This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json) Hash identifier: CPeXFBDi8n/pNT/EP/0R1t7sXsyJRX4+oVH3q9mwGIo= Subject key identifier: F3:18:4F:13:1F:5A:DF:0F:1B:D6:A1:D2:06:29:23:9F:9B:2A:96:A9 Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Certificate serial: 019B661F0109F5FEA72219770D59EE797972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft Manifest number: 088E Signing time: Sun 28 Dec 2025 18:01:06 +0000 Manifest this update: Sun 28 Dec 2025 18:01:06 +0000 Manifest next update: Mon 29 Dec 2025 18:01:06 +0000 Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=) 2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: mles6pBlFP+63ZNv5R1kcr9+fuLwLy9FSwQiRCR9Ytg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:01:09:f5:fe:a7:22:19:77:0d:59:ee:79:79:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0 Validity Not Before: Dec 28 18:01:06 2025 GMT Not After : Dec 29 18:01:06 2025 GMT Subject: CN=f3184f131f5adf0f1bd6a1d20629239f9b2a96a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:3b:7b:96:ae:0f:62:7b:6b:2b:1d:84:5d: 63:0f:d0:88:c1:fe:91:3d:52:60:35:70:bb:23:d4: 7e:cc:4e:46:3a:64:0c:9f:92:a4:6c:e3:d8:ec:f2: f9:97:39:21:09:e5:e3:9f:57:e8:f4:39:25:43:9c: e6:52:13:82:cf:f8:c8:e9:37:89:86:6e:b3:54:52: 76:c6:76:0d:51:54:1f:2f:77:6b:fc:0e:c1:fe:15: 34:75:de:d4:f4:5e:91:22:5f:12:8f:cc:03:32:20: b1:00:e5:9c:40:23:37:8a:65:af:f5:fc:ee:03:f5: a0:22:f2:92:4d:7d:27:c8:da:d9:f2:32:d4:b5:89: d6:6d:b2:f1:05:16:b2:15:87:32:ea:ae:29:c5:c2: d7:12:e3:fd:43:81:b6:25:3f:da:33:25:c6:76:7e: 67:ee:6a:06:b5:58:82:b4:3e:70:b0:33:be:7b:d1: 36:eb:c6:73:b3:bd:79:9b:0b:e6:74:ff:a0:2b:c9: 44:dd:8f:f8:34:df:c8:d3:d3:90:69:0d:53:b1:4e: b3:5c:a6:f3:79:da:0b:5d:56:ff:7e:1a:13:64:ed: 14:a0:0e:d0:59:8c:44:b5:91:02:52:d4:41:1f:f3: 83:1b:b5:da:13:1c:ba:d0:17:f4:d8:7c:26:b4:fb: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:4F:13:1F:5A:DF:0F:1B:D6:A1:D2:06:29:23:9F:9B:2A:96:A9 X509v3 Authority Key Identifier: keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:62:c2:ac:66:e1:ec:ef:aa:fc:f8:de:1d:f4:8b:b9:31: ea:bc:01:bb:b0:52:3b:80:44:59:ea:24:f7:cb:5c:71:eb:06: f0:d9:21:54:35:e6:b4:5f:2c:18:26:f3:b3:12:be:92:95:94: 55:da:be:46:93:71:4c:fc:79:04:5c:2a:40:88:65:d5:9f:37: ad:d2:d5:55:47:89:50:3b:ae:96:77:d0:aa:17:46:3f:65:1a: 4e:f6:3f:38:e3:db:d0:f4:ce:21:0e:01:4c:c2:16:50:a8:50: f6:c4:c2:46:49:42:b7:dc:b6:5f:b5:dd:a5:d4:f0:d4:eb:c3: 6c:89:dd:86:b6:ea:b8:01:b8:0d:7d:e3:36:19:79:82:c5:96: a2:c4:1e:9c:18:b6:9a:e6:e8:f1:f5:ed:72:08:38:35:c7:9d: 92:99:7e:07:ae:d8:21:0e:9d:41:94:90:26:87:b9:16:b3:be: f9:33:ce:b3:55:88:17:ac:12:d3:8c:dc:1f:a3:e2:77:39:37: 53:0c:84:88:39:a5:37:c9:b5:60:af:77:15:48:fe:7c:e7:00: 9e:54:bb:4f:78:29:84:3e:7a:f0:1c:01:fe:b5:50:d4:a9:79: b0:07:f5:39:87:e0:3d:45:d0:c0:ff:ab:45:d0:fa:3f:c2:0f: 99:79:ef:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHwEJ9f6nIhl3DVnueXlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTkyNTM2Y2UwNmZkYWE1YWMyZWU0ODExN2NmNTdhYTNi NGM4ZDAwHhcNMjUxMjI4MTgwMTA2WhcNMjUxMjI5MTgwMTA2WjAzMTEwLwYDVQQD EyhmMzE4NGYxMzFmNWFkZjBmMWJkNmExZDIwNjI5MjM5ZjliMmE5NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiI7e5auD2J7aysdhF1jD9CIwf6R PVJgNXC7I9R+zE5GOmQMn5KkbOPY7PL5lzkhCeXjn1fo9DklQ5zmUhOCz/jI6TeJ hm6zVFJ2xnYNUVQfL3dr/A7B/hU0dd7U9F6RIl8Sj8wDMiCxAOWcQCM3imWv9fzu A/WgIvKSTX0nyNrZ8jLUtYnWbbLxBRayFYcy6q4pxcLXEuP9Q4G2JT/aMyXGdn5n 7moGtViCtD5wsDO+e9E268Zzs715mwvmdP+gK8lE3Y/4NN/I09OQaQ1TsU6zXKbz edoLXVb/fhoTZO0UoA7QWYxEtZECUtRBH/ODG7XaExy60Bf02HwmtPsbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMYTxMfWt8PG9ah0gYpI5+bKpapMB8GA1UdIwQY MBaAFGxZJTbOBv2qWsLuSBF89XqjtMjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWIt MGEyZWM1YTIzYjk4LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWItMGEyZWM1YTIzYjk4 LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvFiwqxm 4ezvqvz43h30i7kx6rwBu7BSO4BEWeok98tccesG8NkhVDXmtF8sGCbzsxK+kpWU Vdq+RpNxTPx5BFwqQIhl1Z83rdLVVUeJUDuulnfQqhdGP2UaTvY/OOPb0PTOIQ4B TMIWUKhQ9sTCRklCt9y2X7XdpdTw1OvDbIndhrbquAG4DX3jNhl5gsWWosQenBi2 mubo8fXtcgg4Ncedkpl+B67YIQ6dQZSQJoe5FrO++TPOs1WIF6wS04zcH6Pidzk3 UwyEiDmlN8m1YK93FUj+fOcAnlS7T3gphD568BwB/rVQ1Kl5sAf1OYfgPUXQwP+r RdD6P8IPmXnvmA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:09 2025 by rpki-client