This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json) Hash identifier: +dKdtOes4amFfDhpUr1Xmod8CT8j+69YGljG8Fq0FDk= Subject key identifier: EC:D7:74:11:F7:7D:CC:48:F3:FB:BC:F1:97:FE:3D:96:64:CB:22:4D Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Certificate serial: 019B41A4715EC62CCF41B7807CA27C6BA24D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft Manifest number: 1484 Signing time: Sun 21 Dec 2025 16:00:54 +0000 Manifest this update: Sun 21 Dec 2025 16:00:54 +0000 Manifest next update: Mon 22 Dec 2025 16:00:54 +0000 Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=) 2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: z3c9ubYiTHZa4diHKVIe/M+vnpHTv81MIAVhoba64pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:71:5e:c6:2c:cf:41:b7:80:7c:a2:7c:6b:a2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914 Validity Not Before: Dec 21 16:00:54 2025 GMT Not After : Dec 22 16:00:54 2025 GMT Subject: CN=ecd77411f77dcc48f3fbbcf197fe3d9664cb224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:18:02:a3:36:ca:ce:0b:de:78:7f:5e:5a: 31:36:8b:27:66:31:69:82:ee:75:ac:60:73:cc:b1: 7c:54:ce:6b:7d:02:94:b8:1a:0d:d2:59:e4:1b:59: b4:6d:f8:d4:6e:97:0f:5f:cf:f3:ef:1e:f9:f0:0f: 11:d0:b5:f3:0c:5a:99:50:a8:84:3b:ac:72:dc:aa: 73:50:a2:ab:ca:e4:2a:4e:82:d7:67:3b:de:84:3b: 89:7d:b7:84:ac:6a:e8:62:40:3d:6e:af:cd:91:82: c7:d9:94:83:58:b9:a0:2c:39:74:ae:90:13:48:86: d7:7a:dc:e4:0f:1a:8c:d2:ca:60:4d:ea:f7:08:d0: f6:00:97:6f:b6:39:be:a7:91:8f:fb:35:36:df:f8: e9:f0:5c:68:99:02:40:86:e6:92:de:50:1e:dc:1f: f4:74:f5:bc:77:ac:fe:61:ea:0f:ae:be:d9:4d:99: 27:79:f4:d1:36:08:4b:f0:da:a7:79:00:f6:93:20: 41:ff:bc:da:38:2b:49:c5:ca:d7:bc:7c:cf:7a:64: 1e:c8:ed:2d:7f:63:aa:17:89:36:74:60:56:5d:06: 5d:4e:0a:c3:cd:dc:23:11:0b:31:ff:5f:99:96:21: d0:f3:d5:3b:ec:43:e4:cc:12:7e:25:39:42:25:28: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D7:74:11:F7:7D:CC:48:F3:FB:BC:F1:97:FE:3D:96:64:CB:22:4D X509v3 Authority Key Identifier: keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:62:2e:dd:75:54:49:7b:63:33:ed:4a:89:75:4d:01:a2:07: 74:88:c8:b1:94:84:41:21:53:b9:78:2b:03:69:14:64:c2:63: c6:26:86:e2:d8:17:8e:07:11:2a:a0:b5:76:7e:1d:b8:c3:3e: 98:f0:2f:d8:27:c0:a7:c0:54:75:b4:a3:80:e7:cf:e0:91:89: 21:73:99:68:b2:6c:c3:59:3a:49:e7:6a:e6:23:e1:7c:a9:3b: d4:75:1e:50:db:5a:c4:3b:39:80:de:2b:be:2e:f5:3d:1b:31: d2:02:ca:93:6d:e3:b0:fe:5f:28:1b:08:c9:f3:cd:ec:e5:d0: 71:e4:13:71:99:f0:35:10:a2:8c:60:31:eb:a1:83:18:58:a4: 8b:66:3c:90:7c:39:ba:c2:9c:21:de:37:9d:de:ed:88:58:37: b9:dc:c6:25:e4:5f:a0:20:1b:44:a1:a9:95:a5:23:65:b4:e8: 0e:20:cb:81:25:c2:f3:0b:37:fd:2d:4c:ca:b4:a5:d2:6e:9f: b3:d7:09:ac:9c:30:26:8d:df:c2:4f:f9:61:b0:b9:d8:67:90: 10:ca:94:49:7f:46:ca:9e:0e:9e:bb:1e:2d:50:90:37:bb:ae: 7e:37:18:ed:7b:53:ec:f5:e7:dc:ca:0c:56:c3:db:ca:28:03: 7c:f3:39:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpHFexizPQbeAfKJ8a6JNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmY1OGU2MzZkOGJiMWRkMTAzOTZjODI0NGRjMTE5MjE1 ZTc5MTQwHhcNMjUxMjIxMTYwMDU0WhcNMjUxMjIyMTYwMDU0WjAzMTEwLwYDVQQD EyhlY2Q3NzQxMWY3N2RjYzQ4ZjNmYmJjZjE5N2ZlM2Q5NjY0Y2IyMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqogYAqM2ys4L3nh/XloxNosnZjFp gu51rGBzzLF8VM5rfQKUuBoN0lnkG1m0bfjUbpcPX8/z7x758A8R0LXzDFqZUKiE O6xy3KpzUKKryuQqToLXZzvehDuJfbeErGroYkA9bq/NkYLH2ZSDWLmgLDl0rpAT SIbXetzkDxqM0spgTer3CND2AJdvtjm+p5GP+zU23/jp8FxomQJAhuaS3lAe3B/0 dPW8d6z+YeoPrr7ZTZknefTRNghL8NqneQD2kyBB/7zaOCtJxcrXvHzPemQeyO0t f2OqF4k2dGBWXQZdTgrDzdwjEQsx/1+ZliHQ89U77EPkzBJ+JTlCJSh87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzXdBH3fcxI8/u88Zf+PZZkyyJNMB8GA1UdIwQY MBaAFG0vWOY22Lsd0QOWyCRNwRkhXnkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTct Y2U2YjdjOWQ1NTliLzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTctY2U2YjdjOWQ1NTli LzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Iu3XVU SXtjM+1KiXVNAaIHdIjIsZSEQSFTuXgrA2kUZMJjxiaG4tgXjgcRKqC1dn4duMM+ mPAv2CfAp8BUdbSjgOfP4JGJIXOZaLJsw1k6Sedq5iPhfKk71HUeUNtaxDs5gN4r vi71PRsx0gLKk23jsP5fKBsIyfPN7OXQceQTcZnwNRCijGAx66GDGFiki2Y8kHw5 usKcId43nd7tiFg3udzGJeRfoCAbRKGplaUjZbToDiDLgSXC8ws3/S1MyrSl0m6f s9cJrJwwJo3fwk/5YbC52GeQEMqUSX9Gyp4OnrseLVCQN7uufjcY7XtT7PXn3MoM VsPbyigDfPM5Mw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:14 2025 by rpki-client