This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json) Hash identifier: DWm3/gXzZA6hnnahUF/3HS02lSpncWp764r8jkLX4cw= Subject key identifier: DE:F0:BB:16:63:1F:0E:B3:D6:46:B3:53:3B:D5:94:49:0B:DE:25:33 Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d Certificate serial: 019AF19AC2A32C6273E86DBCB23A72DFA1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft Manifest number: 123C Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: DH1hYA/XZLRTmwh/6ZD0WbQ3/GFzvJwbOQNy2/j8YdI=) 2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c2:a3:2c:62:73:e8:6d:bc:b2:3a:72:df:a1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=def0bb16631f0eb3d646b3533bd594490bde2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:53:c3:ab:be:a1:a6:da:68:3d:74:01:84: e3:71:7f:06:6b:53:20:83:62:f2:f7:d7:bd:1c:48: ce:71:7e:eb:ef:1d:91:86:5c:57:0e:0e:24:3c:68: 44:e6:97:7c:cb:64:9d:1b:d2:c5:6a:ac:ee:53:4f: 15:02:35:b7:b3:ca:86:83:91:20:01:f0:67:87:af: af:f2:ba:6d:fa:d0:36:2d:2c:09:74:b6:20:0a:5b: d4:76:29:0b:ce:18:7d:4b:87:1d:6a:33:fe:29:5c: a8:c4:f5:0d:26:8d:88:23:38:d4:f8:28:30:48:69: bf:22:2b:e4:ca:19:b1:64:bd:05:80:88:2c:7e:66: 30:23:46:be:31:da:6b:be:0a:5a:48:be:b2:8d:d5: c9:2a:2f:9f:8e:d1:28:c8:eb:96:3c:a9:9d:c7:6b: 95:ef:37:2c:50:dc:c5:e8:ff:42:ef:18:71:0d:24: c1:12:58:93:28:fe:45:da:8c:60:fb:0b:f0:b2:94: 51:62:ef:f8:99:e4:bd:d0:3f:f4:25:e9:64:ce:eb: 82:be:d5:7a:3c:68:2e:73:8f:4a:78:7c:3f:41:89: 2b:18:2e:57:72:69:c6:a7:cd:0f:6c:4f:59:db:6d: 26:d7:65:54:32:49:34:cf:b0:1a:eb:b1:50:30:70: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F0:BB:16:63:1F:0E:B3:D6:46:B3:53:3B:D5:94:49:0B:DE:25:33 X509v3 Authority Key Identifier: keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5f:08:dd:d1:d1:a7:2e:2d:f0:c1:1a:d2:26:be:24:53:c4: 81:79:ab:59:ed:03:6d:2c:74:de:67:b1:42:86:3d:9b:7d:23: 61:f5:22:fe:0e:1a:d4:c9:6b:a9:08:41:93:8f:f7:dd:81:a8: f8:1c:38:f5:b7:43:fc:19:29:11:91:7f:a4:be:b7:f4:86:8b: 7c:c4:b4:24:2f:72:96:39:da:a1:cf:a7:20:77:74:2c:66:57: e9:b2:e6:6e:5b:3c:a7:2a:5b:f0:d8:58:b1:56:02:3e:bd:9d: 95:40:0a:e5:80:b3:f2:e0:6e:bc:11:e8:5e:7f:4e:ff:79:e6: cf:a0:72:ad:79:fc:98:32:cc:d2:e8:de:8f:90:76:5c:e3:1c: 4e:b3:23:3b:ed:93:61:91:ef:3c:73:bf:51:94:20:0a:0c:04: 23:33:b4:78:fa:1c:36:dc:2d:17:66:40:c4:85:6b:25:2c:5b: e0:5b:59:d6:08:d3:4a:9c:2f:35:ca:e7:7f:30:0e:8a:2a:87: e2:b0:89:7b:d0:d2:29:ab:fc:35:fd:80:2b:5b:c5:6e:fe:ae: d8:78:5b:54:70:90:4b:43:a1:33:9c:d3:29:9d:e0:de:94:dc: e7:d8:86:08:e9:3a:45:28:10:53:2d:a6:62:a4:a7:8b:53:9c: d0:c1:83:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsKjLGJz6G28sjpy36H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjA0MTI4MjNhMDIyNGE1ZDAwZTQ5NjNkNmIyM2QyMjUw NDk5N2QwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EyhkZWYwYmIxNjYzMWYwZWIzZDY0NmIzNTMzYmQ1OTQ0OTBiZGUyNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYtTw6u+oabaaD10AYTjcX8Ga1Mg g2Ly99e9HEjOcX7r7x2RhlxXDg4kPGhE5pd8y2SdG9LFaqzuU08VAjW3s8qGg5Eg AfBnh6+v8rpt+tA2LSwJdLYgClvUdikLzhh9S4cdajP+KVyoxPUNJo2IIzjU+Cgw SGm/IivkyhmxZL0FgIgsfmYwI0a+MdprvgpaSL6yjdXJKi+fjtEoyOuWPKmdx2uV 7zcsUNzF6P9C7xhxDSTBEliTKP5F2oxg+wvwspRRYu/4meS90D/0JelkzuuCvtV6 PGguc49KeHw/QYkrGC5XcmnGp80PbE9Z220m12VUMkk0z7Aa67FQMHCxswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7wuxZjHw6z1kazUzvVlEkL3iUzMB8GA1UdIwQY MBaAFGtgQSgjoCJKXQDklj1rI9IlBJl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAt NmEzMzQyYjk1YWYxLzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAtNmEzMzQyYjk1YWYx LzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV8I3dHR py4t8MEa0ia+JFPEgXmrWe0DbSx03mexQoY9m30jYfUi/g4a1MlrqQhBk4/33YGo +Bw49bdD/BkpEZF/pL639IaLfMS0JC9yljnaoc+nIHd0LGZX6bLmbls8pypb8NhY sVYCPr2dlUAK5YCz8uBuvBHoXn9O/3nmz6ByrXn8mDLM0ujej5B2XOMcTrMjO+2T YZHvPHO/UZQgCgwEIzO0ePocNtwtF2ZAxIVrJSxb4FtZ1gjTSpwvNcrnfzAOiiqH 4rCJe9DSKav8Nf2AK1vFbv6u2HhbVHCQS0OhM5zTKZ3g3pTc59iGCOk6RSgQUy2m YqSni1Oc0MGDVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:36 2025 by rpki-client