This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json) Hash identifier: QBmTJYaS1jnxwoeHJWmtkKHvUD1KcEb3I89ccD8Ha5c= Subject key identifier: 4E:26:B4:76:15:70:28:E2:55:D5:36:CF:82:D4:8E:5B:DF:75:AB:F9 Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Certificate serial: 019AF464D745BF0715D7BAF3D89843DA14E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 16:00:40 +0000 Manifest this update: Sat 06 Dec 2025 16:00:40 +0000 Manifest next update: Sun 07 Dec 2025 16:00:40 +0000 Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=) 2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: iH0mHDaHfYeaVOlRZjJ1H+AvSUbsuxyoIeLvkw6ULCM=) 3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=) 4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d7:45:bf:07:15:d7:ba:f3:d8:98:43:da:14:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf Validity Not Before: Dec 6 16:00:40 2025 GMT Not After : Dec 7 16:00:40 2025 GMT Subject: CN=4e26b476157028e255d536cf82d48e5bdf75abf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:fb:ec:71:c9:54:d9:17:8d:66:12:08:05: 23:16:96:ef:2e:7a:81:4c:ad:38:a0:0e:2a:d9:24: 26:3f:32:46:26:6a:7d:e5:03:1f:fd:43:8e:7c:b0: c8:5d:8f:1e:79:a9:4a:79:42:28:6a:7c:6b:2b:57: 8e:48:f4:f0:2d:40:67:db:19:e9:8f:91:41:bc:cd: 18:cb:61:7f:8c:84:87:b2:07:5f:f8:e8:e0:12:75: 9e:ff:57:f3:8e:a6:9c:3f:f3:24:31:b2:bb:44:fb: 5e:60:f9:a7:bd:73:1a:3d:36:60:aa:d2:49:d9:5e: 23:89:66:e6:28:41:08:95:04:99:12:c0:d2:63:50: e0:76:01:85:2e:e2:21:57:8c:44:85:d9:c6:83:d7: 4b:18:f4:e7:68:5e:b3:81:a3:78:35:f0:36:fb:4b: d9:c7:5a:a3:b8:03:a9:e5:27:f3:3b:8b:9d:4f:e3: 46:d0:9a:29:85:a3:24:f6:c5:cd:f9:bf:93:b0:57: 4d:34:9d:4c:13:21:4f:00:e9:9c:07:7a:eb:bc:f8: b6:65:65:81:86:5b:d3:fd:bd:1e:f0:7c:74:55:81: 9e:c4:4d:a5:e3:fa:72:0a:ac:af:b7:d7:2e:98:91: 01:86:1d:b5:4c:bb:5d:a3:1a:54:01:36:7d:e7:a9: 7b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:26:B4:76:15:70:28:E2:55:D5:36:CF:82:D4:8E:5B:DF:75:AB:F9 X509v3 Authority Key Identifier: keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:24:1e:5c:f7:33:2d:fc:c3:79:1c:b3:0d:af:eb:62:ba:22: 4e:e2:39:ef:cd:f5:f1:5b:99:ee:43:be:a1:4f:c4:cd:84:91: 48:79:59:73:c6:5b:78:00:03:e5:be:c6:85:d3:0b:80:c4:76: c7:2a:07:54:8d:a7:a1:fb:6c:a6:9a:73:a7:39:fd:d6:f4:cc: 6d:61:c9:74:6b:32:7d:4e:ba:dd:e7:0d:1b:a0:dc:87:36:5b: 29:ed:8d:21:8c:19:fa:f2:1b:e7:25:29:ea:d4:36:04:b0:6d: b4:47:19:9b:65:83:a4:e2:d2:ab:31:69:be:f7:a5:62:ff:77: 55:15:81:e8:de:d5:9b:98:39:17:aa:10:f3:9f:6d:25:51:aa: ae:80:e2:f7:e4:26:4c:a6:1e:a7:85:d5:e3:1d:7a:34:09:16: cc:01:2d:5a:a1:e3:da:1c:2b:5a:33:37:fe:bf:05:70:74:c0: b6:3a:67:af:a7:fc:8e:45:81:f1:0d:84:43:bd:08:2c:b5:8a: 67:57:86:ff:fc:7c:6d:64:41:9e:72:e9:26:34:c9:6c:4f:3d: 0c:7e:ef:a5:30:eb:0f:d0:e8:65:c2:54:16:db:a4:8f:ce:44: 23:76:f6:dc:cb:2c:24:1d:1a:df:82:90:d8:01:0b:89:1f:0d: 63:e3:55:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNdFvwcV17rz2JhD2hTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4 MDE0Y2YwHhcNMjUxMjA2MTYwMDQwWhcNMjUxMjA3MTYwMDQwWjAzMTEwLwYDVQQD Eyg0ZTI2YjQ3NjE1NzAyOGUyNTVkNTM2Y2Y4MmQ0OGU1YmRmNzVhYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArln77HHJVNkXjWYSCAUjFpbvLnqB TK04oA4q2SQmPzJGJmp95QMf/UOOfLDIXY8eealKeUIoanxrK1eOSPTwLUBn2xnp j5FBvM0Yy2F/jISHsgdf+OjgEnWe/1fzjqacP/MkMbK7RPteYPmnvXMaPTZgqtJJ 2V4jiWbmKEEIlQSZEsDSY1DgdgGFLuIhV4xEhdnGg9dLGPTnaF6zgaN4NfA2+0vZ x1qjuAOp5SfzO4udT+NG0JophaMk9sXN+b+TsFdNNJ1MEyFPAOmcB3rrvPi2ZWWB hlvT/b0e8Hx0VYGexE2l4/pyCqyvt9cumJEBhh21TLtdoxpUATZ956l75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4mtHYVcCjiVdU2z4LUjlvfdav5MB8GA1UdIwQY MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5 LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCQeXPcz LfzDeRyzDa/rYroiTuI578318VuZ7kO+oU/EzYSRSHlZc8ZbeAAD5b7GhdMLgMR2 xyoHVI2noftspppzpzn91vTMbWHJdGsyfU663ecNG6DchzZbKe2NIYwZ+vIb5yUp 6tQ2BLBttEcZm2WDpOLSqzFpvvelYv93VRWB6N7Vm5g5F6oQ859tJVGqroDi9+Qm TKYep4XV4x16NAkWzAEtWqHj2hwrWjM3/r8FcHTAtjpnr6f8jkWB8Q2EQ70ILLWK Z1eG//x8bWRBnnLpJjTJbE89DH7vpTDrD9DoZcJUFtukj85EI3b23MssJB0a34KQ 2AELiR8NY+NVLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:03 2025 by rpki-client