This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json) Hash identifier: HZ9+s4O4mLMTE5nIdY6/K7FJDugOqldl8vhwJ9VyAhI= Subject key identifier: C0:B6:EA:A4:34:7B:20:0D:78:03:8B:2C:FA:4D:3D:FD:B6:C4:7C:F1 Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Certificate serial: 019B3D59FAD3296E0C1A63D931DAA0D19542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft Manifest number: 2B Signing time: Sat 20 Dec 2025 20:01:05 +0000 Manifest this update: Sat 20 Dec 2025 20:01:05 +0000 Manifest next update: Sun 21 Dec 2025 20:01:05 +0000 Files and hashes: 1: NuJpRF5J3Htz7cWdgH1UXYMDGck.roa (hash: HbAwpyAroslRNiC7LzlkeCES+JwGY9JPqe8c8RZrPKk=) 2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: uMGo1IRVQvQdyNtpeK9YRkZFMjjjOhWPDOR6Yvkr4AY=) 3: qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa (hash: sSWarW85n1Eqs9mnUdnPntZW0uPBSKr4hbBJ8eGToSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:fa:d3:29:6e:0c:1a:63:d9:31:da:a0:d1:95:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Validity Not Before: Dec 20 20:01:05 2025 GMT Not After : Dec 21 20:01:05 2025 GMT Subject: CN=c0b6eaa4347b200d78038b2cfa4d3dfdb6c47cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:60:2c:8a:77:55:8b:8a:bf:7e:d5:4b:3e: 5a:ff:a6:ba:ab:b0:97:92:cd:24:79:dc:fb:ef:e3: 5e:2e:d5:91:69:89:b2:79:31:a1:2f:5d:9e:6d:37: 75:81:83:f3:c9:1f:52:44:fb:70:74:1d:a8:e2:0c: cb:a2:b7:da:a2:38:c0:0a:9e:56:19:f7:d9:e9:3a: 87:32:1f:6d:af:56:47:00:65:e1:60:3c:0c:2c:57: 98:46:1d:ce:f6:91:f3:37:9d:e9:04:b9:4f:4f:2f: ac:2c:17:89:b2:36:61:30:f6:45:77:80:1b:91:9c: 25:46:f7:31:90:ed:88:59:30:2b:d2:d0:dd:a9:ad: ab:ec:1f:79:08:7c:28:ea:aa:70:ca:9e:d1:64:7f: 48:d0:0f:ef:bf:66:70:a6:7c:07:c7:c0:c5:22:63: 9d:ec:23:92:ae:c3:9b:18:d3:8b:ab:d4:42:5e:b9: 02:35:1d:06:a8:99:31:d0:fb:92:b8:eb:bf:83:f2: 88:47:d5:03:82:fc:3f:4c:42:be:79:94:e3:3f:59: 56:23:73:9a:17:2d:d4:c5:54:f4:2e:bb:84:48:24: 88:f3:26:55:a1:d2:98:92:e1:d0:e5:61:a4:46:36: 38:c2:68:f9:b7:3e:da:a8:2f:67:b9:1a:3d:f1:ea: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:EA:A4:34:7B:20:0D:78:03:8B:2C:FA:4D:3D:FD:B6:C4:7C:F1 X509v3 Authority Key Identifier: keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a6:8a:4f:5a:76:e4:e0:09:a0:83:d7:f4:3e:e1:b1:f3:47: ed:51:57:16:5b:85:47:86:51:2b:00:e6:2a:15:0d:2b:55:9e: 38:14:cf:15:08:f1:7a:8c:70:87:38:08:e4:2a:2c:3e:ca:3c: a9:a4:4c:51:69:ab:ae:fe:15:eb:38:8c:30:d5:d8:8e:05:7d: 5e:28:6d:4c:d7:7f:61:c9:46:48:74:22:49:27:9d:d7:6a:c7: d6:e4:9a:a7:ed:bd:d6:25:18:ba:33:56:23:9f:f9:1d:2e:66: b1:2d:af:39:19:85:0d:74:15:b4:07:63:cb:16:6b:fc:f0:36: 25:f7:36:e0:1c:05:e5:49:d3:17:aa:b1:ab:f7:24:cd:c6:cf: 04:8d:c0:5e:1c:c3:53:d0:e1:58:e3:aa:69:f2:1e:e1:c9:1e: ed:68:5d:ce:32:f2:fd:45:88:76:66:12:99:39:90:a3:ff:9f: 65:da:6b:b0:c6:9b:43:0a:b9:2f:5c:ac:8d:cf:79:28:b0:c4: 94:fe:78:79:f2:6d:8e:88:8e:c0:48:40:e1:cd:93:19:5a:45: 45:46:d9:28:88:c9:0a:26:a2:f0:ec:3f:12:d9:40:5a:2b:3c: 06:73:c5:5d:55:48:9a:ca:2b:7e:58:8e:68:91:4d:83:94:6f: 29:6a:fc:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfrTKW4MGmPZMdqg0ZVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmYzNWQ4OTkwYTdiMjk0YzQ1Mzk1NmUwZTgyNDJjMGFh Y2IwMzEwHhcNMjUxMjIwMjAwMTA1WhcNMjUxMjIxMjAwMTA1WjAzMTEwLwYDVQQD EyhjMGI2ZWFhNDM0N2IyMDBkNzgwMzhiMmNmYTRkM2RmZGI2YzQ3Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRNgLIp3VYuKv37VSz5a/6a6q7CX ks0kedz77+NeLtWRaYmyeTGhL12ebTd1gYPzyR9SRPtwdB2o4gzLorfaojjACp5W GffZ6TqHMh9tr1ZHAGXhYDwMLFeYRh3O9pHzN53pBLlPTy+sLBeJsjZhMPZFd4Ab kZwlRvcxkO2IWTAr0tDdqa2r7B95CHwo6qpwyp7RZH9I0A/vv2ZwpnwHx8DFImOd 7COSrsObGNOLq9RCXrkCNR0GqJkx0PuSuOu/g/KIR9UDgvw/TEK+eZTjP1lWI3Oa Fy3UxVT0LruESCSI8yZVodKYkuHQ5WGkRjY4wmj5tz7aqC9nuRo98eqJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMC26qQ0eyANeAOLLPpNPf22xHzxMB8GA1UdIwQY MBaAFG1vNdiZCnspTEU5VuDoJCwKrLAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUt N2EwOTZmNjA3ZTI2LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUtN2EwOTZmNjA3ZTI2 LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKaKT1p2 5OAJoIPX9D7hsfNH7VFXFluFR4ZRKwDmKhUNK1WeOBTPFQjxeoxwhzgI5CosPso8 qaRMUWmrrv4V6ziMMNXYjgV9XihtTNd/YclGSHQiSSed12rH1uSap+291iUYujNW I5/5HS5msS2vORmFDXQVtAdjyxZr/PA2Jfc24BwF5UnTF6qxq/ckzcbPBI3AXhzD U9DhWOOqafIe4cke7WhdzjLy/UWIdmYSmTmQo/+fZdprsMabQwq5L1ysjc95KLDE lP54efJtjoiOwEhA4c2TGVpFRUbZKIjJCiai8Ow/EtlAWis8BnPFXVVImsorfliO aJFNg5RvKWr8Xg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:39:39 2025 by rpki-client