This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json) Hash identifier: sdByWB2KISRi1m8P95i6FxgfC84pQh9JR4XErDsfpFA= Subject key identifier: 0B:59:67:6A:47:1A:A4:0E:BB:C3:0B:3B:AF:82:2D:60:AD:B0:47:58 Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Certificate serial: 019AF38A087450DC43BE276852856390B714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:01:40 +0000 Manifest this update: Sat 06 Dec 2025 12:01:40 +0000 Manifest next update: Sun 07 Dec 2025 12:01:40 +0000 Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: bRIpvjE/vdjkpPBXNZ3auu25emAQHzBGA5L2W4N1LoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:08:74:50:dc:43:be:27:68:52:85:63:90:b7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Validity Not Before: Dec 6 12:01:40 2025 GMT Not After : Dec 7 12:01:40 2025 GMT Subject: CN=0b59676a471aa40ebbc30b3baf822d60adb04758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:04:a2:0a:6f:75:03:f2:77:a5:fe:25:74: 99:dd:ea:2c:f6:9a:f0:9b:2c:1e:5f:50:1f:95:1f: 3a:e8:1b:ba:dd:a9:40:8f:f1:f7:53:29:b8:10:fd: 5c:bc:2e:53:aa:92:ca:2a:9b:ea:b9:93:b2:c0:0e: b1:90:fb:57:8a:6e:d1:73:df:db:f9:f5:49:3b:38: ff:43:f5:7d:36:e3:9e:e8:ed:fc:05:7a:3e:cf:28: 9d:b0:1d:a2:02:88:77:06:09:4d:6b:7b:b5:e9:e8: 0c:c0:2b:70:e1:8d:ad:43:15:36:a1:f8:b5:ae:a5: c7:10:7f:83:e1:85:cd:bd:bc:97:45:76:1d:1a:9c: c0:98:4e:b0:a7:0f:1c:38:10:74:fd:9d:cb:df:d8: ea:a9:22:f3:d9:b2:41:a8:94:16:5f:3f:f9:ff:0a: 3c:5e:7e:88:67:75:94:0f:7b:ad:3e:43:c3:8f:bb: d1:16:e9:30:6e:0d:ba:03:9b:e5:04:4d:53:9c:c5: f1:92:ae:e2:bc:ec:2b:c4:8c:c2:94:ba:dd:52:4d: 69:7e:81:5c:3b:67:c7:6a:9e:79:46:44:f8:cc:d6: 6d:06:d1:1c:f6:b4:ed:d4:e1:39:3b:cb:e7:b2:5d: 2f:79:65:b3:72:3f:73:18:a1:0c:31:39:7c:be:8e: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:59:67:6A:47:1A:A4:0E:BB:C3:0B:3B:AF:82:2D:60:AD:B0:47:58 X509v3 Authority Key Identifier: keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:0a:57:79:18:1b:16:02:8e:66:cb:76:19:81:a5:e0:14: 49:a8:cf:f5:bd:37:5d:c9:af:35:31:48:d5:2b:ad:37:e7:ff: 86:03:f9:a3:ef:36:ae:9f:7b:f5:61:a4:bd:98:f7:b8:49:45: 71:14:fc:37:73:79:bd:79:62:86:a0:e7:c0:dd:b2:9a:b2:f1: a7:af:cd:25:4b:f5:fc:d5:c8:b1:4d:cd:7a:20:39:10:3d:86: 10:fa:22:12:1a:32:d9:b6:07:58:f6:34:7c:9d:bc:02:bc:16: 80:a3:14:e5:a8:a2:d9:a8:56:cf:14:62:28:0e:11:0b:39:17: f2:1c:0f:e0:47:29:db:cc:46:d1:dd:4b:c4:08:0b:4f:92:86: 98:56:cc:d4:98:54:fa:51:e2:8c:b0:d2:59:80:1c:c5:9c:36: f5:c9:e1:e4:aa:7b:d2:56:4e:ef:11:fe:b3:94:23:08:af:51: 45:b2:c1:37:59:e2:ed:ef:b7:9f:6d:d1:19:23:06:6f:77:ac: 7d:75:b8:47:0f:6d:13:a0:eb:75:c9:7d:d2:0b:84:52:4e:f9: de:d6:a3:73:2d:eb:e9:02:5f:90:92:2d:13:7d:82:1c:dd:d3: 95:36:f9:25:52:cc:45:2a:20:dd:d2:b7:df:9a:52:d5:3f:02: 95:75:56:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigh0UNxDvidoUoVjkLcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl Y2I2ZDkwHhcNMjUxMjA2MTIwMTQwWhcNMjUxMjA3MTIwMTQwWjAzMTEwLwYDVQQD EygwYjU5Njc2YTQ3MWFhNDBlYmJjMzBiM2JhZjgyMmQ2MGFkYjA0NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztkEogpvdQPyd6X+JXSZ3eos9prw myweX1AflR866Bu63alAj/H3Uym4EP1cvC5TqpLKKpvquZOywA6xkPtXim7Rc9/b +fVJOzj/Q/V9NuOe6O38BXo+zyidsB2iAoh3BglNa3u16egMwCtw4Y2tQxU2ofi1 rqXHEH+D4YXNvbyXRXYdGpzAmE6wpw8cOBB0/Z3L39jqqSLz2bJBqJQWXz/5/wo8 Xn6IZ3WUD3utPkPDj7vRFukwbg26A5vlBE1TnMXxkq7ivOwrxIzClLrdUk1pfoFc O2fHap55RkT4zNZtBtEc9rTt1OE5O8vnsl0veWWzcj9zGKEMMTl8vo7SAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtZZ2pHGqQOu8MLO6+CLWCtsEdYMB8GA1UdIwQY MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp8KV3kY GxYCjmbLdhmBpeAUSajP9b03XcmvNTFI1SutN+f/hgP5o+82rp979WGkvZj3uElF cRT8N3N5vXlihqDnwN2ymrLxp6/NJUv1/NXIsU3NeiA5ED2GEPoiEhoy2bYHWPY0 fJ28ArwWgKMU5aii2ahWzxRiKA4RCzkX8hwP4Ecp28xG0d1LxAgLT5KGmFbM1JhU +lHijLDSWYAcxZw29cnh5Kp70lZO7xH+s5QjCK9RRbLBN1ni7e+3n23RGSMGb3es fXW4Rw9tE6Drdcl90guEUk753tajcy3r6QJfkJItE32CHN3TlTb5JVLMRSog3dK3 35pS1T8ClXVW8A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:16 2025 by rpki-client