This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json) Hash identifier: jZTfBHRvxhYY/7iZ49BepHw1Z/D4SmQIJR27HmhsCf8= Subject key identifier: 4A:F2:A6:07:63:D2:A3:3C:01:B5:E5:E8:F6:67:4E:92:99:5F:40:C3 Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7 Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7 Certificate serial: 019AF0BEEC20EDB9438668D5A2DE7105C3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: ra2sALrDDh9/epSG0MsmYYY7utHJUpjQN8Ja8jQ15m4=) 2: zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa (hash: 5MM1ssf5XEcNEojmTdbrlA8dg78ZH7/NCDsRblaf7f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ec:20:ed:b9:43:86:68:d5:a2:de:71:05:c3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=4af2a60763d2a33c01b5e5e8f6674e92995f40c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:4b:2b:2d:27:e2:dc:8c:4a:78:f6:a5:d9: 1a:62:48:44:47:cb:32:f4:01:5c:fe:be:ca:e5:f4: 2d:67:3d:d5:23:ad:90:2c:04:db:b8:52:91:95:ea: 2d:ad:5d:49:bf:11:19:ac:14:49:36:e8:bb:73:94: c9:56:75:e9:1c:0f:72:74:b6:45:a9:18:e8:16:f4: 4f:99:76:55:dd:a1:d2:6d:5e:76:46:6c:dc:3c:63: 33:5a:e3:58:b0:1a:6c:f7:b7:c9:16:bc:92:2a:e7: 9d:ce:3f:37:37:4b:27:8c:78:da:13:43:37:f1:24: ee:0a:8d:22:ae:1e:1a:df:d6:21:37:5a:20:e1:38: e3:ca:8d:c7:1b:47:2e:8e:ec:a0:2b:76:5a:d8:58: 53:33:7f:a8:68:49:00:af:a5:f2:67:2f:99:c4:95: 33:01:27:c0:02:9b:be:a1:66:79:6e:99:fc:f9:c1: d3:f5:6b:e1:ca:4b:f6:b7:cc:74:44:fd:d3:aa:f0: 0c:50:3c:13:29:c5:3e:a9:a0:42:b7:53:8b:4c:f0: 41:fd:c1:62:09:68:15:a2:04:9c:14:36:92:a8:bf: f2:7e:71:82:35:19:ed:4d:ce:ea:b4:d1:f1:6c:f4: 45:55:d1:34:35:4b:56:2b:9f:b6:fa:04:cf:65:de: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:A6:07:63:D2:A3:3C:01:B5:E5:E8:F6:67:4E:92:99:5F:40:C3 X509v3 Authority Key Identifier: keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e6:57:79:47:03:5c:1d:ba:c5:7a:32:74:01:b6:d2:9a:69: ac:a9:0d:59:a6:29:a1:b4:e4:d0:ca:97:d6:0d:6f:92:f5:c5: 33:7f:13:e6:0f:31:50:d6:f3:47:80:d8:7b:cf:b0:df:32:a4: 96:c1:af:32:1d:55:82:12:93:3f:2f:a8:71:9c:85:7a:49:2f: f2:cb:7c:94:99:b7:45:50:47:c0:00:42:1a:1f:6f:b0:64:76: 5f:0d:cf:5c:7e:16:7f:07:bf:af:55:b1:75:03:80:8e:de:a3: 84:85:99:98:03:a9:6f:52:ec:95:25:0d:8a:55:b0:93:6f:4b: 15:3f:04:f5:70:c5:8f:22:14:96:92:ca:a5:5b:60:64:10:ef: 66:f7:83:33:ca:71:28:a8:98:8b:b8:bb:4c:19:f3:b2:ac:03: e9:e7:93:43:c2:5d:f7:98:9c:d4:51:e6:b2:6c:5b:8c:66:30: 31:50:42:a5:99:a3:e7:f1:f1:cd:cc:42:95:de:aa:0f:f1:dd: 70:e6:f8:be:1c:66:16:1a:a7:5b:ab:43:5b:68:f5:7a:e6:1a: 1e:ca:f1:b0:45:0e:67:2c:a2:66:62:72:f2:0d:e2:99:2d:67: 24:a8:69:63:8c:96:a8:41:ce:ae:fa:c5:e5:52:0a:38:55:7a: 34:46:e4:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuwg7blDhmjVot5xBcPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZWVlM2YwOWFiZWI2YTQzNGU5OTA1Y2JjMGIwMDAwNDRl NzlkZTcwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD Eyg0YWYyYTYwNzYzZDJhMzNjMDFiNWU1ZThmNjY3NGU5Mjk5NWY0MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTFLKy0n4tyMSnj2pdkaYkhER8sy 9AFc/r7K5fQtZz3VI62QLATbuFKRleotrV1JvxEZrBRJNui7c5TJVnXpHA9ydLZF qRjoFvRPmXZV3aHSbV52RmzcPGMzWuNYsBps97fJFrySKuedzj83N0snjHjaE0M3 8STuCo0irh4a39YhN1og4Tjjyo3HG0cujuygK3Za2FhTM3+oaEkAr6XyZy+ZxJUz ASfAApu+oWZ5bpn8+cHT9Wvhykv2t8x0RP3TqvAMUDwTKcU+qaBCt1OLTPBB/cFi CWgVogScFDaSqL/yfnGCNRntTc7qtNHxbPRFVdE0NUtWK5+2+gTPZd6BdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErypgdj0qM8AbXl6PZnTpKZX0DDMB8GA1UdIwQY MBaAFATu4/CavrakNOmQXLwLAABE553nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUt NDgxM2Q4NTUwMmQ3LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUtNDgxM2Q4NTUwMmQ3 LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeZXeUcD XB26xXoydAG20ppprKkNWaYpobTk0MqX1g1vkvXFM38T5g8xUNbzR4DYe8+w3zKk lsGvMh1VghKTPy+ocZyFekkv8st8lJm3RVBHwABCGh9vsGR2Xw3PXH4Wfwe/r1Wx dQOAjt6jhIWZmAOpb1LslSUNilWwk29LFT8E9XDFjyIUlpLKpVtgZBDvZveDM8px KKiYi7i7TBnzsqwD6eeTQ8Jd95ic1FHmsmxbjGYwMVBCpZmj5/HxzcxCld6qD/Hd cOb4vhxmFhqnW6tDW2j1euYaHsrxsEUOZyyiZmJy8g3imS1nJKhpY4yWqEHOrvrF 5VIKOFV6NEbkBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:59 2025 by rpki-client