82:8c:19:6e:fc:9d:4e:12: b2:fc:7c:b8:f9:28:cb:08:48:f8:f5:e3:36:22:c8: 8b:f6:89:55:18:74:8e:53:01:4b:3f:83:38:77:b5: 95:93:2f:29:8b:10:e2:9d:d1:62:8c:8a:ca:a9:63: 84:38:ab:53:d8:94:6c:b8:c2:db:0a:3a:2e:99:9b: a6:f7:8e:0f:a4:f0:8d:a8:1d:00:95:6b:33:90:51: 0a:57:d7:cc:3e:4a:14:09:2a:92:71:df:7a:9d:53: 76:75:46:f1:08:e4:a1:3e:93:60:c3:1a:1c:e1:b8: 62:ce:2e:9f:5a:d5:6f:df:41:48:ba:1e:2e:70:f0: 53:b1:c8:66:7c:ab:01:9f:83:33:41:b5:3d:9c:87: 49:17:dc:25:5d:f3:27:83:ac:55:46:18:a0:e7:5a: 70:75:59:39:1c:c1:97:e2:84:49:4e:10:bf:07:1a: 4a:18:60:e1:4b:cf:65:80:db:5c:59:00:6d:f8:2c: ba:23:a6:c3:4b:3e:ff:4d:b6:2e:ce:b9:2f:0c:43: 64:41:42:c2:32:da:c0:32:6d:44:1e:0c:ef:44:8e: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E3:F9:23:7A:08:EE:CC:E3:DF:5D:A6:F4:4C:0C:2B:52:F2:9F:C7 X509v3 Authority Key Identifier: keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:b1:de:d0:c1:99:8c:83:55:cc:9b:38:82:39:05:0e:c4: 8e:d4:e6:fa:0b:6f:72:77:22:c5:65:66:34:9a:f0:74:92:17: 96:1c:eb:b1:5a:c3:43:70:64:da:17:2e:1f:e1:e2:10:ad:6b: 11:5a:75:29:77:db:ae:71:1b:ef:27:83:a6:de:c3:12:0a:b2: 96:48:04:1a:54:58:45:49:72:7a:00:2b:f9:dc:35:21:2e:e4: 08:fe:cd:c2:b5:41:50:f0:24:16:da:f1:d4:a1:a7:d0:5d:2f: 02:02:fa:83:31:e9:3c:c4:44:d6:3c:dc:7d:fd:90:b0:5b:a2: 9f:58:c0:f5:47:99:d4:16:c4:4f:3e:e7:6f:c4:15:77:09:59: f0:5c:8f:c8:6b:4b:55:05:9f:4a:69:16:7d:36:3c:74:78:68: ea:f4:22:3c:b3:13:60:95:b6:fe:9a:f8:b2:ef:f3:af:1d:8b: ea:e6:d5:ef:63:4e:be:6b:ab:65:61:c0:fd:2c:f7:57:10:8f: ee:a3:cf:1b:e4:2b:30:98:01:5b:09:ce:cd:6e:54:ba:9f:f4: 3c:d3:df:cc:62:2c:f4:05:c3:e8:31:8a:6a:cd:b3:df:ff:c0: 6a:c2:d0:97:44:a3:9b:9b:f5:13:8c:16:66:2c:92:85:32:23: ee:31:13:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869Ek6A2OX7GuJFPYDXh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1 MzBiMzAwHhcNMjUxMjIwMTgwMDQ2WhcNMjUxMjIxMTgwMDQ2WjAzMTEwLwYDVQQD EygzM2UzZjkyMzdhMDhlZWNjZTNkZjVkYTZmNDRjMGMyYjUyZjI5ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10N/vRaBAwxr9Soqdw9ZU6iVfuah 442pFIiuVvzri/6+zvY1gowZbvydThKy/Hy4+SjLCEj49eM2IsiL9olVGHSOUwFL P4M4d7WVky8pixDindFijIrKqWOEOKtT2JRsuMLbCjoumZum944PpPCNqB0AlWsz kFEKV9fMPkoUCSqScd96nVN2dUbxCOShPpNgwxoc4bhizi6fWtVv30FIuh4ucPBT schmfKsBn4MzQbU9nIdJF9wlXfMng6xVRhig51pwdVk5HMGX4oRJThC/BxpKGGDh S89lgNtcWQBt+Cy6I6bDSz7/TbYuzrkvDENkQULCMtrAMm1EHgzvRI7aEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPj+SN6CO7M499dpvRMDCtS8p/HMB8GA1UdIwQY MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4qx3tDB mYyDVcybOII5BQ7EjtTm+gtvcncixWVmNJrwdJIXlhzrsVrDQ3Bk2hcuH+HiEK1r EVp1KXfbrnEb7yeDpt7DEgqylkgEGlRYRUlyegAr+dw1IS7kCP7NwrVBUPAkFtrx 1KGn0F0vAgL6gzHpPMRE1jzcff2QsFuin1jA9UeZ1BbETz7nb8QVdwlZ8FyPyGtL VQWfSmkWfTY8dHho6vQiPLMTYJW2/pr4su/zrx2L6ubV72NOvmurZWHA/Sz3VxCP 7qPPG+QrMJgBWwnOzW5Uup/0PNPfzGIs9AXD6DGKas2z3//AasLQl0Sjm5v1E4wW ZiyShTIj7jETAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:57 2025 by rpki-client