This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json) Hash identifier: aBhKlFnxFvwSmTABXS6P4e7++8cMhH3o3X1tH1MFX4g= Subject key identifier: A1:49:22:8B:93:95:AC:04:45:E2:5C:CF:84:CD:7E:F0:DB:0A:73:AB Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019B3A21953630A1736732A6819F3FABFC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:37 +0000 Manifest this update: Sat 20 Dec 2025 05:00:37 +0000 Manifest next update: Sun 21 Dec 2025 05:00:37 +0000 Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=) 2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: zsarlKDuwERktuYLWsitrBfKHXE5Kxj0lhsVNkChx1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:95:36:30:a1:73:67:32:a6:81:9f:3f:ab:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Dec 20 05:00:37 2025 GMT Not After : Dec 21 05:00:37 2025 GMT Subject: CN=a149228b9395ac0445e25ccf84cd7ef0db0a73ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:94:a1:db:35:22:6c:69:6c:a6:62:f4:dd: 0f:8a:c3:30:7f:0f:f7:32:69:c5:d6:9e:99:e4:7e: e4:8f:e5:4f:00:06:ce:7c:06:bf:77:da:c2:4a:c4: 48:b0:ec:47:eb:d3:29:65:50:9a:8d:3f:be:da:e7: 79:a3:d4:13:27:0c:6a:19:5d:9b:86:b8:88:e2:61: 0b:48:49:22:bf:2e:6f:71:71:ba:3f:2d:f0:f0:a2: 66:59:8e:9a:33:55:e5:ab:fe:8c:3b:ea:3d:ce:69: e9:b0:f3:b0:58:7d:20:07:91:75:a8:5d:c3:2f:a8: 67:71:75:20:d5:69:fb:17:44:8f:55:e0:4c:71:9c: d2:5b:30:35:72:26:2d:96:86:8d:a8:e3:1c:7e:07: 5b:3f:17:93:c5:46:3b:71:50:f6:fd:54:37:7a:d2: 83:e9:3f:09:93:70:00:c3:6f:c4:ef:49:76:1d:fc: a2:dd:28:fe:b4:a2:bc:10:41:96:2d:88:1a:46:5b: e5:8a:cf:b1:9f:98:df:3d:74:22:36:cc:ac:0d:f8: b1:20:f8:ea:be:70:a4:e5:68:82:0b:a3:b9:d7:a4: b1:d1:d2:22:df:ac:13:2e:82:1f:c5:f1:13:5b:84: d4:f1:b2:b7:36:57:c7:04:f7:25:5f:bd:ca:2a:02: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:22:8B:93:95:AC:04:45:E2:5C:CF:84:CD:7E:F0:DB:0A:73:AB X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dc:0c:4b:22:35:a1:53:56:d5:d7:68:7c:21:61:5a:a6:a8: e6:b3:39:f8:9f:10:4b:aa:e5:3b:19:e3:26:2a:a2:20:dd:c4: 7a:8a:a8:b6:d3:5d:52:58:c0:b4:84:ac:be:3b:50:5c:f2:74: 7d:05:48:51:58:c4:ad:67:a0:1f:a6:c9:09:d8:4d:83:a0:7e: 8d:5d:97:ed:fc:0b:3c:3f:a4:48:af:2b:56:0f:58:30:c1:90: ce:0e:10:07:71:44:58:21:e5:87:fb:2e:74:00:2d:9f:d7:ad: 55:7d:a9:b4:ab:d1:f3:68:b4:2b:45:81:28:ab:b9:e8:e8:3d: c6:38:c8:51:d1:65:ca:0e:db:7f:7f:26:0b:91:68:5e:e5:7e: 60:79:d9:f1:dd:a8:fc:9e:14:dd:81:5f:04:99:7a:8e:84:01: 8d:29:e2:51:2d:55:1b:1b:b8:d2:43:75:d8:dd:72:a1:b8:19: 46:5e:27:ea:a5:c9:00:ba:91:f9:50:b9:de:22:ea:d6:5f:8c: 5d:72:d8:1c:ce:fd:44:bc:cd:a4:79:40:d9:7d:18:14:c3:a8: c8:29:f6:1c:d4:5c:87:6d:14:47:34:8a:53:d2:c0:2d:4e:7b: e6:06:72:2b:b1:7d:15:da:31:0e:18:5a:37:00:1c:e6:d5:e9: d0:95:c2:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZU2MKFzZzKmgZ8/q/yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjUxMjIwMDUwMDM3WhcNMjUxMjIxMDUwMDM3WjAzMTEwLwYDVQQD EyhhMTQ5MjI4YjkzOTVhYzA0NDVlMjVjY2Y4NGNkN2VmMGRiMGE3M2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkCUods1ImxpbKZi9N0PisMwfw/3 MmnF1p6Z5H7kj+VPAAbOfAa/d9rCSsRIsOxH69MpZVCajT++2ud5o9QTJwxqGV2b hriI4mELSEkivy5vcXG6Py3w8KJmWY6aM1Xlq/6MO+o9zmnpsPOwWH0gB5F1qF3D L6hncXUg1Wn7F0SPVeBMcZzSWzA1ciYtloaNqOMcfgdbPxeTxUY7cVD2/VQ3etKD 6T8Jk3AAw2/E70l2Hfyi3Sj+tKK8EEGWLYgaRlvlis+xn5jfPXQiNsysDfixIPjq vnCk5WiCC6O516Sx0dIi36wTLoIfxfETW4TU8bK3NlfHBPclX73KKgJBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFJIouTlawEReJcz4TNfvDbCnOrMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9wMSyI1 oVNW1ddofCFhWqao5rM5+J8QS6rlOxnjJiqiIN3EeoqottNdUljAtISsvjtQXPJ0 fQVIUVjErWegH6bJCdhNg6B+jV2X7fwLPD+kSK8rVg9YMMGQzg4QB3FEWCHlh/su dAAtn9etVX2ptKvR82i0K0WBKKu56Og9xjjIUdFlyg7bf38mC5FoXuV+YHnZ8d2o /J4U3YFfBJl6joQBjSniUS1VGxu40kN12N1yobgZRl4n6qXJALqR+VC53iLq1l+M XXLYHM79RLzNpHlA2X0YFMOoyCn2HNRch20URzSKU9LALU575gZyK7F9FdoxDhha NwAc5tXp0JXCCQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:03:20 2025 by rpki-client