This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json) Hash identifier: RHAglsvlsjcl7z7Ty7l2HajGkqEfMCH6YmaJdncecg4= Subject key identifier: BD:FE:4C:D5:F2:2C:A7:B6:C5:D6:8C:13:DA:DE:5D:9A:B0:83:75:3F Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3 Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3 Certificate serial: 019AF051AA350057079C946EBA5DD751BFEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft Manifest number: 0A34 Signing time: Fri 05 Dec 2025 21:01:14 +0000 Manifest this update: Fri 05 Dec 2025 21:01:14 +0000 Manifest next update: Sat 06 Dec 2025 21:01:14 +0000 Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: wr8fN8N9o95gOYEBVA/fbG9rovnsY5evc/F08w+JAcA=) 2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:aa:35:00:57:07:9c:94:6e:ba:5d:d7:51:bf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3 Validity Not Before: Dec 5 21:01:14 2025 GMT Not After : Dec 6 21:01:14 2025 GMT Subject: CN=bdfe4cd5f22ca7b6c5d68c13dade5d9ab083753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:87:27:39:af:74:86:be:d7:60:26:19:5a: f4:7c:2b:4a:de:7b:94:0a:ac:9a:d6:b3:ad:3e:6b: 6e:b3:29:ae:f8:82:f8:2e:07:9c:e7:e2:18:e3:da: 3c:5c:30:3c:0f:23:4b:97:4a:00:b2:19:ff:59:15: 24:76:d2:ec:de:af:c2:1b:70:19:a8:48:0e:93:a4: 22:f4:1f:91:1a:0f:c7:0a:72:82:f6:de:55:7e:d1: 8b:c6:34:6d:b8:18:73:2c:48:84:08:49:29:3d:18: bf:05:31:37:37:c8:28:84:00:4f:f3:8b:f1:2c:49: 22:3f:63:62:66:97:03:0c:83:29:b2:10:38:15:07: 67:56:96:df:2a:75:00:db:4b:38:8f:38:5b:2e:ec: 10:84:78:3f:3c:0c:f7:9f:c6:5f:cb:f3:16:14:c9: 19:07:20:9a:b8:3a:16:69:39:0e:85:e2:d9:b0:80: a8:0a:50:6c:d8:17:82:c0:9c:60:8f:f8:d2:c1:78: c9:61:1e:c3:e9:d6:dc:23:a3:e9:36:60:1c:18:d9: bd:fc:e0:70:af:be:59:77:72:55:3d:47:4e:1b:4b: 00:ba:ca:9e:2a:ce:1f:3d:65:be:44:a2:b9:0b:45: fa:c9:4e:0a:e0:1c:b9:be:c4:a4:e1:26:4e:8e:80: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:4C:D5:F2:2C:A7:B6:C5:D6:8C:13:DA:DE:5D:9A:B0:83:75:3F X509v3 Authority Key Identifier: keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ea:66:2f:64:f7:06:4e:89:ba:95:de:c8:de:90:ab:aa:ed: b8:9e:c7:80:07:57:2b:8a:7c:be:dd:53:8a:51:fd:a3:3a:75: cf:26:d0:8d:48:d9:5c:0c:b5:57:cb:8d:4b:4b:42:e1:4c:02: dc:46:12:67:a5:ec:cd:1b:4e:24:9f:5f:b3:cd:0b:12:42:39: 5d:00:8b:03:32:fa:e7:f6:55:4c:a8:d1:b1:1b:b8:f3:0d:d9: c2:32:35:64:fe:ea:7a:6b:1c:79:81:d6:cf:c2:ac:f2:09:55: 49:c2:e6:e5:4c:ea:78:7b:f2:ff:2f:d7:76:02:70:68:b4:68: 70:27:81:cc:94:b0:e1:05:c1:1c:7d:ee:3a:87:2f:76:49:53: f5:3b:35:61:b5:85:3a:02:a7:58:83:ac:2b:30:48:26:91:0a: 12:c0:6a:41:b1:e1:90:ea:13:e1:0d:82:c6:d8:d1:0d:05:7b: 52:bd:24:74:00:fe:6b:2e:9e:73:66:7f:cd:82:f1:4d:89:d2: f3:34:df:b5:11:b5:a6:b4:bb:aa:d8:ad:79:bd:b3:63:b9:12: a3:a8:73:59:5e:2f:53:af:c4:0f:d0:56:81:51:6d:88:4d:d8: 3c:1e:60:79:c8:f6:06:20:64:32:a7:89:61:3a:d3:9b:f8:0f: 44:3e:80:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUao1AFcHnJRuul3XUb/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MDdkNmMyNDg0NDRmNmI1YzM3OGRiMGZmZWMwZjg5OTI1 NmViYTMwHhcNMjUxMjA1MjEwMTE0WhcNMjUxMjA2MjEwMTE0WjAzMTEwLwYDVQQD EyhiZGZlNGNkNWYyMmNhN2I2YzVkNjhjMTNkYWRlNWQ5YWIwODM3NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpuHJzmvdIa+12AmGVr0fCtK3nuU Cqya1rOtPmtusymu+IL4Lgec5+IY49o8XDA8DyNLl0oAshn/WRUkdtLs3q/CG3AZ qEgOk6Qi9B+RGg/HCnKC9t5VftGLxjRtuBhzLEiECEkpPRi/BTE3N8gohABP84vx LEkiP2NiZpcDDIMpshA4FQdnVpbfKnUA20s4jzhbLuwQhHg/PAz3n8Zfy/MWFMkZ ByCauDoWaTkOheLZsICoClBs2BeCwJxgj/jSwXjJYR7D6dbcI6PpNmAcGNm9/OBw r75Zd3JVPUdOG0sAusqeKs4fPWW+RKK5C0X6yU4K4By5vsSk4SZOjoD/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3+TNXyLKe2xdaME9reXZqwg3U/MB8GA1UdIwQY MBaAFAQH1sJIRE9rXDeNsP/sD4mSVuujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkFmV3draEVUMnRjTjQyd18td1BpWkpXNjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81ZjllMWYtMDk3MS00NDQ2LWE2MTEt ZmFkMTliZGM3OTJiLzEvQkFmV3draEVUMnRjTjQyd18td1BpWkpXNjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81ZjllMWYtMDk3MS00NDQ2LWE2MTEtZmFkMTliZGM3OTJi LzEvQkFmV3draEVUMnRjTjQyd18td1BpWkpXNjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlepmL2T3 Bk6JupXeyN6Qq6rtuJ7HgAdXK4p8vt1TilH9ozp1zybQjUjZXAy1V8uNS0tC4UwC 3EYSZ6XszRtOJJ9fs80LEkI5XQCLAzL65/ZVTKjRsRu48w3ZwjI1ZP7qemsceYHW z8Ks8glVScLm5UzqeHvy/y/XdgJwaLRocCeBzJSw4QXBHH3uOocvdklT9Ts1YbWF OgKnWIOsKzBIJpEKEsBqQbHhkOoT4Q2CxtjRDQV7Ur0kdAD+ay6ec2Z/zYLxTYnS 8zTftRG1prS7qtiteb2zY7kSo6hzWV4vU6/ED9BWgVFtiE3YPB5gecj2BiBkMqeJ YTrTm/gPRD6Akw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:11 2025 by rpki-client