This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json) Hash identifier: pk0NCLATmORWohyNdOodnDeVUAOdclv+Iq7swhVNENE= Subject key identifier: 2E:E9:E8:B0:AF:ED:B8:C1:3D:6F:C7:53:A8:56:B4:9A:9C:C8:E8:95 Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Certificate serial: 019B53059E86666F2E345629245EFDEB645E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft Manifest number: 1366 Signing time: Thu 25 Dec 2025 01:00:35 +0000 Manifest this update: Thu 25 Dec 2025 01:00:35 +0000 Manifest next update: Fri 26 Dec 2025 01:00:35 +0000 Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=) 2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: OrhR0rQzGhsBL6gAxIipj5JW83p+yugnnv7T+bBcD7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:9e:86:66:6f:2e:34:56:29:24:5e:fd:eb:64:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Validity Not Before: Dec 25 01:00:35 2025 GMT Not After : Dec 26 01:00:35 2025 GMT Subject: CN=2ee9e8b0afedb8c13d6fc753a856b49a9cc8e895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:69:56:ac:b1:48:a2:44:4a:75:26:5f:d2: 30:d5:3f:64:97:e3:28:37:ee:b1:78:ff:55:36:20: ba:c8:94:28:f0:75:51:a2:35:c8:c4:aa:ae:ad:9c: b2:34:29:02:0c:9d:8d:f9:71:31:61:f5:bd:bf:7b: 82:3d:12:13:4e:74:43:77:a4:68:dc:9b:19:a6:69: 6e:33:3d:14:64:e4:27:42:b0:0d:5b:06:6c:a9:3a: c4:49:0c:96:8b:77:1e:83:0f:ac:65:a0:fa:6b:68: 80:ee:1a:be:c9:35:d0:9e:fb:fa:cf:8c:c1:d6:03: 73:e8:3b:20:be:a0:e6:9d:d7:fd:8f:53:ca:1e:82: 82:03:6d:5d:1a:d9:fa:25:63:9e:e4:1c:ed:28:74: 13:42:bc:65:ac:11:4d:05:4c:f6:61:33:b7:64:86: ac:69:b1:9a:2f:d2:85:8d:8c:5b:96:f5:1b:70:0e: b4:95:c6:21:01:91:69:7e:e2:50:f0:14:8a:18:48: 25:7b:00:58:f0:1a:9a:d7:97:42:c3:6f:e4:2f:28: fd:fc:87:71:f6:9f:e8:43:4c:ff:03:1f:92:ad:31: 6f:a0:cb:27:6f:73:e7:42:c7:aa:a1:59:99:90:19: 71:52:60:73:c0:3b:a6:49:7e:18:75:b9:44:7c:05: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:E8:B0:AF:ED:B8:C1:3D:6F:C7:53:A8:56:B4:9A:9C:C8:E8:95 X509v3 Authority Key Identifier: keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dc:b5:f3:48:30:af:ee:93:c8:be:f4:e4:bd:31:b6:a6:5c: 7e:ce:be:d6:68:13:e0:60:cf:9a:56:e5:47:e3:46:d4:cf:da: 83:47:d7:74:70:42:ab:5c:68:4a:db:05:de:7a:bc:d9:5f:9a: 0a:a4:9b:fb:1f:45:6d:00:e2:31:a7:97:f8:51:40:88:45:9f: 60:c3:7d:8c:11:d0:ca:d0:64:f5:b1:a6:f8:df:1b:0c:6c:9c: 17:ca:d7:1e:5f:48:af:3b:b9:5b:1c:ab:f4:c0:0e:67:3d:8a: e7:71:c4:a6:0c:e9:a4:d8:82:98:06:b9:6e:e0:c1:56:ac:90: 08:1e:b3:8a:dd:47:02:b9:b6:54:be:fd:72:2f:bf:e1:9b:30: ef:08:6e:5c:d4:f8:bc:76:e1:29:ef:5a:5e:02:38:3d:f8:2b: 86:77:72:45:f1:2c:85:9f:1e:e2:17:9d:d6:bd:75:98:d4:cd: ea:9a:93:b4:b1:62:c2:8a:5a:ab:32:ef:d9:1c:e6:10:7c:00: 7e:69:97:2e:b5:7e:ff:92:ec:7b:d6:f1:27:7a:25:30:35:2e: ba:da:10:8d:d6:29:31:af:d4:17:be:0e:c2:3e:86:1c:f5:29: 8a:4e:1d:67:14:25:03:ab:eb:34:ad:8a:8c:c8:18:39:3e:f0: 42:bb:09:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBZ6GZm8uNFYpJF7962ReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4 OTZhMDAwHhcNMjUxMjI1MDEwMDM1WhcNMjUxMjI2MDEwMDM1WjAzMTEwLwYDVQQD EygyZWU5ZThiMGFmZWRiOGMxM2Q2ZmM3NTNhODU2YjQ5YTljYzhlODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr1pVqyxSKJESnUmX9Iw1T9kl+Mo N+6xeP9VNiC6yJQo8HVRojXIxKqurZyyNCkCDJ2N+XExYfW9v3uCPRITTnRDd6Ro 3JsZpmluMz0UZOQnQrANWwZsqTrESQyWi3cegw+sZaD6a2iA7hq+yTXQnvv6z4zB 1gNz6DsgvqDmndf9j1PKHoKCA21dGtn6JWOe5BztKHQTQrxlrBFNBUz2YTO3ZIas abGaL9KFjYxblvUbcA60lcYhAZFpfuJQ8BSKGEglewBY8Bqa15dCw2/kLyj9/Idx 9p/oQ0z/Ax+SrTFvoMsnb3PnQseqoVmZkBlxUmBzwDumSX4YdblEfAX0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7p6LCv7bjBPW/HU6hWtJqcyOiVMB8GA1UdIwQY MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3 LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdy180gw r+6TyL705L0xtqZcfs6+1mgT4GDPmlblR+NG1M/ag0fXdHBCq1xoStsF3nq82V+a CqSb+x9FbQDiMaeX+FFAiEWfYMN9jBHQytBk9bGm+N8bDGycF8rXHl9Irzu5Wxyr 9MAOZz2K53HEpgzppNiCmAa5buDBVqyQCB6zit1HArm2VL79ci+/4Zsw7whuXNT4 vHbhKe9aXgI4PfgrhndyRfEshZ8e4hed1r11mNTN6pqTtLFiwopaqzLv2RzmEHwA fmmXLrV+/5Lse9bxJ3olMDUuutoQjdYpMa/UF74Owj6GHPUpik4dZxQlA6vrNK2K jMgYOT7wQrsJuw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:11 2025 by rpki-client