This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json) Hash identifier: sgQerpnZVNhItt3JZ+b+RBKlauMdziEqjKooQsmQLYY= Subject key identifier: F9:17:02:32:89:8C:37:EB:E4:D9:E3:40:B9:B4:C9:4D:D8:5A:01:9C Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019B3D90D725B60B8AE0820A7F739A946982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 21:01:00 +0000 Manifest this update: Sat 20 Dec 2025 21:01:00 +0000 Manifest next update: Sun 21 Dec 2025 21:01:00 +0000 Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=) 2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: vJ3+lGpSx6z9yK3gJBPY53LTkUVBhY3Az4YCGU50yHk=) 3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=) 4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d7:25:b6:0b:8a:e0:82:0a:7f:73:9a:94:69:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Dec 20 21:01:00 2025 GMT Not After : Dec 21 21:01:00 2025 GMT Subject: CN=f9170232898c37ebe4d9e340b9b4c94dd85a019c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:37:fd:c0:2d:cf:d4:be:c1:6a:d8:1b:1c: f3:57:00:45:39:d5:fd:2e:e0:b9:4e:29:4c:dc:6c: ea:47:e6:c1:0a:37:6c:1c:68:4a:93:fc:20:58:c8: e7:f0:f7:fb:32:51:4d:bd:db:56:27:fd:82:b5:fa: e0:8d:2f:26:61:9c:42:56:2e:8a:d0:c4:8b:5f:78: d4:c1:dc:6b:35:76:98:81:fb:af:82:9b:9f:96:6c: ea:c2:4b:2a:88:de:fe:a8:6c:0f:a7:a9:e6:2b:3a: f6:95:96:83:be:05:85:84:53:db:10:2c:f0:48:61: 13:a0:68:63:9e:50:dc:90:b8:cf:db:75:fd:6c:47: 13:35:bf:14:f0:8a:32:63:04:39:df:ca:a3:af:f9: 7b:f2:f4:6d:b2:c4:13:eb:a0:a4:f3:99:de:37:44: 25:f3:47:8f:34:ee:bd:e7:61:0f:99:86:16:84:62: f2:1d:33:f8:8c:c1:6d:89:55:dc:90:bb:dd:20:e5: 90:9d:27:bd:16:8c:28:e4:37:0b:76:bd:dc:df:7b: 78:29:ef:8e:6b:c1:a3:eb:4b:4e:89:e6:70:9a:37: 8e:8b:93:a7:49:8d:71:32:8a:84:65:ac:17:7e:db: fd:a5:2c:63:08:53:45:b0:09:75:fb:d3:38:ab:84: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:02:32:89:8C:37:EB:E4:D9:E3:40:B9:B4:C9:4D:D8:5A:01:9C X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:72:5f:49:0f:c3:5a:ee:7d:7a:a2:d7:01:06:14:1f:a6:0f: bc:42:9a:20:36:c3:76:bf:6f:19:94:98:13:e4:72:ba:3e:16: 5b:82:1d:28:f1:81:4f:98:99:ce:36:a7:36:c3:19:b3:22:7a: da:7d:8d:91:f2:06:53:3b:85:75:89:2d:d9:40:5f:d1:d6:d3: f5:cb:11:df:69:a1:b0:93:67:bf:c1:ce:0d:fe:8b:61:74:a5: 92:c1:a0:09:37:99:6e:1d:26:c5:d2:93:09:9e:89:d2:f3:3e: e4:83:c4:37:87:fe:e4:1e:10:96:c0:4f:d8:bd:28:4e:00:45: 89:4f:b5:79:a4:51:9f:db:d1:40:03:60:0d:3b:01:e6:31:1c: 03:ee:1c:4a:38:7c:18:a8:21:57:6c:1b:ac:0c:24:6d:49:b7: 0e:2b:98:ba:74:bd:e9:b7:f0:2e:27:1f:c0:6a:e8:e7:e7:2b: a8:a1:37:93:a9:6d:66:c2:f7:18:af:e0:5c:1f:8e:15:2b:8c: 37:c5:01:35:6e:bd:2f:31:c0:04:46:8e:c9:5c:a5:bd:cf:e1: 30:d8:12:d3:60:85:0b:73:20:09:3c:ad:1e:b4:4e:1b:04:66: 27:b8:d9:69:b7:80:87:d1:5b:87:26:cd:24:7a:0a:6f:3a:74: 48:4f:b4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNcltguK4IIKf3OalGmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjUxMjIwMjEwMTAwWhcNMjUxMjIxMjEwMTAwWjAzMTEwLwYDVQQD EyhmOTE3MDIzMjg5OGMzN2ViZTRkOWUzNDBiOWI0Yzk0ZGQ4NWEwMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9g3/cAtz9S+wWrYGxzzVwBFOdX9 LuC5TilM3GzqR+bBCjdsHGhKk/wgWMjn8Pf7MlFNvdtWJ/2CtfrgjS8mYZxCVi6K 0MSLX3jUwdxrNXaYgfuvgpuflmzqwksqiN7+qGwPp6nmKzr2lZaDvgWFhFPbECzw SGEToGhjnlDckLjP23X9bEcTNb8U8IoyYwQ538qjr/l78vRtssQT66Ck85neN0Ql 80ePNO6952EPmYYWhGLyHTP4jMFtiVXckLvdIOWQnSe9Fowo5DcLdr3c33t4Ke+O a8Gj60tOieZwmjeOi5OnSY1xMoqEZawXftv9pSxjCFNFsAl1+9M4q4Q8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkXAjKJjDfr5NnjQLm0yU3YWgGcMB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnJfSQ/D Wu59eqLXAQYUH6YPvEKaIDbDdr9vGZSYE+Ryuj4WW4IdKPGBT5iZzjanNsMZsyJ6 2n2NkfIGUzuFdYkt2UBf0dbT9csR32mhsJNnv8HODf6LYXSlksGgCTeZbh0mxdKT CZ6J0vM+5IPEN4f+5B4QlsBP2L0oTgBFiU+1eaRRn9vRQANgDTsB5jEcA+4cSjh8 GKghV2wbrAwkbUm3DiuYunS96bfwLicfwGro5+crqKE3k6ltZsL3GK/gXB+OFSuM N8UBNW69LzHABEaOyVylvc/hMNgS02CFC3MgCTytHrROGwRmJ7jZabeAh9FbhybN JHoKbzp0SE+0jQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:32 2025 by rpki-client