This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json) Hash identifier: xzjG9onoYMAyq+IHX4MYzP26TDQYxvJyr6NvXA5vyoQ= Subject key identifier: 7B:F0:9B:B8:BC:0D:65:BA:0D:41:53:EB:EB:3D:20:F7:31:7A:11:66 Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Certificate serial: 019B269B33ABEE42A072BE0CF3A02B62F8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft Manifest number: 35 Signing time: Tue 16 Dec 2025 10:01:03 +0000 Manifest this update: Tue 16 Dec 2025 10:01:03 +0000 Manifest next update: Wed 17 Dec 2025 10:01:03 +0000 Files and hashes: 1: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: /aZ3kUZ5zSsUt5ResDiyDdKJuRhaV12uMp3/8rqonps=) 2: YilzzMVV-0x5qapa4mbtid_7Da8.asa (hash: dgX9O+nd+4dFGepaY4CTBmSILEPcJwUIKJ6bca1Tf3k=) 3: ZP2ggnguw-XEGATrr9PvJHdpJXI.roa (hash: Duuc/yLu6wD1kGS4ffozSoGNCQM0JNj0FjDWGSYtKmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:33:ab:ee:42:a0:72:be:0c:f3:a0:2b:62:f8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Validity Not Before: Dec 16 10:01:03 2025 GMT Not After : Dec 17 10:01:03 2025 GMT Subject: CN=7bf09bb8bc0d65ba0d4153ebeb3d20f7317a1166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:a0:08:a9:60:7c:00:24:be:50:44:c9:42: 76:d8:99:51:d6:38:2a:29:dd:c7:ad:36:b8:c9:bc: fd:30:12:b9:ba:0d:4d:15:2c:fd:95:39:07:4b:69: d8:77:c8:0e:72:03:2a:0f:ff:c3:13:0e:e7:8d:e9: b0:2c:f0:e1:d0:1d:00:fc:50:1d:5e:b6:03:dd:db: 9f:5a:90:39:55:53:c4:53:2d:44:b3:83:e4:09:9a: 63:88:71:86:10:af:31:09:ce:4e:56:73:e8:42:79: a0:73:ca:68:36:b1:00:f3:78:c7:99:06:25:28:93: 8c:d4:09:47:72:b4:ed:7b:cb:ce:94:9c:53:97:90: 2f:97:2f:27:93:4a:57:a9:03:17:b3:6d:05:a5:48: 91:1b:5a:8b:f0:fc:fb:3d:e0:d9:b5:9e:12:f3:38: 0c:41:44:50:e5:14:76:0d:02:c2:b3:a3:49:a6:ac: 13:d5:8f:0d:f6:b9:31:36:84:65:69:7d:f8:c6:87: 0e:ba:7d:61:4b:42:9c:f9:3d:a0:1c:ee:bd:68:55: 25:26:fc:17:73:0d:d5:d2:ad:d2:49:50:48:6a:96: cb:11:92:de:de:02:2c:5b:e2:84:43:02:c4:77:e6: 5e:25:56:72:4c:17:f3:80:c6:7e:ca:1c:f2:46:7a: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F0:9B:B8:BC:0D:65:BA:0D:41:53:EB:EB:3D:20:F7:31:7A:11:66 X509v3 Authority Key Identifier: keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:20:e9:f0:38:eb:80:de:13:9a:36:de:25:fd:5a:52:02:47: f4:8c:3f:4a:8f:52:37:2f:72:7d:46:ee:49:a9:fd:b7:d8:34: c9:f9:a2:38:89:e4:a1:3b:40:18:b6:72:0f:38:03:17:61:1b: 30:1b:d8:6b:ae:cb:4b:87:18:8b:a8:ba:4c:ce:f6:33:19:40: da:7c:77:da:1f:fd:67:33:af:0a:8f:a4:33:ef:37:31:3a:c0: 32:85:b3:86:27:00:9e:7f:07:9a:6e:f9:78:2f:bd:1f:35:0d: 9f:d6:45:68:73:11:66:f2:28:6e:0f:95:6c:37:01:f4:c9:7e: dc:7f:cf:70:18:7b:5c:27:ae:59:95:75:1e:c4:d6:6f:e3:b0: 71:8a:d5:d1:ed:b7:2c:6d:2d:3c:72:4a:1f:6a:bd:42:8c:35: 8d:e4:e6:5a:85:45:c8:3b:e3:74:00:98:40:23:b4:bd:42:5d: ca:0e:ac:69:97:5a:50:ac:f8:ec:a9:51:89:5d:4c:c4:29:22: f5:4e:83:41:fd:de:a0:75:50:dd:31:10:26:d7:35:86:ce:57: fa:fb:23:69:23:e6:c1:98:64:ae:be:98:ef:52:83:70:62:34: 8e:b6:ac:3a:c1:a0:8d:a8:86:83:9d:c3:f8:94:9b:97:fc:8b: 0d:80:e3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmzOr7kKgcr4M86ArYvjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzIwZWI0MDdkNWIxYjliMjQ0NTNiODI2Y2FhNmYwNzRl N2QxMmQwHhcNMjUxMjE2MTAwMTAzWhcNMjUxMjE3MTAwMTAzWjAzMTEwLwYDVQQD Eyg3YmYwOWJiOGJjMGQ2NWJhMGQ0MTUzZWJlYjNkMjBmNzMxN2ExMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA446gCKlgfAAkvlBEyUJ22JlR1jgq Kd3HrTa4ybz9MBK5ug1NFSz9lTkHS2nYd8gOcgMqD//DEw7njemwLPDh0B0A/FAd XrYD3dufWpA5VVPEUy1Es4PkCZpjiHGGEK8xCc5OVnPoQnmgc8poNrEA83jHmQYl KJOM1AlHcrTte8vOlJxTl5Avly8nk0pXqQMXs20FpUiRG1qL8Pz7PeDZtZ4S8zgM QURQ5RR2DQLCs6NJpqwT1Y8N9rkxNoRlaX34xocOun1hS0Kc+T2gHO69aFUlJvwX cw3V0q3SSVBIapbLEZLe3gIsW+KEQwLEd+ZeJVZyTBfzgMZ+yhzyRnruYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvwm7i8DWW6DUFT6+s9IPcxehFmMB8GA1UdIwQY MBaAFAZyDrQH1bG5skRTuCbKpvB059EtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzct NzhjMGMwMmY3OGEyLzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzctNzhjMGMwMmY3OGEy LzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyDp8Djr gN4TmjbeJf1aUgJH9Iw/So9SNy9yfUbuSan9t9g0yfmiOInkoTtAGLZyDzgDF2Eb MBvYa67LS4cYi6i6TM72MxlA2nx32h/9ZzOvCo+kM+83MTrAMoWzhicAnn8Hmm75 eC+9HzUNn9ZFaHMRZvIobg+VbDcB9Ml+3H/PcBh7XCeuWZV1HsTWb+OwcYrV0e23 LG0tPHJKH2q9Qow1jeTmWoVFyDvjdACYQCO0vUJdyg6saZdaUKz47KlRiV1MxCki 9U6DQf3eoHVQ3TEQJtc1hs5X+vsjaSPmwZhkrr6Y71KDcGI0jrasOsGgjaiGg53D +JSbl/yLDYDjPA== -----END CERTIFICATE-----Generated at Tue Dec 16 12:42:25 2025 by rpki-client