This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json) Hash identifier: 0L54YpcpoH9a1dLu+JGSzAq5VdPMFyg2xw2Wjo9hjnc= Subject key identifier: D4:48:3F:ED:2D:E5:37:DA:98:3C:7A:8E:F5:0C:A7:06:9E:39:FC:D9 Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7 Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7 Certificate serial: 019AF12D557A31D94DEF07AF203C0C50826F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft Manifest number: 0FF5 Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: zrepgNeJBjXpwQUOh7nIVMgUJLMAQ5OrYX7HOBmulaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:55:7a:31:d9:4d:ef:07:af:20:3c:0c:50:82:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7 Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=d4483fed2de537da983c7a8ef50ca7069e39fcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:02:ec:f9:5e:1f:6b:be:5b:59:7c:e1:b8: 77:29:f3:2e:f7:77:f4:bd:4c:a1:6f:68:60:f7:ab: 50:84:9c:5b:64:f9:4e:eb:b8:77:ed:42:a7:47:ca: 0d:37:73:9d:66:ed:1b:c4:f0:61:da:f2:61:a0:4a: c3:ef:74:cd:60:81:19:0c:25:8f:d7:ca:cd:c2:cd: fe:db:97:df:04:b6:0d:aa:26:32:5e:e3:ab:ad:4b: 70:dc:9e:9b:71:9f:57:de:3f:bd:49:38:75:04:cd: 3e:c2:94:df:2c:6e:06:4e:a9:40:d4:aa:9a:63:50: 9e:df:8e:78:88:dd:19:f7:2a:5c:e5:7f:c8:ba:70: b3:85:8f:0b:ae:7f:ad:59:65:c7:fd:1d:59:fc:cb: 57:53:76:25:6f:41:fd:7e:b7:56:05:d1:f7:c3:d4: 62:8e:7c:1d:d5:49:9e:48:85:12:37:29:63:6f:e5: 43:12:ce:97:ae:f3:61:15:92:e5:89:dd:38:28:8f: f0:5c:9c:ae:a9:4e:f1:01:c4:00:92:00:cb:0d:54: 64:20:9d:60:cd:24:15:83:30:51:c3:21:38:17:06: 54:1f:dd:8f:76:36:87:78:56:d0:b3:8a:3a:9f:4b: 15:c5:30:da:93:10:e2:3b:0c:f0:aa:f0:18:78:25: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:3F:ED:2D:E5:37:DA:98:3C:7A:8E:F5:0C:A7:06:9E:39:FC:D9 X509v3 Authority Key Identifier: keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:71:df:b3:07:8a:2f:c0:fd:74:05:a4:93:fc:09:e2:32: 15:4b:a4:0d:6b:cf:fb:a9:95:6f:f9:d4:bf:4b:e1:b8:51:f5: 05:36:0c:b6:71:70:01:46:28:00:d4:15:44:fb:05:fe:1f:18: 1a:58:3f:9f:bc:44:01:73:c4:a0:b5:2e:f3:b1:1e:ed:78:9f: e8:c7:19:a2:a9:0a:91:e1:90:bd:df:4c:aa:d3:15:b0:37:19: 37:e9:50:90:6e:a1:9c:52:24:60:74:4e:ec:ce:9f:00:e7:33: 07:0d:6f:d4:a5:8c:91:2d:8a:20:61:35:23:31:42:eb:b3:b6: 51:fa:b3:2b:0a:4a:fd:5e:e5:a8:42:77:52:a4:0c:31:ad:bc: 54:07:5e:6c:92:91:45:d3:8b:f6:9c:44:09:11:90:51:5a:fc: 87:93:67:64:bb:19:5b:0e:70:1f:44:51:5d:36:76:07:77:82: 4e:69:b1:11:25:25:5c:12:72:9e:03:f7:0f:a0:0a:ce:37:53: e9:8e:45:b0:7d:e1:69:08:93:97:de:d4:a2:b1:07:94:19:61: 13:12:5b:91:a9:f1:fd:c4:65:53:2e:c8:7b:8c:49:d2:3b:1f: 4c:9e:23:1f:0a:98:e0:97:99:32:a7:29:c0:aa:ba:e7:c2:3b: c1:4a:34:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVV6MdlN7wevIDwMUIJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMjkyNDRhYzQwMjY3ZWVjNDdhOTE3MDhmODljZjUzNjZl YWE4ZDcwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EyhkNDQ4M2ZlZDJkZTUzN2RhOTgzYzdhOGVmNTBjYTcwNjllMzlmY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GcC7PleH2u+W1l84bh3KfMu93f0 vUyhb2hg96tQhJxbZPlO67h37UKnR8oNN3OdZu0bxPBh2vJhoErD73TNYIEZDCWP 18rNws3+25ffBLYNqiYyXuOrrUtw3J6bcZ9X3j+9STh1BM0+wpTfLG4GTqlA1Kqa Y1Ce3454iN0Z9ypc5X/IunCzhY8Lrn+tWWXH/R1Z/MtXU3Ylb0H9frdWBdH3w9Ri jnwd1UmeSIUSNyljb+VDEs6XrvNhFZLlid04KI/wXJyuqU7xAcQAkgDLDVRkIJ1g zSQVgzBRwyE4FwZUH92PdjaHeFbQs4o6n0sVxTDakxDiOwzwqvAYeCXSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRIP+0t5TfamDx6jvUMpwaeOfzZMB8GA1UdIwQY MBaAFGwpJErEAmfuxHqRcI+Jz1Nm6qjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUt ZTM2OTY2YmEwMDVjLzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUtZTM2OTY2YmEwMDVj LzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnFx37MH ii/A/XQFpJP8CeIyFUukDWvP+6mVb/nUv0vhuFH1BTYMtnFwAUYoANQVRPsF/h8Y Glg/n7xEAXPEoLUu87Ee7Xif6McZoqkKkeGQvd9MqtMVsDcZN+lQkG6hnFIkYHRO 7M6fAOczBw1v1KWMkS2KIGE1IzFC67O2UfqzKwpK/V7lqEJ3UqQMMa28VAdebJKR RdOL9pxECRGQUVr8h5NnZLsZWw5wH0RRXTZ2B3eCTmmxESUlXBJyngP3D6AKzjdT 6Y5FsH3haQiTl97UorEHlBlhExJbkanx/cRlUy7Ie4xJ0jsfTJ4jHwqY4JeZMqcp wKq658I7wUo0iA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:34 2025 by rpki-client