This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json) Hash identifier: /iE3xWMc7umD0uJjrwMhwa2n30bTJmzOQKope0GaQTs= Subject key identifier: 02:97:68:E9:25:D5:85:4A:E5:70:E4:FA:FF:28:D1:28:1C:0A:EB:F2 Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e Certificate serial: 019B2BF90663E17539D2BC312DEE3F919921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft Manifest number: 0507 Signing time: Wed 17 Dec 2025 11:01:38 +0000 Manifest this update: Wed 17 Dec 2025 11:01:38 +0000 Manifest next update: Thu 18 Dec 2025 11:01:38 +0000 Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: MhSZVkdJccqX09XU7WATvw29ZMnueB1jcX7B/UA53fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:06:63:e1:75:39:d2:bc:31:2d:ee:3f:91:99:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e Validity Not Before: Dec 17 11:01:38 2025 GMT Not After : Dec 18 11:01:38 2025 GMT Subject: CN=029768e925d5854ae570e4faff28d1281c0aebf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:f7:34:52:53:f6:6c:07:8a:39:77:7d:90: 7a:f7:09:45:42:5f:c2:0d:1c:43:89:1e:93:97:b4: 8b:0b:84:e2:50:0d:6f:f2:ac:15:57:0d:14:04:4e: eb:a3:91:80:97:62:5c:07:04:64:7e:ae:9f:94:0c: 43:ac:57:ed:bb:16:5c:49:9b:c8:e3:8e:9f:01:fa: 36:03:cf:19:9e:8c:b1:84:bf:75:a9:82:4c:79:10: 53:7a:cb:e3:03:36:10:45:29:00:df:53:23:71:31: 9b:bc:94:49:38:d3:a4:dd:b8:c4:f1:d6:2f:56:29: 17:4e:c1:f1:40:ed:14:1f:74:25:a6:40:66:87:2e: 42:65:4d:f9:dc:bb:62:74:dd:eb:90:5a:fe:e1:78: 6c:46:a3:c2:1e:cd:e0:38:63:a0:79:36:aa:04:d4: 4a:44:17:81:78:17:54:fa:2b:7d:22:97:0d:5d:b4: 60:e5:af:36:e1:cd:0f:14:2c:c9:45:7d:71:7e:51: 0e:80:2e:56:ba:61:1d:cd:67:a0:7c:96:86:39:b9: 87:6a:b7:35:70:70:07:94:10:c7:49:56:be:18:8a: 77:0d:08:97:f6:ad:28:57:a1:0e:9b:58:b1:d5:cc: 34:a3:12:31:8e:2a:c3:ff:67:a9:35:44:44:51:6b: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:68:E9:25:D5:85:4A:E5:70:E4:FA:FF:28:D1:28:1C:0A:EB:F2 X509v3 Authority Key Identifier: keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:97:52:9f:ab:2d:3c:b6:21:84:c7:4d:13:60:97:29:14:3c: 51:df:58:22:ff:ba:78:ba:7a:61:a3:d8:f8:c1:4b:4a:f4:02: 87:ed:57:32:38:eb:3b:09:ee:66:6c:4e:58:5a:82:96:52:bc: c6:2d:c4:ba:a9:90:5c:cb:98:f8:5a:f1:f1:5e:29:3e:01:94: 6d:4e:56:cb:e3:84:17:59:5d:18:96:66:e1:5d:b5:e3:0e:ac: ca:b4:78:f4:1f:f4:67:05:71:71:29:a7:8c:2d:b5:a5:77:a8: be:b2:2e:7c:3a:79:e0:8e:18:5b:74:5f:b6:56:0c:e7:da:f0: 6f:c2:c7:ea:13:c2:b0:cf:03:9c:37:7f:e7:d0:54:9c:b0:5e: 44:da:99:b0:13:72:ab:de:8b:96:ae:e0:56:f5:b1:ce:06:e9: 83:0a:e4:b0:15:a9:a2:28:b2:dc:f1:61:3b:4c:d3:a7:06:90: 2e:26:a8:96:25:91:21:50:ae:61:dc:fc:74:e0:72:cf:e9:89: 6e:df:8f:2d:71:04:a1:f0:f6:e3:db:5a:b7:c9:09:dd:43:b6: 57:ee:28:5d:78:c6:57:96:57:b1:25:83:93:5d:f2:71:c9:5e: ee:94:7e:c5:4b:b1:38:57:ec:e0:12:fb:d0:f0:18:5a:aa:aa: 68:c4:ab:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+QZj4XU50rwxLe4/kZkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl MTE3MmUwHhcNMjUxMjE3MTEwMTM4WhcNMjUxMjE4MTEwMTM4WjAzMTEwLwYDVQQD EygwMjk3NjhlOTI1ZDU4NTRhZTU3MGU0ZmFmZjI4ZDEyODFjMGFlYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm73NFJT9mwHijl3fZB69wlFQl/C DRxDiR6Tl7SLC4TiUA1v8qwVVw0UBE7ro5GAl2JcBwRkfq6flAxDrFftuxZcSZvI 446fAfo2A88ZnoyxhL91qYJMeRBTesvjAzYQRSkA31MjcTGbvJRJONOk3bjE8dYv VikXTsHxQO0UH3QlpkBmhy5CZU353LtidN3rkFr+4XhsRqPCHs3gOGOgeTaqBNRK RBeBeBdU+it9IpcNXbRg5a824c0PFCzJRX1xflEOgC5WumEdzWegfJaGObmHarc1 cHAHlBDHSVa+GIp3DQiX9q0oV6EOm1ix1cw0oxIxjirD/2epNUREUWuaowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKXaOkl1YVK5XDk+v8o0SgcCuvyMB8GA1UdIwQY MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpdSn6st PLYhhMdNE2CXKRQ8Ud9YIv+6eLp6YaPY+MFLSvQCh+1XMjjrOwnuZmxOWFqCllK8 xi3EuqmQXMuY+Frx8V4pPgGUbU5Wy+OEF1ldGJZm4V214w6syrR49B/0ZwVxcSmn jC21pXeovrIufDp54I4YW3RftlYM59rwb8LH6hPCsM8DnDd/59BUnLBeRNqZsBNy q96Llq7gVvWxzgbpgwrksBWpoiiy3PFhO0zTpwaQLiaoliWRIVCuYdz8dOByz+mJ bt+PLXEEofD249tat8kJ3UO2V+4oXXjGV5ZXsSWDk13yccle7pR+xUuxOFfs4BL7 0PAYWqqqaMSrIA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:30 2025 by rpki-client