This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json) Hash identifier: +tXBNbCtl0HLh9Q9FeW7N6w/IFVv7b1RZGtY5YX2kBo= Subject key identifier: 10:CD:6D:12:EB:3B:08:17:78:3E:27:CF:11:B2:DF:44:BD:98:22:D3 Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Certificate serial: 019AF208B6B7B81BA612E80D60E7BFE60631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft Manifest number: 0788 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: QdcuPw07caefGKcjHU2oKjkZ/nDTt1O70/CIvwXOTa4=) 2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b6:b7:b8:1b:a6:12:e8:0d:60:e7:bf:e6:06:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=10cd6d12eb3b0817783e27cf11b2df44bd9822d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:25:7e:68:ef:34:c7:91:d8:5b:d0:19:4c: c2:aa:f5:30:08:3e:59:78:04:d3:3f:05:8d:6b:1c: 5d:1b:03:79:db:c0:5f:c2:b7:78:a3:11:e7:51:bc: ed:c2:87:ba:bd:50:a0:f4:3b:bc:f5:67:03:be:a3: 48:b5:e1:c7:6a:ef:19:52:ab:82:92:01:b5:09:3b: d0:b5:3d:c8:42:fd:a9:b7:74:f8:08:d7:95:68:40: 8a:bb:d2:e3:38:03:bc:9a:ce:52:d8:b2:97:18:3f: 14:d6:02:7a:33:6d:3f:cf:63:69:bc:c4:2b:13:1d: 52:9f:39:27:26:d7:34:4a:95:90:2d:5a:05:b2:67: ec:8e:a7:e3:fe:46:cc:8e:03:56:e1:48:01:24:2a: 70:a5:c8:a2:b1:ac:31:70:da:ab:55:d7:e1:48:5f: fd:45:47:e0:0a:c2:5f:69:b8:b5:f7:8b:2d:d4:87: 6a:41:36:74:d4:6d:fe:8c:d8:74:60:b5:ca:3f:6a: 0f:31:ab:5e:df:3c:71:cd:f8:3b:ef:0d:e0:2d:97: d0:b1:5d:47:0d:71:74:d5:c2:64:6c:1a:3f:88:1d: 18:10:80:2e:1e:c2:89:36:de:1c:c6:a9:e9:c1:11: e9:58:68:56:38:85:c8:d5:8e:dd:f9:2e:42:b9:b4: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CD:6D:12:EB:3B:08:17:78:3E:27:CF:11:B2:DF:44:BD:98:22:D3 X509v3 Authority Key Identifier: keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7c:d6:30:96:43:02:9e:e5:23:86:9c:1d:b8:3c:99:aa:74: 2d:ae:bb:17:45:e8:24:49:39:8c:0a:bb:70:1d:2f:32:f7:2e: e5:6d:7c:51:ae:9f:e1:41:7d:62:e3:e4:ce:d2:67:a2:9c:d3: f5:78:db:a9:34:80:d9:e3:2f:03:d1:d0:93:09:49:e0:be:af: 47:c2:e8:75:96:58:29:94:03:69:5f:c7:0f:e2:fa:a2:60:27: 80:5d:0c:27:61:5e:48:72:65:b3:a9:33:ea:9d:2e:8b:f8:6d: da:ea:16:6e:60:28:f4:17:00:11:08:8e:e5:a6:83:89:09:1a: 72:38:55:2d:3b:9f:76:7c:ea:d7:a7:c2:25:16:b0:e5:1e:49: 7e:39:85:da:52:51:be:69:7a:98:28:ae:fb:98:ce:61:c5:2e: d8:02:4b:2e:ef:42:d2:7c:8c:6c:4c:fc:eb:1f:08:98:cc:0d: b3:ba:91:fb:d3:87:fe:8d:03:9f:16:96:cd:a4:cc:b7:bb:53: 9e:5d:6b:2f:e7:f1:e9:45:33:15:c9:ba:1b:2e:7c:70:97:e7: fa:c3:20:54:8b:7a:01:42:d2:9c:d8:29:ab:f5:a6:74:0a:1f: 6f:6c:95:46:dc:b6:91:21:e1:be:9a:b9:99:06:d5:33:e3:23: 3c:f6:71:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLa3uBumEugNYOe/5gYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw NTZmYzgwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygxMGNkNmQxMmViM2IwODE3NzgzZTI3Y2YxMWIyZGY0NGJkOTgyMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxIlfmjvNMeR2FvQGUzCqvUwCD5Z eATTPwWNaxxdGwN528Bfwrd4oxHnUbztwoe6vVCg9Du89WcDvqNIteHHau8ZUquC kgG1CTvQtT3IQv2pt3T4CNeVaECKu9LjOAO8ms5S2LKXGD8U1gJ6M20/z2NpvMQr Ex1SnzknJtc0SpWQLVoFsmfsjqfj/kbMjgNW4UgBJCpwpciisawxcNqrVdfhSF/9 RUfgCsJfabi194st1IdqQTZ01G3+jNh0YLXKP2oPMate3zxxzfg77w3gLZfQsV1H DXF01cJkbBo/iB0YEIAuHsKJNt4cxqnpwRHpWGhWOIXI1Y7d+S5CubRBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDNbRLrOwgXeD4nzxGy30S9mCLTMB8GA1UdIwQY MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3 LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnzWMJZD Ap7lI4acHbg8map0La67F0XoJEk5jAq7cB0vMvcu5W18Ua6f4UF9YuPkztJnopzT 9XjbqTSA2eMvA9HQkwlJ4L6vR8LodZZYKZQDaV/HD+L6omAngF0MJ2FeSHJls6kz 6p0ui/ht2uoWbmAo9BcAEQiO5aaDiQkacjhVLTufdnzq16fCJRaw5R5JfjmF2lJR vml6mCiu+5jOYcUu2AJLLu9C0nyMbEz86x8ImMwNs7qR+9OH/o0DnxaWzaTMt7tT nl1rL+fx6UUzFcm6Gy58cJfn+sMgVIt6AULSnNgpq/WmdAofb2yVRty2kSHhvpq5 mQbVM+MjPPZx5w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:18 2025 by rpki-client