This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json) Hash identifier: PugeCSVKQ5ZJrjJCAZoeHpAJk72o7/h50a006jvbmU4= Subject key identifier: 90:CC:FC:82:AB:03:98:54:79:1A:61:C5:2F:E5:D6:37:C0:F5:CC:0D Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Certificate serial: 019B5DF722C785C22DF86C32BC67E2383160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft Manifest number: 116B Signing time: Sat 27 Dec 2025 04:00:35 +0000 Manifest this update: Sat 27 Dec 2025 04:00:35 +0000 Manifest next update: Sun 28 Dec 2025 04:00:35 +0000 Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=) 2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: Ly8JXM+VhnHgnTVHHy14htnWPCf2EDKJa14Icey1bqg=) 3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:22:c7:85:c2:2d:f8:6c:32:bc:67:e2:38:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Validity Not Before: Dec 27 04:00:35 2025 GMT Not After : Dec 28 04:00:35 2025 GMT Subject: CN=90ccfc82ab039854791a61c52fe5d637c0f5cc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:09:e7:5f:18:1a:06:dc:b7:24:c4:ae:8f: 79:14:ac:df:22:81:f9:bf:15:06:6e:7d:43:b2:fc: 81:91:8e:56:f2:7f:0f:49:53:cf:93:a9:99:b2:ea: 23:50:e3:85:9c:2b:8e:a6:b3:6c:00:fa:f3:eb:58: f7:35:87:40:bd:8e:49:70:34:ff:80:2e:d8:9c:23: c0:86:65:d6:df:a8:22:0c:5e:57:5d:ae:6f:b4:7f: 3f:59:fc:b9:58:36:13:10:c0:d2:f3:30:82:dd:2b: 9c:13:af:64:3c:61:74:53:11:d5:14:e5:67:97:23: 44:52:e9:7f:1a:fe:f7:cd:27:c4:a7:70:84:14:5a: a6:6b:24:ba:68:34:f8:7b:6c:71:26:66:a8:ac:33: 22:3c:73:61:62:42:60:4a:b3:e7:b1:fe:8e:09:48: ac:11:74:08:30:87:d9:9c:fb:06:e4:33:b9:66:a0: 6f:07:5f:5f:31:cf:b8:ea:3d:f8:c2:67:37:28:97: 33:07:47:76:5c:f2:05:62:e2:98:18:51:2f:4e:6e: bf:bc:b5:2a:1f:fc:9f:34:51:d2:2a:e0:2d:f7:97: 7e:71:2f:9f:db:32:22:b3:e5:d6:7d:f5:f2:af:5f: 9b:df:dc:af:52:05:57:e7:a1:bd:53:71:a0:4a:d5: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CC:FC:82:AB:03:98:54:79:1A:61:C5:2F:E5:D6:37:C0:F5:CC:0D X509v3 Authority Key Identifier: keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e8:35:8a:d1:e7:a9:85:4e:e8:ee:40:60:de:68:c8:6b:e7: 91:24:3f:6f:47:ea:ca:9d:41:c7:e9:e3:42:1a:61:d7:17:1f: 67:d9:f5:f3:2a:85:9b:84:d5:52:03:24:5b:1d:c9:db:39:0f: 23:ea:19:6f:0e:bc:cb:2d:51:25:6c:44:17:66:45:f5:0f:8a: 33:0c:a0:f3:fd:e0:37:24:c8:7f:35:ae:ac:5f:2f:8c:a5:19: 1e:e5:d6:66:89:fb:2b:fa:c0:65:55:97:03:70:33:67:0f:2b: d8:a6:19:aa:02:17:c8:d3:69:d4:38:c4:5d:89:bc:17:cb:e5: 09:bf:09:c8:2e:ac:57:e4:ed:10:10:d0:2b:c2:a5:50:4f:d3: 78:a2:a7:a7:fb:68:79:6d:69:4a:09:89:27:50:36:08:b3:8f: 31:84:27:fb:d8:03:18:53:3a:c0:e2:3b:0b:93:15:1f:bf:45: 95:ba:cd:c3:6f:eb:c7:bc:89:aa:fa:7f:5b:89:c7:66:8c:fa: fd:5b:55:2f:00:7c:9b:75:8b:8d:aa:13:41:83:1e:fd:c1:fd: 41:08:73:dc:09:49:d6:20:87:b6:f2:8e:78:cd:03:e7:df:50: 02:66:31:3c:eb:4e:55:d3:d7:79:d2:59:b2:68:a3:08:ee:4d: 19:90:15:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9yLHhcIt+GwyvGfiODFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj ODg1M2QwHhcNMjUxMjI3MDQwMDM1WhcNMjUxMjI4MDQwMDM1WjAzMTEwLwYDVQQD Eyg5MGNjZmM4MmFiMDM5ODU0NzkxYTYxYzUyZmU1ZDYzN2MwZjVjYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtoJ518YGgbctyTEro95FKzfIoH5 vxUGbn1DsvyBkY5W8n8PSVPPk6mZsuojUOOFnCuOprNsAPrz61j3NYdAvY5JcDT/ gC7YnCPAhmXW36giDF5XXa5vtH8/Wfy5WDYTEMDS8zCC3SucE69kPGF0UxHVFOVn lyNEUul/Gv73zSfEp3CEFFqmayS6aDT4e2xxJmaorDMiPHNhYkJgSrPnsf6OCUis EXQIMIfZnPsG5DO5ZqBvB19fMc+46j34wmc3KJczB0d2XPIFYuKYGFEvTm6/vLUq H/yfNFHSKuAt95d+cS+f2zIis+XWffXyr1+b39yvUgVX56G9U3GgStUfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDM/IKrA5hUeRphxS/l1jfA9cwNMB8GA1UdIwQY MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt Zjk2MzMyOTJjOTc3LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3 LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+g1itHn qYVO6O5AYN5oyGvnkSQ/b0fqyp1Bx+njQhph1xcfZ9n18yqFm4TVUgMkWx3J2zkP I+oZbw68yy1RJWxEF2ZF9Q+KMwyg8/3gNyTIfzWurF8vjKUZHuXWZon7K/rAZVWX A3AzZw8r2KYZqgIXyNNp1DjEXYm8F8vlCb8JyC6sV+TtEBDQK8KlUE/TeKKnp/to eW1pSgmJJ1A2CLOPMYQn+9gDGFM6wOI7C5MVH79FlbrNw2/rx7yJqvp/W4nHZoz6 /VtVLwB8m3WLjaoTQYMe/cH9QQhz3AlJ1iCHtvKOeM0D599QAmYxPOtOVdPXedJZ smijCO5NGZAVzA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:19:20 2025 by rpki-client