This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json) Hash identifier: v58qlAoyYFJs/RLCTqBifaev+bat7bVcJ9Fv2YpeDFU= Subject key identifier: DF:D5:3D:9E:7B:4B:AE:C0:25:A2:36:5A:6B:00:1A:1F:B2:B5:E8:4D Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Certificate serial: 019B6843DE1C176761B378EA42DBE062E0ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft Manifest number: 1371 Signing time: Mon 29 Dec 2025 04:00:36 +0000 Manifest this update: Mon 29 Dec 2025 04:00:36 +0000 Manifest next update: Tue 30 Dec 2025 04:00:36 +0000 Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=) 2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: oEenzG3yw/UQE+qallT8BvjSJv/Glw/iWG6UOhXvo3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:de:1c:17:67:61:b3:78:ea:42:db:e0:62:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Validity Not Before: Dec 29 04:00:36 2025 GMT Not After : Dec 30 04:00:36 2025 GMT Subject: CN=dfd53d9e7b4baec025a2365a6b001a1fb2b5e84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:fd:2c:6d:f1:12:b7:05:25:80:cd:20:63: 82:33:87:a4:c4:78:9b:c9:db:4f:d6:49:55:1c:bf: ff:2d:b2:00:1e:1e:8b:8c:6c:e9:fc:9b:78:4e:85: ef:70:18:0a:9a:c2:db:ac:e3:18:ef:94:29:9d:ad: 82:01:fc:80:7b:75:dc:90:6b:39:14:30:7d:0b:e5: 4d:c2:d1:6e:a5:4e:1d:57:13:1e:43:ad:67:ab:18: 63:c0:81:ef:5b:7b:92:9d:fc:d7:9e:ca:9c:06:ca: fd:03:c1:ec:64:69:8a:1e:75:53:5e:67:0b:62:e8: cb:cc:9a:40:45:b2:8e:27:09:ff:b9:26:03:06:ba: 7c:00:4e:44:72:48:f1:8e:a6:24:86:ac:83:3a:41: 80:bf:74:ec:70:28:23:a9:ec:64:8f:51:78:75:fa: a3:90:6e:72:04:df:23:e9:d4:e7:a4:88:1e:36:dc: 0e:ac:2b:e5:99:14:56:d0:c6:7c:88:58:dd:5f:62: 42:42:c1:5f:1c:67:6a:3a:bc:3b:18:2b:7f:26:69: 27:3c:d9:8d:dd:56:cd:f6:7e:19:e8:1c:49:c2:bc: 14:57:04:4f:d0:f5:ae:84:2e:16:69:de:20:43:ec: eb:28:b8:7a:da:e1:b8:6b:68:19:47:69:53:f8:f2: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:3D:9E:7B:4B:AE:C0:25:A2:36:5A:6B:00:1A:1F:B2:B5:E8:4D X509v3 Authority Key Identifier: keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:af:79:e2:68:ed:3a:04:5d:67:37:27:94:5e:20:ef:ee: 62:38:10:2c:96:08:ae:2a:db:ea:ce:db:86:d3:79:d3:91:3e: bc:7a:24:99:66:c1:55:8c:61:a0:c5:57:19:a9:8d:df:75:6e: ac:5b:4c:79:96:4e:77:34:a3:c1:34:22:65:04:17:8e:bd:40: 32:b0:1f:db:c0:26:10:23:2b:63:94:c2:cd:95:33:c6:68:33: ac:84:5a:b4:e6:e7:9a:3a:3a:97:c8:f6:85:d6:4c:aa:e6:af: 00:33:d1:ce:8c:72:21:09:a2:0d:17:5d:f3:f5:b9:6d:a0:5d: c2:15:40:9d:c0:5a:80:2f:cd:10:15:d3:48:99:54:09:e4:8c: 8f:34:8c:94:3c:a2:12:44:0d:aa:a8:b4:5f:6a:e9:1e:0d:78: 2a:41:bc:72:e9:32:d2:88:06:81:d5:fd:ad:f4:07:91:42:b1: e4:ed:e4:c7:09:84:e8:c9:25:4c:e3:fb:86:1f:5b:19:e7:aa: e5:9a:a9:38:b6:0c:61:f4:67:17:16:37:3a:57:71:03:66:0b: 46:14:ee:77:11:5d:10:c0:2e:49:9e:c3:74:13:a6:bb:e8:db: 54:8b:c2:39:22:a5:c9:56:e3:ed:ef:f1:41:e7:38:b2:4a:6d: 44:5d:d6:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ94cF2dhs3jqQtvgYuDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4 OTZhMDAwHhcNMjUxMjI5MDQwMDM2WhcNMjUxMjMwMDQwMDM2WjAzMTEwLwYDVQQD EyhkZmQ1M2Q5ZTdiNGJhZWMwMjVhMjM2NWE2YjAwMWExZmIyYjVlODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMn9LG3xErcFJYDNIGOCM4ekxHib ydtP1klVHL//LbIAHh6LjGzp/Jt4ToXvcBgKmsLbrOMY75Qpna2CAfyAe3XckGs5 FDB9C+VNwtFupU4dVxMeQ61nqxhjwIHvW3uSnfzXnsqcBsr9A8HsZGmKHnVTXmcL YujLzJpARbKOJwn/uSYDBrp8AE5EckjxjqYkhqyDOkGAv3TscCgjqexkj1F4dfqj kG5yBN8j6dTnpIgeNtwOrCvlmRRW0MZ8iFjdX2JCQsFfHGdqOrw7GCt/JmknPNmN 3VbN9n4Z6BxJwrwUVwRP0PWuhC4Wad4gQ+zrKLh62uG4a2gZR2lT+PKNwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/VPZ57S67AJaI2WmsAGh+ytehNMB8GA1UdIwQY MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3 LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYKveeJo 7ToEXWc3J5ReIO/uYjgQLJYIrirb6s7bhtN505E+vHokmWbBVYxhoMVXGamN33Vu rFtMeZZOdzSjwTQiZQQXjr1AMrAf28AmECMrY5TCzZUzxmgzrIRatObnmjo6l8j2 hdZMquavADPRzoxyIQmiDRdd8/W5baBdwhVAncBagC/NEBXTSJlUCeSMjzSMlDyi EkQNqqi0X2rpHg14KkG8cuky0ogGgdX9rfQHkUKx5O3kxwmE6MklTOP7hh9bGeeq 5ZqpOLYMYfRnFxY3OldxA2YLRhTudxFdEMAuSZ7DdBOmu+jbVIvCOSKlyVbj7e/x Qec4skptRF3W8A== -----END CERTIFICATE-----Generated at Mon Dec 29 08:26:44 2025 by rpki-client