This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json) Hash identifier: T1jCO/oZTDWNfJx9OcMpvc43RWfJOX14ryxKs1wPauA= Subject key identifier: 6D:58:FE:DD:A1:AB:05:7D:3D:8A:2D:88:33:11:B6:73:60:C3:77:0E Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006 Certificate serial: 019B3BD977095E114E76E21998E7E5233228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft Manifest number: 066F Signing time: Sat 20 Dec 2025 13:01:05 +0000 Manifest this update: Sat 20 Dec 2025 13:01:05 +0000 Manifest next update: Sun 21 Dec 2025 13:01:05 +0000 Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=) 2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: iJ0kyxHjZJ+pmi+tAiSunk84FMVZGiXyNfTf8FmOhzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:77:09:5e:11:4e:76:e2:19:98:e7:e5:23:32:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006 Validity Not Before: Dec 20 13:01:05 2025 GMT Not After : Dec 21 13:01:05 2025 GMT Subject: CN=6d58fedda1ab057d3d8a2d883311b67360c3770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:85:79:4c:3e:26:f1:d0:ae:01:7f:5a:24: c0:cb:16:9d:eb:3c:df:18:66:45:3d:bb:e4:b9:61: 5f:7c:f0:fe:56:e9:fe:94:de:62:1e:b9:00:8d:9f: fb:7a:92:25:5f:01:5d:30:be:3c:74:ca:4a:c6:2d: 63:aa:db:cf:b7:53:0c:79:64:45:1e:4e:ef:72:9c: 62:2e:94:fb:71:e2:57:2a:1e:2c:30:d2:f4:8d:13: 8b:dc:f4:e8:5b:53:cc:ac:af:a7:5f:75:7e:b1:73: 40:bd:9c:bc:83:73:ca:62:a5:4f:23:8f:35:da:bb: 08:fd:97:aa:3a:0a:34:e6:db:2a:0a:24:a6:6b:e5: dc:26:ff:4d:11:58:2a:fd:d1:4c:dc:c0:f9:cf:35: bc:b5:8a:95:15:fa:a1:21:da:ad:c2:99:52:76:fe: 40:fc:f5:38:58:0c:4d:87:96:4c:4c:9a:6b:42:2d: c9:00:0b:89:51:36:71:1c:3c:af:22:1c:f4:17:0f: 25:54:72:56:f1:93:33:15:0c:f1:d5:f1:30:65:b3: 5b:46:48:77:0b:5e:b6:82:b9:d5:9d:80:90:14:d7: 8e:96:a6:42:67:a9:1b:c0:35:3a:ec:17:fd:45:38: 72:0b:9d:f6:21:d1:43:76:64:4b:6a:d1:05:bc:0b: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:58:FE:DD:A1:AB:05:7D:3D:8A:2D:88:33:11:B6:73:60:C3:77:0E X509v3 Authority Key Identifier: keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:1a:6d:5e:0e:5f:90:fe:36:9a:8e:60:79:0a:92:e4:36: 18:9a:00:68:d0:20:ae:df:4c:a6:44:8c:4d:9c:85:e5:47:db: dd:7e:cc:ab:b4:f9:17:a6:93:8b:95:0c:7e:04:a5:35:c5:f9: f8:7c:91:23:e3:d7:9a:27:54:ea:4a:b8:4b:14:76:ae:f1:9d: 31:b4:1f:0d:d9:ae:ce:7a:13:0e:f1:f1:51:33:a3:99:a6:6d: f2:bf:d2:91:b7:71:b4:83:2f:05:57:1c:f2:c0:e3:2e:42:de: ac:d2:29:60:54:60:2f:33:49:b8:0f:a3:e1:ec:cd:54:04:f8: 4d:53:2c:b3:69:30:3e:50:e2:aa:21:cd:1f:62:98:9a:95:7f: 48:36:d8:41:2e:5e:49:ec:72:9b:f2:9c:4a:95:28:eb:40:f3: 34:bd:37:b3:2e:60:f0:b4:bb:ca:a7:4d:83:1d:5b:8d:e5:3f: b1:68:ef:d7:9a:73:fa:3e:a7:a1:d1:02:f9:22:65:c4:e1:f6: 0a:2b:cf:fd:be:40:04:56:ba:63:4c:9a:39:8e:df:84:d5:47: 95:01:7e:dc:39:52:4a:b5:e3:3d:60:26:ca:f3:66:6f:a0:d5: 90:2f:14:71:48:b8:ae:d3:53:66:c4:cd:bf:c0:3f:a1:dc:d5: 20:4d:cc:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XcJXhFOduIZmOflIzIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3 NTgwMDYwHhcNMjUxMjIwMTMwMTA1WhcNMjUxMjIxMTMwMTA1WjAzMTEwLwYDVQQD Eyg2ZDU4ZmVkZGExYWIwNTdkM2Q4YTJkODgzMzExYjY3MzYwYzM3NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg6FeUw+JvHQrgF/WiTAyxad6zzf GGZFPbvkuWFffPD+Vun+lN5iHrkAjZ/7epIlXwFdML48dMpKxi1jqtvPt1MMeWRF Hk7vcpxiLpT7ceJXKh4sMNL0jROL3PToW1PMrK+nX3V+sXNAvZy8g3PKYqVPI481 2rsI/ZeqOgo05tsqCiSma+XcJv9NEVgq/dFM3MD5zzW8tYqVFfqhIdqtwplSdv5A /PU4WAxNh5ZMTJprQi3JAAuJUTZxHDyvIhz0Fw8lVHJW8ZMzFQzx1fEwZbNbRkh3 C162grnVnYCQFNeOlqZCZ6kbwDU67Bf9RThyC532IdFDdmRLatEFvAvR2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1Y/t2hqwV9PYotiDMRtnNgw3cOMB8GA1UdIwQY MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4 LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosEabV4O X5D+NpqOYHkKkuQ2GJoAaNAgrt9MpkSMTZyF5Ufb3X7Mq7T5F6aTi5UMfgSlNcX5 +HyRI+PXmidU6kq4SxR2rvGdMbQfDdmuznoTDvHxUTOjmaZt8r/SkbdxtIMvBVcc 8sDjLkLerNIpYFRgLzNJuA+j4ezNVAT4TVMss2kwPlDiqiHNH2KYmpV/SDbYQS5e Sexym/KcSpUo60DzNL03sy5g8LS7yqdNgx1bjeU/sWjv15pz+j6nodEC+SJlxOH2 CivP/b5ABFa6Y0yaOY7fhNVHlQF+3DlSSrXjPWAmyvNmb6DVkC8UcUi4rtNTZsTN v8A/odzVIE3MwA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:19 2025 by rpki-client