This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json) Hash identifier: JQCyO/H5DgylegOp3+7X3P/aCtL1re4a0iZQZsTW2Nc= Subject key identifier: ED:0F:2F:2F:42:96:64:1B:D0:A4:A4:53:29:8A:9C:34:58:54:2A:9D Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Certificate serial: 019AF12E427F091708287A47B98FB5365777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft Manifest number: 14CC Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=) 2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: JmGvGrpmIYD4OJF30wt9eNP8iukxBJa4orWMHsQsHJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:42:7f:09:17:08:28:7a:47:b9:8f:b5:36:57:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=ed0f2f2f4296641bd0a4a453298a9c3458542a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:97:7d:0f:30:19:9d:4f:22:a9:b8:de:2e: 32:fb:b4:26:fc:7d:85:ba:36:fc:b6:7a:41:15:8e: e4:3c:0b:80:c0:94:8d:0e:84:4a:18:34:d4:06:d7: d6:2c:11:1a:73:f0:c9:bf:04:58:69:b2:d4:37:c4: df:2f:1b:2d:bc:e1:a9:bf:5b:21:d3:69:8b:10:17: 45:bc:36:c0:47:c9:20:eb:91:9a:c0:e3:61:ab:52: cc:00:d6:98:97:bf:ac:65:e0:d1:8a:9b:02:0b:09: 24:34:b4:79:00:f3:9a:1e:05:9d:5b:a5:03:90:e6: 29:8d:00:a9:5a:ff:3b:07:66:4d:01:36:65:3a:6a: 6a:c3:ad:da:40:0f:88:68:ed:3c:46:e8:42:98:5e: ea:b2:90:f2:76:f5:1a:6c:0e:07:44:87:52:7b:f6: 2a:ee:72:91:3a:13:46:9c:e6:fa:a1:d9:b3:ca:ff: 6f:e1:9e:0b:62:6b:f3:07:bb:56:e3:f6:26:87:89: 0a:ff:09:b5:41:30:2e:92:48:ed:69:2c:07:65:c1: 75:8d:01:10:ff:86:f1:7b:41:6f:5f:b8:3f:93:6b: b0:93:2c:5f:db:ce:6f:03:90:13:57:23:8d:b2:93: c4:20:87:64:8c:fe:6c:68:20:98:e1:05:1a:b5:21: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0F:2F:2F:42:96:64:1B:D0:A4:A4:53:29:8A:9C:34:58:54:2A:9D X509v3 Authority Key Identifier: keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:70:36:0c:74:b8:72:7c:09:a8:fe:94:94:4f:8a:4a:26: de:21:0b:dc:13:ab:7c:3a:81:44:04:c7:b5:d1:94:6e:13:31: 19:d9:5a:0f:8c:a8:53:41:31:0f:69:1d:c9:cf:08:c1:14:58: b4:ed:76:18:98:cd:02:95:28:5b:6a:80:4e:33:a6:75:08:57: 17:78:ef:7f:f0:fb:5c:a6:06:b6:53:36:d8:ac:53:4a:97:ea: 6d:0d:43:08:b1:05:b1:e7:11:e8:f8:75:66:ea:21:2e:97:a0: a7:00:11:bd:d6:76:e1:87:07:90:bd:8c:77:b6:65:8e:4d:fa: 69:df:4a:8a:c0:3c:6b:be:06:e3:d9:fe:bd:b7:a1:15:71:ff: 0d:5e:7c:ac:0c:8a:ca:8e:11:fa:7c:3b:ce:14:33:ce:d4:eb: eb:fd:59:1e:da:93:b0:f5:76:89:32:5d:5a:0d:c7:0a:fd:f6: 81:60:a1:08:5c:8e:99:22:dd:56:cf:71:03:c8:64:1b:43:6e: c7:43:01:9e:53:b2:40:b8:3e:92:96:68:36:d9:74:f4:fe:56: 38:4f:32:bb:0a:f8:e4:82:37:9e:84:4d:18:a3:47:34:fc:8a: e2:09:ef:fb:62:5c:65:27:93:a9:1d:17:4a:5b:02:6f:09:ef: f1:e7:d0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkJ/CRcIKHpHuY+1Nld3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzc1ODVhYjdhODNlYzgwYjU1YWI5NTdiZjM3Yjc5MWU3 NjUwMTYwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EyhlZDBmMmYyZjQyOTY2NDFiZDBhNGE0NTMyOThhOWMzNDU4NTQyYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCSXfQ8wGZ1PIqm43i4y+7Qm/H2F ujb8tnpBFY7kPAuAwJSNDoRKGDTUBtfWLBEac/DJvwRYabLUN8TfLxstvOGpv1sh 02mLEBdFvDbAR8kg65GawONhq1LMANaYl7+sZeDRipsCCwkkNLR5APOaHgWdW6UD kOYpjQCpWv87B2ZNATZlOmpqw63aQA+IaO08RuhCmF7qspDydvUabA4HRIdSe/Yq 7nKROhNGnOb6odmzyv9v4Z4LYmvzB7tW4/Ymh4kK/wm1QTAukkjtaSwHZcF1jQEQ /4bxe0FvX7g/k2uwkyxf285vA5ATVyONspPEIIdkjP5saCCY4QUatSHjmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0PLy9ClmQb0KSkUymKnDRYVCqdMB8GA1UdIwQY MBaAFGzHWFq3qD7IC1WrlXvze3kedlAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTkt NmY4NmQwYjdlM2UwLzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTktNmY4NmQwYjdlM2Uw LzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHRwNgx0 uHJ8Caj+lJRPikom3iEL3BOrfDqBRATHtdGUbhMxGdlaD4yoU0ExD2kdyc8IwRRY tO12GJjNApUoW2qATjOmdQhXF3jvf/D7XKYGtlM22KxTSpfqbQ1DCLEFsecR6Ph1 ZuohLpegpwARvdZ24YcHkL2Md7Zljk36ad9KisA8a74G49n+vbehFXH/DV58rAyK yo4R+nw7zhQzztTr6/1ZHtqTsPV2iTJdWg3HCv32gWChCFyOmSLdVs9xA8hkG0Nu x0MBnlOyQLg+kpZoNtl09P5WOE8yuwr45II3noRNGKNHNPyK4gnv+2JcZSeTqR0X SlsCbwnv8efQhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:22 2025 by rpki-client