This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json) Hash identifier: yfckJyy8AXSgnwK20x6I3yEudvQPM4AStXTHKx3t+qw= Subject key identifier: 33:E6:74:03:80:6A:5C:83:CE:CE:41:E3:24:AB:32:6D:C0:4B:D8:F8 Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612 Certificate serial: 019B3AC656968400D900F4D47D415333AA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft Manifest number: 1716 Signing time: Sat 20 Dec 2025 08:00:35 +0000 Manifest this update: Sat 20 Dec 2025 08:00:35 +0000 Manifest next update: Sun 21 Dec 2025 08:00:35 +0000 Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=) 2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: Z0kttKPsuf7qG42iBuGKcP3aUK5pr7DgXFzbFDIzifw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:56:96:84:00:d9:00:f4:d4:7d:41:53:33:aa:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e94cdea9365612adf7611144668254b388fa612 Validity Not Before: Dec 20 08:00:35 2025 GMT Not After : Dec 21 08:00:35 2025 GMT Subject: CN=33e67403806a5c83cece41e324ab326dc04bd8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:b8:35:54:ca:e3:2f:e0:c6:fd:8f:af:62: 2f:ce:da:eb:83:ab:fd:42:37:6f:50:d6:a6:1d:ce: 1f:57:5a:b2:a5:47:b6:d1:4d:49:59:bf:c7:84:3a: 51:f3:58:ef:f8:5b:a1:c1:eb:fb:68:d7:88:b9:05: 2c:d1:c1:36:ec:70:e5:06:e7:4f:ad:87:a8:44:45: 7e:23:b7:82:df:12:5f:02:7b:90:3e:39:ea:ab:a4: 3c:c1:4e:21:37:f8:db:33:ad:2e:39:3b:3d:72:91: 94:c2:f9:87:43:52:f9:dd:d4:9d:4b:73:2a:73:85: 04:b9:68:af:5d:64:65:03:b9:bd:36:5b:a2:42:bd: c1:d1:59:93:7b:02:c5:99:25:b6:ac:11:72:5c:47: 11:3a:78:61:f6:6c:d1:47:bd:ad:09:64:38:fe:d7: a7:74:e9:08:0a:be:75:0e:99:6e:3f:bd:7c:ec:9f: 58:45:ce:73:04:f2:95:d9:0e:00:5d:d0:ed:56:25: 92:5f:09:32:0b:c6:2c:e4:1e:2d:3d:10:8e:b6:29: 9a:25:d3:39:42:77:4d:2e:f8:8e:bd:49:7f:1e:06: 5d:37:3d:c6:31:e3:fa:86:9f:8e:a9:0b:76:9e:0e: 51:65:2e:e2:b1:72:ba:a5:cf:cb:9e:fd:d2:98:11: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:74:03:80:6A:5C:83:CE:CE:41:E3:24:AB:32:6D:C0:4B:D8:F8 X509v3 Authority Key Identifier: keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:89:48:db:83:0d:79:bd:77:3b:af:0c:1f:89:4d:bd:4a: 8f:44:66:fa:3a:d1:87:86:cf:06:0c:d9:c7:a0:98:6d:3d:16: 6f:b9:53:32:18:f6:0f:dd:0f:5d:d7:34:50:06:81:e0:c9:7b: f9:55:a1:07:df:9f:df:73:9f:0b:7d:0d:85:f4:c5:95:56:4e: a9:2a:a4:81:68:10:10:ec:68:7b:0a:eb:3a:15:eb:67:a6:46: 69:1c:22:b8:b8:03:0c:7e:21:75:7e:d6:e9:c9:23:c7:9d:dd: f0:9d:83:30:b8:bc:9e:4b:b0:b0:e7:34:e7:1e:66:29:34:7c: db:72:44:a8:27:05:80:c1:91:34:3b:94:b3:57:ec:06:26:29: 59:ce:4b:ec:97:e2:aa:7d:33:8e:4c:82:68:e4:75:72:12:42: e6:d9:22:31:ec:c7:88:1f:8f:dc:0a:67:5f:5b:66:ef:a9:23: f8:8c:b3:6a:95:f6:62:a1:a2:4d:96:27:16:dc:8e:3d:e8:b1: 2c:c5:06:df:39:29:18:25:36:a7:30:89:75:1d:c1:d1:a4:f7: 1b:04:ce:fe:b7:17:95:65:3d:e2:b3:2a:3a:fe:ba:0d:0b:b9: 7b:0e:90:4b:00:b2:66:a9:f0:ce:73:4b:e1:b7:94:c5:3a:94: ea:2f:c7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlaWhADZAPTUfUFTM6oyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOTRjZGVhOTM2NTYxMmFkZjc2MTExNDQ2NjgyNTRiMzg4 ZmE2MTIwHhcNMjUxMjIwMDgwMDM1WhcNMjUxMjIxMDgwMDM1WjAzMTEwLwYDVQQD EygzM2U2NzQwMzgwNmE1YzgzY2VjZTQxZTMyNGFiMzI2ZGMwNGJkOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SS4NVTK4y/gxv2Pr2Ivztrrg6v9 QjdvUNamHc4fV1qypUe20U1JWb/HhDpR81jv+Fuhwev7aNeIuQUs0cE27HDlBudP rYeoREV+I7eC3xJfAnuQPjnqq6Q8wU4hN/jbM60uOTs9cpGUwvmHQ1L53dSdS3Mq c4UEuWivXWRlA7m9NluiQr3B0VmTewLFmSW2rBFyXEcROnhh9mzRR72tCWQ4/ten dOkICr51DpluP7187J9YRc5zBPKV2Q4AXdDtViWSXwkyC8Ys5B4tPRCOtimaJdM5 QndNLviOvUl/HgZdNz3GMeP6hp+OqQt2ng5RZS7isXK6pc/Lnv3SmBEwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPmdAOAalyDzs5B4ySrMm3AS9j4MB8GA1UdIwQY MBaAFG6UzeqTZWEq33YRFEZoJUs4j6YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2Njgt OWFmN2QyYjU5YTRjLzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2NjgtOWFmN2QyYjU5YTRj LzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGmJSNuD DXm9dzuvDB+JTb1Kj0Rm+jrRh4bPBgzZx6CYbT0Wb7lTMhj2D90PXdc0UAaB4Ml7 +VWhB9+f33OfC30NhfTFlVZOqSqkgWgQEOxoewrrOhXrZ6ZGaRwiuLgDDH4hdX7W 6ckjx53d8J2DMLi8nkuwsOc05x5mKTR823JEqCcFgMGRNDuUs1fsBiYpWc5L7Jfi qn0zjkyCaOR1chJC5tkiMezHiB+P3ApnX1tm76kj+IyzapX2YqGiTZYnFtyOPeix LMUG3zkpGCU2pzCJdR3B0aT3GwTO/rcXlWU94rMqOv66DQu5ew6QSwCyZqnwznNL 4beUxTqU6i/HKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:21:36 2025 by rpki-client