This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json) Hash identifier: ZNvYejqDu4nu1gakL3KPmAWagNvkRIBJiRFv3o+Mmw0= Subject key identifier: D8:44:AA:64:D9:C1:7C:D4:47:8C:97:F7:97:54:BF:C6:03:DD:71:EE Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c Certificate serial: 019AF164055BE72BAFA046547A3217F4EC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: NB4f0L/GRF1WlwzLVyU61vl440+3C/9Q3O697CszTn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:05:5b:e7:2b:af:a0:46:54:7a:32:17:f4:ec:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=d844aa64d9c17cd4478c97f79754bfc603dd71ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:e6:52:d0:cc:ce:6e:fc:7f:08:58:80:a4: 8a:b6:f1:a2:83:40:ce:14:d4:d4:80:4e:9a:b7:8b: af:b6:db:be:15:df:29:70:ec:a9:c2:02:f5:51:39: 0e:3e:13:79:a3:a8:4e:ca:9d:e8:b0:3f:16:d6:b7: 14:3a:85:6b:01:a7:0b:7f:6e:9e:d2:83:8e:cf:87: 09:16:66:4e:e4:0c:5f:5b:11:da:22:43:4d:78:fd: 0d:9b:d5:a4:89:31:de:9e:6c:08:d1:c6:a7:b8:90: 7b:32:c4:a8:3c:88:95:61:32:f6:25:95:e1:ac:ac: 6e:32:05:ca:d6:ee:94:d2:00:07:2e:f9:67:6f:48: 24:e9:3f:b6:94:72:5b:95:0f:e1:67:1d:f2:aa:50: 26:d1:2d:01:40:df:1c:0f:60:e0:1d:41:f6:d8:bb: db:89:52:69:9c:40:30:8a:f4:a7:6d:a6:12:47:fa: 64:18:3b:1d:c8:11:c8:82:87:1f:7d:90:dc:c4:55: 34:b5:9e:e9:c5:0d:38:58:fc:e4:ee:6e:dd:9e:ca: 54:0f:09:4a:6f:d2:ab:b1:ae:78:32:48:ca:05:f2: ea:99:fe:ca:3e:34:50:32:58:de:78:81:64:da:41: d4:5c:ba:9a:55:c3:46:85:fc:e6:91:d1:26:12:37: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:AA:64:D9:C1:7C:D4:47:8C:97:F7:97:54:BF:C6:03:DD:71:EE X509v3 Authority Key Identifier: keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cb:f4:60:33:4a:9a:39:3e:71:b9:70:da:86:c8:dc:28:15: 65:ca:5a:a9:ea:05:7e:40:82:ad:9e:74:39:f3:22:30:6d:ed: 9f:39:67:7e:71:a2:be:b6:77:59:98:1b:47:39:a4:40:b6:35: 4d:bc:2d:d9:1c:54:53:0e:03:3b:72:da:10:26:6f:e8:dd:15: 00:a2:60:60:38:4c:0b:77:b1:3c:bb:53:20:3b:75:d0:8e:8d: a4:62:44:b2:3a:d2:09:6f:48:9d:87:50:f5:28:eb:37:7b:ff: 68:9c:11:0f:b6:0a:4c:04:6b:c3:d3:21:61:6a:04:6b:b7:8f: 72:c8:45:30:a3:90:6d:75:af:88:76:9a:73:04:e0:0d:3b:2f: 30:0a:f9:f4:d0:dd:c7:4a:18:9f:d7:37:0e:36:3d:f1:af:2e: 4c:10:e7:9f:3f:1e:be:92:55:6f:e4:5b:cd:b7:3e:c8:69:85: 42:5b:ae:24:b1:1e:cd:75:49:a6:f6:c3:2a:43:a5:07:e5:74: 5a:41:d1:39:f0:ea:5c:91:af:7a:f9:d9:af:61:cd:de:d8:a7: 09:4a:c3:8b:f4:bb:35:0d:44:17:c7:34:a3:69:81:90:85:fc: 8f:5e:65:f7:c2:62:b9:0e:df:e3:e3:e2:54:9d:48:db:e5:32: b7:63:3e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAVb5yuvoEZUejIX9OwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNGIzNTEwZjAwNGU0NTRkZmJjMWYxYTI4YzQ1OWQ5MThk MTUxM2MwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD EyhkODQ0YWE2NGQ5YzE3Y2Q0NDc4Yzk3Zjc5NzU0YmZjNjAzZGQ3MWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXXmUtDMzm78fwhYgKSKtvGig0DO FNTUgE6at4uvttu+Fd8pcOypwgL1UTkOPhN5o6hOyp3osD8W1rcUOoVrAacLf26e 0oOOz4cJFmZO5AxfWxHaIkNNeP0Nm9WkiTHenmwI0canuJB7MsSoPIiVYTL2JZXh rKxuMgXK1u6U0gAHLvlnb0gk6T+2lHJblQ/hZx3yqlAm0S0BQN8cD2DgHUH22Lvb iVJpnEAwivSnbaYSR/pkGDsdyBHIgocffZDcxFU0tZ7pxQ04WPzk7m7dnspUDwlK b9Krsa54MkjKBfLqmf7KPjRQMljeeIFk2kHUXLqaVcNGhfzmkdEmEjeivQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhEqmTZwXzUR4yX95dUv8YD3XHuMB8GA1UdIwQY MBaAFG5LNRDwBORU37wfGijEWdkY0VE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTkt OGYzMzQ3NmEwOGEzLzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTktOGYzMzQ3NmEwOGEz LzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsv0YDNK mjk+cblw2obI3CgVZcpaqeoFfkCCrZ50OfMiMG3tnzlnfnGivrZ3WZgbRzmkQLY1 Tbwt2RxUUw4DO3LaECZv6N0VAKJgYDhMC3exPLtTIDt10I6NpGJEsjrSCW9InYdQ 9SjrN3v/aJwRD7YKTARrw9MhYWoEa7ePcshFMKOQbXWviHaacwTgDTsvMAr59NDd x0oYn9c3DjY98a8uTBDnnz8evpJVb+Rbzbc+yGmFQluuJLEezXVJpvbDKkOlB+V0 WkHROfDqXJGvevnZr2HN3tinCUrDi/S7NQ1EF8c0o2mBkIX8j15l98JiuQ7f4+Pi VJ1I2+Uyt2M+kA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:35 2025 by rpki-client