This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json) Hash identifier: nBCFvhh0JTfUeJJbn0fNESvxDjcgMLBu6c6Ke+GdgUE= Subject key identifier: FB:B7:1D:18:4C:AD:9B:09:BB:BD:34:0C:A1:65:97:CE:5F:47:72:FE Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c Certificate serial: 019AF276C22D65B1BF60E7B1CD1E431B6A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft Manifest number: 13AD Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: vt/bSnmjxl3XL9QeQvQvveHugEY0+aL3npKReTXdN/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c2:2d:65:b1:bf:60:e7:b1:cd:1e:43:1b:6a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=fbb71d184cad9b09bbbd340ca16597ce5f4772fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:06:e0:61:42:19:8a:2e:da:af:64:40:d7: 23:69:80:d2:f2:8c:0d:f6:8a:79:91:3c:9d:a5:50: 3e:cc:29:34:fd:13:72:c9:9a:ce:76:d5:74:8a:0b: 14:59:dd:30:1e:be:45:42:d6:57:37:28:6c:6b:0f: 4b:5a:e1:e3:ff:82:29:fd:a1:28:43:10:91:2f:30: 4f:c5:ea:8d:4f:cb:b7:6a:20:20:b4:06:7c:be:ee: 6c:4d:c9:5c:3e:54:f9:70:fc:ea:ad:8e:86:1e:59: df:84:8c:cf:1d:dc:87:ae:6e:43:5a:82:d3:39:5f: 1c:36:fa:07:aa:db:18:7b:12:ba:b6:1f:20:b5:9f: e9:a4:f7:02:29:0e:87:49:e7:42:2d:90:b8:ce:28: 95:56:f8:3a:0b:9e:cd:2d:42:16:50:9d:e2:fa:98: 55:5d:4a:79:ad:9f:56:e4:2e:2b:84:33:b8:01:29: 2b:00:1c:72:12:7a:4f:d9:dd:c4:29:85:2e:ca:16: 47:28:d2:ab:10:28:f5:b7:54:56:8c:f2:2a:10:aa: e4:67:d7:d7:af:34:08:a8:b2:0c:f7:84:6b:dc:13: 7a:90:41:04:3b:52:fb:35:9a:cb:98:b0:36:4a:88: f3:16:a8:e5:15:38:36:5f:eb:e9:c7:b2:aa:66:8c: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B7:1D:18:4C:AD:9B:09:BB:BD:34:0C:A1:65:97:CE:5F:47:72:FE X509v3 Authority Key Identifier: keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:dc:fc:cd:7b:37:c5:c2:40:c1:68:7c:27:ef:aa:fe:aa:c4: f8:47:d4:e5:4f:28:8f:b1:b7:0a:c8:2b:22:dd:68:e8:45:7c: 35:e8:f1:e6:14:72:f6:37:7f:d1:7c:12:a5:6e:79:b6:61:58: 9b:6a:76:b3:df:d9:b6:5f:50:ea:91:d9:40:0d:65:69:71:a5: 03:ce:cf:93:98:c1:ac:8f:b9:a4:c3:5a:52:95:e5:7d:59:5b: cc:09:71:dd:95:0d:50:2f:67:47:e2:19:5f:6b:71:dc:f4:00: 67:d6:39:66:34:41:3b:52:79:cf:7b:1f:36:7d:70:7f:4c:d1: 55:dc:b4:a6:60:8a:9d:c4:c8:cf:81:69:e7:22:2b:6c:17:ba: d7:5f:8a:34:e8:bf:de:85:e9:e3:56:12:19:f2:f1:47:ed:ad: 4a:96:79:62:44:10:c4:9c:9b:e1:b7:50:26:b0:03:01:a3:d3: e3:ec:e2:34:76:2a:32:cd:6c:c1:87:aa:10:5e:9a:0b:26:4d: 07:97:18:25:4f:83:49:ae:35:ff:a5:3c:ad:6c:ff:87:a7:f6: 5b:f7:a5:6c:3d:d1:9d:56:ad:04:de:19:68:36:b7:36:5e:4c: 47:f0:5e:32:ed:bf:c6:00:33:ec:de:5a:72:ca:2d:68:c7:cd: 7f:29:90:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsItZbG/YOexzR5DG2oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MWQ2MzljMWUwMmVkYTI1MzhkMzRiMGM4YjQ1MjEzYzY0 ZDZhM2MwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EyhmYmI3MWQxODRjYWQ5YjA5YmJiZDM0MGNhMTY1OTdjZTVmNDc3MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi8G4GFCGYou2q9kQNcjaYDS8owN 9op5kTydpVA+zCk0/RNyyZrOdtV0igsUWd0wHr5FQtZXNyhsaw9LWuHj/4Ip/aEo QxCRLzBPxeqNT8u3aiAgtAZ8vu5sTclcPlT5cPzqrY6GHlnfhIzPHdyHrm5DWoLT OV8cNvoHqtsYexK6th8gtZ/ppPcCKQ6HSedCLZC4ziiVVvg6C57NLUIWUJ3i+phV XUp5rZ9W5C4rhDO4ASkrABxyEnpP2d3EKYUuyhZHKNKrECj1t1RWjPIqEKrkZ9fX rzQIqLIM94Rr3BN6kEEEO1L7NZrLmLA2SojzFqjlFTg2X+vpx7KqZowoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu3HRhMrZsJu700DKFll85fR3L+MB8GA1UdIwQY MBaAFAcdY5weAu2iU400sMi0UhPGTWo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTkt ODEzNzI2Y2VkN2QxLzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTktODEzNzI2Y2VkN2Qx LzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9z8zXs3 xcJAwWh8J++q/qrE+EfU5U8oj7G3CsgrIt1o6EV8Nejx5hRy9jd/0XwSpW55tmFY m2p2s9/Ztl9Q6pHZQA1laXGlA87Pk5jBrI+5pMNaUpXlfVlbzAlx3ZUNUC9nR+IZ X2tx3PQAZ9Y5ZjRBO1J5z3sfNn1wf0zRVdy0pmCKncTIz4Fp5yIrbBe611+KNOi/ 3oXp41YSGfLxR+2tSpZ5YkQQxJyb4bdQJrADAaPT4+ziNHYqMs1swYeqEF6aCyZN B5cYJU+DSa41/6U8rWz/h6f2W/elbD3RnVatBN4ZaDa3Nl5MR/BeMu2/xgAz7N5a csotaMfNfymQcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:13 2025 by rpki-client