This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json) Hash identifier: TZQgv5SnTm3XijRlvZD4ZYLOjaOoZotsUy+2IGCiF5g= Subject key identifier: 99:91:F6:B1:62:3A:B5:D6:E0:73:67:17:AB:67:88:45:1D:DC:75:45 Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7 Certificate serial: 019B3CEB938D043ABD8EDFEF6B895578E1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft Manifest number: 141A Signing time: Sat 20 Dec 2025 18:00:30 +0000 Manifest this update: Sat 20 Dec 2025 18:00:30 +0000 Manifest next update: Sun 21 Dec 2025 18:00:30 +0000 Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: sHATAmAruWZbE7kwaTHq4bQ7xW97YAd2SNdHshWER1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:93:8d:04:3a:bd:8e:df:ef:6b:89:55:78:e1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7 Validity Not Before: Dec 20 18:00:30 2025 GMT Not After : Dec 21 18:00:30 2025 GMT Subject: CN=9991f6b1623ab5d6e0736717ab6788451ddc7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:39:42:b4:e4:44:21:e0:d6:1d:13:7d:3a: c9:a8:cd:35:db:79:4c:9d:85:e3:fc:91:38:a7:c9: 36:9b:f4:76:8a:dd:fa:35:c1:9a:62:ac:45:de:de: af:4a:0b:b4:a7:16:2d:45:c7:d3:03:9e:b6:87:d2: c6:05:9b:18:0e:61:45:d4:ae:ae:6a:58:8c:f3:6a: 5b:61:50:a2:20:b5:99:b1:4d:57:78:0f:3b:0c:fa: e1:83:b2:21:11:47:88:9e:98:20:46:00:1a:6d:c7: 4c:09:54:fe:37:2a:45:41:74:03:11:71:bc:7b:fe: 89:0a:02:6e:da:4b:a7:5d:a0:03:ea:47:de:64:dc: 2f:c3:8f:9a:07:31:44:82:48:62:f9:d5:c1:bd:8d: c9:41:ed:32:58:60:d8:74:1f:de:88:ea:43:35:0c: 4c:0e:fd:e5:92:09:f4:67:de:64:93:39:c6:c4:75: e3:b1:ac:59:d8:b6:2b:44:c0:7b:af:4b:cb:cc:e5: c0:b2:3c:b0:85:ed:94:38:c1:13:9b:8d:ae:05:1c: b0:be:d6:f2:20:86:a3:a9:54:04:8e:86:c0:7f:51: 33:7f:ff:fd:8a:60:53:61:6e:b9:cb:4d:51:c8:f6: 46:1b:60:96:d8:06:c4:b6:e1:85:e7:d5:b9:0a:3e: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:F6:B1:62:3A:B5:D6:E0:73:67:17:AB:67:88:45:1D:DC:75:45 X509v3 Authority Key Identifier: keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:6e:a9:ef:f9:ed:48:39:49:59:0d:88:28:e0:6d:2e:ef:df: 98:98:67:32:44:f6:53:63:0c:1d:01:3b:be:db:45:51:8e:6a: c7:7f:d4:77:bd:cc:a0:d2:1f:c4:4c:35:16:69:74:c5:69:2f: ed:94:b9:58:e3:29:66:82:56:8e:dd:3c:fe:4a:45:cc:2e:6c: 5b:b2:f8:a9:b4:c7:9e:3a:02:c0:fc:c8:b6:0b:c6:30:58:cf: 81:13:d0:71:ae:3a:df:c7:b4:dc:cd:9b:23:99:0d:32:4a:bd: 60:88:d1:b0:82:f7:47:78:45:6c:39:cf:38:cc:2f:63:ec:33: 0d:ae:8f:64:5c:49:f8:a9:87:49:2d:a5:87:e7:ad:14:ce:dd: 59:91:b0:4d:eb:79:02:82:fd:bb:b2:33:37:ad:a1:53:70:18: 4c:19:b0:f2:63:23:23:7e:9a:e9:ed:d4:71:ce:1d:83:db:46: fd:d4:6b:ea:13:ed:a5:bf:4e:f1:7c:4e:ea:a9:70:5c:74:0a: fd:a3:72:dd:a0:6c:ba:42:0d:b6:4f:e2:ec:84:12:b8:af:27: f0:dc:53:f8:6b:26:5e:6b:a2:b5:85:cc:d9:10:c1:00:ba:1b: e5:e8:b7:29:89:d8:e7:0f:8e:ae:73:35:53:d4:8c:bf:2e:2c: bb:b8:51:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865ONBDq9jt/va4lVeOHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTE2MTRiNmJmYjZjNjE4NzgzNjc2OTExYmRmM2JjODI5 Zjk3ZDcwHhcNMjUxMjIwMTgwMDMwWhcNMjUxMjIxMTgwMDMwWjAzMTEwLwYDVQQD Eyg5OTkxZjZiMTYyM2FiNWQ2ZTA3MzY3MTdhYjY3ODg0NTFkZGM3NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8A5QrTkRCHg1h0TfTrJqM0123lM nYXj/JE4p8k2m/R2it36NcGaYqxF3t6vSgu0pxYtRcfTA562h9LGBZsYDmFF1K6u aliM82pbYVCiILWZsU1XeA87DPrhg7IhEUeInpggRgAabcdMCVT+NypFQXQDEXG8 e/6JCgJu2kunXaAD6kfeZNwvw4+aBzFEgkhi+dXBvY3JQe0yWGDYdB/eiOpDNQxM Dv3lkgn0Z95kkznGxHXjsaxZ2LYrRMB7r0vLzOXAsjywhe2UOMETm42uBRywvtby IIajqVQEjobAf1Ezf//9imBTYW65y01RyPZGG2CW2AbEtuGF59W5Cj7yKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmR9rFiOrXW4HNnF6tniEUd3HVFMB8GA1UdIwQY MBaAFGxRYUtr+2xhh4NnaRG987yCn5fXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMt N2Q1ZWIxODMxZWYxLzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMtN2Q1ZWIxODMxZWYx LzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG6p7/nt SDlJWQ2IKOBtLu/fmJhnMkT2U2MMHQE7vttFUY5qx3/Ud73MoNIfxEw1Fml0xWkv 7ZS5WOMpZoJWjt08/kpFzC5sW7L4qbTHnjoCwPzItgvGMFjPgRPQca4638e03M2b I5kNMkq9YIjRsIL3R3hFbDnPOMwvY+wzDa6PZFxJ+KmHSS2lh+etFM7dWZGwTet5 AoL9u7IzN62hU3AYTBmw8mMjI36a6e3Ucc4dg9tG/dRr6hPtpb9O8XxO6qlwXHQK /aNy3aBsukINtk/i7IQSuK8n8NxT+GsmXmuitYXM2RDBALob5ei3KYnY5w+OrnM1 U9SMvy4su7hR9A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:27:57 2025 by rpki-client