This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft File: B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json) Hash identifier: FajLAv5vnnyuM8EPYGg6q9Qs1E+lI1McB0fMYD7H6iE= Subject key identifier: AA:A8:F1:25:8F:0F:35:61:65:41:5B:BE:47:C0:5B:4E:FF:51:77:F2 Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22 Certificate issuer: /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22 Certificate serial: 019AF276F4AD780CEBAF281C3C189AECC747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: T4p+CfEgTMDJXJ4F71zMM8t0xz53jHkDSMckO+JiUwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:ad:78:0c:eb:af:28:1c:3c:18:9a:ec:c7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=aaa8f1258f0f356165415bbe47c05b4eff5177f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:86:d2:74:c4:17:67:e0:c8:55:f9:50:43: 96:cd:81:0e:11:d9:63:7c:5e:4a:8c:c5:fb:b7:a1: 08:11:e5:09:f2:8c:20:6f:7a:8a:e3:01:b7:ef:17: 38:04:21:5a:b7:f1:cc:fd:26:90:f5:52:11:90:46: dd:67:10:e3:8b:09:3c:48:a6:a4:cf:5e:03:d3:9a: cc:37:5c:a9:28:ee:6e:60:55:e3:91:9c:25:43:33: 0b:45:2e:1c:8a:aa:b6:7b:a6:e9:c5:6f:c5:e6:7c: dc:fa:6d:a1:a3:f4:85:bf:81:d9:a2:26:3c:28:ee: ca:ff:ee:31:ea:52:88:d7:77:b1:69:be:17:11:37: bd:f0:79:1b:7c:d3:e2:ba:2b:d6:14:00:49:50:15: 98:ad:6b:c9:b7:99:cb:ea:bf:e1:98:60:20:35:86: 33:6f:af:3a:a2:a3:95:ea:1a:20:52:20:4b:68:7b: 81:42:aa:52:5a:28:1c:22:57:bf:94:43:3b:49:f9: e8:6d:a7:75:aa:3c:4c:c2:d7:a5:a5:b3:a9:05:ca: 64:e7:f0:a5:aa:5e:6f:ba:fe:07:d4:0f:96:0d:9b: d0:ef:24:60:7a:09:ff:9e:05:fc:f3:92:30:0d:ea: 36:80:9c:ac:23:89:b9:11:25:7d:51:f5:d4:be:b6: d3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:F1:25:8F:0F:35:61:65:41:5B:BE:47:C0:5B:4E:FF:51:77:F2 X509v3 Authority Key Identifier: keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:88:bf:c6:74:16:45:27:98:2d:9d:72:f9:3a:d4:e4:9c: 89:ac:f1:aa:86:b4:90:4f:c6:6f:36:c0:de:69:5c:66:26:a5: 54:43:77:f0:c9:cb:07:e0:a4:4e:b3:30:c4:bd:d8:a5:be:b9: c5:f7:41:50:ae:81:0e:64:96:df:d0:49:13:54:51:f2:1f:dc: e2:63:96:64:1a:ce:bb:b6:fe:21:f3:65:68:c5:01:99:30:b9: ec:a2:25:46:e4:7b:d8:2e:e5:91:28:4c:3b:ba:a9:98:54:ca: ef:c8:3e:21:c0:6e:aa:00:be:9e:3f:3c:36:bf:ef:4f:0b:10: 14:c8:85:27:b5:59:ec:da:2f:d7:55:77:44:00:9f:5f:0c:05: bd:28:0f:39:61:74:2e:51:55:3f:5f:6f:74:fa:30:d5:f4:d4: f7:f0:26:38:09:19:b8:6a:46:68:f6:ff:de:3b:3b:fa:d1:fb: d7:79:3d:e2:a0:b9:8d:e9:b6:c7:5a:9e:2d:87:69:0e:6e:7d: 2a:82:59:b9:eb:f3:2c:9f:fc:07:d9:37:94:f1:db:d8:49:5b: e5:cc:06:6b:fb:5a:46:99:c4:0e:f6:29:3e:06:66:27:78:89: e2:c1:a8:3d:9e:d7:9e:af:5b:fb:a8:b0:bb:77:14:a3:bf:77: fa:a2:2f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvSteAzrrygcPBia7MdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZThkZTZhNjc0YzFmZWFhZDlhOWNjZDNjZWEyMmRmMjYx NzRmMjIwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhhYWE4ZjEyNThmMGYzNTYxNjU0MTViYmU0N2MwNWI0ZWZmNTE3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpOG0nTEF2fgyFX5UEOWzYEOEdlj fF5KjMX7t6EIEeUJ8owgb3qK4wG37xc4BCFat/HM/SaQ9VIRkEbdZxDjiwk8SKak z14D05rMN1ypKO5uYFXjkZwlQzMLRS4ciqq2e6bpxW/F5nzc+m2ho/SFv4HZoiY8 KO7K/+4x6lKI13exab4XETe98HkbfNPiuivWFABJUBWYrWvJt5nL6r/hmGAgNYYz b686oqOV6hogUiBLaHuBQqpSWigcIle/lEM7Sfnobad1qjxMwtelpbOpBcpk5/Cl ql5vuv4H1A+WDZvQ7yRgegn/ngX885IwDeo2gJysI4m5ESV9UfXUvrbTCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqo8SWPDzVhZUFbvkfAW07/UXfyMB8GA1UdIwQY MBaAFAfo3mpnTB/qrZqczTzqIt8mF08iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQt OWJlYTcxNzFiZThhLzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQtOWJlYTcxNzFiZThh LzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaKIv8Z0 FkUnmC2dcvk61OSciazxqoa0kE/GbzbA3mlcZialVEN38MnLB+CkTrMwxL3Ypb65 xfdBUK6BDmSW39BJE1RR8h/c4mOWZBrOu7b+IfNlaMUBmTC57KIlRuR72C7lkShM O7qpmFTK78g+IcBuqgC+nj88Nr/vTwsQFMiFJ7VZ7Nov11V3RACfXwwFvSgPOWF0 LlFVP19vdPow1fTU9/AmOAkZuGpGaPb/3js7+tH713k94qC5jem2x1qeLYdpDm59 KoJZuevzLJ/8B9k3lPHb2Elb5cwGa/taRpnEDvYpPgZmJ3iJ4sGoPZ7Xnq9b+6iw u3cUo793+qIv0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:46 2025 by rpki-client