This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json) Hash identifier: RuGTZB5Lp4Q6gk7qJca+t+g1Nw+TLURwpaN/RP5XbzA= Subject key identifier: 80:BD:8F:C0:B3:B3:02:53:7C:B7:EA:82:EC:C0:92:1C:F0:EF:79:29 Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Certificate serial: 019B55992DF1E4992BB50A2E5A68688EE4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft Manifest number: 0E2E Signing time: Thu 25 Dec 2025 13:01:00 +0000 Manifest this update: Thu 25 Dec 2025 13:01:00 +0000 Manifest next update: Fri 26 Dec 2025 13:01:00 +0000 Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=) 2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: HgR6k5jt70c4O1kM4Msqu5fm/gCW+xh8efFOaBx59IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:2d:f1:e4:99:2b:b5:0a:2e:5a:68:68:8e:e4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Validity Not Before: Dec 25 13:01:00 2025 GMT Not After : Dec 26 13:01:00 2025 GMT Subject: CN=80bd8fc0b3b302537cb7ea82ecc0921cf0ef7929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:e8:1a:a8:95:f0:dd:6d:56:68:46:9a:72: c7:9a:49:7d:29:84:67:47:e2:9a:e2:72:87:07:60: 33:c6:88:52:b2:64:df:9f:43:1d:30:ae:0f:d4:d0: 94:4f:e8:b3:72:a1:73:a5:7c:a4:29:5b:3e:fa:39: 5c:cc:cc:21:fe:7c:94:6a:50:45:b5:2d:d5:62:9f: 36:05:3d:fd:9f:4d:ad:a6:f8:20:58:19:ab:2f:d9: a6:f0:fc:c1:c2:a1:aa:b9:d6:6c:0a:c8:66:dc:5c: fd:5f:de:10:83:95:68:13:a4:aa:22:62:c9:05:0d: 1a:be:e2:83:d2:8d:eb:06:3a:7c:b0:aa:90:65:5d: dc:42:0e:1e:17:8e:09:0a:83:d4:91:e8:d2:68:74: 28:93:1c:12:ee:92:7f:8b:1b:c8:d7:b3:c9:c4:c0: 5c:22:36:60:0c:ae:55:4f:2d:e6:44:08:1f:e1:38: 95:26:d5:2d:0b:99:a5:c3:0d:e7:18:ae:fd:21:72: b6:98:20:a2:47:1d:f0:9b:fb:af:46:64:a7:0a:c8: bf:2d:4e:d9:9b:2f:37:ef:29:9d:f1:5a:e1:d7:d7: 81:94:67:51:23:2a:91:7f:0a:19:86:45:e4:24:c4: 1f:c6:54:0b:01:34:50:0d:35:3f:d6:60:76:95:3a: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BD:8F:C0:B3:B3:02:53:7C:B7:EA:82:EC:C0:92:1C:F0:EF:79:29 X509v3 Authority Key Identifier: keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4e:bd:76:e8:62:22:c8:48:a7:cf:b5:cd:26:80:4b:2f:c9: a3:8c:7e:c5:59:ce:d6:d3:69:39:84:0e:e4:ee:b1:dc:33:a1: 3d:0e:0d:e9:bc:66:c4:2e:11:c0:ff:a1:e6:d5:c2:7a:74:6a: 3e:a8:76:a4:94:eb:8f:3d:de:1b:30:9d:b5:61:87:75:1b:dd: 6b:c0:49:20:3d:1a:e1:13:80:ac:9c:b1:ab:81:bc:38:46:15: 0e:0b:ae:a2:9b:dd:b7:9c:eb:f5:0f:9c:a3:d9:d8:41:e1:03: c4:27:d6:ff:be:55:6f:fc:ba:8b:97:c3:53:03:55:1d:d9:46: 86:00:e7:17:7e:f7:1c:d3:68:a3:39:43:ce:64:5f:d6:66:a2: f6:04:1a:eb:05:4b:28:2a:98:f8:56:aa:d8:09:9d:35:f0:57: 9d:6a:1a:60:8f:7b:38:45:dc:ce:3a:df:60:8c:3d:8f:5e:b9: db:64:97:48:1d:e1:46:2a:e7:6d:e2:86:a3:ef:0b:a9:1f:48: 92:fe:b0:57:15:3f:1b:a5:ff:f6:58:50:f4:5e:f5:bd:12:61: 95:dc:5a:81:20:9f:b1:81:dd:f9:e4:f0:f1:ab:3f:d8:7e:18: 6e:04:f2:11:1e:58:83:e3:a5:b3:f4:28:d3:93:58:38:c1:66: 09:3e:fc:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmS3x5JkrtQouWmhojuTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw YzZhNDgwHhcNMjUxMjI1MTMwMTAwWhcNMjUxMjI2MTMwMTAwWjAzMTEwLwYDVQQD Eyg4MGJkOGZjMGIzYjMwMjUzN2NiN2VhODJlY2MwOTIxY2YwZWY3OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze3oGqiV8N1tVmhGmnLHmkl9KYRn R+Ka4nKHB2AzxohSsmTfn0MdMK4P1NCUT+izcqFzpXykKVs++jlczMwh/nyUalBF tS3VYp82BT39n02tpvggWBmrL9mm8PzBwqGqudZsCshm3Fz9X94Qg5VoE6SqImLJ BQ0avuKD0o3rBjp8sKqQZV3cQg4eF44JCoPUkejSaHQokxwS7pJ/ixvI17PJxMBc IjZgDK5VTy3mRAgf4TiVJtUtC5mlww3nGK79IXK2mCCiRx3wm/uvRmSnCsi/LU7Z my837ymd8Vrh19eBlGdRIyqRfwoZhkXkJMQfxlQLATRQDTU/1mB2lTpPIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC9j8CzswJTfLfqguzAkhzw73kpMB8GA1UdIwQY MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt ZGEyMzEyYjY1YTUwLzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE69duhi IshIp8+1zSaASy/Jo4x+xVnO1tNpOYQO5O6x3DOhPQ4N6bxmxC4RwP+h5tXCenRq Pqh2pJTrjz3eGzCdtWGHdRvda8BJID0a4ROArJyxq4G8OEYVDguuopvdt5zr9Q+c o9nYQeEDxCfW/75Vb/y6i5fDUwNVHdlGhgDnF373HNNoozlDzmRf1mai9gQa6wVL KCqY+Faq2AmdNfBXnWoaYI97OEXczjrfYIw9j16522SXSB3hRirnbeKGo+8LqR9I kv6wVxU/G6X/9lhQ9F71vRJhldxagSCfsYHd+eTw8as/2H4YbgTyER5Yg+Ols/Qo 05NYOMFmCT78tw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:20 2025 by rpki-client