This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json) Hash identifier: HfTxdMQRfixnSfX8sdsBrOR39P6Z88nCIMqgZAL4AvU= Subject key identifier: BC:6C:6B:6B:FC:99:28:05:80:2F:6C:35:84:CE:C6:AD:D5:56:61:72 Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Certificate serial: 019AF2766714C0D0CD5EB89460D4C4151340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft Manifest number: 0122 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: 08RxR8iO2FhU9rvJfFlhqb7t6ko.roa (hash: DIbHPZQ18xH9+/A7UUVj8MnmxfSRwJbz7oSJVK8sMZg=) 2: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: Lmp6jVvh3UifEukKqcgsl3kWsh/3RRGp5/XQ/MMNSCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:14:c0:d0:cd:5e:b8:94:60:d4:c4:15:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=bc6c6b6bfc992805802f6c3584cec6add5566172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:52:23:58:0a:a5:4a:a1:f3:64:f1:60:a3: b6:ba:3f:c1:a3:00:54:7c:17:54:0b:f7:45:18:fc: 01:4f:fb:6b:32:1b:3b:99:c7:6c:c2:d8:e4:07:c4: c1:3c:e3:17:30:e0:80:9b:41:31:a8:d8:b3:04:ec: a7:f7:9b:7d:4c:f9:f3:87:16:62:2a:4b:03:d6:dd: 41:05:15:be:4b:7d:4e:ed:a8:01:69:9d:d9:ea:66: cf:b9:d9:96:4c:ed:81:2d:0a:93:ef:06:fb:53:31: 48:2c:cc:50:f9:1a:d2:44:2e:b5:21:4c:29:e4:4e: 95:2f:2a:e5:5d:1d:ac:5e:53:f4:d6:b7:9b:dc:1d: b9:da:bd:1a:fc:84:f2:dd:2e:51:e8:48:91:46:b4: 13:ec:4b:f1:84:18:14:fa:1a:52:9e:b1:8a:ec:63: 11:ae:31:5a:35:09:43:f1:bf:e2:c4:e9:76:24:d9: 9c:b2:56:75:d4:72:2b:ea:42:25:c5:a8:f0:ea:f1: 71:fc:64:bb:4d:a5:ef:7e:72:f0:e0:80:23:c8:e1: 8e:09:0f:30:8f:bb:67:9a:3f:fa:ad:ef:37:d7:74: bd:00:c2:d6:20:8c:dc:cc:ef:8b:46:30:d2:6c:79: 8f:57:33:0e:17:50:3b:e9:b7:5b:ad:4a:3a:f6:9b: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:6B:6B:FC:99:28:05:80:2F:6C:35:84:CE:C6:AD:D5:56:61:72 X509v3 Authority Key Identifier: keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ea:9a:cd:f1:04:51:02:52:09:57:ff:5c:37:99:56:27:b4: 33:10:b7:18:5d:d3:9d:6c:10:61:15:15:7e:11:9f:77:77:7e: a5:27:68:eb:27:51:23:8c:f3:5f:8a:12:99:d7:cc:66:79:c3: 40:87:12:79:52:b7:73:4e:e3:72:cf:dc:75:66:3e:f3:52:41: a2:dd:f1:97:9b:ee:4c:22:81:68:19:c5:b0:b9:a3:ac:23:05: ba:56:46:e2:de:03:d8:bd:52:c7:fd:60:79:f6:a0:30:9c:3d: 12:6e:66:e3:69:21:06:f1:12:25:e1:3c:0a:35:63:d2:64:f3: a2:b2:ba:20:ee:90:61:63:2c:07:b9:ca:6a:b7:d7:2e:35:f0: a4:a0:89:f8:25:11:d9:2b:0d:24:b9:5d:ba:e2:18:0c:fc:18: 1b:ca:47:3f:07:f2:b3:99:4a:29:f3:f9:78:f5:dd:e9:34:7a: 3b:36:15:5b:ba:cd:e8:89:6b:93:bc:5f:71:a1:29:32:7c:12: c2:42:5b:62:21:7e:a4:95:16:b8:a3:f0:c1:ef:36:ff:a5:d2: 5f:79:4e:b2:51:ce:2b:ff:8c:94:2b:c1:40:d8:0c:0f:ae:ea: 7a:fe:03:f7:35:6c:7c:80:70:85:0d:f9:93:bc:23:33:ae:11: 60:8d:1e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmcUwNDNXriUYNTEFRNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2QyYzhkYTgzZjVjM2M5NGFlOTQwYTBlZmQyYTc3MTRm ZjkwZTIwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhiYzZjNmI2YmZjOTkyODA1ODAyZjZjMzU4NGNlYzZhZGQ1NTY2MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+1SI1gKpUqh82TxYKO2uj/BowBU fBdUC/dFGPwBT/trMhs7mcdswtjkB8TBPOMXMOCAm0ExqNizBOyn95t9TPnzhxZi KksD1t1BBRW+S31O7agBaZ3Z6mbPudmWTO2BLQqT7wb7UzFILMxQ+RrSRC61IUwp 5E6VLyrlXR2sXlP01reb3B252r0a/ITy3S5R6EiRRrQT7EvxhBgU+hpSnrGK7GMR rjFaNQlD8b/ixOl2JNmcslZ11HIr6kIlxajw6vFx/GS7TaXvfnLw4IAjyOGOCQ8w j7tnmj/6re8313S9AMLWIIzczO+LRjDSbHmPVzMOF1A76bdbrUo69ptSUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxsa2v8mSgFgC9sNYTOxq3VVmFyMB8GA1UdIwQY MBaAFAQ9LI2oP1w8lK6UCg79KncU/5DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUt M2JiYzY2MWI0Y2M1LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUtM2JiYzY2MWI0Y2M1 LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOqazfEE UQJSCVf/XDeZVie0MxC3GF3TnWwQYRUVfhGfd3d+pSdo6ydRI4zzX4oSmdfMZnnD QIcSeVK3c07jcs/cdWY+81JBot3xl5vuTCKBaBnFsLmjrCMFulZG4t4D2L1Sx/1g efagMJw9Em5m42khBvESJeE8CjVj0mTzorK6IO6QYWMsB7nKarfXLjXwpKCJ+CUR 2SsNJLlduuIYDPwYG8pHPwfys5lKKfP5ePXd6TR6OzYVW7rN6Ilrk7xfcaEpMnwS wkJbYiF+pJUWuKPwwe82/6XSX3lOslHOK/+MlCvBQNgMD67qev4D9zVsfIBwhQ35 k7wjM64RYI0e3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:54 2025 by rpki-client