This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json) Hash identifier: vWzbDM122/Z2eNz4K93ilGG44M8MuMRN3Du3MSt9vhQ= Subject key identifier: F8:C1:12:7D:68:05:53:55:E1:0D:B2:48:82:E3:C1:CC:BF:A2:FB:96 Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Certificate serial: 019B410009D9EF3431C6F94A5C1B4F7CD0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft Manifest number: 0661 Signing time: Sun 21 Dec 2025 13:01:20 +0000 Manifest this update: Sun 21 Dec 2025 13:01:20 +0000 Manifest next update: Mon 22 Dec 2025 13:01:20 +0000 Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: zXUs/z528UvFnbwWOsxSnpl0xY6mZXpKk526OaxX3qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:09:d9:ef:34:31:c6:f9:4a:5c:1b:4f:7c:d0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Validity Not Before: Dec 21 13:01:20 2025 GMT Not After : Dec 22 13:01:20 2025 GMT Subject: CN=f8c1127d68055355e10db24882e3c1ccbfa2fb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:47:73:ab:01:98:10:8e:4b:1f:6f:ad:5b: 48:11:d9:be:27:56:71:f7:b5:ed:5a:8a:26:81:7b: 11:0b:52:0e:d9:a9:9e:03:0f:35:d6:48:d1:46:bf: 48:ee:90:30:ef:68:30:83:1a:72:3f:5e:26:9a:d0: ec:6d:87:8e:2e:2c:72:e1:e5:90:2e:c8:61:67:5f: ee:0c:a4:88:1d:31:89:16:32:56:08:11:d9:61:f4: 89:21:7b:5d:d1:38:21:d9:bf:86:6b:d9:30:84:83: 58:9b:07:f3:81:7e:b3:66:48:e8:f0:ed:8c:33:13: 00:33:84:20:a9:ed:41:66:36:73:df:bc:7d:97:39: 32:dd:7e:2c:b2:05:85:85:43:a9:e1:6a:a4:81:89: 42:ca:d1:31:7e:b2:03:e2:95:2a:60:11:5b:54:55: 00:26:a0:7b:aa:18:3b:66:32:f9:c8:ef:1d:14:7b: 62:4b:09:8b:37:1c:21:8c:c7:b0:93:4b:14:a8:11: 49:19:01:de:4c:90:c6:19:88:12:40:b9:9d:5c:e1: 7c:b6:b9:23:6c:c2:f8:94:8a:42:85:27:e1:75:d0: 41:ba:ad:c0:1b:59:68:d7:dd:8e:b4:55:8a:f6:10: 33:67:d5:a4:7e:c7:13:4b:14:64:37:45:14:25:cb: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:12:7D:68:05:53:55:E1:0D:B2:48:82:E3:C1:CC:BF:A2:FB:96 X509v3 Authority Key Identifier: keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c4:62:70:63:e4:b5:bc:5d:60:6f:ab:4d:68:2a:c0:93:8f: bd:bb:59:09:5f:8c:df:76:05:75:4e:57:66:ab:c0:10:41:f3: e1:69:92:70:d4:d8:4e:98:60:8a:f2:4c:3a:1f:67:8a:89:21: 2d:0e:46:f4:72:dc:01:5c:5b:aa:e3:8f:16:2e:33:ae:e4:d4: 20:2d:fc:ce:b5:fe:67:25:13:fe:65:8d:8c:71:90:a4:b3:3d: 90:b0:9b:53:25:24:94:07:58:64:5b:ed:1b:f9:74:ba:d6:37: 18:9e:be:98:f5:a4:4b:ac:ca:13:df:c9:3f:95:4d:b0:e0:35: 0c:9b:eb:86:68:96:63:20:eb:17:fc:32:f3:17:d0:11:18:fb: 60:a7:db:47:14:30:c0:46:9e:41:ae:06:b4:e7:c6:87:8f:a4: 43:98:ab:30:92:62:29:90:78:6f:89:78:29:c5:9b:d3:e0:dd: 6b:f3:28:49:ff:be:2d:c6:6a:47:2e:89:e6:fb:28:f7:22:6e: 2c:d9:7a:c8:57:59:48:9c:70:78:bf:93:7a:3a:e2:e0:f0:2a: 09:ad:22:06:f7:d7:59:bd:10:f9:22:90:b5:30:22:af:cc:69: bf:61:76:18:e6:3f:07:1b:40:5a:5b:58:bc:4a:18:42:67:de: 7a:05:d6:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAnZ7zQxxvlKXBtPfND7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTdjYWIyOWRmMDkwNjU1NGMxMWNlOWFiMjljNjBkMWU3 YTY3NWMwHhcNMjUxMjIxMTMwMTIwWhcNMjUxMjIyMTMwMTIwWjAzMTEwLwYDVQQD EyhmOGMxMTI3ZDY4MDU1MzU1ZTEwZGIyNDg4MmUzYzFjY2JmYTJmYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FtHc6sBmBCOSx9vrVtIEdm+J1Zx 97XtWoomgXsRC1IO2ameAw811kjRRr9I7pAw72gwgxpyP14mmtDsbYeOLixy4eWQ LshhZ1/uDKSIHTGJFjJWCBHZYfSJIXtd0Tgh2b+Ga9kwhINYmwfzgX6zZkjo8O2M MxMAM4Qgqe1BZjZz37x9lzky3X4ssgWFhUOp4WqkgYlCytExfrID4pUqYBFbVFUA JqB7qhg7ZjL5yO8dFHtiSwmLNxwhjMewk0sUqBFJGQHeTJDGGYgSQLmdXOF8trkj bML4lIpChSfhddBBuq3AG1lo192OtFWK9hAzZ9WkfscTSxRkN0UUJcu8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjBEn1oBVNV4Q2ySILjwcy/ovuWMB8GA1UdIwQY MBaAFG8XyrKd8JBlVMEc6aspxg0eemdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUt Njc4MmE3M2MyYjQ3LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUtNjc4MmE3M2MyYjQ3 LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksRicGPk tbxdYG+rTWgqwJOPvbtZCV+M33YFdU5XZqvAEEHz4WmScNTYTphgivJMOh9niokh LQ5G9HLcAVxbquOPFi4zruTUIC38zrX+ZyUT/mWNjHGQpLM9kLCbUyUklAdYZFvt G/l0utY3GJ6+mPWkS6zKE9/JP5VNsOA1DJvrhmiWYyDrF/wy8xfQERj7YKfbRxQw wEaeQa4GtOfGh4+kQ5irMJJiKZB4b4l4KcWb0+Dda/MoSf++LcZqRy6J5vso9yJu LNl6yFdZSJxweL+Tejri4PAqCa0iBvfXWb0Q+SKQtTAir8xpv2F2GOY/BxtAWltY vEoYQmfeegXWFg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:18 2025 by rpki-client