This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json) Hash identifier: 4EKPxlimLIWLbuLH6Mq0T+3aGviJm39Ts7vJOo26MbY= Subject key identifier: 73:0A:A1:39:43:EB:43:7A:10:E2:47:96:F7:00:0B:2C:87:5A:2C:14 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019AF49C1F1750206ACA223880F527CAE999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft Manifest number: 1665 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: BL8Fcsxvy5r24nB5qNX6UqdWYayCeeu0KBdPRIp00mI=) 2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1f:17:50:20:6a:ca:22:38:80:f5:27:ca:e9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=730aa13943eb437a10e24796f7000b2c875a2c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:e2:d5:8f:91:15:98:22:4a:eb:62:29:47: 78:4b:3d:9d:7a:a0:db:3b:ce:10:d6:f4:05:37:d3: 32:c1:71:ef:20:72:62:0d:a4:c3:16:d4:10:05:e9: 46:f1:db:04:ce:fa:24:01:37:da:2d:db:75:65:46: e8:99:62:f8:a8:76:31:29:0b:e5:30:c1:f0:3a:32: 69:40:cc:c7:87:40:75:25:fc:b6:4c:c4:87:27:3b: 9a:9c:18:55:53:db:f0:f7:c7:55:33:b1:c7:1b:59: b2:d1:a6:00:d3:fb:ba:0f:c5:f2:90:b1:fa:4d:a2: 07:e6:f0:4f:4c:30:09:f6:44:65:f8:88:11:b0:ae: 3c:8d:11:39:b6:f8:83:c2:db:bf:d8:84:01:f2:a0: fe:87:0c:64:7e:1e:01:7c:2f:33:ad:57:31:51:61: 19:d9:04:e1:c9:6e:a1:c6:ad:42:8a:0a:bc:c0:c6: 07:a5:ea:52:b3:da:03:60:e4:60:3f:39:68:23:15: dd:0c:93:7a:5e:17:a7:4c:b9:a7:1f:58:7f:cf:30: 64:44:44:59:3a:37:bf:70:22:01:ff:9f:f2:23:b3: 0c:35:72:2e:e4:3c:ee:6e:ee:67:18:89:fe:8a:3c: 42:30:d4:8d:9d:7f:f8:fe:1d:5e:90:45:95:e6:10: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:A1:39:43:EB:43:7A:10:E2:47:96:F7:00:0B:2C:87:5A:2C:14 X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:99:06:8b:02:8a:da:62:ab:39:37:32:77:59:98:e5:d1: b1:9f:73:ed:65:c5:a4:b8:8a:08:2d:70:75:1c:e1:f8:05:22: 1f:ec:3f:10:08:50:4c:aa:e6:38:b8:44:b8:ea:0e:03:34:2f: 44:6d:bb:96:63:07:90:0c:bf:8f:64:82:ec:4e:e0:4e:26:c1: 9e:b1:44:28:90:83:a4:fe:0f:d5:0f:6b:c7:cf:15:10:46:1b: 0a:5f:d4:1b:4c:de:0f:23:a6:31:2b:1e:ef:83:1e:30:ba:bf: 89:48:49:eb:2f:9e:8c:bb:e9:cd:39:c7:ab:08:9c:d0:05:80: 72:d2:28:e8:de:23:08:9f:cc:6b:ed:ae:50:b1:fc:e8:f5:f9: 24:0f:a9:52:36:36:9f:60:e0:b1:5b:5f:82:ef:ad:f9:ab:e4: c2:36:9a:1e:e2:3a:59:68:63:7a:1d:6d:dc:47:f7:54:bf:57: fc:a8:c5:d8:b9:11:10:fc:2f:ee:df:f0:3e:06:d0:28:9c:d9: 3b:ed:3f:50:74:e3:b1:70:18:c9:2f:56:d7:29:41:d9:2a:1d: 1b:f2:33:4d:7a:f2:4c:cc:36:72:15:b2:9d:be:c6:cc:49:fd: 65:0d:6a:70:17:e8:e9:f8:51:fb:9d:28:53:99:5e:46:7e:bd: 6d:14:ae:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB8XUCBqyiI4gPUnyumZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD Eyg3MzBhYTEzOTQzZWI0MzdhMTBlMjQ3OTZmNzAwMGIyYzg3NWEyYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSDi1Y+RFZgiSutiKUd4Sz2deqDb O84Q1vQFN9MywXHvIHJiDaTDFtQQBelG8dsEzvokATfaLdt1ZUbomWL4qHYxKQvl MMHwOjJpQMzHh0B1Jfy2TMSHJzuanBhVU9vw98dVM7HHG1my0aYA0/u6D8XykLH6 TaIH5vBPTDAJ9kRl+IgRsK48jRE5tviDwtu/2IQB8qD+hwxkfh4BfC8zrVcxUWEZ 2QThyW6hxq1Cigq8wMYHpepSs9oDYORgPzloIxXdDJN6XhenTLmnH1h/zzBkRERZ Oje/cCIB/5/yI7MMNXIu5Dzubu5nGIn+ijxCMNSNnX/4/h1ekEWV5hDwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMKoTlD60N6EOJHlvcACyyHWiwUMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUISZBosC itpiqzk3MndZmOXRsZ9z7WXFpLiKCC1wdRzh+AUiH+w/EAhQTKrmOLhEuOoOAzQv RG27lmMHkAy/j2SC7E7gTibBnrFEKJCDpP4P1Q9rx88VEEYbCl/UG0zeDyOmMSse 74MeMLq/iUhJ6y+ejLvpzTnHqwic0AWActIo6N4jCJ/Ma+2uULH86PX5JA+pUjY2 n2DgsVtfgu+t+avkwjaaHuI6WWhjeh1t3Ef3VL9X/KjF2LkREPwv7t/wPgbQKJzZ O+0/UHTjsXAYyS9W1ylB2SodG/IzTXryTMw2chWynb7GzEn9ZQ1qcBfo6fhR+50o U5leRn69bRSu5A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:03 2025 by rpki-client