This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json) Hash identifier: 1jfb4n69oBzeKhStRthVXFORKfVq9TmBE/UNkRXw9qM= Subject key identifier: 31:76:E7:BB:AE:4C:AF:B9:2A:8F:E3:FB:7A:9A:1E:73:09:3F:67:59 Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Certificate serial: 019AF31D32F379225287D477500D8ACFB85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:48 +0000 Manifest this update: Sat 06 Dec 2025 10:02:48 +0000 Manifest next update: Sun 07 Dec 2025 10:02:48 +0000 Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: a2yjPLTrghfUF1nuC4TMGwzzwakT+pwTYlTt/F/8/xE=) 2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:32:f3:79:22:52:87:d4:77:50:0d:8a:cf:b8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Validity Not Before: Dec 6 10:02:48 2025 GMT Not After : Dec 7 10:02:48 2025 GMT Subject: CN=3176e7bbae4cafb92a8fe3fb7a9a1e73093f6759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:83:ea:9f:d7:46:fc:2f:19:1f:80:b5:fb: 5f:09:d1:92:16:2b:84:10:4d:42:6c:96:07:bc:cf: 7a:5d:b8:94:1f:d9:1c:4c:85:7e:c3:64:ef:02:87: 7d:c5:b3:31:0b:d1:c3:38:9f:07:9f:2c:14:90:9b: 32:93:fe:66:8e:92:eb:46:64:62:dd:06:32:86:98: cc:7a:b6:f5:c7:84:1a:ce:33:b3:1c:08:bc:36:76: df:7f:cd:4e:81:84:35:fa:92:2a:a4:ac:30:ae:2c: d3:33:27:1e:12:72:58:39:5d:40:1b:5f:c6:84:bf: 74:d8:56:f6:ce:26:2e:f8:63:86:95:b0:bb:4a:67: c4:7f:e3:88:b7:08:2a:3b:88:b3:bd:f8:94:73:bb: b4:43:37:38:54:81:a0:00:81:0e:c8:9e:6d:84:43: 99:07:50:7c:12:3e:d9:36:1f:d1:44:d4:91:6e:4f: 05:05:4c:ca:61:d5:6c:c8:94:e9:97:a8:73:a3:c7: 34:f2:e8:de:71:02:3a:63:37:06:b1:d7:b6:a6:7a: b7:57:f4:91:df:bd:c3:ee:2b:3a:c2:b6:44:11:d2: a2:75:1e:22:15:f1:8d:89:4b:6f:1e:93:2b:bd:f0: b6:e0:b7:eb:c1:3c:15:31:1c:91:3e:71:4c:43:dc: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:E7:BB:AE:4C:AF:B9:2A:8F:E3:FB:7A:9A:1E:73:09:3F:67:59 X509v3 Authority Key Identifier: keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9f:9f:af:a7:d9:3f:3e:65:9a:fd:35:f9:40:f5:0a:35:a4: 5a:8d:04:f9:d7:ef:14:d1:7f:33:ff:9c:39:7e:86:01:f4:cf: 62:19:05:44:5a:c8:6c:a2:ae:b0:ac:a3:ed:ab:ad:a2:39:be: c5:f4:02:dd:73:f7:24:93:f9:0d:aa:7d:39:d6:21:6b:3c:5f: 5c:41:5a:23:ac:3e:a2:80:4a:62:09:37:e8:fa:38:2b:16:be: 52:2d:01:8f:a6:06:b5:de:d5:a5:0f:8a:34:65:98:02:89:4a: a3:8f:95:63:c0:1b:4d:9f:97:b5:96:94:28:0e:7e:63:b0:36: e8:51:8e:5d:9d:da:1b:b9:d1:95:83:d6:96:60:30:25:b8:67: dc:4a:0d:94:38:0b:6c:4c:be:bd:41:41:41:f4:a1:dc:b6:53: 11:6f:6d:82:9b:eb:53:aa:d8:c5:4c:6f:33:5e:17:7e:09:a5: fc:c0:02:80:13:79:ee:f7:24:3a:3b:58:2b:9b:a1:5c:0d:7b: 35:52:e0:6f:f5:9d:a4:c3:81:ad:fd:64:ab:bf:c0:d3:fc:be: 49:f9:2b:32:72:d2:dc:8d:b0:f7:46:f8:a7:07:c0:c1:c8:2f: a6:e9:57:89:77:9a:af:50:10:9c:1e:14:78:ae:97:76:98:d9: 10:b1:ac:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTLzeSJSh9R3UA2Kz7hfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk NDExYjYwHhcNMjUxMjA2MTAwMjQ4WhcNMjUxMjA3MTAwMjQ4WjAzMTEwLwYDVQQD EygzMTc2ZTdiYmFlNGNhZmI5MmE4ZmUzZmI3YTlhMWU3MzA5M2Y2NzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTaD6p/XRvwvGR+AtftfCdGSFiuE EE1CbJYHvM96XbiUH9kcTIV+w2TvAod9xbMxC9HDOJ8HnywUkJsyk/5mjpLrRmRi 3QYyhpjMerb1x4QazjOzHAi8Nnbff81OgYQ1+pIqpKwwrizTMyceEnJYOV1AG1/G hL902Fb2ziYu+GOGlbC7SmfEf+OItwgqO4izvfiUc7u0Qzc4VIGgAIEOyJ5thEOZ B1B8Ej7ZNh/RRNSRbk8FBUzKYdVsyJTpl6hzo8c08ujecQI6YzcGsde2pnq3V/SR 373D7is6wrZEEdKidR4iFfGNiUtvHpMrvfC24LfrwTwVMRyRPnFMQ9zbmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF257uuTK+5Ko/j+3qaHnMJP2dZMB8GA1UdIwQY MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp+fr6fZ Pz5lmv01+UD1CjWkWo0E+dfvFNF/M/+cOX6GAfTPYhkFRFrIbKKusKyj7autojm+ xfQC3XP3JJP5Dap9OdYhazxfXEFaI6w+ooBKYgk36Po4Kxa+Ui0Bj6YGtd7VpQ+K NGWYAolKo4+VY8AbTZ+XtZaUKA5+Y7A26FGOXZ3aG7nRlYPWlmAwJbhn3EoNlDgL bEy+vUFBQfSh3LZTEW9tgpvrU6rYxUxvM14Xfgml/MACgBN57vckOjtYK5uhXA17 NVLgb/WdpMOBrf1kq7/A0/y+SfkrMnLS3I2w90b4pwfAwcgvpulXiXear1AQnB4U eK6XdpjZELGsyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:39 2025 by rpki-client