This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json) Hash identifier: tuCHoWPOw6DjToNapBW6X87VzNmYqmG8M9SJwkyissM= Subject key identifier: 4B:12:0E:DA:BB:61:87:19:DB:19:B2:AD:A2:EC:85:D9:33:B4:77:46 Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0 Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0 Certificate serial: 019AF12EB2DD8347AFD98F50E355FC249586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft Manifest number: 07E3 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: Ji5lxQUqfBHYXDvuh7Ij9QRUFKcTFtrN7qDU7Oar7Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b2:dd:83:47:af:d9:8f:50:e3:55:fc:24:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=4b120edabb618719db19b2ada2ec85d933b47746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:29:81:86:97:84:e2:20:59:7f:7b:e6:0c: d5:9d:1e:72:72:fc:a4:04:c0:3f:e6:88:fc:00:27: 11:bb:c5:dd:50:54:cd:94:ac:5e:21:25:e3:81:0d: bd:fd:cc:d2:f4:8f:3b:10:2a:64:e8:f9:97:0c:77: 55:88:b7:b4:a9:c9:83:68:db:53:de:82:a0:32:78: 8f:d7:e4:a9:fa:2c:b7:0c:30:35:d4:fc:45:93:a3: 5f:1c:e1:ee:3f:01:51:1b:57:b7:e2:d4:b6:ce:35: 57:7c:d4:69:eb:94:15:0e:d7:d4:61:92:d3:da:06: a9:ba:70:9b:ca:a9:ed:6e:3e:30:84:34:d6:3c:3d: 97:4d:48:e1:aa:10:1b:2e:d6:33:6e:27:26:c5:74: ae:9a:4a:a2:d6:0e:39:ed:1c:77:cb:56:5b:6a:1d: 37:ab:6d:3c:5d:b2:9a:99:d9:66:fd:d4:bd:d1:a9: b2:d1:19:eb:0f:63:1a:c4:57:6b:dc:76:18:bc:bf: 10:b6:72:ef:a4:2d:3e:a8:db:f7:d9:44:bc:32:be: 04:49:eb:cc:42:4f:35:ab:d2:c1:b4:7a:4e:0d:71: d7:a1:de:8d:1f:78:a8:56:0f:ee:53:f2:35:fe:c5: 49:13:57:72:cb:fe:97:fa:c7:01:fe:86:e7:0f:94: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:0E:DA:BB:61:87:19:DB:19:B2:AD:A2:EC:85:D9:33:B4:77:46 X509v3 Authority Key Identifier: keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c7:b4:ec:56:b7:a0:b9:2f:40:6f:37:c4:1b:12:ee:4e:a3: 6a:51:f8:d3:18:4d:d9:94:74:10:77:bc:40:43:b9:26:67:21: 1b:72:5d:15:2e:a8:fb:21:9c:33:2f:b9:1a:29:2f:ee:ba:fc: 10:ce:3b:fc:27:04:f5:c1:17:74:69:40:08:d8:57:06:6e:0e: 8c:96:e7:a7:56:76:e3:7e:9f:c3:5b:37:a2:ff:db:76:a9:09: cd:31:29:1d:43:1f:ef:c2:92:86:5f:5c:af:1e:0e:97:09:b0: bd:0c:19:91:2f:35:44:d3:25:00:46:a2:53:9d:45:b4:34:89: 29:92:07:6e:b0:4b:4e:7c:a2:c8:e2:18:49:ab:16:f8:e6:a6: ff:a5:90:3c:3a:ac:0a:af:9a:1f:d4:d7:f5:b5:93:57:dd:1a: 80:2c:97:b5:79:ba:45:57:c9:41:47:45:28:3a:65:a1:91:68: 55:da:0e:e2:fe:a4:6a:73:4a:a1:b0:3b:8d:b3:46:89:83:59: 2d:f4:31:af:ad:1d:91:cd:48:9c:4b:2a:62:12:14:4e:71:48: 4a:44:3d:5b:b5:b3:6f:6d:d8:53:e5:3d:ed:c5:d9:7e:5b:ec: 70:02:77:35:b2:5b:0a:22:7d:4b:32:0e:0c:07:5e:59:69:35: be:25:4c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrLdg0ev2Y9Q41X8JJWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNzljZWJhOTUzYjA3ZGFhMjJhZjNjOGFhYjJiMWNkNGUy MjQ4ZDAwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD Eyg0YjEyMGVkYWJiNjE4NzE5ZGIxOWIyYWRhMmVjODVkOTMzYjQ3NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOUpgYaXhOIgWX975gzVnR5ycvyk BMA/5oj8ACcRu8XdUFTNlKxeISXjgQ29/czS9I87ECpk6PmXDHdViLe0qcmDaNtT 3oKgMniP1+Sp+iy3DDA11PxFk6NfHOHuPwFRG1e34tS2zjVXfNRp65QVDtfUYZLT 2gapunCbyqntbj4whDTWPD2XTUjhqhAbLtYzbicmxXSumkqi1g457Rx3y1Zbah03 q208XbKamdlm/dS90amy0RnrD2MaxFdr3HYYvL8QtnLvpC0+qNv32US8Mr4ESevM Qk81q9LBtHpODXHXod6NH3ioVg/uU/I1/sVJE1dyy/6X+scB/obnD5TwEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsSDtq7YYcZ2xmyraLshdkztHdGMB8GA1UdIwQY MBaAFG55zrqVOwfaoirzyKqysc1OIkjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUt MDdmZmI2NmM1NGRmLzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUtMDdmZmI2NmM1NGRm LzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADse07Fa3 oLkvQG83xBsS7k6jalH40xhN2ZR0EHe8QEO5JmchG3JdFS6o+yGcMy+5Gikv7rr8 EM47/CcE9cEXdGlACNhXBm4OjJbnp1Z2436fw1s3ov/bdqkJzTEpHUMf78KShl9c rx4OlwmwvQwZkS81RNMlAEaiU51FtDSJKZIHbrBLTnyiyOIYSasW+Oam/6WQPDqs Cq+aH9TX9bWTV90agCyXtXm6RVfJQUdFKDploZFoVdoO4v6kanNKobA7jbNGiYNZ LfQxr60dkc1InEsqYhIUTnFISkQ9W7Wzb23YU+U97cXZflvscAJ3NbJbCiJ9SzIO DAdeWWk1viVMWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:53 2025 by rpki-client