This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: jGrVP6usjG4aA1GjX5mwmOfnUVqeUBadYcLsrveaOhI= Subject key identifier: 29:70:6B:1B:AD:DE:B1:58:7D:C0:63:78:3E:E8:AD:D9:80:00:7A:B4 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B39B43C7C224B28BDE673AB3DBB2B3CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 17CC Signing time: Sat 20 Dec 2025 03:01:11 +0000 Manifest this update: Sat 20 Dec 2025 03:01:11 +0000 Manifest next update: Sun 21 Dec 2025 03:01:11 +0000 Files and hashes: 1: 0EaLu_k89DNGfsZcg8vYEQaMEMU.roa (hash: s+EVq62YWza3oLT0UyPheUnG+mA6bTN6S6sxdqwK5rg=) 2: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (hash: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=) 3: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 4: DNPB7L1gjavjhiX4IdgkuencdVo.roa (hash: Ak2Mijqk6LpAh0/fChLnWhopf3Ex4RUgat42f1/E/Hc=) 5: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (hash: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=) 6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: 7UlxexuCIfU360Ny9FdX0Icsbio6FGXQ0Y8dYF+6YZw=) 7: exu2V3MDMWUgQoAAO324t6RZezE.roa (hash: vzXnLaEVU/+BdpdjEE/HgCx55xSHkRHFXGxKZLhvrto=) 8: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=) 9: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:3c:7c:22:4b:28:bd:e6:73:ab:3d:bb:2b:3c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Dec 20 03:01:11 2025 GMT Not After : Dec 21 03:01:11 2025 GMT Subject: CN=29706b1baddeb1587dc063783ee8add980007ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:b7:a3:43:bc:d6:d6:32:03:a8:01:55:6e: 40:1b:13:63:aa:0c:8c:34:2f:d3:2f:36:71:f4:40: 0a:ed:50:c5:df:ca:12:37:4e:fa:09:63:e8:81:4a: 45:f0:db:ce:78:80:af:17:2b:42:4a:e7:16:a4:27: 9b:b4:c5:72:0e:65:25:90:55:69:94:09:b5:4b:aa: 7c:c7:9f:15:e6:78:f3:b0:34:2a:12:0e:46:d8:be: 6f:d5:0d:c7:fe:d8:b5:84:3c:7c:11:83:7f:c1:6d: 0f:45:71:88:0c:02:fe:91:20:11:90:67:b2:e1:64: 80:6b:40:1e:e0:e7:5e:49:c1:b1:5e:1e:46:49:bb: fe:dc:be:1b:84:27:7b:f9:e0:df:51:41:96:1c:d2: 60:3c:19:0a:0b:f1:83:3d:c0:22:47:9e:45:58:29: 4c:0c:42:d4:38:7a:b8:b2:bf:3a:18:93:5d:6f:a3: 1c:97:67:bc:27:6b:05:12:41:aa:7a:d4:dd:d2:d8: cc:e8:da:a3:b5:5c:b6:83:0b:61:87:9e:ad:bd:17: d1:47:c2:bd:0d:b0:9f:f9:6c:8e:09:cc:d8:b6:c6: 60:c4:28:36:49:75:00:a7:ba:c7:88:e4:81:ba:cb: 2c:1c:17:09:05:5c:82:d0:5b:40:31:65:bf:49:fe: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:6B:1B:AD:DE:B1:58:7D:C0:63:78:3E:E8:AD:D9:80:00:7A:B4 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:c2:8c:e6:bd:38:1a:39:80:79:4b:6e:dd:28:28:5c:11: 87:81:2e:9f:d3:33:e4:e4:6d:32:f9:1d:22:e3:c1:1c:71:63: 9a:d0:c8:d6:a6:1a:02:d6:14:72:20:84:8b:6f:4f:34:ce:a1: d9:db:3b:fa:07:66:df:d2:08:c9:9b:73:38:84:11:05:17:d1: bf:7a:83:10:77:7f:a8:7a:c5:81:82:5d:fc:df:19:e5:11:41: 88:dd:6f:c0:02:d7:26:88:17:61:b4:c2:69:e8:0e:28:43:21: 58:f6:34:a1:45:fd:33:4c:79:5c:78:6e:47:9a:d1:25:3a:18: 49:fb:01:d6:28:fb:d2:e8:bc:c4:99:7b:cf:74:8f:93:c5:dc: 74:74:12:7d:e3:d6:2e:32:58:70:a3:af:ff:07:84:fd:eb:dd: e7:d9:84:54:2b:c6:23:0f:77:32:cd:b2:9a:93:75:f1:47:c9: 28:02:74:8c:20:d5:aa:38:48:75:f7:96:36:4a:3b:3d:bc:ca: 8c:06:95:ab:e4:3d:72:eb:33:bb:a0:5f:d2:9e:fc:70:4d:03: c6:66:44:c9:18:9f:ba:18:38:cd:12:5c:0d:18:3a:5e:61:67: eb:29:1d:49:73:cd:ce:13:fe:f6:22:62:c2:69:bc:9e:50:6f: 9c:a3:4f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDx8IksoveZzqz27Kzz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUxMjIwMDMwMTExWhcNMjUxMjIxMDMwMTExWjAzMTEwLwYDVQQD EygyOTcwNmIxYmFkZGViMTU4N2RjMDYzNzgzZWU4YWRkOTgwMDA3YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vC3o0O81tYyA6gBVW5AGxNjqgyM NC/TLzZx9EAK7VDF38oSN076CWPogUpF8NvOeICvFytCSucWpCebtMVyDmUlkFVp lAm1S6p8x58V5njzsDQqEg5G2L5v1Q3H/ti1hDx8EYN/wW0PRXGIDAL+kSARkGey 4WSAa0Ae4OdeScGxXh5GSbv+3L4bhCd7+eDfUUGWHNJgPBkKC/GDPcAiR55FWClM DELUOHq4sr86GJNdb6Mcl2e8J2sFEkGqetTd0tjM6NqjtVy2gwthh56tvRfRR8K9 DbCf+WyOCczYtsZgxCg2SXUAp7rHiOSBusssHBcJBVyC0FtAMWW/Sf58kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClwaxut3rFYfcBjeD7ordmAAHq0MB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR3CjOa9 OBo5gHlLbt0oKFwRh4Eun9Mz5ORtMvkdIuPBHHFjmtDI1qYaAtYUciCEi29PNM6h 2ds7+gdm39IIyZtzOIQRBRfRv3qDEHd/qHrFgYJd/N8Z5RFBiN1vwALXJogXYbTC aegOKEMhWPY0oUX9M0x5XHhuR5rRJToYSfsB1ij70ui8xJl7z3SPk8XcdHQSfePW LjJYcKOv/weE/evd59mEVCvGIw93Ms2ympN18UfJKAJ0jCDVqjhIdfeWNko7PbzK jAaVq+Q9cuszu6Bf0p78cE0DxmZEyRifuhg4zRJcDRg6XmFn6ykdSXPNzhP+9iJi wmm8nlBvnKNPrA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:13 2025 by rpki-client