This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json) Hash identifier: iouJhC6l+/8hY3wb9G1cWlhRteT9RuRgaGXTcGsv7nA= Subject key identifier: B6:06:3E:AF:26:56:8B:89:F5:EA:CD:F4:1C:0E:87:E9:7D:D2:5A:FF Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05 Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905 Certificate serial: 019AF464F76A3B9D3422223EA8E20D568454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft Manifest number: 15AC Signing time: Sat 06 Dec 2025 16:00:48 +0000 Manifest this update: Sat 06 Dec 2025 16:00:48 +0000 Manifest next update: Sun 07 Dec 2025 16:00:48 +0000 Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: tWl4Bw/ppaG+Bywqqw7VOauyG/wH1Ppn7PT37k1744E=) 2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f7:6a:3b:9d:34:22:22:3e:a8:e2:0d:56:84:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905 Validity Not Before: Dec 6 16:00:48 2025 GMT Not After : Dec 7 16:00:48 2025 GMT Subject: CN=b6063eaf26568b89f5eacdf41c0e87e97dd25aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:1c:ea:8e:dd:4b:ab:c9:5c:32:62:92:f9: e4:b7:77:9d:78:f0:87:8e:42:11:12:77:2c:c9:70: f1:69:9d:b9:3b:0a:56:15:74:5f:b0:0d:f3:ad:95: 43:61:0e:44:48:5c:34:64:2a:13:2d:ce:70:f7:43: b4:8c:c1:a2:c5:52:2f:f6:c7:22:5e:6f:81:b5:19: 77:6c:01:7c:ad:c7:14:71:b0:16:37:3e:39:5a:ad: da:cc:1c:55:08:a2:ab:13:17:49:c1:86:25:a1:da: fa:03:f4:85:cd:f2:60:af:4e:c7:c4:37:96:be:68: 77:75:83:b8:f0:c7:c9:f9:11:09:31:55:01:65:f7: ff:64:16:24:41:9b:19:96:29:6b:85:89:c4:19:4d: 7d:5c:46:fe:f0:d4:9c:f3:eb:eb:c2:9e:03:68:48: d2:e4:09:cf:7c:92:0d:d5:af:d6:4c:37:75:81:ae: 17:39:3b:27:aa:b7:98:08:01:4e:36:8c:c6:3d:a4: b7:6c:1f:1d:d7:28:c6:cd:d3:b5:0c:88:2f:37:70: 93:bb:c9:6f:94:82:e9:a5:20:e1:db:7b:0c:da:12: 09:37:19:57:86:9f:84:70:3f:0c:0b:73:a1:44:9b: 78:5f:40:93:2b:03:22:9c:8d:f8:0b:55:65:92:6a: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:3E:AF:26:56:8B:89:F5:EA:CD:F4:1C:0E:87:E9:7D:D2:5A:FF X509v3 Authority Key Identifier: keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ee:ae:5d:a1:53:1f:32:3f:ba:01:b4:d0:95:0e:eb:4c:6b: c9:29:08:a2:4f:36:e1:db:3f:13:82:5e:00:24:e2:d8:d4:f8: 54:33:31:37:44:d2:c9:81:c2:f9:f8:4f:b4:4f:fa:98:ff:27: 22:3a:23:97:79:8c:0c:5c:8b:51:60:60:4e:6f:f2:4c:2e:e1: ac:7f:a3:99:ee:56:ce:ff:2a:41:2f:85:80:7e:c3:8d:60:ec: de:bf:64:81:c9:fe:64:cd:3c:10:76:76:da:f2:6c:ca:84:7e: f0:2f:b1:94:54:a3:ad:f7:fc:49:3c:81:85:4f:e3:d4:6f:a7: e9:72:e2:24:ee:fd:c9:88:f3:b1:1a:e1:85:33:10:2c:ba:3b: a7:fe:ce:d9:53:1c:3c:94:84:cc:4a:dd:be:6e:7c:1c:95:3d: 88:9f:96:f1:a3:be:d2:a0:24:f2:fd:8e:f9:90:00:9a:a0:9c: 81:a6:3f:96:17:3e:de:28:90:96:7e:71:ae:43:d1:01:98:e1: fe:31:a2:aa:e1:10:43:52:66:6f:08:ac:ee:32:ea:0e:98:c4: e4:57:cb:47:a2:4a:87:03:7d:dc:9e:95:62:46:b1:a5:d0:24: 97:1d:4c:37:07:dd:30:67:e6:60:fa:a4:77:6d:f3:b4:82:55: 6b:47:2c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPdqO500IiI+qOINVoRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzdkMWNlNWRjM2ZhODAwZTFkMWRjZmJkYWE4NDFmZGRk NDM5MDUwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjA3MTYwMDQ4WjAzMTEwLwYDVQQD EyhiNjA2M2VhZjI2NTY4Yjg5ZjVlYWNkZjQxYzBlODdlOTdkZDI1YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Woc6o7dS6vJXDJikvnkt3edePCH jkIREncsyXDxaZ25OwpWFXRfsA3zrZVDYQ5ESFw0ZCoTLc5w90O0jMGixVIv9sci Xm+BtRl3bAF8rccUcbAWNz45Wq3azBxVCKKrExdJwYYlodr6A/SFzfJgr07HxDeW vmh3dYO48MfJ+REJMVUBZff/ZBYkQZsZlilrhYnEGU19XEb+8NSc8+vrwp4DaEjS 5AnPfJIN1a/WTDd1ga4XOTsnqreYCAFONozGPaS3bB8d1yjGzdO1DIgvN3CTu8lv lILppSDh23sM2hIJNxlXhp+EcD8MC3OhRJt4X0CTKwMinI34C1VlkmrY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYGPq8mVouJ9erN9BwOh+l90lr/MB8GA1UdIwQY MBaAFAY30c5dw/qADh0dz72qhB/d1DkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2Ut M2Q4MGQ2ODZlNzQ3LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2UtM2Q4MGQ2ODZlNzQ3 LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+6uXaFT HzI/ugG00JUO60xrySkIok824ds/E4JeACTi2NT4VDMxN0TSyYHC+fhPtE/6mP8n Ijojl3mMDFyLUWBgTm/yTC7hrH+jme5Wzv8qQS+FgH7DjWDs3r9kgcn+ZM08EHZ2 2vJsyoR+8C+xlFSjrff8STyBhU/j1G+n6XLiJO79yYjzsRrhhTMQLLo7p/7O2VMc PJSEzErdvm58HJU9iJ+W8aO+0qAk8v2O+ZAAmqCcgaY/lhc+3iiQln5xrkPRAZjh /jGiquEQQ1Jmbwis7jLqDpjE5FfLR6JKhwN93J6VYkaxpdAklx1MNwfdMGfmYPqk d23ztIJVa0csLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:13 2025 by rpki-client