This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json) Hash identifier: teizYNi7mBl8O8sU3MSoJAAPmeAuA0K4vmpsJIzEU50= Subject key identifier: ED:F3:37:B4:D7:8E:8B:8A:F8:AA:A8:02:EE:78:89:96:CF:94:8B:AE Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019B50E053634BB17E504FF15516073ACE31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 15:00:37 +0000 Manifest this update: Wed 24 Dec 2025 15:00:37 +0000 Manifest next update: Thu 25 Dec 2025 15:00:37 +0000 Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=) 2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: 6voiIydZ1G2SFymuQADnzP+08fU/YgWG8REiAjm6rlI=) 3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=) 4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:53:63:4b:b1:7e:50:4f:f1:55:16:07:3a:ce:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Dec 24 15:00:37 2025 GMT Not After : Dec 25 15:00:37 2025 GMT Subject: CN=edf337b4d78e8b8af8aaa802ee788996cf948bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:76:5d:4c:30:57:c6:71:69:40:18:53:91: 9b:83:c1:66:fd:01:ab:19:52:93:f0:b7:62:95:f9: 37:3e:6a:fb:38:e8:bd:a0:c0:28:b7:a8:81:44:79: 7c:a6:4b:2f:a2:47:cc:1a:36:1a:b7:d2:e0:87:23: a7:fc:95:75:fa:10:5a:60:36:41:9d:71:8a:4a:82: 20:38:cd:6a:54:b5:d5:91:1a:a5:a0:d2:dc:c3:d6: 4b:01:ce:af:66:87:41:3e:5a:d7:e1:92:d7:a5:51: cd:75:35:94:dd:83:2a:23:1d:46:34:41:af:7e:cd: 11:df:c0:fa:00:15:49:3c:2b:d9:f0:d8:05:f6:a1: 10:13:27:6e:c7:df:1a:5c:87:c8:0a:f5:3b:24:71: 00:4a:56:6c:55:a4:3c:97:97:37:9a:ed:1d:1c:07: a4:bf:a2:c9:89:db:a7:19:c0:77:4c:d1:18:76:25: 20:ff:db:66:af:d6:e1:35:14:41:af:07:4f:07:48: ae:88:5b:9a:d1:a1:9b:5d:f8:3b:51:92:87:eb:b0: ab:ea:7a:a4:ba:c6:1b:db:13:8a:83:e9:ce:73:50: 0f:32:72:66:8a:c6:76:29:85:e7:db:99:6e:1d:94: 2f:6d:76:33:72:47:90:d0:13:bb:ad:1b:62:4d:04: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F3:37:B4:D7:8E:8B:8A:F8:AA:A8:02:EE:78:89:96:CF:94:8B:AE X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:27:94:9b:e3:5b:a3:13:da:b7:cd:9c:cd:88:88:fc:7a:18: c3:4a:a2:a9:45:d6:4e:e8:26:46:bf:83:e5:4b:e7:e2:7d:e6: d0:25:f6:04:36:b6:1b:76:ff:4d:a1:a2:e3:76:4c:d1:8e:79: 0a:8e:9a:59:00:35:98:74:22:9e:79:7f:9a:4a:10:91:1f:cf: 8a:a1:5b:4a:d6:27:c5:3d:09:87:4f:3a:d8:9a:ff:7c:15:b4: ff:3e:c6:96:d2:67:ef:10:89:cc:22:8d:7f:36:61:08:e9:e2: 69:a9:83:27:c4:e4:dd:26:0b:63:3d:4a:9e:a8:c1:f8:69:b8: 39:ae:9f:a9:4e:f9:2c:06:ee:77:66:25:80:a0:36:ba:f2:ec: 8f:1e:43:3a:b5:fb:e7:f5:72:c2:af:ec:3f:9e:3d:c6:67:de: da:f0:1b:a1:f1:62:07:e5:e4:0f:17:92:4e:78:d8:76:cb:30: f4:3b:17:c0:90:4f:34:9d:dc:e9:6e:d6:28:da:4d:c8:81:86: 3a:e5:34:6d:a2:5a:6b:1a:3a:0e:a9:31:73:47:d4:4f:2d:68: 6e:24:c6:4e:2d:c7:86:ad:e6:4c:3d:59:5c:90:a3:c2:11:e6: c4:7e:63:f0:ae:de:5f:26:f2:20:3c:0e:4b:36:21:db:63:11: 22:42:c2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4FNjS7F+UE/xVRYHOs4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjUxMjI0MTUwMDM3WhcNMjUxMjI1MTUwMDM3WjAzMTEwLwYDVQQD EyhlZGYzMzdiNGQ3OGU4YjhhZjhhYWE4MDJlZTc4ODk5NmNmOTQ4YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR52XUwwV8ZxaUAYU5Gbg8Fm/QGr GVKT8Ldilfk3Pmr7OOi9oMAot6iBRHl8pksvokfMGjYat9LghyOn/JV1+hBaYDZB nXGKSoIgOM1qVLXVkRqloNLcw9ZLAc6vZodBPlrX4ZLXpVHNdTWU3YMqIx1GNEGv fs0R38D6ABVJPCvZ8NgF9qEQEydux98aXIfICvU7JHEASlZsVaQ8l5c3mu0dHAek v6LJidunGcB3TNEYdiUg/9tmr9bhNRRBrwdPB0iuiFua0aGbXfg7UZKH67Cr6nqk usYb2xOKg+nOc1APMnJmisZ2KYXn25luHZQvbXYzckeQ0BO7rRtiTQT9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3zN7TXjouK+KqoAu54iZbPlIuuMB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCeUm+Nb oxPat82czYiI/HoYw0qiqUXWTugmRr+D5Uvn4n3m0CX2BDa2G3b/TaGi43ZM0Y55 Co6aWQA1mHQinnl/mkoQkR/PiqFbStYnxT0Jh0862Jr/fBW0/z7GltJn7xCJzCKN fzZhCOniaamDJ8Tk3SYLYz1KnqjB+Gm4Oa6fqU75LAbud2YlgKA2uvLsjx5DOrX7 5/Vywq/sP549xmfe2vAbofFiB+XkDxeSTnjYdssw9DsXwJBPNJ3c6W7WKNpNyIGG OuU0baJaaxo6Dqkxc0fUTy1obiTGTi3Hhq3mTD1ZXJCjwhHmxH5j8K7eXybyIDwO SzYh22MRIkLCJw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:16 2025 by rpki-client