This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json) Hash identifier: LI3hwZNGKSrJtkyspPhNr3cZ0IgT7Rps2AOUf0YC5N0= Subject key identifier: 77:C8:EF:F8:1F:D1:EB:92:CB:FC:02:AE:E1:48:29:69:C8:A3:28:B8 Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916 Certificate serial: 019AF19B68A67A7663F7498EACF63FAE817D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft Manifest number: 0BC5 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=) 2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: XRl6aYcjnW/B5He5sbp/16n3lFxI1JJZN0YytdrNHXw=) 3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:a6:7a:76:63:f7:49:8e:ac:f6:3f:ae:81:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=77c8eff81fd1eb92cbfc02aee1482969c8a328b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:46:4c:93:11:a5:62:98:bd:15:2b:cb:cc: 16:f1:62:55:67:d9:1e:f9:12:72:66:c5:16:ab:06: 15:e4:67:70:93:c9:ce:25:6b:84:9d:47:87:82:70: eb:61:4a:89:91:fc:99:86:80:54:8c:97:eb:98:ff: 69:57:d6:63:39:ea:d4:ce:5a:2b:95:90:27:05:d0: de:2f:f6:03:fb:97:3b:50:4d:c9:5b:43:53:15:05: 32:4c:3c:05:60:d7:d9:eb:3b:2a:d7:bb:7f:b8:a2: e5:cc:64:d5:f8:13:22:2d:ef:d1:f2:e8:da:4c:e9: ca:bf:07:d5:14:76:42:b0:bd:4b:f9:8c:ac:82:3f: 4f:79:e1:bd:f7:88:29:24:58:77:43:ff:89:15:4f: 91:74:e4:7e:53:9e:ba:3e:5e:9b:1c:73:82:43:64: 89:5d:4e:09:1f:d4:e1:df:2f:12:66:01:0f:6c:dc: 2d:13:c0:51:e8:18:97:a4:2d:82:56:4d:8d:37:6b: 1f:f4:5e:68:67:7d:6f:a6:c9:b9:bc:3e:65:55:cd: bc:23:fe:0e:8c:e0:09:e4:9f:3b:7b:51:55:75:b0: e6:eb:36:cd:0d:fe:b8:ed:9d:3e:16:3c:8d:52:65: 5a:a7:43:e7:f3:8c:2f:81:47:76:ff:c5:4e:d1:e2: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:EF:F8:1F:D1:EB:92:CB:FC:02:AE:E1:48:29:69:C8:A3:28:B8 X509v3 Authority Key Identifier: keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3e:f6:d3:28:49:69:dd:41:a3:1d:c9:bd:f3:3a:9b:17:c3: 00:73:29:18:eb:da:77:b0:cf:df:5f:8c:08:16:a1:b5:08:ca: 54:0d:bf:f0:c2:29:fe:87:6a:e1:b5:e5:c8:19:c0:2d:75:e8: 55:12:df:86:23:ae:4a:36:66:58:dc:b8:e0:90:d9:c5:d6:ad: 6e:35:69:e2:c6:5b:f8:e9:1d:09:96:40:9f:3d:99:45:cd:42: 1f:98:97:45:1c:8e:09:42:6e:43:4e:2a:88:84:0e:64:2d:53: a3:d4:6c:6c:6a:4f:02:fb:d9:1f:de:85:ca:03:3f:8e:5b:8f: 4c:4d:12:85:b9:8e:9d:03:6c:68:4d:3f:0c:0c:43:39:a7:41: 18:29:d1:67:b3:53:0b:5f:13:a5:7b:33:ff:a4:61:ca:ff:e5: cb:36:6e:8b:d4:15:7e:1e:a8:a5:e4:61:ab:3c:99:4b:7b:d8: 64:5c:f8:80:9b:51:41:ed:93:70:9f:22:8d:30:e3:bb:da:a0: 16:bf:5d:ca:91:83:31:51:f4:1e:fc:b7:2d:0a:83:2d:f8:6f: cd:0f:10:d5:ca:87:19:ae:ac:8f:23:ce:c3:b9:95:10:19:07: dd:42:0d:3c:ed:b9:2d:a8:49:cd:00:96:f9:26:ff:2e:9b:13: af:17:20:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2imenZj90mOrPY/roF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNmRkYjcyZTcyNjgyOThjMTcxNDU4MzEzMWJiZTRhZTRl ZjA5MTYwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg3N2M4ZWZmODFmZDFlYjkyY2JmYzAyYWVlMTQ4Mjk2OWM4YTMyOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz5GTJMRpWKYvRUry8wW8WJVZ9ke +RJyZsUWqwYV5Gdwk8nOJWuEnUeHgnDrYUqJkfyZhoBUjJfrmP9pV9ZjOerUzlor lZAnBdDeL/YD+5c7UE3JW0NTFQUyTDwFYNfZ6zsq17t/uKLlzGTV+BMiLe/R8uja TOnKvwfVFHZCsL1L+Yysgj9PeeG994gpJFh3Q/+JFU+RdOR+U566Pl6bHHOCQ2SJ XU4JH9Th3y8SZgEPbNwtE8BR6BiXpC2CVk2NN2sf9F5oZ31vpsm5vD5lVc28I/4O jOAJ5J87e1FVdbDm6zbNDf647Z0+FjyNUmVap0Pn84wvgUd2/8VO0eL5JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfI7/gf0euSy/wCruFIKWnIoyi4MB8GA1UdIwQY MBaAFGxt23LnJoKYwXFFgxMbvkrk7wkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMt MzJhNjA5MTJlZjQwLzEvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMtMzJhNjA5MTJlZjQw LzEvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz720yhJ ad1Box3JvfM6mxfDAHMpGOvad7DP31+MCBahtQjKVA2/8MIp/odq4bXlyBnALXXo VRLfhiOuSjZmWNy44JDZxdatbjVp4sZb+OkdCZZAnz2ZRc1CH5iXRRyOCUJuQ04q iIQOZC1To9RsbGpPAvvZH96FygM/jluPTE0ShbmOnQNsaE0/DAxDOadBGCnRZ7NT C18TpXsz/6Rhyv/lyzZui9QVfh6opeRhqzyZS3vYZFz4gJtRQe2TcJ8ijTDju9qg Fr9dypGDMVH0Hvy3LQqDLfhvzQ8Q1cqHGa6sjyPOw7mVEBkH3UINPO25LahJzQCW +Sb/LpsTrxcgEA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:03 2025 by rpki-client