This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft File: bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json) Hash identifier: WxfogbCvXf922VMfplMsBTClJOCIYZN/MTj0PHF7ukg= Subject key identifier: 39:24:47:0C:0C:26:36:2F:D6:04:CA:F1:17:2E:57:66:57:F9:DA:A1 Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B Certificate issuer: /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b Certificate serial: 019AF12CC78C6AC9BFCA3956192CE531E7E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft Manifest number: 0AF7 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: FH9tFptTxEwe1fXgD6FQpaNwQwIwh0/7MBMfBa3kA0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c7:8c:6a:c9:bf:ca:39:56:19:2c:e5:31:e7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=3924470c0c26362fd604caf1172e576657f9daa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:db:a6:d0:39:54:6e:70:30:7d:05:cd:18: 7f:0e:8e:24:1a:03:d7:0f:29:a3:59:53:0b:6e:7a: ae:83:0b:c2:81:7f:68:b1:bb:eb:fd:64:c6:73:2b: d5:54:5d:d2:a7:af:8b:16:8b:16:fe:95:7c:51:9f: ff:58:64:ac:33:be:d1:3d:7d:2e:12:f1:44:a0:79: db:bc:8c:6c:c8:0d:34:a2:2e:0e:03:32:a5:f5:68: 08:3c:fd:6d:72:5c:db:7a:38:c7:03:f3:8a:05:43: 83:c5:f9:f1:af:b3:7b:b1:24:31:06:80:6d:fc:3a: b6:d9:48:5d:ef:20:35:ba:27:0e:ef:8d:61:21:01: b1:d0:8a:be:2e:d9:cb:ef:14:06:07:0f:4c:5e:a1: 72:de:dc:e4:7e:91:42:6f:25:21:2a:df:32:80:cc: 8b:83:fb:b2:cf:42:61:ab:5f:c3:cd:ef:84:60:ff: e4:48:53:f8:4b:a9:33:95:9b:82:63:1c:a1:73:94: 01:0b:39:6d:e4:b3:4f:f0:02:36:98:d9:32:5c:36: c2:63:7e:e8:3b:e0:79:ba:07:f6:92:dc:35:9a:7f: 07:d5:6a:3e:2a:83:d6:fd:98:c2:05:a0:59:37:97: c6:05:38:16:c7:ac:69:4f:7e:13:a0:f6:51:a8:d7: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:47:0C:0C:26:36:2F:D6:04:CA:F1:17:2E:57:66:57:F9:DA:A1 X509v3 Authority Key Identifier: keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2f:48:14:d9:71:48:ac:11:09:d0:8f:0c:5f:b6:96:2f:0c: 65:66:ed:9e:d1:60:62:9b:a9:a5:db:58:ec:e4:c1:37:56:f7: cf:b8:b1:c5:36:c1:98:4d:8f:13:a7:d3:95:2a:b3:fe:4a:25: 07:1f:6f:27:f9:14:32:60:f2:64:5b:86:cb:4b:f9:f7:4d:21: 2b:cc:fa:3b:f7:72:c8:c7:81:ed:df:e4:30:f6:39:2f:dc:10: d5:dd:14:79:d6:5c:ea:bb:c3:69:32:31:de:be:26:27:46:34: 16:d7:da:a8:18:47:69:df:e6:05:3b:23:37:1c:18:04:81:c8: a8:f9:66:94:f6:7a:66:c1:ee:c7:34:ad:f2:e7:24:78:a7:d4: 41:85:6d:c0:e2:5b:f4:83:10:ec:0a:e2:6c:74:e1:90:db:66: c5:58:44:51:77:10:7f:2c:f9:42:ee:4a:09:ee:04:39:62:1e: ae:c1:b8:08:ff:f7:78:67:88:b9:8b:b3:8b:99:ce:7e:b3:65: cc:4e:70:c6:06:da:6d:b7:c7:db:ba:c6:ca:cc:b3:f7:80:6e: 86:89:e3:54:26:76:5b:93:78:39:c7:cc:7a:7c:34:e3:a9:7e: 79:72:b4:ea:23:ff:9d:df:1f:de:5f:78:3b:12:66:78:ad:df: 03:1a:0d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMeMasm/yjlWGSzlMefhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMjhjNDZjMGI5NDEzY2RmNWRlMjdmZDFjOWY2YjQ2NzMy NzdjN2IwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EygzOTI0NDcwYzBjMjYzNjJmZDYwNGNhZjExNzJlNTc2NjU3ZjlkYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD7bptA5VG5wMH0FzRh/Do4kGgPX DymjWVMLbnqugwvCgX9osbvr/WTGcyvVVF3Sp6+LFosW/pV8UZ//WGSsM77RPX0u EvFEoHnbvIxsyA00oi4OAzKl9WgIPP1tclzbejjHA/OKBUODxfnxr7N7sSQxBoBt /Dq22Uhd7yA1uicO741hIQGx0Iq+LtnL7xQGBw9MXqFy3tzkfpFCbyUhKt8ygMyL g/uyz0Jhq1/Dze+EYP/kSFP4S6kzlZuCYxyhc5QBCzlt5LNP8AI2mNkyXDbCY37o O+B5ugf2ktw1mn8H1Wo+KoPW/ZjCBaBZN5fGBTgWx6xpT34ToPZRqNeIWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkkRwwMJjYv1gTK8RcuV2ZX+dqhMB8GA1UdIwQY MBaAFGwoxGwLlBPN9d4n/Ryfa0ZzJ3x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkNqRWJBdVVFODMxM2lmOUhKOXJSbk1uZkhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85ZDI4ZGQtZDIwMy00YjRmLWFmOTct NTlkMjAzMThjZjkxLzEvYkNqRWJBdVVFODMxM2lmOUhKOXJSbk1uZkhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85ZDI4ZGQtZDIwMy00YjRmLWFmOTctNTlkMjAzMThjZjkx LzEvYkNqRWJBdVVFODMxM2lmOUhKOXJSbk1uZkhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy9IFNlx SKwRCdCPDF+2li8MZWbtntFgYpuppdtY7OTBN1b3z7ixxTbBmE2PE6fTlSqz/kol Bx9vJ/kUMmDyZFuGy0v5900hK8z6O/dyyMeB7d/kMPY5L9wQ1d0UedZc6rvDaTIx 3r4mJ0Y0FtfaqBhHad/mBTsjNxwYBIHIqPlmlPZ6ZsHuxzSt8uckeKfUQYVtwOJb 9IMQ7AribHThkNtmxVhEUXcQfyz5Qu5KCe4EOWIersG4CP/3eGeIuYuzi5nOfrNl zE5wxgbabbfH27rGysyz94BuhonjVCZ2W5N4OcfMenw046l+eXK06iP/nd8f3l94 OxJmeK3fAxoN0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:27 2025 by rpki-client