This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json) Hash identifier: O+vAb2u5UJByvvgI925uCIFgvlMN4kosVVw6hRnPxXc= Subject key identifier: A0:3B:FB:AF:EF:20:07:9B:BE:10:4F:CC:83:1B:DF:B4:5E:23:A3:E4 Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74 Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74 Certificate serial: 019AF3C0116E75AE666245E6AD3778982DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft Manifest number: 032C Signing time: Sat 06 Dec 2025 13:00:42 +0000 Manifest this update: Sat 06 Dec 2025 13:00:42 +0000 Manifest next update: Sun 07 Dec 2025 13:00:42 +0000 Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: JAvaG7+1ctJsq75FD0VfuVjFDsEiSQ57MdkmdawapXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:11:6e:75:ae:66:62:45:e6:ad:37:78:98:2d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74 Validity Not Before: Dec 6 13:00:42 2025 GMT Not After : Dec 7 13:00:42 2025 GMT Subject: CN=a03bfbafef20079bbe104fcc831bdfb45e23a3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:3d:bd:02:7d:20:87:a1:a0:22:7c:2b:f1: dd:30:bd:39:d1:01:ab:f9:63:47:16:95:e1:b1:b4: d8:58:c7:8a:3f:d8:bc:84:cb:5f:ef:3b:10:ec:13: 28:a1:2c:8e:ff:f0:0c:97:4d:42:be:f7:b1:c4:bd: 9b:8c:d8:ea:34:0e:13:5f:fc:24:85:92:13:5f:7a: 58:72:5b:ad:ee:d4:ad:8d:6f:fb:f6:4b:3c:d5:ec: a8:5e:56:04:02:29:4c:7b:f3:77:6d:e9:1d:c9:a3: a6:15:bf:6f:52:32:d5:a8:82:0a:49:f9:e5:f5:9a: fc:3d:df:0c:ab:aa:40:c3:1c:a7:55:85:d2:35:9e: fa:14:6c:36:55:a9:7e:bd:8f:7f:6b:2b:7d:c2:f5: a9:4c:a6:b0:2b:1a:29:c2:0e:79:47:9d:d7:ee:cd: ef:bd:38:6a:16:01:57:da:89:9a:12:7a:97:ae:f7: 17:62:af:53:a2:10:05:e3:1d:99:cb:12:2d:3c:b7: 1f:23:3f:7e:49:ae:10:78:b5:79:f0:ff:c7:cb:36: a9:26:6d:21:7f:1f:67:80:46:2c:27:0f:d7:c2:38: 5f:04:4d:24:4c:62:07:dc:48:3f:40:ce:0a:25:e8: fe:ce:d3:43:d9:db:6d:d4:79:95:76:80:2e:13:5e: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3B:FB:AF:EF:20:07:9B:BE:10:4F:CC:83:1B:DF:B4:5E:23:A3:E4 X509v3 Authority Key Identifier: keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ce:f6:4e:9a:01:75:c7:c4:8d:2a:04:ed:2c:c9:ea:f2:70: 93:d4:33:5e:2d:da:a1:5d:20:42:61:3e:a3:45:7c:d4:b6:35: 38:61:c6:68:38:c6:29:fb:2d:12:7a:a6:15:4a:ca:fb:f6:6f: 7f:35:44:5a:4c:9c:d5:75:71:af:f3:b6:ba:95:e7:cd:31:b2: 5d:32:77:4d:83:43:75:18:9d:9b:31:7a:59:b0:81:6b:2a:98: 07:bc:3a:88:71:86:04:fa:e0:f0:d3:57:59:90:9c:f2:63:29: 8e:ce:5d:34:83:c9:ab:8b:b6:60:65:95:f6:32:9e:2c:76:04: 69:5c:01:c1:aa:ad:69:6b:b9:2c:64:fa:7c:ef:61:5d:f1:92: 98:35:e9:83:09:32:9e:f0:10:f4:1d:eb:26:02:7c:1f:3e:10: 1c:3f:61:2f:76:e8:b4:45:6c:f6:fa:b6:21:ee:f6:5e:a3:13: 98:15:31:af:c5:69:dd:a3:73:12:a4:15:b3:91:62:e8:cf:11: 0c:31:f9:5f:a8:ba:f9:33:39:ad:9d:16:bb:34:8d:61:6a:39: 80:84:c7:e8:ce:e1:c8:e3:53:20:51:05:ed:80:42:71:ef:4c: c8:87:0e:bc:a9:6a:e9:6d:f4:85:39:6d:70:55:d6:38:96:da: a8:46:3e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBFuda5mYkXmrTd4mC3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmIyYjdjNzhhMjlhMjIzZWE1OWM2N2M5ZGFhM2RjN2Vk YjFlNzQwHhcNMjUxMjA2MTMwMDQyWhcNMjUxMjA3MTMwMDQyWjAzMTEwLwYDVQQD EyhhMDNiZmJhZmVmMjAwNzliYmUxMDRmY2M4MzFiZGZiNDVlMjNhM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8I9vQJ9IIehoCJ8K/HdML050QGr +WNHFpXhsbTYWMeKP9i8hMtf7zsQ7BMooSyO//AMl01CvvexxL2bjNjqNA4TX/wk hZITX3pYclut7tStjW/79ks81eyoXlYEAilMe/N3bekdyaOmFb9vUjLVqIIKSfnl 9Zr8Pd8Mq6pAwxynVYXSNZ76FGw2Val+vY9/ayt9wvWpTKawKxopwg55R53X7s3v vThqFgFX2omaEnqXrvcXYq9TohAF4x2ZyxItPLcfIz9+Sa4QeLV58P/HyzapJm0h fx9ngEYsJw/XwjhfBE0kTGIH3Eg/QM4KJej+ztND2dtt1HmVdoAuE17G9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA7+6/vIAebvhBPzIMb37ReI6PkMB8GA1UdIwQY MBaAFG0rK3x4opoiPqWcZ8nao9x+2x50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUt MGM1MjU1NmU5ODY1LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUtMGM1MjU1NmU5ODY1 LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM72TpoB dcfEjSoE7SzJ6vJwk9QzXi3aoV0gQmE+o0V81LY1OGHGaDjGKfstEnqmFUrK+/Zv fzVEWkyc1XVxr/O2upXnzTGyXTJ3TYNDdRidmzF6WbCBayqYB7w6iHGGBPrg8NNX WZCc8mMpjs5dNIPJq4u2YGWV9jKeLHYEaVwBwaqtaWu5LGT6fO9hXfGSmDXpgwky nvAQ9B3rJgJ8Hz4QHD9hL3botEVs9vq2Ie72XqMTmBUxr8Vp3aNzEqQVs5Fi6M8R DDH5X6i6+TM5rZ0WuzSNYWo5gITH6M7hyONTIFEF7YBCce9MyIcOvKlq6W30hTlt cFXWOJbaqEY+uA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:32 2025 by rpki-client