This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json) Hash identifier: yvx2GfCIKcC6zvymvbuNczneY+zyhRSu/rmjBUFcNes= Subject key identifier: CC:15:30:2F:8E:E5:EC:BF:79:87:24:54:23:2B:F5:F0:E9:68:7A:3E Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc Certificate serial: 019AF23FA966E00712E9E910709409725B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: A4AyAxz1jkpbceS+WpQ7nEkQu+KsAUC7lAetwZTuOGo=) 2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=) 3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a9:66:e0:07:12:e9:e9:10:70:94:09:72:5b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=cc15302f8ee5ecbf79872454232bf5f0e9687a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:a2:a0:e1:dc:24:e6:1c:6c:03:47:f1:5f: 7a:b3:cf:10:ca:98:6a:af:3b:7f:60:1e:d4:1b:8f: 8b:9f:3b:fb:5f:fb:8f:81:98:aa:4f:95:13:55:75: 08:f0:4f:c3:47:ba:c2:ef:f5:ad:bf:fb:73:91:22: 8c:a3:a6:8a:a7:c5:91:25:9e:fe:5e:a5:8c:ff:96: 8e:d1:9b:22:13:fe:bf:21:48:1c:1f:c7:92:d5:d7: fa:51:ad:3a:28:18:94:01:fb:42:4b:20:c9:75:bb: c8:9b:02:f6:09:93:79:65:e8:93:45:99:2e:5f:f4: 7c:8b:e4:e9:66:77:f4:5d:db:1c:e8:ee:dc:6b:98: a2:25:e4:5b:f3:88:db:8e:5c:b9:6d:48:1f:67:60: 8e:e6:f6:18:fe:c7:97:d4:f1:9e:47:fb:66:97:cd: 61:7f:50:25:f5:84:19:17:b1:10:1a:26:de:9a:d8: 9d:7c:6b:f0:28:99:a0:c2:d7:e4:a8:26:a0:4c:a3: 94:d9:1b:17:f5:af:13:67:60:e5:e0:14:f6:9b:ac: 40:f2:ce:76:4f:8b:53:60:7d:df:9a:ec:2b:a8:96: 05:d5:3a:e9:81:a1:27:0d:e5:c8:20:ac:c9:18:f3: ea:3a:99:30:15:3e:0b:0c:8d:11:1f:c2:38:7f:8b: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:15:30:2F:8E:E5:EC:BF:79:87:24:54:23:2B:F5:F0:E9:68:7A:3E X509v3 Authority Key Identifier: keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9b:61:a5:29:25:d9:79:7c:6b:3b:d4:51:fc:4a:e8:91:02: 0b:04:5a:6e:92:11:3a:ad:8a:d8:ff:dc:a4:4c:24:23:08:68: fa:38:22:fd:60:ef:fe:13:e3:d6:19:c0:19:54:31:7f:56:98: d1:a2:68:fb:4d:e1:b4:0c:76:bb:40:91:07:12:24:ac:51:7e: db:ef:55:ca:15:cc:02:55:f6:e6:25:aa:7f:9c:fc:6c:9c:be: 6c:ca:40:51:d5:49:6a:1c:38:4f:4c:ed:71:d4:e2:3d:24:3f: 13:6f:c5:b7:d5:27:b4:0c:45:2a:7d:ac:f5:8b:db:40:3a:df: 97:18:e2:b6:58:61:3a:fc:fc:9f:31:e8:ee:11:d2:55:03:1b: db:ec:69:77:69:6b:36:78:8b:59:b6:7a:cf:42:e2:2f:cc:74: ed:7b:d2:52:b9:54:47:a1:4a:76:c7:6f:90:b6:14:26:94:ad: 70:d8:cb:cf:03:59:8a:9f:0d:04:fd:ee:b7:cd:76:90:43:db: 28:41:40:ae:80:f4:23:72:37:e9:d2:18:4d:2b:75:df:69:d7: ec:62:7a:55:17:25:85:38:e3:81:95:42:0f:e8:0f:00:31:b1: 05:02:f4:78:77:4c:51:6d:f8:39:35:f3:12:2b:95:cb:64:06: 7b:bf:fe:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6lm4AcS6ekQcJQJcls0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4 YTZhYmMwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhjYzE1MzAyZjhlZTVlY2JmNzk4NzI0NTQyMzJiZjVmMGU5Njg3YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zuioOHcJOYcbANH8V96s88Qyphq rzt/YB7UG4+Lnzv7X/uPgZiqT5UTVXUI8E/DR7rC7/Wtv/tzkSKMo6aKp8WRJZ7+ XqWM/5aO0ZsiE/6/IUgcH8eS1df6Ua06KBiUAftCSyDJdbvImwL2CZN5ZeiTRZku X/R8i+TpZnf0Xdsc6O7ca5iiJeRb84jbjly5bUgfZ2CO5vYY/seX1PGeR/tml81h f1Al9YQZF7EQGibemtidfGvwKJmgwtfkqCagTKOU2RsX9a8TZ2Dl4BT2m6xA8s52 T4tTYH3fmuwrqJYF1TrpgaEnDeXIIKzJGPPqOpkwFT4LDI0RH8I4f4spywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwVMC+O5ey/eYckVCMr9fDpaHo+MB8GA1UdIwQY MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5thpSkl 2Xl8azvUUfxK6JECCwRabpIROq2K2P/cpEwkIwho+jgi/WDv/hPj1hnAGVQxf1aY 0aJo+03htAx2u0CRBxIkrFF+2+9VyhXMAlX25iWqf5z8bJy+bMpAUdVJahw4T0zt cdTiPSQ/E2/Ft9UntAxFKn2s9YvbQDrflxjitlhhOvz8nzHo7hHSVQMb2+xpd2lr NniLWbZ6z0LiL8x07XvSUrlUR6FKdsdvkLYUJpStcNjLzwNZip8NBP3ut812kEPb KEFAroD0I3I36dIYTSt132nX7GJ6VRclhTjjgZVCD+gPADGxBQL0eHdMUW34OTXz EiuVy2QGe7/+hA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:56 2025 by rpki-client