This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json) Hash identifier: vnYH1zn3JXOPgE3SDFUD2yStICVoDFGWXbx/gxPxfiI= Subject key identifier: 96:DE:F2:2D:91:A8:AB:CD:9A:FA:DF:7E:DD:35:83:FC:36:04:E1:78 Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Certificate serial: 019B3F47DB492D1BCAFEEE66C2EB0D3CA0C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 05:00:32 +0000 Manifest this update: Sun 21 Dec 2025 05:00:32 +0000 Manifest next update: Mon 22 Dec 2025 05:00:32 +0000 Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=) 2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: It8MmgmE5z0v0JUlh17Lii0Pa+50OhdRntKQeHTAub0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:db:49:2d:1b:ca:fe:ee:66:c2:eb:0d:3c:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Validity Not Before: Dec 21 05:00:32 2025 GMT Not After : Dec 22 05:00:32 2025 GMT Subject: CN=96def22d91a8abcd9afadf7edd3583fc3604e178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:12:5b:bb:57:e9:37:c2:fd:4d:be:60:ef: b5:94:6a:76:f5:8c:59:75:27:5f:02:5c:29:48:d7: 25:c6:a8:a9:2d:1d:fe:ba:17:af:9d:01:8c:7e:4b: a6:c3:dd:5e:84:e9:0e:30:cf:6a:a8:b1:a8:08:6d: 65:d8:a5:a2:07:59:59:ed:7f:8e:9a:fc:8a:a5:72: 43:18:d5:1d:f7:41:52:65:b1:f9:68:dc:6c:f8:13: 68:ef:0e:55:3b:30:92:6a:65:c5:e0:09:be:7c:7c: 03:c4:97:ca:7a:16:f1:31:bc:9e:26:57:14:db:30: d0:d8:8a:fe:25:d5:a4:ac:3e:fa:58:82:5f:72:29: b7:51:0f:dd:12:d9:87:ef:25:21:1f:d5:8d:05:8c: b0:07:3c:26:df:00:82:1c:4a:84:e5:bb:a3:a7:af: 2a:7b:c9:40:f7:97:a8:ae:a7:6a:85:13:cc:06:8a: 6b:1c:3b:51:bb:f4:ab:82:ae:10:b5:97:57:05:25: 48:72:80:14:eb:2d:42:22:d3:88:f1:be:38:c5:fe: 32:94:bc:c9:82:b9:bd:c5:22:92:56:42:ee:bd:af: 7d:90:44:83:b2:73:dd:7b:ad:e8:64:d3:07:e5:98: f6:f2:10:99:a9:56:c3:6e:fa:b7:bd:6d:8c:c1:43: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DE:F2:2D:91:A8:AB:CD:9A:FA:DF:7E:DD:35:83:FC:36:04:E1:78 X509v3 Authority Key Identifier: keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:57:f4:ac:a1:0a:1a:d2:5b:7c:75:0d:19:f2:9a:7a:b1:76: 56:e8:c1:74:ff:f6:6e:7d:57:0d:e6:42:f0:ff:25:39:1e:c9: fb:a0:7e:8a:0e:c9:1f:c7:fa:30:95:81:f2:e4:fc:e0:07:c8: f4:4c:8a:a3:5f:2d:72:79:61:9c:3f:45:77:c9:32:b0:ba:ba: ee:a0:17:47:cd:15:31:56:b9:ee:36:4e:60:1b:20:c9:13:68: 3f:25:71:8c:9b:80:ad:4b:ef:23:c5:47:82:a7:f4:12:cd:16: c7:6f:6e:e1:1d:04:ab:f0:af:af:97:45:63:fd:24:61:ab:56: 2c:c8:0d:37:2c:a1:ce:15:e5:37:d1:45:b0:80:45:d6:00:c7: 27:0b:ce:e7:67:ad:3b:80:23:64:e1:ab:7c:93:49:97:bd:9f: 4b:29:55:ac:c4:89:2a:17:0c:c0:50:8c:ec:01:ba:a7:aa:86: 30:ce:81:01:cf:28:04:30:82:c7:4a:de:ac:54:20:62:1c:c8: 1d:f5:10:9a:aa:18:d2:0d:ec:8f:de:0d:f1:6b:0b:39:30:e0: 34:f7:4f:79:99:8d:58:b0:e1:7d:80:dc:0d:71:f9:54:16:4e: 19:09:b4:a8:f9:db:47:b8:f4:45:1d:ea:54:6d:79:3c:c7:5a: cc:1f:9f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9tJLRvK/u5mwusNPKDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4 OThlNTMwHhcNMjUxMjIxMDUwMDMyWhcNMjUxMjIyMDUwMDMyWjAzMTEwLwYDVQQD Eyg5NmRlZjIyZDkxYThhYmNkOWFmYWRmN2VkZDM1ODNmYzM2MDRlMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoSW7tX6TfC/U2+YO+1lGp29YxZ dSdfAlwpSNclxqipLR3+uhevnQGMfkumw91ehOkOMM9qqLGoCG1l2KWiB1lZ7X+O mvyKpXJDGNUd90FSZbH5aNxs+BNo7w5VOzCSamXF4Am+fHwDxJfKehbxMbyeJlcU 2zDQ2Ir+JdWkrD76WIJfcim3UQ/dEtmH7yUhH9WNBYywBzwm3wCCHEqE5bujp68q e8lA95eorqdqhRPMBoprHDtRu/Srgq4QtZdXBSVIcoAU6y1CItOI8b44xf4ylLzJ grm9xSKSVkLuva99kESDsnPde63oZNMH5Zj28hCZqVbDbvq3vW2MwUN7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbe8i2RqKvNmvrfft01g/w2BOF4MB8GA1UdIwQY MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVf0rKEK GtJbfHUNGfKaerF2VujBdP/2bn1XDeZC8P8lOR7J+6B+ig7JH8f6MJWB8uT84AfI 9EyKo18tcnlhnD9Fd8kysLq67qAXR80VMVa57jZOYBsgyRNoPyVxjJuArUvvI8VH gqf0Es0Wx29u4R0Eq/Cvr5dFY/0kYatWLMgNNyyhzhXlN9FFsIBF1gDHJwvO52et O4AjZOGrfJNJl72fSylVrMSJKhcMwFCM7AG6p6qGMM6BAc8oBDCCx0rerFQgYhzI HfUQmqoY0g3sj94N8WsLOTDgNPdPeZmNWLDhfYDcDXH5VBZOGQm0qPnbR7j0RR3q VG15PMdazB+fjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:45:23 2025 by rpki-client