This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json) Hash identifier: 9RxBJifCHYEZPyrLTsW7IsywoDg+TJUiWrVXMKbf2Rc= Subject key identifier: 62:0D:51:83:8E:78:70:6F:02:10:58:C1:63:89:72:A7:FA:D6:17:8E Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713 Certificate serial: 019B372136274E81645F9DA8EECA37897750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft Manifest number: 139D Signing time: Fri 19 Dec 2025 15:01:21 +0000 Manifest this update: Fri 19 Dec 2025 15:01:21 +0000 Manifest next update: Sat 20 Dec 2025 15:01:21 +0000 Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: FQ6yMEcNH/sV0M0ftSw6QMet1iRL5b1i1r2yxs7dpSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:36:27:4e:81:64:5f:9d:a8:ee:ca:37:89:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713 Validity Not Before: Dec 19 15:01:21 2025 GMT Not After : Dec 20 15:01:21 2025 GMT Subject: CN=620d51838e78706f021058c1638972a7fad6178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:da:f5:36:b0:47:aa:0b:17:8e:b7:52:f3: a1:92:0b:f5:b1:2e:30:de:49:fe:11:a6:10:58:39: 85:b8:d9:19:fc:67:7f:ec:f0:af:62:73:39:40:c7: a5:de:21:bb:09:99:d1:1d:83:70:4a:0f:2e:38:75: 22:9a:a7:f4:a2:a3:bb:aa:3d:31:60:b9:d2:4c:e1: 09:7d:43:19:55:b7:75:2b:01:e4:05:13:a9:75:e3: 49:94:a5:54:fb:1b:6f:a0:c8:ed:44:26:67:1a:a4: a4:3a:6a:b4:80:ad:ae:7f:14:8b:6a:62:55:47:52: 9a:13:32:8e:0c:61:88:77:e3:16:72:02:30:8a:c2: fb:3e:8d:6a:37:52:85:03:9f:4a:e9:d6:ca:b7:85: 65:21:75:ec:ef:07:77:9d:d0:f5:37:86:4f:c4:d5: 03:97:db:30:4c:fb:3a:57:99:c8:49:90:e8:a4:17: 2c:ac:31:94:fb:d4:50:97:7e:b4:0b:e6:9e:9e:a5: ce:49:42:77:0f:7d:2b:a2:ab:3b:37:8f:a1:5d:c5: 5d:a9:d0:4b:19:d2:49:47:05:58:52:e1:40:5e:d9: 12:4a:88:4f:93:ad:31:65:f0:17:18:32:83:75:e2: 05:c4:9f:ee:90:31:a4:1a:62:9b:4e:80:fa:fa:02: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:51:83:8E:78:70:6F:02:10:58:C1:63:89:72:A7:FA:D6:17:8E X509v3 Authority Key Identifier: keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:75:cf:7e:e3:4b:fa:80:98:96:24:b1:f0:9f:15:a1:8e:bf: d6:6b:03:e3:31:f7:c8:19:e1:a5:55:dc:a3:98:58:5c:f7:46: e0:e9:b6:d4:4d:ce:fd:df:34:a6:56:7e:ff:86:83:35:21:8d: 42:8a:4d:a8:45:1e:ff:8a:60:25:d9:b1:fb:c3:3a:3f:2d:3a: e1:80:c8:8a:8c:e0:b2:0a:5f:d4:7e:33:54:8d:d8:c5:89:94: 71:77:c5:89:9c:18:eb:3a:fe:5f:ef:ed:c4:fe:22:65:f9:e8: e1:b9:c1:24:e5:34:a7:11:b0:2d:c4:55:79:6b:4e:89:5d:00: 8b:c5:23:d0:0e:f9:96:15:22:2f:ab:e3:40:a8:1e:07:61:aa: c7:85:43:81:fa:b9:39:3b:8f:3c:22:b9:48:ee:a8:14:26:d6: ac:db:89:2e:0d:a8:82:6e:2d:45:a6:dd:ae:e3:23:76:19:d6: bf:e3:08:79:26:ee:9f:25:ac:ba:32:e9:0d:d4:5c:aa:ff:62: 07:4a:94:70:a5:c4:8c:6c:8b:27:47:36:72:2e:d3:a8:3d:18: f4:50:17:60:13:bb:27:b0:f5:b2:0c:6a:0c:32:b9:5e:f6:5d: 51:58:18:76:3e:70:4a:a8:87:12:02:b8:c6:a6:61:8e:a7:d9: 6e:0d:10:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITYnToFkX52o7so3iXdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzdmMzcxNDBkMTMxNzlmOWE1YzkyMDk2NDljODBjMzdj NmE3MTMwHhcNMjUxMjE5MTUwMTIxWhcNMjUxMjIwMTUwMTIxWjAzMTEwLwYDVQQD Eyg2MjBkNTE4MzhlNzg3MDZmMDIxMDU4YzE2Mzg5NzJhN2ZhZDYxNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQba9TawR6oLF463UvOhkgv1sS4w 3kn+EaYQWDmFuNkZ/Gd/7PCvYnM5QMel3iG7CZnRHYNwSg8uOHUimqf0oqO7qj0x YLnSTOEJfUMZVbd1KwHkBROpdeNJlKVU+xtvoMjtRCZnGqSkOmq0gK2ufxSLamJV R1KaEzKODGGId+MWcgIwisL7Po1qN1KFA59K6dbKt4VlIXXs7wd3ndD1N4ZPxNUD l9swTPs6V5nISZDopBcsrDGU+9RQl360C+aenqXOSUJ3D30roqs7N4+hXcVdqdBL GdJJRwVYUuFAXtkSSohPk60xZfAXGDKDdeIFxJ/ukDGkGmKbToD6+gJ5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGINUYOOeHBvAhBYwWOJcqf61heOMB8GA1UdIwQY MBaAFGzH83FA0TF5+aXJIJZJyAw3xqcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQt OGQ1NmRkY2ZhNGI4LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQtOGQ1NmRkY2ZhNGI4 LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenXPfuNL +oCYliSx8J8VoY6/1msD4zH3yBnhpVXco5hYXPdG4Om21E3O/d80plZ+/4aDNSGN QopNqEUe/4pgJdmx+8M6Py064YDIiozgsgpf1H4zVI3YxYmUcXfFiZwY6zr+X+/t xP4iZfno4bnBJOU0pxGwLcRVeWtOiV0Ai8Uj0A75lhUiL6vjQKgeB2Gqx4VDgfq5 OTuPPCK5SO6oFCbWrNuJLg2ogm4tRabdruMjdhnWv+MIeSbunyWsujLpDdRcqv9i B0qUcKXEjGyLJ0c2ci7TqD0Y9FAXYBO7J7D1sgxqDDK5XvZdUVgYdj5wSqiHEgK4 xqZhjqfZbg0QTw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:25 2025 by rpki-client