This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json) Hash identifier: Y1upL7q24X0bbXXcm6tpL5gdvSnPZOCsx3AivAUfMjE= Subject key identifier: 0A:22:21:AE:22:1F:E0:40:50:07:F7:2C:BC:71:8B:ED:83:22:5D:97 Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Certificate serial: 019AF1D19DC16356DD52EE5E410EDFA61F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: UgWr7jTUW/y80+KcdN8kPMik5GiY4jgbSKdeDjtIeb8=) 2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9d:c1:63:56:dd:52:ee:5e:41:0e:df:a6:1f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=0a2221ae221fe0405007f72cbc718bed83225d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:cb:5c:3b:11:c9:01:e2:c2:b7:95:d1:74: 9c:e3:4a:67:b2:76:ff:66:a6:74:fb:3e:19:3e:9b: f8:4f:b3:28:13:da:5f:45:30:c8:33:53:7d:7e:aa: 90:b2:bc:13:03:53:9a:c3:ee:86:24:23:ba:3a:a3: bf:87:78:1a:a8:d2:ed:b3:75:8e:5a:4b:34:b5:ee: 41:8f:6d:0a:ef:79:48:36:85:c7:fe:3b:ce:bf:c2: 1f:3a:e2:e2:0a:f8:cd:b5:77:bc:89:2a:df:ed:02: 86:fb:8d:ae:b2:a7:9c:71:38:db:0a:b4:c6:39:44: 52:d8:43:77:bd:b8:68:b8:5d:c9:f3:46:b5:82:84: 6d:f8:f5:d8:83:a0:0a:bd:c3:82:24:99:df:29:bb: 10:78:eb:a6:80:18:35:4e:bf:ae:29:79:d1:57:dc: 47:13:33:5d:5f:ce:9a:b6:9d:ab:e0:37:6a:8b:23: c8:28:da:11:d2:e8:11:39:47:a4:20:20:80:ef:1d: 32:b6:e0:0e:3c:c4:9e:7c:26:b4:e0:d1:8c:46:65: 60:e6:11:6f:f9:c6:94:7d:ca:4b:55:d5:6f:80:e6: 4e:9b:9c:a9:a7:9d:3b:25:d0:e5:78:7d:8e:5b:66: 05:72:3b:60:a3:04:89:a2:4d:4e:19:10:61:3a:b3: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:22:21:AE:22:1F:E0:40:50:07:F7:2C:BC:71:8B:ED:83:22:5D:97 X509v3 Authority Key Identifier: keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8c:5f:0f:7f:8c:4c:1d:ff:1b:e2:66:b4:c1:d5:61:be:69: 11:5e:a5:ec:f3:6b:8b:6c:70:cc:b8:35:8a:6f:6b:4b:19:40: 76:a2:b0:d8:4f:0f:14:36:38:68:7e:9e:78:a6:ff:22:2d:f0: f1:77:1b:1c:41:5e:02:59:9f:69:76:b3:b8:fd:da:93:75:4c: 64:c0:f4:1f:8b:88:e4:ca:24:fa:65:74:c1:fc:a6:4e:59:6f: bf:49:55:47:33:a5:45:07:53:2f:ee:7d:84:92:c7:a4:cf:68: 8d:5d:8c:82:36:a3:e5:a7:1e:cf:1f:c5:74:d2:d4:d0:87:e6: b2:00:ae:ee:d9:2d:27:70:7e:92:82:b9:2d:07:09:e1:aa:14: 3d:67:c3:f5:0e:0b:df:a9:5a:b1:24:f1:26:a0:92:2a:d2:35: 26:54:04:e1:a9:a9:63:dc:7e:51:3b:45:04:41:d3:f4:85:a9: 24:f9:41:ee:d9:8d:79:02:3e:db:40:f2:b6:49:b6:0e:54:15: 9e:29:1c:7a:8b:9c:b0:4f:d5:fa:3a:0a:fc:81:d2:95:85:0d: 1c:b7:f7:95:9f:be:18:65:ed:12:27:c7:31:9c:05:6b:2b:46: d6:47:ce:e1:3b:33:60:b4:91:44:03:c2:15:0e:68:81:2b:7b: 98:a3:39:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z3BY1bdUu5eQQ7fph98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0 OWFhNmMwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EygwYTIyMjFhZTIyMWZlMDQwNTAwN2Y3MmNiYzcxOGJlZDgzMjI1ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3LXDsRyQHiwreV0XSc40pnsnb/ ZqZ0+z4ZPpv4T7MoE9pfRTDIM1N9fqqQsrwTA1Oaw+6GJCO6OqO/h3gaqNLts3WO Wks0te5Bj20K73lINoXH/jvOv8IfOuLiCvjNtXe8iSrf7QKG+42usqeccTjbCrTG OURS2EN3vbhouF3J80a1goRt+PXYg6AKvcOCJJnfKbsQeOumgBg1Tr+uKXnRV9xH EzNdX86atp2r4DdqiyPIKNoR0ugROUekICCA7x0ytuAOPMSefCa04NGMRmVg5hFv +caUfcpLVdVvgOZOm5ypp507JdDleH2OW2YFcjtgowSJok1OGRBhOrMxcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoiIa4iH+BAUAf3LLxxi+2DIl2XMB8GA1UdIwQY MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYxfD3+M TB3/G+JmtMHVYb5pEV6l7PNri2xwzLg1im9rSxlAdqKw2E8PFDY4aH6eeKb/Ii3w 8XcbHEFeAlmfaXazuP3ak3VMZMD0H4uI5Mok+mV0wfymTllvv0lVRzOlRQdTL+59 hJLHpM9ojV2Mgjaj5acezx/FdNLU0IfmsgCu7tktJ3B+koK5LQcJ4aoUPWfD9Q4L 36lasSTxJqCSKtI1JlQE4ampY9x+UTtFBEHT9IWpJPlB7tmNeQI+20Dytkm2DlQV nikceoucsE/V+joK/IHSlYUNHLf3lZ++GGXtEifHMZwFaytG1kfO4TszYLSRRAPC FQ5ogSt7mKM56Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:45 2025 by rpki-client