This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json) Hash identifier: jgPhr6YZUG1JoTRyBVzxL5kg+e2CKStukaRUCDlFO6g= Subject key identifier: F6:DB:26:19:1D:B2:0F:A0:51:DE:20:ED:19:A2:33:FF:61:6C:8F:F2 Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3 Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3 Certificate serial: 019AF954A4B87FC7ED6A90D54F9B9C049D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 15:01:05 +0000 Manifest this update: Sun 07 Dec 2025 15:01:05 +0000 Manifest next update: Mon 08 Dec 2025 15:01:05 +0000 Files and hashes: 1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: x6Jhtf39xaBNLC0b6T+a8YAXM08zJYe6TPpDwIzpco0=) 2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:a4:b8:7f:c7:ed:6a:90:d5:4f:9b:9c:04:9d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3 Validity Not Before: Dec 7 15:01:05 2025 GMT Not After : Dec 8 15:01:05 2025 GMT Subject: CN=f6db26191db20fa051de20ed19a233ff616c8ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:7c:de:47:e3:b1:fb:92:3b:0d:9c:1e:e5: 2e:1f:29:ec:8a:3c:a9:8c:b6:ed:a0:c2:1d:92:3f: ba:27:31:41:1f:35:83:b9:d9:23:fe:17:a9:d1:1b: f0:0e:a1:49:f8:49:a8:e2:45:40:00:f5:3b:ff:13: 7e:c2:07:a1:0a:21:d3:e2:52:72:7b:af:8a:7d:8e: 0e:a5:0f:b5:6a:41:8c:6a:e9:ea:fa:24:29:1f:d9: 1a:1b:f5:d4:2c:e8:b2:61:9d:f0:8e:40:a9:66:52: 6d:c2:c2:56:29:b4:78:71:e3:aa:c2:16:72:1f:52: ba:c3:e6:f0:df:f9:98:c6:83:6a:01:b0:74:d8:9a: 29:a8:b4:95:fd:79:82:61:6b:1a:f3:17:e9:49:19: 22:05:d3:f9:6d:e5:07:11:f5:81:de:f1:c2:20:14: 18:ef:b1:e3:e9:d1:02:e5:f8:d7:99:b8:e5:93:4a: e1:15:fe:41:b4:6d:ab:fc:2c:a7:09:7d:dd:9d:11: 6b:44:4f:76:46:fc:a7:3b:89:10:4d:a2:30:fc:33: c6:15:07:8b:a9:b9:d1:cd:10:13:62:7b:bd:2a:a1: ef:97:75:0e:a4:3b:c8:79:23:9b:82:8e:45:55:f7: 5e:fd:be:dd:28:72:40:0f:bc:82:46:55:ad:14:0a: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DB:26:19:1D:B2:0F:A0:51:DE:20:ED:19:A2:33:FF:61:6C:8F:F2 X509v3 Authority Key Identifier: keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:49:22:4e:95:4e:51:77:cc:7c:87:1c:40:76:04:74:b2:47: 40:4e:82:6b:6d:46:4e:e7:48:86:3c:04:9c:12:cb:79:d0:13: 1b:ee:f8:11:47:c7:a7:9f:76:18:22:53:0f:0a:cd:6b:97:21: 45:9a:84:1d:a1:e4:35:50:c1:8d:ad:0f:03:bd:64:f6:bd:0d: e2:94:ff:1c:8e:29:76:c3:b8:a6:22:25:1f:20:35:eb:87:84: b5:03:c1:c1:f3:e3:17:e1:12:79:13:df:48:29:ea:98:d8:a5: 3a:10:c8:7e:4f:cb:1d:03:95:ef:77:91:47:f7:4e:09:f0:98: 0e:18:96:53:c6:ee:ad:cb:2d:b8:99:5a:f2:a6:d2:ea:5c:23: fd:e8:0f:50:f1:5b:cc:97:ef:d6:28:6e:54:62:d8:e0:03:0c: 4c:0a:73:61:47:d8:3a:0f:aa:b2:48:1f:96:c9:e6:a9:b4:02: ce:c3:f2:77:79:1b:0d:74:c3:d4:b5:e7:89:91:4d:9e:da:b9: fd:de:ad:ec:c2:da:4f:2f:6a:14:83:00:23:be:8f:cc:f1:da: 48:64:ff:a9:44:62:4b:6b:63:0e:60:53:14:5b:84:32:ec:75: 12:cb:9e:1c:32:9c:62:f9:7a:a6:06:c3:84:b4:84:7f:cd:9e: 6b:23:57:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VKS4f8ftapDVT5ucBJ1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1 YjU1YTMwHhcNMjUxMjA3MTUwMTA1WhcNMjUxMjA4MTUwMTA1WjAzMTEwLwYDVQQD EyhmNmRiMjYxOTFkYjIwZmEwNTFkZTIwZWQxOWEyMzNmZjYxNmM4ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUl83kfjsfuSOw2cHuUuHynsijyp jLbtoMIdkj+6JzFBHzWDudkj/hep0RvwDqFJ+Emo4kVAAPU7/xN+wgehCiHT4lJy e6+KfY4OpQ+1akGMaunq+iQpH9kaG/XULOiyYZ3wjkCpZlJtwsJWKbR4ceOqwhZy H1K6w+bw3/mYxoNqAbB02JopqLSV/XmCYWsa8xfpSRkiBdP5beUHEfWB3vHCIBQY 77Hj6dEC5fjXmbjlk0rhFf5BtG2r/CynCX3dnRFrRE92RvynO4kQTaIw/DPGFQeL qbnRzRATYnu9KqHvl3UOpDvIeSObgo5FVfde/b7dKHJAD7yCRlWtFAoMlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbbJhkdsg+gUd4g7RmiM/9hbI/yMB8GA1UdIwQY MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEkiTpVO UXfMfIccQHYEdLJHQE6Ca21GTudIhjwEnBLLedATG+74EUfHp592GCJTDwrNa5ch RZqEHaHkNVDBja0PA71k9r0N4pT/HI4pdsO4piIlHyA164eEtQPBwfPjF+ESeRPf SCnqmNilOhDIfk/LHQOV73eRR/dOCfCYDhiWU8burcstuJla8qbS6lwj/egPUPFb zJfv1ihuVGLY4AMMTApzYUfYOg+qskgflsnmqbQCzsPyd3kbDXTD1LXniZFNntq5 /d6t7MLaTy9qFIMAI76PzPHaSGT/qURiS2tjDmBTFFuEMux1EsueHDKcYvl6pgbD hLSEf82eayNXLA== -----END CERTIFICATE-----Generated at Mon Dec 8 01:18:22 2025 by rpki-client