This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json) Hash identifier: SrFx9sB0QLhWrAqUYNge9W1APtAJUTBJUOa6TEI3m4M= Subject key identifier: CC:31:A8:7C:87:F2:9F:76:56:A1:6B:B0:BF:95:DE:86:01:52:04:2A Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713 Certificate serial: 019AF577820613B6958CEAA767AECB755B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft Manifest number: 137B Signing time: Sat 06 Dec 2025 21:00:41 +0000 Manifest this update: Sat 06 Dec 2025 21:00:41 +0000 Manifest next update: Sun 07 Dec 2025 21:00:41 +0000 Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: ig4YIHeELNQjtMB18ANU6gPIqErlWwitStv1d3XPe+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:82:06:13:b6:95:8c:ea:a7:67:ae:cb:75:5b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713 Validity Not Before: Dec 6 21:00:41 2025 GMT Not After : Dec 7 21:00:41 2025 GMT Subject: CN=cc31a87c87f29f7656a16bb0bf95de860152042a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:af:f9:dd:d2:ab:90:c5:6a:0b:7e:46:32: c6:0b:ac:2b:91:a8:90:d0:32:98:b5:cd:76:94:cf: 6f:a4:5d:13:8a:a7:7b:fb:b0:0d:ac:a0:d9:0a:00: ea:d0:e9:cd:88:97:55:29:b3:ad:07:34:62:51:9d: 67:49:83:22:96:70:82:d9:50:bd:d2:59:eb:1b:92: ed:e8:8d:ac:c4:09:97:6e:12:20:de:11:45:9a:a4: 49:30:ea:13:07:c6:b0:e8:09:ef:63:19:22:72:c6: cf:55:c8:79:1e:0f:64:be:88:6b:fc:be:2a:62:b3: c3:72:fd:99:04:ef:a1:88:f0:6d:8a:c6:75:92:9f: 05:a5:bb:3c:93:35:b1:47:ae:3e:e8:89:13:3c:8c: 8b:f0:55:1a:47:9c:d6:b7:18:6e:38:8f:5c:1d:de: 72:42:46:e8:99:f2:ad:39:93:b5:e1:cc:22:c4:3f: 7f:b5:64:65:47:c1:ce:6f:73:56:d9:27:32:a3:a1: 53:9e:b8:b5:c6:da:28:f1:d1:78:19:23:36:46:92: 10:06:98:fc:94:aa:5e:d0:0e:2a:e2:5b:08:58:cf: 4d:0a:63:ad:32:2b:eb:04:c4:ef:fb:ca:3f:50:e5: 76:3b:f0:f9:66:f1:6a:ef:5e:5d:b8:bd:1b:99:a6: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:A8:7C:87:F2:9F:76:56:A1:6B:B0:BF:95:DE:86:01:52:04:2A X509v3 Authority Key Identifier: keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5b:29:a8:0e:8f:4f:51:fd:d0:96:b9:05:dd:db:09:59:c5: ee:0c:36:3e:d0:9f:b7:b3:b5:75:ef:b9:ab:12:19:1f:15:29: cd:75:82:89:ad:e5:ee:bf:91:7b:f0:de:b1:4d:d2:55:cc:f9: f0:0e:12:bc:8c:f7:d0:20:e7:7f:cd:f6:72:35:7b:47:f0:7e: 11:67:68:7d:c4:e5:a1:c3:59:73:f1:3d:1d:6d:53:2a:d9:45: 5d:7f:ce:bf:26:cf:b5:0c:40:9d:d9:d4:6b:fc:ad:63:30:1e: 39:97:2a:6a:40:eb:77:cb:94:de:fd:54:d4:22:f6:fc:10:f0: b1:2b:51:ed:e5:80:16:bc:31:57:45:67:52:2a:c5:78:c5:fd: 55:63:2f:b3:ed:55:72:8b:ee:48:cb:a9:59:ac:3a:cb:0c:bd: 9a:a0:be:32:f6:41:3a:02:f9:e1:86:49:2d:54:49:ef:07:a0: 00:a7:49:c6:38:9c:0c:64:e7:51:03:4a:3c:a0:e0:00:5f:95: 45:fb:6e:28:01:c1:0a:81:61:48:68:9b:d0:05:cf:5a:37:45: 9e:fd:8d:77:c2:a2:00:94:de:ff:80:18:ca:98:69:c2:9a:9f: 6c:87:22:8b:85:14:3e:ac:bc:9f:c2:34:76:36:fa:01:db:33: 13:3e:a3:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4IGE7aVjOqnZ67LdVtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzdmMzcxNDBkMTMxNzlmOWE1YzkyMDk2NDljODBjMzdj NmE3MTMwHhcNMjUxMjA2MjEwMDQxWhcNMjUxMjA3MjEwMDQxWjAzMTEwLwYDVQQD EyhjYzMxYTg3Yzg3ZjI5Zjc2NTZhMTZiYjBiZjk1ZGU4NjAxNTIwNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8iv+d3Sq5DFagt+RjLGC6wrkaiQ 0DKYtc12lM9vpF0Tiqd7+7ANrKDZCgDq0OnNiJdVKbOtBzRiUZ1nSYMilnCC2VC9 0lnrG5Lt6I2sxAmXbhIg3hFFmqRJMOoTB8aw6AnvYxkicsbPVch5Hg9kvohr/L4q YrPDcv2ZBO+hiPBtisZ1kp8Fpbs8kzWxR64+6IkTPIyL8FUaR5zWtxhuOI9cHd5y QkbomfKtOZO14cwixD9/tWRlR8HOb3NW2Scyo6FTnri1xtoo8dF4GSM2RpIQBpj8 lKpe0A4q4lsIWM9NCmOtMivrBMTv+8o/UOV2O/D5ZvFq715duL0bmaYtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwxqHyH8p92VqFrsL+V3oYBUgQqMB8GA1UdIwQY MBaAFGzH83FA0TF5+aXJIJZJyAw3xqcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQt OGQ1NmRkY2ZhNGI4LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQtOGQ1NmRkY2ZhNGI4 LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1spqA6P T1H90Ja5Bd3bCVnF7gw2PtCft7O1de+5qxIZHxUpzXWCia3l7r+Re/DesU3SVcz5 8A4SvIz30CDnf832cjV7R/B+EWdofcTlocNZc/E9HW1TKtlFXX/OvybPtQxAndnU a/ytYzAeOZcqakDrd8uU3v1U1CL2/BDwsStR7eWAFrwxV0VnUirFeMX9VWMvs+1V covuSMupWaw6ywy9mqC+MvZBOgL54YZJLVRJ7wegAKdJxjicDGTnUQNKPKDgAF+V RftuKAHBCoFhSGib0AXPWjdFnv2Nd8KiAJTe/4AYyphpwpqfbIcii4UUPqy8n8I0 djb6AdszEz6jgA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:28 2025 by rpki-client