This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json) Hash identifier: SyUkgyQXZwCiaOIKk4CE7VRiK+MFzN35Gpi6hu75II8= Subject key identifier: F4:7D:17:85:F9:28:2E:D7:38:13:5C:BF:44:0D:0C:22:77:59:AA:31 Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Certificate serial: 019AF1D22E2718F54A801A38D92D3FC53383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft Manifest number: 0638 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: y7NjjPDK78X/nhp7ResfPyCyWfyoTv2mHPlv36Cm5vE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2e:27:18:f5:4a:80:1a:38:d9:2d:3f:c5:33:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=f47d1785f9282ed738135cbf440d0c227759aa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:13:e1:6f:2c:5e:91:42:45:62:a2:29:88: 41:7b:1f:f0:76:12:03:55:e5:f8:69:c9:a5:b3:62: e5:e0:91:ad:d2:3e:4f:d1:b5:92:4a:e5:ed:bd:9e: 23:d0:69:40:0a:00:26:2a:ce:1b:ae:c1:7b:66:4a: 9e:16:2c:ab:3a:62:d6:1f:fa:2d:2c:c4:39:5c:28: 45:b4:da:14:6f:f4:01:e6:6f:11:d4:cc:85:df:9d: 55:5a:1a:1c:5f:43:40:84:47:08:2d:bf:cb:81:21: bf:7c:82:ac:07:3e:66:19:b4:d3:87:44:28:a4:40: 58:f5:ba:0f:9e:b1:d6:7a:17:45:d8:97:94:40:ec: 4e:e3:3f:4e:1e:18:1a:67:5a:cb:bb:01:fd:9b:f8: ef:14:4b:b0:51:4e:9b:66:0d:9d:1d:89:8a:54:e8: 39:4c:7f:47:d1:7f:95:d6:a8:94:ae:65:2f:a7:9f: fc:91:af:33:51:0c:3c:a6:ef:3b:72:c1:dc:37:f1: 02:46:fd:b7:34:88:16:86:3e:29:49:72:59:56:0c: f2:91:b2:a3:8b:83:2a:d8:30:9e:1e:4a:bf:2e:52: 3d:37:ac:4b:f6:c0:3e:eb:cc:57:f8:02:f9:c2:28: 57:1e:d0:9a:52:ec:f4:be:7b:d3:47:4b:80:0c:c3: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7D:17:85:F9:28:2E:D7:38:13:5C:BF:44:0D:0C:22:77:59:AA:31 X509v3 Authority Key Identifier: keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:96:a8:aa:e3:4e:e2:cd:ee:01:4c:11:17:6b:4e:a3:89:ae: ec:7a:00:99:4b:5f:a5:37:5a:cc:31:60:e3:1f:0c:3b:79:1b: 55:bb:08:bc:08:7b:f4:0d:c5:b8:65:75:a3:d4:b5:64:7a:d0: 1b:f6:d0:83:a6:52:b4:18:fa:e0:9b:68:d2:e5:49:9d:b4:56: 9f:16:02:52:69:59:44:b5:de:98:88:9d:65:f0:c4:2c:b5:ee: 98:4e:55:8d:12:94:32:49:c6:83:1f:80:9a:f8:35:18:f9:ff: 59:05:36:2c:30:33:dd:a1:53:9e:2d:ca:1b:90:b5:0e:95:1f: 22:1c:25:2b:52:5a:19:d3:58:39:13:b2:f4:11:86:79:b1:51: f4:75:dc:a0:5d:82:6f:60:45:c0:f0:ed:c2:f8:9d:b2:b8:d0: fd:9e:3e:e6:9e:37:41:13:4b:94:8a:c2:b9:fd:cd:ee:65:59: 5a:50:7f:c9:37:0c:8f:3b:a4:b8:f8:3b:a6:d8:77:cb:4f:bc: 6e:fc:3e:63:26:73:2b:37:13:f9:72:ee:4e:c7:cc:0b:dc:34: 9b:76:0b:43:4b:c2:85:1c:eb:eb:fc:de:52:9d:a8:43:23:f2: 31:f0:ca:8a:8b:72:21:97:1f:80:d1:c7:5e:ff:4d:86:7d:f7: ba:2b:18:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i4nGPVKgBo42S0/xTODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTdjYWIyOWRmMDkwNjU1NGMxMWNlOWFiMjljNjBkMWU3 YTY3NWMwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhmNDdkMTc4NWY5MjgyZWQ3MzgxMzVjYmY0NDBkMGMyMjc3NTlhYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJUT4W8sXpFCRWKiKYhBex/wdhID VeX4acmls2Ll4JGt0j5P0bWSSuXtvZ4j0GlACgAmKs4brsF7ZkqeFiyrOmLWH/ot LMQ5XChFtNoUb/QB5m8R1MyF351VWhocX0NAhEcILb/LgSG/fIKsBz5mGbTTh0Qo pEBY9boPnrHWehdF2JeUQOxO4z9OHhgaZ1rLuwH9m/jvFEuwUU6bZg2dHYmKVOg5 TH9H0X+V1qiUrmUvp5/8ka8zUQw8pu87csHcN/ECRv23NIgWhj4pSXJZVgzykbKj i4Mq2DCeHkq/LlI9N6xL9sA+68xX+AL5wihXHtCaUuz0vnvTR0uADMOquQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR9F4X5KC7XOBNcv0QNDCJ3WaoxMB8GA1UdIwQY MBaAFG8XyrKd8JBlVMEc6aspxg0eemdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUt Njc4MmE3M2MyYjQ3LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUtNjc4MmE3M2MyYjQ3 LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJaoquNO 4s3uAUwRF2tOo4mu7HoAmUtfpTdazDFg4x8MO3kbVbsIvAh79A3FuGV1o9S1ZHrQ G/bQg6ZStBj64Jto0uVJnbRWnxYCUmlZRLXemIidZfDELLXumE5VjRKUMknGgx+A mvg1GPn/WQU2LDAz3aFTni3KG5C1DpUfIhwlK1JaGdNYOROy9BGGebFR9HXcoF2C b2BFwPDtwvidsrjQ/Z4+5p43QRNLlIrCuf3N7mVZWlB/yTcMjzukuPg7pth3y0+8 bvw+YyZzKzcT+XLuTsfMC9w0m3YLQ0vChRzr6/zeUp2oQyPyMfDKiotyIZcfgNHH Xv9Nhn33uisYhw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:53 2025 by rpki-client