This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json) Hash identifier: B+MlYgjt5CLdvcaJjBePtsnRUD+XOAN8SwqYCDopN8U= Subject key identifier: 1F:7D:FE:C4:A9:AC:92:A1:48:C1:F1:17:BC:3D:E4:52:91:11:CA:14 Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Certificate serial: 019AF3899FB6E1BC8D6CA3F526750960FD5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft Manifest number: 0B99 Signing time: Sat 06 Dec 2025 12:01:13 +0000 Manifest this update: Sat 06 Dec 2025 12:01:13 +0000 Manifest next update: Sun 07 Dec 2025 12:01:13 +0000 Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: RYUUorwwAx+BDzKlnTPexwbGQ/Lqs/LWDBCULQK4b8c=) 2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9f:b6:e1:bc:8d:6c:a3:f5:26:75:09:60:fd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Validity Not Before: Dec 6 12:01:13 2025 GMT Not After : Dec 7 12:01:13 2025 GMT Subject: CN=1f7dfec4a9ac92a148c1f117bc3de4529111ca14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:04:bd:84:87:8d:96:e8:ac:34:4c:36:18: 9b:d5:f4:67:a4:94:34:b2:5d:a3:73:bf:27:08:a7: 55:94:19:38:71:14:84:4a:c0:de:b6:45:4e:a8:ba: 01:38:14:56:97:19:ee:10:cf:7a:06:9d:02:a2:51: 31:1e:0f:5a:ab:9d:99:5a:d7:d8:9d:eb:19:2c:8b: cb:2f:c2:44:6e:66:70:10:ce:7e:d9:fd:3c:50:a9: 78:48:de:a7:fb:24:96:dc:04:50:4d:9c:45:97:2e: af:7f:3b:38:2e:e8:3b:f4:4e:d3:61:62:0d:c9:42: fa:c0:85:ce:8e:bc:39:6d:95:60:8e:74:77:42:2c: ef:df:70:c3:a1:6a:c5:3a:99:a2:38:18:de:2e:12: 22:86:00:4c:01:5e:ba:89:e1:f5:93:ab:b0:3c:9d: ea:94:46:13:27:d4:b9:37:25:52:d9:30:1f:3a:e7: 6e:5a:49:0c:d9:c7:da:18:95:57:4c:ff:00:6f:6f: 8c:93:42:c7:77:a9:50:f4:98:24:fd:d5:67:f6:86: 82:73:5d:01:e2:95:96:d7:0a:ef:22:43:93:56:d2: c5:10:bb:ed:3a:a5:c9:b1:e1:6b:2b:96:b0:29:44: e6:c8:32:b8:75:37:85:fc:13:c8:32:7d:c6:4e:33: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:FE:C4:A9:AC:92:A1:48:C1:F1:17:BC:3D:E4:52:91:11:CA:14 X509v3 Authority Key Identifier: keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b8:34:c2:ed:fd:9d:a9:6d:b7:0e:8e:c5:e4:7f:b9:6f:a3: 85:09:ce:b7:81:b0:89:0d:02:57:ed:22:34:a8:28:67:5c:31: 84:0a:91:58:33:da:41:fc:c4:47:dc:ad:15:70:cf:55:09:3f: 90:28:3e:00:94:02:c2:18:19:60:62:77:e7:ce:53:c2:74:89: 66:9b:46:b9:58:c2:09:7e:c2:32:60:1c:1d:43:91:27:c0:9e: ed:f0:13:4a:26:5e:b1:f3:ee:96:8a:d9:ac:f4:2b:68:1e:86: 58:28:8d:d8:b9:15:f4:ba:94:1b:91:2f:b8:a9:55:5c:12:b4: a4:b6:fe:ab:3c:9d:d1:54:3a:98:cc:93:d3:c1:27:c5:df:3e: df:92:18:c5:ad:03:7a:81:d3:a5:a5:e3:74:b3:34:d6:9d:ff: a9:3a:b3:6e:62:8d:11:b8:8b:1f:fd:ea:fa:95:6c:30:7b:2b: d1:5b:75:93:5e:1d:0a:05:af:d6:bd:a7:4c:25:c8:46:2d:05: 73:f0:e4:78:40:27:17:50:aa:59:c0:aa:84:43:78:b4:af:43: 87:09:a2:9c:09:c5:41:32:a2:46:bf:e1:fe:ec:a7:93:77:83: 61:22:48:c1:81:48:37:cb:10:f3:d0:41:d0:6b:9a:16:27:b8: 77:15:fb:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZ+24byNbKP1JnUJYP1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk NDQ3NTQwHhcNMjUxMjA2MTIwMTEzWhcNMjUxMjA3MTIwMTEzWjAzMTEwLwYDVQQD EygxZjdkZmVjNGE5YWM5MmExNDhjMWYxMTdiYzNkZTQ1MjkxMTFjYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uIEvYSHjZborDRMNhib1fRnpJQ0 sl2jc78nCKdVlBk4cRSESsDetkVOqLoBOBRWlxnuEM96Bp0ColExHg9aq52ZWtfY nesZLIvLL8JEbmZwEM5+2f08UKl4SN6n+ySW3ARQTZxFly6vfzs4Lug79E7TYWIN yUL6wIXOjrw5bZVgjnR3Qizv33DDoWrFOpmiOBjeLhIihgBMAV66ieH1k6uwPJ3q lEYTJ9S5NyVS2TAfOuduWkkM2cfaGJVXTP8Ab2+Mk0LHd6lQ9Jgk/dVn9oaCc10B 4pWW1wrvIkOTVtLFELvtOqXJseFrK5awKUTmyDK4dTeF/BPIMn3GTjPqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB99/sSprJKhSMHxF7w95FKREcoUMB8GA1UdIwQY MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3 LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7g0wu39 nalttw6OxeR/uW+jhQnOt4GwiQ0CV+0iNKgoZ1wxhAqRWDPaQfzER9ytFXDPVQk/ kCg+AJQCwhgZYGJ3585TwnSJZptGuVjCCX7CMmAcHUORJ8Ce7fATSiZesfPulorZ rPQraB6GWCiN2LkV9LqUG5EvuKlVXBK0pLb+qzyd0VQ6mMyT08Enxd8+35IYxa0D eoHTpaXjdLM01p3/qTqzbmKNEbiLH/3q+pVsMHsr0Vt1k14dCgWv1r2nTCXIRi0F c/DkeEAnF1CqWcCqhEN4tK9DhwminAnFQTKiRr/h/uynk3eDYSJIwYFIN8sQ89BB 0GuaFie4dxX7fA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:16 2025 by rpki-client