This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json) Hash identifier: 3OeuU4voctuJr7IufBxhIrNKleiOc81wWYpCJ/O4230= Subject key identifier: 88:78:B8:61:B0:A9:B4:E1:BA:ED:6F:64:70:17:FA:CA:82:A8:45:B8 Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b Certificate serial: 019AF12CF7B9B4538CB73E5CF2985E546600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft Manifest number: 0D00 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: ThC4CYvY1+5WMwC1MxO8nyW8eDyYs8enrOIEUm4/IV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f7:b9:b4:53:8c:b7:3e:5c:f2:98:5e:54:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=8878b861b0a9b4e1baed6f647017faca82a845b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:ea:b5:35:08:15:94:8f:73:d2:b8:22:49: f9:b2:68:ce:75:68:5e:56:f3:17:34:dc:ba:04:54: 47:16:ba:d4:a4:a7:c9:59:b1:7a:75:f3:2c:ac:2f: 52:87:19:99:02:dd:a2:ed:fc:23:8e:c5:f3:ca:08: d5:8c:ba:02:d8:a8:0f:83:af:c2:7c:f1:82:53:b4: 10:b2:65:21:31:23:a6:8c:31:8a:a0:dc:a2:ed:68: a7:8f:d4:9f:e4:5d:7d:29:21:46:83:0b:bf:21:d9: 66:61:8a:9d:06:19:4a:1b:74:8a:8f:fd:6f:6c:88: c3:db:b1:71:df:12:1b:0a:e8:4b:dc:ab:a7:3d:fc: f1:8c:bc:59:b8:71:72:ca:9b:8a:cc:e9:26:6c:66: 10:98:a6:35:d0:04:0b:2b:98:21:ed:ae:a2:67:46: 9b:18:22:64:5d:0f:e3:48:f4:65:a6:91:4c:2d:78: cb:3b:9e:a9:4d:f3:2f:3e:89:b7:69:d3:df:f9:3d: 33:b9:07:e4:f3:52:97:e4:26:da:52:b1:66:84:6b: b0:73:c1:5b:35:f9:a0:83:5d:e6:dd:27:65:35:b1: 29:33:b6:a2:27:35:35:45:68:2d:97:ca:b3:d5:44: fe:0c:03:a5:d7:81:fc:cc:98:45:77:9f:24:b6:c0: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:B8:61:B0:A9:B4:E1:BA:ED:6F:64:70:17:FA:CA:82:A8:45:B8 X509v3 Authority Key Identifier: keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:73:1d:e2:c4:70:cf:d0:8e:0f:53:cc:0e:09:da:de:31:5e: f2:62:59:0e:cf:35:08:42:3e:b8:0f:d9:c3:12:4c:f8:2f:6e: a2:e6:e8:c4:4d:6c:2d:d5:c2:4e:6f:8c:e8:51:f3:a7:91:6d: 95:25:f5:4f:8a:d0:ea:47:13:73:b7:42:a2:8b:bc:f0:d6:79: 49:33:90:17:02:11:43:d4:7b:fa:c1:73:d1:75:5b:20:43:83: ab:76:79:4f:a1:6c:e7:80:70:34:2c:fc:9b:91:63:ff:48:36: 84:57:35:2e:91:37:29:79:d6:df:2e:1b:82:14:b1:36:ef:70: 9d:6a:0d:8f:e2:9b:a3:3f:75:8e:21:da:a3:e6:74:0f:ee:ca: 12:9c:72:1b:57:61:45:b2:39:0d:73:f7:5f:d4:a5:c2:58:69: 84:84:55:8c:cf:10:b9:00:fc:29:d4:e4:de:1c:11:cd:68:f6: a1:d2:67:8f:55:61:a2:66:33:93:73:fa:1d:36:4b:0b:0d:77: 67:c6:0f:5f:a2:93:ba:f2:06:86:dc:09:16:3a:1f:d0:1f:57: 22:56:a1:e0:d7:4d:32:de:ac:55:50:80:0a:db:1e:01:e3:00: 4f:98:5e:b7:17:62:3b:7c:28:ab:6c:00:89:50:07:65:6e:57: aa:a1:ba:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPe5tFOMtz5c8pheVGYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMDVjZjc3MWQ5OTkyZTcwZmY2NzQwZTZiMjA2MjBjZTUy ZDBkOGIwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD Eyg4ODc4Yjg2MWIwYTliNGUxYmFlZDZmNjQ3MDE3ZmFjYTgyYTg0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvXqtTUIFZSPc9K4Ikn5smjOdWhe VvMXNNy6BFRHFrrUpKfJWbF6dfMsrC9ShxmZAt2i7fwjjsXzygjVjLoC2KgPg6/C fPGCU7QQsmUhMSOmjDGKoNyi7Winj9Sf5F19KSFGgwu/IdlmYYqdBhlKG3SKj/1v bIjD27Fx3xIbCuhL3KunPfzxjLxZuHFyypuKzOkmbGYQmKY10AQLK5gh7a6iZ0ab GCJkXQ/jSPRlppFMLXjLO56pTfMvPom3adPf+T0zuQfk81KX5CbaUrFmhGuwc8Fb Nfmgg13m3SdlNbEpM7aiJzU1RWgtl8qz1UT+DAOl14H8zJhFd58ktsBkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh4uGGwqbThuu1vZHAX+sqCqEW4MB8GA1UdIwQY MBaAFG8Fz3cdmZLnD/Z0DmsgYgzlLQ2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMt MjQ1NjUwZjg0MmQ1LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMtMjQ1NjUwZjg0MmQ1 LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXMd4sRw z9COD1PMDgna3jFe8mJZDs81CEI+uA/ZwxJM+C9uouboxE1sLdXCTm+M6FHzp5Ft lSX1T4rQ6kcTc7dCoou88NZ5STOQFwIRQ9R7+sFz0XVbIEODq3Z5T6Fs54BwNCz8 m5Fj/0g2hFc1LpE3KXnW3y4bghSxNu9wnWoNj+Kboz91jiHao+Z0D+7KEpxyG1dh RbI5DXP3X9SlwlhphIRVjM8QuQD8KdTk3hwRzWj2odJnj1VhomYzk3P6HTZLCw13 Z8YPX6KTuvIGhtwJFjof0B9XIlah4NdNMt6sVVCACtseAeMAT5hetxdiO3woq2wA iVAHZW5XqqG6WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:55 2025 by rpki-client