This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json) Hash identifier: Keenri3IhVrB8oROfV6jHWF4jPuE2OjZvO362RlqE7I= Subject key identifier: 3E:9F:ED:63:54:DC:D6:3F:17:60:A3:9C:C4:0B:B1:D5:A4:6F:17:24 Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Certificate serial: 019AF2769E163C6B9D58DCE0A3E5C083A71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft Manifest number: 8B Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=) 2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: O9hETt2Gfe44ngEgBYMt0ktlwhXa40Cq07bgatPWnTA=) 3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9e:16:3c:6b:9d:58:dc:e0:a3:e5:c0:83:a7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=3e9fed6354dcd63f1760a39cc40bb1d5a46f1724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:65:f5:e4:1b:b1:dd:8c:62:90:56:2a:90: 47:52:50:9a:b5:ae:43:79:9b:1c:9b:e5:cc:ed:80: ba:fa:26:f3:f4:1a:93:9d:dd:7e:64:1b:a8:a9:60: 43:29:38:da:bc:12:3b:48:58:43:1f:12:04:d9:08: 78:07:3a:a2:56:49:8e:a1:48:dd:ba:58:ce:3a:29: 81:69:db:70:e2:1f:93:a2:f7:62:b2:15:51:5b:f0: 36:22:b2:37:4e:55:80:5b:83:b2:2f:1c:b1:50:3a: 62:ee:10:ad:7d:6f:c7:0c:48:cf:58:ba:3e:10:6d: e6:18:3c:36:da:17:ee:0f:32:61:39:33:15:3f:d5: b2:b6:e0:5e:a0:d8:e2:e9:26:6c:f0:93:8d:0d:00: 46:11:3d:ee:65:3d:20:ba:b2:1e:e0:58:e1:6b:dc: 02:be:37:76:ce:d2:f5:26:5a:10:8a:bc:49:69:65: fe:56:81:68:83:e7:a0:df:1c:6f:b4:f0:91:db:cc: cc:77:74:31:96:00:0b:6d:2e:b2:a3:f9:4a:14:b3: 74:86:90:42:51:91:61:6f:49:ad:9b:73:05:d9:d9: 5b:74:48:88:87:89:bf:f5:97:29:a0:fe:cf:11:10: ae:67:b4:35:6d:96:b6:fe:ae:5d:af:d1:cb:26:d9: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:ED:63:54:DC:D6:3F:17:60:A3:9C:C4:0B:B1:D5:A4:6F:17:24 X509v3 Authority Key Identifier: keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:04:73:9b:74:ea:f4:48:e2:58:fd:50:f0:8b:41:b2:19:10: 92:56:eb:71:c8:1e:a2:29:67:35:21:58:ef:84:24:65:5b:8c: 4d:d5:8f:6a:75:8c:1d:0e:24:42:a5:78:c7:7c:66:4e:d0:c5: 76:37:75:de:92:8d:a1:2b:c4:34:5b:ad:59:b5:d2:7f:f6:f8: f4:7d:6f:19:b2:07:8b:93:8b:92:7e:4a:ac:c7:f5:98:bd:46: a9:97:84:98:7a:72:c1:06:47:19:6d:23:2c:a8:ff:e7:f1:89: a9:2d:44:3f:eb:a4:8d:cc:b3:b1:bb:ba:3e:d9:de:70:3e:68: bf:38:a3:75:74:fb:20:a0:21:f8:77:01:1e:7a:39:93:d0:a3: 4e:6a:f1:88:2b:63:fa:d3:04:0b:3a:29:8c:b6:b3:ef:44:cb: 51:4b:92:5a:8d:ac:18:77:af:25:77:21:f2:cf:d7:dc:df:43: 70:6c:ce:d5:a4:35:94:29:d0:d0:26:0b:97:5c:d2:e2:62:a8: 15:40:59:f4:6b:24:de:44:89:ec:54:14:a6:2f:17:1d:33:52: 92:45:08:df:09:ab:7b:5a:64:bd:69:d9:3e:a7:4c:b1:8f:ec: b1:e0:ce:61:19:31:33:6f:e7:36:41:2b:3b:b9:47:4f:75:77: c6:c9:a5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp4WPGudWNzgo+XAg6cdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNkMjI0NzhlYzg2Yjg1NDRkZmI5OGFkZGVhYzIyNmY4 ZjA3ZTAwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygzZTlmZWQ2MzU0ZGNkNjNmMTc2MGEzOWNjNDBiYjFkNWE0NmYxNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnll9eQbsd2MYpBWKpBHUlCata5D eZscm+XM7YC6+ibz9BqTnd1+ZBuoqWBDKTjavBI7SFhDHxIE2Qh4BzqiVkmOoUjd uljOOimBadtw4h+TovdishVRW/A2IrI3TlWAW4OyLxyxUDpi7hCtfW/HDEjPWLo+ EG3mGDw22hfuDzJhOTMVP9WytuBeoNji6SZs8JONDQBGET3uZT0gurIe4Fjha9wC vjd2ztL1JloQirxJaWX+VoFog+eg3xxvtPCR28zMd3QxlgALbS6yo/lKFLN0hpBC UZFhb0mtm3MF2dlbdEiIh4m/9ZcpoP7PERCuZ7Q1bZa2/q5dr9HLJtnfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6f7WNU3NY/F2CjnMQLsdWkbxckMB8GA1UdIwQY MBaAFGwD0iR47Ia4VE37mK3erCJvjwfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTIt ZWI2ZWU1MzU2NjEzLzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTItZWI2ZWU1MzU2NjEz LzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQRzm3Tq 9EjiWP1Q8ItBshkQklbrccgeoilnNSFY74QkZVuMTdWPanWMHQ4kQqV4x3xmTtDF djd13pKNoSvENFutWbXSf/b49H1vGbIHi5OLkn5KrMf1mL1GqZeEmHpywQZHGW0j LKj/5/GJqS1EP+ukjcyzsbu6PtnecD5ovzijdXT7IKAh+HcBHno5k9CjTmrxiCtj +tMECzopjLaz70TLUUuSWo2sGHevJXch8s/X3N9DcGzO1aQ1lCnQ0CYLl1zS4mKo FUBZ9Gsk3kSJ7FQUpi8XHTNSkkUI3wmre1pkvWnZPqdMsY/sseDOYRkxM2/nNkEr O7lHT3V3xsml2w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:02 2025 by rpki-client