This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json) Hash identifier: dNuy6n7zHSlD1lDyxkieiad+C0P2wvhd42iWPybCXb8= Subject key identifier: 9A:A5:D9:B2:A2:DD:52:AB:73:21:50:08:AD:B3:BC:9A:E0:BE:AF:63 Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49 Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649 Certificate serial: 019AF276A2434B01D4BB5EBD542F070E1E2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 9NInE9JmvOB0nVLm9LsjE3CFbVuUgeGgQ6jfDV5M60A=) 2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=) 3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a2:43:4b:01:d4:bb:5e:bd:54:2f:07:0e:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=9aa5d9b2a2dd52ab73215008adb3bc9ae0beaf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:54:d2:bd:6f:e3:03:b3:64:87:81:bd:f3: 18:15:6b:da:c8:76:da:ac:24:0f:df:5f:de:41:ff: a1:24:59:2f:d6:c5:fc:b5:57:e3:06:92:8e:9c:74: a2:b0:77:af:84:cf:c8:f3:41:61:24:8a:a7:d5:ec: 48:f1:04:86:bf:7a:2b:54:2c:e4:e0:49:7b:4c:8f: 69:b4:a1:fd:5f:72:7f:d1:97:6a:f3:9b:c7:13:57: 10:3d:13:1e:ee:79:ec:17:ec:4d:54:e5:da:64:39: 9d:39:a1:68:01:44:66:c2:e2:cc:e6:51:b9:85:dd: 4b:13:c0:06:5f:fc:4b:2a:aa:7a:ab:6c:a4:93:fc: 35:01:aa:08:4b:c2:38:57:d4:22:4a:85:df:d1:da: 01:bd:85:f4:c5:6c:6f:b0:a7:15:e0:42:d3:b4:cc: f0:28:13:1f:00:41:90:bd:f1:d1:a7:4f:ec:da:3b: 87:a9:fd:78:c3:55:78:a4:ee:7a:03:28:e3:97:cf: bf:f9:92:f1:d0:57:49:4b:1c:cb:ef:be:8f:6c:f1: b9:97:bc:eb:b0:c0:a3:6f:42:f3:1d:41:2a:0c:0d: b6:78:ad:d8:01:e8:d6:08:a1:8b:81:c5:7e:47:7b: b6:88:03:23:dd:37:c1:5d:c3:cb:13:ad:e7:83:16: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:D9:B2:A2:DD:52:AB:73:21:50:08:AD:B3:BC:9A:E0:BE:AF:63 X509v3 Authority Key Identifier: keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:82:fe:e2:a7:ec:55:47:df:6b:06:b9:49:c6:6d:26:73:3b: 36:dc:68:e5:42:9b:cf:cc:f8:49:36:53:e6:6f:cf:f2:68:01: e4:e6:d1:fb:9c:31:4e:4b:92:e4:c1:46:46:44:33:54:9d:25: f2:5f:d7:5a:f3:4f:52:0f:83:97:a7:4d:fd:df:db:85:0e:6f: 9d:bd:8e:35:9a:d5:d7:ea:07:06:19:8a:71:0c:7a:31:1e:02: 5f:ec:a1:51:a0:cf:4f:31:5e:46:21:48:33:04:29:76:4a:f2: b5:46:61:05:70:03:70:53:e8:58:00:5b:9a:7d:0c:c9:3d:44: 43:9a:f9:5b:a3:cd:18:f6:d5:7a:9e:9f:19:4c:2c:90:7c:a2: 0b:ed:6f:78:ad:f2:03:20:c3:7d:c0:ef:c0:8d:62:f7:b9:99: 1c:bc:ca:21:73:bb:8f:6a:db:84:55:98:1b:a1:eb:75:db:e8: c9:be:3d:ea:f3:e5:68:62:ad:95:47:de:91:a8:9b:40:db:c2: da:f2:1a:ed:26:00:2f:2f:86:f5:00:6e:75:31:0c:ae:c0:78: d8:05:89:08:43:7c:2e:7c:f6:84:15:5e:d0:a7:d2:0b:a1:5c: 58:a1:07:f8:fc:8d:f6:98:7d:03:2c:bf:b5:ed:2b:bd:b6:42: 44:88:76:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqJDSwHUu169VC8HDh4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi MjY2NDkwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD Eyg5YWE1ZDliMmEyZGQ1MmFiNzMyMTUwMDhhZGIzYmM5YWUwYmVhZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzBU0r1v4wOzZIeBvfMYFWvayHba rCQP31/eQf+hJFkv1sX8tVfjBpKOnHSisHevhM/I80FhJIqn1exI8QSGv3orVCzk 4El7TI9ptKH9X3J/0Zdq85vHE1cQPRMe7nnsF+xNVOXaZDmdOaFoAURmwuLM5lG5 hd1LE8AGX/xLKqp6q2ykk/w1AaoIS8I4V9QiSoXf0doBvYX0xWxvsKcV4ELTtMzw KBMfAEGQvfHRp0/s2juHqf14w1V4pO56Ayjjl8+/+ZLx0FdJSxzL776PbPG5l7zr sMCjb0LzHUEqDA22eK3YAejWCKGLgcV+R3u2iAMj3TfBXcPLE63ngxayPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJql2bKi3VKrcyFQCK2zvJrgvq9jMB8GA1UdIwQY MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt YzJjMmFjYjkwOGJjLzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIL+4qfs VUffawa5ScZtJnM7Ntxo5UKbz8z4STZT5m/P8mgB5ObR+5wxTkuS5MFGRkQzVJ0l 8l/XWvNPUg+Dl6dN/d/bhQ5vnb2ONZrV1+oHBhmKcQx6MR4CX+yhUaDPTzFeRiFI MwQpdkrytUZhBXADcFPoWABbmn0MyT1EQ5r5W6PNGPbVep6fGUwskHyiC+1veK3y AyDDfcDvwI1i97mZHLzKIXO7j2rbhFWYG6Hrddvoyb496vPlaGKtlUfekaibQNvC 2vIa7SYALy+G9QBudTEMrsB42AWJCEN8Lnz2hBVe0KfSC6FcWKEH+PyN9ph9Ayy/ te0rvbZCRIh2Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:13 2025 by rpki-client