This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json) Hash identifier: VB37VRnJ9xxZQAaC3DsIUObyJ2VQFg4g59uComnSPeM= Subject key identifier: BC:B8:DA:1E:18:A9:C2:B6:ED:80:61:C5:E6:D0:A7:58:FF:42:3D:65 Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4 Certificate serial: 019B4BF185E7D5C620A336ED7F5FFDD9BCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft Manifest number: 1469 Signing time: Tue 23 Dec 2025 16:01:18 +0000 Manifest this update: Tue 23 Dec 2025 16:01:18 +0000 Manifest next update: Wed 24 Dec 2025 16:01:18 +0000 Files and hashes: 1: _HGowDUCSG2pcAysO4ogxA6yosc.roa (hash: UPTC6ZbpFxK2iqUZ6z67RcYvcbR0/gldSq3kNUHLLJI=) 2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: aYmVR/gfJstgCd6IHZjS7DrLaLx1ndFPGt95cSFn7pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:85:e7:d5:c6:20:a3:36:ed:7f:5f:fd:d9:bc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4 Validity Not Before: Dec 23 16:01:18 2025 GMT Not After : Dec 24 16:01:18 2025 GMT Subject: CN=bcb8da1e18a9c2b6ed8061c5e6d0a758ff423d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:6f:64:b7:3b:68:5b:0a:bc:d2:87:0a:04: 6b:ad:48:5f:b3:f1:b1:25:ec:1e:b2:be:9e:34:aa: a7:df:b0:eb:12:57:36:37:f8:cd:c9:ec:27:41:ae: ab:a7:22:5d:f0:22:57:ff:6a:97:e0:1c:3c:5c:2d: 31:3b:7e:19:e5:9b:5d:13:43:f3:dc:a6:76:a9:e5: b1:3d:2f:f7:80:95:1f:7e:99:2e:d1:e1:5f:bc:9b: c1:b1:f5:5f:8d:83:50:c1:b0:cf:e6:b3:f1:7a:4b: 55:36:7b:7a:90:ab:67:a1:d7:02:73:e2:27:70:96: 9d:e5:6d:ba:c8:39:c3:bc:69:7e:d5:3f:5c:3d:53: b4:d7:ce:e7:fb:7a:98:78:7b:6c:ef:bc:9e:24:39: 63:e6:1d:5f:3b:d8:43:42:89:96:f3:52:cf:96:c7: fd:1b:a0:e3:b6:88:17:73:2f:40:eb:30:e1:47:4a: 68:65:67:c5:6b:19:5e:fb:9f:39:1f:db:82:fd:1d: 7e:7d:5a:3e:b9:28:1c:72:62:44:52:be:00:e8:5b: 4e:8e:5e:bd:85:0c:38:ad:c5:57:31:07:9f:3d:f7: ff:ad:e3:b4:a4:cf:22:73:63:23:bc:ec:75:cc:a6: 02:65:e6:13:43:bd:93:81:f2:cf:e6:27:99:65:0f: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:DA:1E:18:A9:C2:B6:ED:80:61:C5:E6:D0:A7:58:FF:42:3D:65 X509v3 Authority Key Identifier: keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:4f:6d:f2:4c:08:5e:b5:89:5b:8b:16:6b:89:24:b0:c8: 98:e0:10:84:77:9b:3a:f1:2c:e3:47:6b:80:b5:f4:8f:05:85: f1:e1:9f:ab:19:ed:b4:95:91:26:1f:80:0d:59:23:d6:3e:77: 16:70:ee:6a:c5:a0:4a:24:1a:71:c8:c3:6d:08:49:a3:25:12: 55:c4:d6:55:9c:93:28:1c:10:88:2e:2a:1f:76:cf:48:9a:1d: 11:96:f4:56:e8:45:09:50:2b:62:1d:e4:21:90:d4:c5:e7:09: c4:06:79:65:12:56:49:61:83:c3:d6:33:5b:74:46:71:71:73: 7d:9d:0e:dd:6a:b1:d6:c5:d2:12:50:99:08:33:6b:c4:ea:b8: f1:1e:4d:53:87:f9:8c:98:87:ba:6c:e8:40:91:6a:d0:60:9e: ca:81:6c:20:6d:20:cd:d5:70:5c:30:a7:b2:df:25:b4:84:c5: 07:53:10:2c:c7:07:73:d6:ff:98:d2:9a:50:09:90:b6:b4:3a: e7:cd:d0:e1:53:25:6e:22:ec:93:71:0e:49:af:59:ad:e6:39: a3:14:c6:ad:2c:4a:f4:f1:18:c1:e4:bc:c5:4e:5c:2a:f2:ad: 94:e2:6d:c2:43:68:0c:af:e3:2b:39:9c:0d:73:57:1c:e6:6b: bb:c5:85:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8YXn1cYgozbtf1/92by3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNmY2MzkxMTM5NjM4Y2VmODMxODExNDEzMmNjZjI2ZTE2 N2QzYTQwHhcNMjUxMjIzMTYwMTE4WhcNMjUxMjI0MTYwMTE4WjAzMTEwLwYDVQQD EyhiY2I4ZGExZTE4YTljMmI2ZWQ4MDYxYzVlNmQwYTc1OGZmNDIzZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo5vZLc7aFsKvNKHCgRrrUhfs/Gx Jewesr6eNKqn37DrElc2N/jNyewnQa6rpyJd8CJX/2qX4Bw8XC0xO34Z5ZtdE0Pz 3KZ2qeWxPS/3gJUffpku0eFfvJvBsfVfjYNQwbDP5rPxektVNnt6kKtnodcCc+In cJad5W26yDnDvGl+1T9cPVO0187n+3qYeHts77yeJDlj5h1fO9hDQomW81LPlsf9 G6DjtogXcy9A6zDhR0poZWfFaxle+585H9uC/R1+fVo+uSgccmJEUr4A6FtOjl69 hQw4rcVXMQefPff/reO0pM8ic2MjvOx1zKYCZeYTQ72TgfLP5ieZZQ/A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy42h4YqcK27YBhxebQp1j/Qj1lMB8GA1UdIwQY MBaAFGxvY5ETljjO+DGBFBMszybhZ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgt MzRhZDFjODUzNTk5LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgtMzRhZDFjODUzNTk5 LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYpPbfJM CF61iVuLFmuJJLDImOAQhHebOvEs40drgLX0jwWF8eGfqxnttJWRJh+ADVkj1j53 FnDuasWgSiQaccjDbQhJoyUSVcTWVZyTKBwQiC4qH3bPSJodEZb0VuhFCVArYh3k IZDUxecJxAZ5ZRJWSWGDw9YzW3RGcXFzfZ0O3Wqx1sXSElCZCDNrxOq48R5NU4f5 jJiHumzoQJFq0GCeyoFsIG0gzdVwXDCnst8ltITFB1MQLMcHc9b/mNKaUAmQtrQ6 583Q4VMlbiLsk3EOSa9ZreY5oxTGrSxK9PEYweS8xU5cKvKtlOJtwkNoDK/jKzmc DXNXHOZru8WFgQ== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:18 2025 by rpki-client