This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json) Hash identifier: ybtwRHs2t30/r+gnh58XG3n3Yy/MTqeS5U7ChdWM3hg= Subject key identifier: 0D:B0:62:F0:FA:70:1F:72:D7:20:AF:05:14:6F:04:92:89:48:D0:D6 Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Certificate serial: 019B3EDA25923607189C2B262CAA056C27E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft Manifest number: 08F7 Signing time: Sun 21 Dec 2025 03:00:42 +0000 Manifest this update: Sun 21 Dec 2025 03:00:42 +0000 Manifest next update: Mon 22 Dec 2025 03:00:42 +0000 Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=) 2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=) 3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: D9YCp+r5s5isskITywhLWzRgDdDfUycsZJx3Tigmxww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:25:92:36:07:18:9c:2b:26:2c:aa:05:6c:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Validity Not Before: Dec 21 03:00:42 2025 GMT Not After : Dec 22 03:00:42 2025 GMT Subject: CN=0db062f0fa701f72d720af05146f04928948d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:52:07:21:cc:bd:0d:23:22:d5:3d:3f:64:b1: 1d:f7:52:2f:41:32:a3:71:e4:35:2d:c4:9c:fe:cb: 6e:d9:fc:56:44:d7:0b:c7:26:81:0a:aa:cc:2b:33: a7:e5:93:38:9e:33:b5:98:8d:55:9f:35:33:d3:83: 9c:cd:03:51:98:5b:d7:24:c4:2b:fb:56:f5:1b:49: 99:3d:8a:38:76:51:7d:a7:a7:a2:ff:75:85:60:0b: 83:77:12:4d:43:24:12:e9:66:38:f7:1e:05:da:87: e9:f3:eb:09:78:21:ee:0e:4f:6f:52:91:a9:aa:34: 56:d5:11:26:03:39:bc:dd:9e:96:99:02:4e:d5:97: 20:17:18:b8:ba:78:cf:4a:e9:f6:8b:97:98:4a:93: ab:70:74:3b:bc:4c:1e:a9:26:f6:f0:6f:f1:03:a2: 03:d8:d7:b4:f4:13:58:d7:f7:7a:0e:46:c1:c2:e2: 85:d1:84:94:25:63:1a:f0:e7:92:53:cd:23:62:fb: 9a:70:d7:9a:32:05:9c:9d:0f:4a:9f:18:c4:c8:f0: 18:4f:2f:84:f3:ed:71:18:8b:f5:53:96:12:a4:94: c9:d4:79:0d:c0:26:1d:de:ed:55:ce:5d:14:e9:28: 4c:c6:3a:41:58:f7:03:4c:2b:2c:d2:f5:d5:0e:b8: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B0:62:F0:FA:70:1F:72:D7:20:AF:05:14:6F:04:92:89:48:D0:D6 X509v3 Authority Key Identifier: keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:13:22:f9:43:3d:65:b7:71:d3:55:8f:16:fc:46:09:4d:a7: 00:cd:81:0f:67:f3:d8:8a:e4:88:6e:0e:64:f7:18:98:55:a1: dd:a8:da:6f:0f:c9:d1:ec:70:45:c6:db:8f:84:81:73:c8:8e: a7:b3:12:be:f5:f6:ea:ba:49:09:cf:98:d7:a7:80:e4:bd:39: e3:23:88:d1:13:7d:c9:38:31:f4:9e:6f:f5:cb:c9:73:f7:b0: fc:03:67:e6:1e:f5:e0:28:00:86:2d:7d:d1:c4:9f:33:a5:ee: 85:e2:b9:76:73:5f:85:b4:59:bf:a8:3e:22:e8:12:f3:14:23: 40:02:e6:5e:d5:53:5f:c3:2f:da:f8:b9:67:ab:40:d4:b6:83: dc:7c:f7:93:54:da:90:cb:3e:0d:53:c3:c3:5d:fb:18:6f:41: 4f:25:ae:89:be:25:a7:51:36:83:b3:0b:5a:c4:e4:59:b2:d6: 57:c0:08:9d:4f:4e:3b:a8:52:8b:7c:3f:01:e4:be:71:69:2a: 89:76:9d:99:0c:f4:ec:fa:02:06:86:8d:e0:39:59:59:21:4a: 09:37:6c:f3:ea:c7:fd:4b:7a:8a:55:35:07:09:9f:99:12:5a: 98:e7:dd:be:bf:78:ce:99:41:ce:23:6a:de:c8:00:97:1b:a4: 58:f9:16:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2iWSNgcYnCsmLKoFbCfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0 NzZmOWEwHhcNMjUxMjIxMDMwMDQyWhcNMjUxMjIyMDMwMDQyWjAzMTEwLwYDVQQD EygwZGIwNjJmMGZhNzAxZjcyZDcyMGFmMDUxNDZmMDQ5Mjg5NDhkMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VIHIcy9DSMi1T0/ZLEd91IvQTKj ceQ1LcSc/stu2fxWRNcLxyaBCqrMKzOn5ZM4njO1mI1VnzUz04OczQNRmFvXJMQr +1b1G0mZPYo4dlF9p6ei/3WFYAuDdxJNQyQS6WY49x4F2ofp8+sJeCHuDk9vUpGp qjRW1REmAzm83Z6WmQJO1ZcgFxi4unjPSun2i5eYSpOrcHQ7vEweqSb28G/xA6ID 2Ne09BNY1/d6DkbBwuKF0YSUJWMa8OeSU80jYvuacNeaMgWcnQ9KnxjEyPAYTy+E 8+1xGIv1U5YSpJTJ1HkNwCYd3u1Vzl0U6ShMxjpBWPcDTCss0vXVDrg2IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2wYvD6cB9y1yCvBRRvBJKJSNDWMB8GA1UdIwQY MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhMi+UM9 Zbdx01WPFvxGCU2nAM2BD2fz2IrkiG4OZPcYmFWh3ajabw/J0exwRcbbj4SBc8iO p7MSvvX26rpJCc+Y16eA5L054yOI0RN9yTgx9J5v9cvJc/ew/ANn5h714CgAhi19 0cSfM6XuheK5dnNfhbRZv6g+IugS8xQjQALmXtVTX8Mv2vi5Z6tA1LaD3Hz3k1Ta kMs+DVPDw137GG9BTyWuib4lp1E2g7MLWsTkWbLWV8AInU9OO6hSi3w/AeS+cWkq iXadmQz07PoCBoaN4DlZWSFKCTds8+rH/Ut6ilU1BwmfmRJamOfdvr94zplBziNq 3sgAlxukWPkW1w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:13:06 2025 by rpki-client