This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json) Hash identifier: NAkG8kK4FA4MnKTRgq/EdAWHv/Ah436I2m5kWNSrwNU= Subject key identifier: 89:C9:3E:DD:2E:2E:D7:9A:F7:9C:77:E9:44:F7:AA:DF:C8:63:FC:70 Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399 Certificate serial: 019B26D2844F54C3107CFC8CA5E1FB2D9B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft Manifest number: 11 Signing time: Tue 16 Dec 2025 11:01:29 +0000 Manifest this update: Tue 16 Dec 2025 11:01:29 +0000 Manifest next update: Wed 17 Dec 2025 11:01:29 +0000 Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: x9dIpp0Ha7qePu+mVsLmrAZo3quX2xkesDf3wAkmdW8=) 2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=) 3: hYmSi25XUGnjWR73oqXMhHs3evw.roa (hash: E/NTf9mHDmz6rv/YaAtOrx9G+CXju60gRbX5A1kuIbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:84:4f:54:c3:10:7c:fc:8c:a5:e1:fb:2d:9b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399 Validity Not Before: Dec 16 11:01:29 2025 GMT Not After : Dec 17 11:01:29 2025 GMT Subject: CN=89c93edd2e2ed79af79c77e944f7aadfc863fc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:b6:7c:f9:90:7d:6e:5a:ee:59:fe:0e:83: 19:d6:29:ef:56:be:03:fc:be:43:d1:49:31:c1:e4: 66:c5:a3:c9:18:3e:e8:a2:8d:25:01:6a:55:ac:55: e9:5a:d7:6b:e3:b3:14:ec:45:71:0c:f0:8a:f5:04: e5:99:f0:7e:08:86:d6:26:23:5d:2d:98:97:97:87: fd:10:bb:50:56:f7:9d:b7:a7:c5:73:60:7c:d3:e8: c0:9a:3f:7b:b2:7a:aa:c7:20:bb:ed:b5:be:c6:c1: 83:2f:8c:48:d3:08:83:3e:cd:c2:e2:ce:5c:a2:35: 40:40:ce:ff:80:95:26:43:5b:7e:b8:f2:70:2b:d6: 4b:c1:7d:de:64:2f:8a:4e:cf:b9:98:d2:d9:52:a0: 44:49:ba:d9:2b:47:d5:ed:7d:83:cf:10:e8:78:c7: ff:3f:b2:f7:9f:ba:fe:2f:7e:f3:a6:3b:1d:12:d6: 7e:cd:0d:16:98:7c:09:9a:5b:41:5e:aa:f8:39:a1: a0:8a:8c:f5:61:7c:b9:8c:f6:e3:24:e3:88:c5:59: 81:fe:fb:45:e5:fb:8c:b5:28:06:85:5f:6d:d9:34: 6c:60:5e:17:c0:5e:79:75:e5:91:f5:7b:07:ab:84: 0d:88:fb:0e:e2:a7:97:8e:10:ee:fe:a8:f1:2e:56: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C9:3E:DD:2E:2E:D7:9A:F7:9C:77:E9:44:F7:AA:DF:C8:63:FC:70 X509v3 Authority Key Identifier: keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:03:ab:a1:b0:80:42:89:9a:89:34:6f:93:4f:d7:9e:9c:0c: 0d:23:ac:7c:0e:85:75:49:a5:d1:7e:a6:1f:7e:4b:9a:19:73: 95:b5:3c:9d:33:f0:b8:ac:81:a3:31:f5:9c:f5:15:95:1c:5c: 37:d3:5a:b3:9c:82:9b:59:3f:ba:4d:c1:1a:c2:3c:ae:59:66: f4:5b:c8:1e:41:d7:f7:ee:17:1a:89:04:e7:a0:29:46:f0:75: b8:e2:27:73:e5:90:10:f7:f1:19:74:03:ff:db:4b:24:fc:d6: 11:9a:e5:3b:b0:fc:2c:3a:ba:61:4b:10:50:8f:a1:a9:25:d6: 1e:95:fb:bc:b6:83:06:d0:6b:f1:f7:f8:1b:84:0f:f0:90:dd: 1f:64:59:a8:bd:dd:bc:51:93:7e:9b:3b:9e:58:51:e2:de:1a: 67:13:51:7b:94:a2:8d:aa:8c:1d:ed:3d:1b:f6:5f:cb:bc:40: 93:8f:7c:f8:ff:79:d1:f4:3d:a2:8d:4c:da:45:eb:31:0d:a8: a9:51:dd:33:08:7a:07:cf:8b:72:75:d8:15:79:63:ff:4d:30: aa:9b:d5:8b:56:27:48:7d:09:2e:77:34:22:f0:66:78:8a:d6: 90:82:c7:3f:39:b4:cb:f6:18:ab:bc:8d:33:64:39:78:f2:66: 63:e6:da:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0oRPVMMQfPyMpeH7LZuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2IzZjg0MjE4NDhmMTEzOTUxZTkwNzBiM2Y3NjM5NTkz MzEzOTkwHhcNMjUxMjE2MTEwMTI5WhcNMjUxMjE3MTEwMTI5WjAzMTEwLwYDVQQD Eyg4OWM5M2VkZDJlMmVkNzlhZjc5Yzc3ZTk0NGY3YWFkZmM4NjNmYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlW2fPmQfW5a7ln+DoMZ1invVr4D /L5D0UkxweRmxaPJGD7ooo0lAWpVrFXpWtdr47MU7EVxDPCK9QTlmfB+CIbWJiNd LZiXl4f9ELtQVvedt6fFc2B80+jAmj97snqqxyC77bW+xsGDL4xI0wiDPs3C4s5c ojVAQM7/gJUmQ1t+uPJwK9ZLwX3eZC+KTs+5mNLZUqBESbrZK0fV7X2DzxDoeMf/ P7L3n7r+L37zpjsdEtZ+zQ0WmHwJmltBXqr4OaGgioz1YXy5jPbjJOOIxVmB/vtF 5fuMtSgGhV9t2TRsYF4XwF55deWR9XsHq4QNiPsO4qeXjhDu/qjxLlZFfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInJPt0uLtea95x36UT3qt/IY/xwMB8GA1UdIwQY MBaAFGzLP4QhhI8ROVHpBws/djlZMxOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQt NDU5ZTM0ZTZmZjIwLzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQtNDU5ZTM0ZTZmZjIw LzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgOrobCA QomaiTRvk0/XnpwMDSOsfA6FdUml0X6mH35LmhlzlbU8nTPwuKyBozH1nPUVlRxc N9Nas5yCm1k/uk3BGsI8rllm9FvIHkHX9+4XGokE56ApRvB1uOInc+WQEPfxGXQD /9tLJPzWEZrlO7D8LDq6YUsQUI+hqSXWHpX7vLaDBtBr8ff4G4QP8JDdH2RZqL3d vFGTfps7nlhR4t4aZxNRe5SijaqMHe09G/Zfy7xAk498+P950fQ9oo1M2kXrMQ2o qVHdMwh6B8+LcnXYFXlj/00wqpvVi1YnSH0JLnc0IvBmeIrWkILHPzm0y/YYq7yN M2Q5ePJmY+ba1w== -----END CERTIFICATE-----Generated at Tue Dec 16 13:56:03 2025 by rpki-client