This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json) Hash identifier: l/083xT+A8OclqIB4o5iwHOLxj8GaNtxQPLdhnWtYd0= Subject key identifier: 0A:35:00:06:C0:AA:A6:83:E6:38:2C:B4:20:F2:7B:3C:FA:B2:A0:85 Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82 Certificate serial: 019B4F29354B278E6FE69C6E5AA6BD36932A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 07:00:59 +0000 Manifest this update: Wed 24 Dec 2025 07:00:59 +0000 Manifest next update: Thu 25 Dec 2025 07:00:59 +0000 Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=) 2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: yC7STheFSLJ2n+Lbvui7SXM833XRV49iO3AXTSuZt7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:35:4b:27:8e:6f:e6:9c:6e:5a:a6:bd:36:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82 Validity Not Before: Dec 24 07:00:59 2025 GMT Not After : Dec 25 07:00:59 2025 GMT Subject: CN=0a350006c0aaa683e6382cb420f27b3cfab2a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:61:cc:37:4a:d5:c9:4d:a1:87:35:ff:57: 30:56:f0:11:a3:5d:99:d9:77:4e:1d:9d:f4:98:0b: 1d:67:06:c7:63:4f:fd:1e:38:21:9d:2f:72:cd:1d: 5f:e2:35:b7:62:8a:b1:17:03:cf:6f:9e:c6:4c:88: bf:ca:a3:25:2f:06:b3:16:0a:7f:3f:29:4f:c6:99: da:88:a9:18:6d:96:06:9f:df:8b:c8:9a:37:76:b0: ce:7f:86:c1:4b:49:f4:72:b6:74:be:ae:c8:f7:00: 42:75:29:44:8e:92:c1:cb:73:ea:a6:00:5e:cd:c3: 0e:ff:0d:77:9c:be:08:1c:9c:db:42:cf:95:63:60: 16:a5:2c:94:e0:9c:2c:e5:4d:b1:97:3f:df:70:fb: b7:bc:9c:b5:98:55:3b:62:a5:da:b0:23:44:4f:d6: 09:bc:a8:ad:83:fe:50:ed:15:84:5f:c1:8a:34:d8: 66:17:20:40:c3:dc:15:dd:d3:ab:35:ae:5c:b4:6b: 15:83:16:71:2e:5a:9e:96:b6:a0:3f:82:59:da:44: 09:f0:64:ac:9c:71:93:3a:1c:26:18:c5:20:bc:33: 09:15:74:e9:51:ea:d6:74:cf:8c:eb:8c:f7:94:4c: 43:93:ab:51:a8:3d:01:ea:69:06:2b:3c:33:9f:b1: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:00:06:C0:AA:A6:83:E6:38:2C:B4:20:F2:7B:3C:FA:B2:A0:85 X509v3 Authority Key Identifier: keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:11:1a:f7:b8:3b:54:b3:e6:cc:49:09:78:24:c4:6d:90:2a: b1:ad:58:75:8f:32:54:c3:d1:f1:33:3f:54:5e:aa:80:00:af: 76:30:02:4d:48:b3:7f:89:9a:1b:c5:eb:8b:8d:09:4d:2e:c1: 58:d9:ce:8a:39:da:51:bb:a5:86:05:46:ee:0b:6a:5f:cc:4b: d6:76:05:b2:60:4a:d6:83:32:45:b1:fe:b2:f5:36:03:86:37: fe:a2:f3:9e:8a:90:5f:5b:a7:a3:6f:61:6d:2f:47:7b:b0:10: b8:2c:2b:c8:ee:82:2b:8c:de:2b:fd:fd:99:c4:9d:b7:43:de: 23:80:03:29:50:05:eb:53:95:6a:aa:3d:d4:d8:d5:0c:c7:e9: 37:0d:70:84:5e:71:5d:a7:15:36:a4:8d:3f:9c:9b:dd:b3:b1: ef:27:12:12:c6:c0:9c:f8:c1:2d:23:f7:94:7f:5a:72:cc:0d: 34:88:09:65:8e:df:bd:44:0a:7e:77:7b:53:f9:69:3e:0f:2c: 2c:cb:b4:0b:4f:98:8d:58:a0:0d:9b:55:f3:7b:b7:1c:b8:4c: a2:5f:b8:9f:9c:ad:93:6c:b3:98:b3:6e:f8:d3:e3:7c:fa:02: ec:9e:35:51:6f:3e:e4:bd:4d:17:37:53:c1:2f:d6:8a:7d:76: 73:06:e8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKTVLJ45v5pxuWqa9NpMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw MmFlODIwHhcNMjUxMjI0MDcwMDU5WhcNMjUxMjI1MDcwMDU5WjAzMTEwLwYDVQQD EygwYTM1MDAwNmMwYWFhNjgzZTYzODJjYjQyMGYyN2IzY2ZhYjJhMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1hhzDdK1clNoYc1/1cwVvARo12Z 2XdOHZ30mAsdZwbHY0/9HjghnS9yzR1f4jW3YoqxFwPPb57GTIi/yqMlLwazFgp/ PylPxpnaiKkYbZYGn9+LyJo3drDOf4bBS0n0crZ0vq7I9wBCdSlEjpLBy3PqpgBe zcMO/w13nL4IHJzbQs+VY2AWpSyU4Jws5U2xlz/fcPu3vJy1mFU7YqXasCNET9YJ vKitg/5Q7RWEX8GKNNhmFyBAw9wV3dOrNa5ctGsVgxZxLlqelragP4JZ2kQJ8GSs nHGTOhwmGMUgvDMJFXTpUerWdM+M64z3lExDk6tRqD0B6mkGKzwzn7Go7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo1AAbAqqaD5jgstCDyezz6sqCFMB8GA1UdIwQY MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5 LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxEa97g7 VLPmzEkJeCTEbZAqsa1YdY8yVMPR8TM/VF6qgACvdjACTUizf4maG8Xri40JTS7B WNnOijnaUbulhgVG7gtqX8xL1nYFsmBK1oMyRbH+svU2A4Y3/qLznoqQX1uno29h bS9He7AQuCwryO6CK4zeK/39mcSdt0PeI4ADKVAF61OVaqo91NjVDMfpNw1whF5x XacVNqSNP5yb3bOx7ycSEsbAnPjBLSP3lH9acswNNIgJZY7fvUQKfnd7U/lpPg8s LMu0C0+YjVigDZtV83u3HLhMol+4n5ytk2yzmLNu+NPjfPoC7J41UW8+5L1NFzdT wS/Win12cwboUw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:50 2025 by rpki-client