This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json) Hash identifier: MlSD2/uPOhUbF3ZdehrWYE0SqoA4ZpoUwm2g4DguEN4= Subject key identifier: F7:8B:9E:43:7D:3E:A7:B5:77:17:17:33:24:DD:A1:9A:97:61:77:B2 Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Certificate serial: 019B3E6CB22625E56435A0DCA266EA5490FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft Manifest number: 0920 Signing time: Sun 21 Dec 2025 01:01:09 +0000 Manifest this update: Sun 21 Dec 2025 01:01:09 +0000 Manifest next update: Mon 22 Dec 2025 01:01:09 +0000 Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=) 2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=) 3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: dUrKWXhHCW3nbYS4UBuQGvC7C6fmPGaOzNXjjAul4MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:b2:26:25:e5:64:35:a0:dc:a2:66:ea:54:90:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Validity Not Before: Dec 21 01:01:09 2025 GMT Not After : Dec 22 01:01:09 2025 GMT Subject: CN=f78b9e437d3ea7b57717173324dda19a976177b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:e0:e7:57:51:56:50:9b:af:32:64:cf:5e: 86:1a:3a:b6:87:2c:99:9c:79:b4:26:2c:fb:89:70: a9:fd:78:d2:c1:50:cd:f1:2f:33:45:c7:d8:aa:5d: f9:bb:9a:f6:6d:21:89:d7:56:d4:3d:3c:2f:42:7a: bb:4c:a7:a3:43:31:c4:4f:2c:40:91:c6:04:69:2c: d0:63:e2:4e:02:86:c0:72:cc:fc:fc:ae:df:2d:9b: 5c:7f:d4:00:b0:92:5c:a1:b9:8a:99:90:18:f5:83: 9a:49:73:60:30:f0:a3:00:61:b8:36:73:91:cd:fa: 33:00:d5:e5:f0:a9:b4:e5:49:00:34:aa:53:cd:f1: 16:af:f7:8f:d3:5e:f4:39:e8:16:71:f5:01:cd:03: d9:70:db:53:0c:c3:5f:b4:7d:4d:c6:19:b3:d1:df: a8:01:53:be:9d:fa:1a:c4:b7:b8:ec:8f:ec:25:f6: d4:16:29:40:37:12:59:e1:87:de:1e:ba:d7:cd:8c: fb:15:57:6d:7d:d4:58:16:ed:e8:23:11:9a:55:ee: a9:0f:14:98:f2:76:dc:70:d9:21:dc:73:88:09:3f: 4b:a9:b1:4f:5f:a1:69:16:93:93:9a:53:24:74:06: 7e:bf:be:a4:f8:5f:73:19:14:7b:6f:48:3c:5e:02: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:9E:43:7D:3E:A7:B5:77:17:17:33:24:DD:A1:9A:97:61:77:B2 X509v3 Authority Key Identifier: keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a3:fe:f7:c2:6a:41:53:19:38:5c:76:66:43:2d:24:10:79: e6:ed:33:2d:26:1d:3c:20:18:2c:ed:38:ff:e0:9e:1d:4f:ba: a6:d8:5b:a5:b5:d5:55:f3:b9:5b:3b:b0:ae:2c:91:8e:81:ae: ec:eb:07:7a:a9:ba:87:72:57:3c:d9:73:29:29:ca:b0:1d:3a: 98:62:b8:b1:fb:86:8d:c4:24:bf:b6:4e:ea:dc:69:65:ea:ba: 6c:13:a2:e7:1d:63:6d:41:b7:c5:d0:0b:ec:c5:99:15:32:21: e2:d2:0b:6c:56:79:bb:da:4f:54:23:24:39:30:90:65:a8:21: c1:93:0f:3b:10:ee:b4:61:4d:6a:b1:eb:4f:1e:68:8c:6b:1d: 96:bb:c3:84:10:96:f2:0f:36:34:a1:6a:c3:8b:f7:d6:82:71: c5:7b:a0:60:cf:d4:a9:94:5c:94:08:1d:a9:5e:58:73:fa:4f: 98:d6:f7:2d:29:d7:21:34:06:23:6d:a7:10:83:25:cd:ba:f6: a5:1e:59:05:27:b2:76:87:a5:0b:14:e4:33:89:b1:24:a7:79: 07:73:1e:5c:d8:b5:2a:47:25:bc:cb:78:38:d1:de:0f:5e:72: 79:09:1c:e7:2b:da:17:1a:a8:1a:eb:5c:09:d7:ba:57:9b:88: 7a:f1:82:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLImJeVkNaDcombqVJD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl NTJmN2EwHhcNMjUxMjIxMDEwMTA5WhcNMjUxMjIyMDEwMTA5WjAzMTEwLwYDVQQD EyhmNzhiOWU0MzdkM2VhN2I1NzcxNzE3MzMyNGRkYTE5YTk3NjE3N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vTg51dRVlCbrzJkz16GGjq2hyyZ nHm0Jiz7iXCp/XjSwVDN8S8zRcfYql35u5r2bSGJ11bUPTwvQnq7TKejQzHETyxA kcYEaSzQY+JOAobAcsz8/K7fLZtcf9QAsJJcobmKmZAY9YOaSXNgMPCjAGG4NnOR zfozANXl8Km05UkANKpTzfEWr/eP0170OegWcfUBzQPZcNtTDMNftH1Nxhmz0d+o AVO+nfoaxLe47I/sJfbUFilANxJZ4YfeHrrXzYz7FVdtfdRYFu3oIxGaVe6pDxSY 8nbccNkh3HOICT9LqbFPX6FpFpOTmlMkdAZ+v76k+F9zGRR7b0g8XgLpzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeLnkN9Pqe1dxcXMyTdoZqXYXeyMB8GA1UdIwQY MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2 LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaP+98Jq QVMZOFx2ZkMtJBB55u0zLSYdPCAYLO04/+CeHU+6pthbpbXVVfO5WzuwriyRjoGu 7OsHeqm6h3JXPNlzKSnKsB06mGK4sfuGjcQkv7ZO6txpZeq6bBOi5x1jbUG3xdAL 7MWZFTIh4tILbFZ5u9pPVCMkOTCQZaghwZMPOxDutGFNarHrTx5ojGsdlrvDhBCW 8g82NKFqw4v31oJxxXugYM/UqZRclAgdqV5Yc/pPmNb3LSnXITQGI22nEIMlzbr2 pR5ZBSeydoelCxTkM4mxJKd5B3MeXNi1KkclvMt4ONHeD15yeQkc5yvaFxqoGutc Cde6V5uIevGCFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:32 2025 by rpki-client