This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json) Hash identifier: 0e1p0t7Y8HQOB0D4b9BMHbX37As8HOHXD8YXjRwflOs= Subject key identifier: 32:34:2A:87:43:38:E7:AF:F4:5B:73:44:39:72:D1:E9:E3:22:62:DB Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Certificate serial: 019AF23FFB9188140ECC90FEB65484C8F470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft Manifest number: 05DA Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa (hash: CmWcScHRFVyy1qyRSWQw5TEdbfc8FAZaUDEtIb/hOWQ=) 2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: t9dyiCaeezUxmqsVT+kvcbaZWj/lU/kF4TigvRD7cRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fb:91:88:14:0e:cc:90:fe:b6:54:84:c8:f4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=32342a874338e7aff45b73443972d1e9e32262db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:7d:f4:37:52:89:e6:80:cc:ab:32:00:b1: 02:f4:e4:13:2d:18:89:d6:e2:6d:90:14:8d:c5:1d: e9:9d:81:23:8f:f4:5d:67:32:53:a7:07:34:a7:35: e6:bd:68:d6:dc:25:7f:38:2a:5a:14:e8:1f:21:8f: 60:d9:38:2f:0d:5e:bf:bf:45:25:35:46:a8:7e:74: 94:9e:80:a8:a6:d7:73:94:12:50:b7:6a:a6:31:e5: 96:4b:19:74:78:24:af:02:17:51:9d:29:6b:d2:15: 36:73:bc:45:39:67:3f:7c:96:f3:4e:1c:8c:13:ad: 06:d5:bf:26:c8:34:97:2b:ac:32:2c:03:0e:1d:94: ee:00:77:c1:d8:4b:be:1d:be:2a:e8:c6:19:5f:a9: 14:cd:66:62:4d:ef:32:99:a6:9c:94:57:42:21:0a: d4:5e:5c:10:e9:48:12:ed:a8:b5:b3:57:73:13:dd: ce:f2:a7:73:19:13:67:45:3f:9c:9f:58:30:4e:cb: 9f:30:d8:61:99:db:af:1e:71:db:26:39:4f:33:61: 32:87:e4:79:8e:f7:db:19:f3:82:6a:ac:ca:2e:b3: 59:42:fc:9d:8e:6e:e5:5c:d0:b3:82:fc:80:0a:6c: 7b:05:a9:b8:8c:a9:3c:11:11:81:21:46:8a:2f:e3: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:2A:87:43:38:E7:AF:F4:5B:73:44:39:72:D1:E9:E3:22:62:DB X509v3 Authority Key Identifier: keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ec:3d:91:71:6a:76:d8:14:63:72:72:1a:0d:f9:94:ef:ce: 05:ca:13:b7:18:bb:68:7e:57:ce:a4:13:5b:07:c6:86:8c:a1: fc:f4:3e:87:f6:1e:8c:03:d7:ff:d3:0e:20:e1:d7:ac:de:85: ff:4e:8d:f6:c4:a1:46:55:fe:57:f1:2f:12:b0:bc:be:94:8a: b6:07:31:a4:ca:e5:d8:24:f8:8e:ab:22:8b:83:a8:2f:74:da: b3:66:9e:02:f1:4c:a8:70:5b:02:fa:ca:39:ad:f7:ba:15:65: ff:d5:dd:95:c6:5e:11:a3:a8:d5:48:f4:20:4b:cc:b9:f3:9a: 83:3b:36:d8:62:e0:f6:41:95:dd:18:73:3c:86:8a:8d:f7:a2: c9:9f:30:f2:1d:c9:77:03:89:c9:3c:b3:6a:28:df:e1:07:42: 9d:2a:6f:46:ff:51:26:0d:5c:5b:ec:a5:09:06:6f:58:59:7b: ea:9c:8b:81:78:1e:d0:fd:f5:b2:2f:30:15:34:bd:8e:25:00: da:f1:1b:61:69:16:00:aa:29:83:86:1b:eb:64:59:9e:e6:82: f5:49:9a:1c:37:37:c8:3c:bb:82:ef:ba:52:ac:ae:16:85:3f: 43:f0:ef:59:26:b2:3e:e7:be:f7:22:46:80:b7:cc:67:ea:1d: dd:6d:62:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/uRiBQOzJD+tlSEyPRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1 YzNmMjMwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EygzMjM0MmE4NzQzMzhlN2FmZjQ1YjczNDQzOTcyZDFlOWUzMjI2MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+l99DdSieaAzKsyALEC9OQTLRiJ 1uJtkBSNxR3pnYEjj/RdZzJTpwc0pzXmvWjW3CV/OCpaFOgfIY9g2TgvDV6/v0Ul NUaofnSUnoCoptdzlBJQt2qmMeWWSxl0eCSvAhdRnSlr0hU2c7xFOWc/fJbzThyM E60G1b8myDSXK6wyLAMOHZTuAHfB2Eu+Hb4q6MYZX6kUzWZiTe8ymaaclFdCIQrU XlwQ6UgS7ai1s1dzE93O8qdzGRNnRT+cn1gwTsufMNhhmduvHnHbJjlPM2Eyh+R5 jvfbGfOCaqzKLrNZQvydjm7lXNCzgvyACmx7Bam4jKk8ERGBIUaKL+MZgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI0KodDOOev9FtzRDly0enjImLbMB8GA1UdIwQY MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt MDliYzkyZDRlZDk2LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2 LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbew9kXFq dtgUY3JyGg35lO/OBcoTtxi7aH5XzqQTWwfGhoyh/PQ+h/YejAPX/9MOIOHXrN6F /06N9sShRlX+V/EvErC8vpSKtgcxpMrl2CT4jqsii4OoL3Tas2aeAvFMqHBbAvrK Oa33uhVl/9XdlcZeEaOo1Uj0IEvMufOagzs22GLg9kGV3RhzPIaKjfeiyZ8w8h3J dwOJyTyzaijf4QdCnSpvRv9RJg1cW+ylCQZvWFl76pyLgXge0P31si8wFTS9jiUA 2vEbYWkWAKopg4Yb62RZnuaC9UmaHDc3yDy7gu+6UqyuFoU/Q/DvWSayPue+9yJG gLfMZ+od3W1ifw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:32 2025 by rpki-client