This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json) Hash identifier: wjx/Fpsbaw8uF1C0ipauGTpdqYuiMyhnqqi81x/mNfM= Subject key identifier: E3:89:FF:2D:A5:26:89:E7:8D:89:82:5A:AD:E2:A5:1B:1A:0C:11:E7 Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba Certificate serial: 019AF1D1D5084ADAF93B1778A8A50ECBB3EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=) 2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: ereqYOQ5bKZrKQBefYrl73V4V4rXVzTB4+q1W+LNQTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d5:08:4a:da:f9:3b:17:78:a8:a5:0e:cb:b3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=e389ff2da52689e78d89825aade2a51b1a0c11e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:b2:05:4b:bb:e5:c4:b1:b4:be:05:94:c7: 87:bd:a8:d3:de:73:ed:c7:f1:fe:44:cc:6a:1a:54: a7:05:0b:5e:7c:03:87:5c:cb:f4:4f:47:b9:6f:1a: e3:44:e7:50:3a:b2:78:b3:e5:aa:ce:b3:1f:37:77: 3a:68:ac:01:b2:38:04:a5:89:53:5d:7f:53:81:b2: 6c:ab:2c:b9:c2:ca:a6:d7:50:93:df:49:e2:bc:de: d8:15:2c:5f:9c:1c:14:da:78:89:8f:f9:90:a2:66: fd:1c:43:23:5c:3b:01:b5:09:2f:8a:96:3d:ca:af: 46:50:f9:e2:64:6b:72:5f:a8:25:ec:43:fa:c4:3d: 63:9c:76:ef:25:f6:61:34:2c:f5:75:de:3b:cd:b9: 43:2b:ea:d1:d8:c4:ac:f7:4f:ea:c7:07:11:dc:02: e7:0f:35:8d:00:0e:3a:ec:5d:b3:78:c8:f2:48:30: 6c:78:99:c8:ab:95:b6:a9:be:52:ec:21:c5:3f:df: 5c:89:d6:2f:1f:90:34:56:e4:31:fd:f9:90:b6:11: a4:47:66:c3:57:41:1a:3e:e3:af:93:19:a5:ba:f7: f1:31:78:35:ef:bd:f6:bd:c0:1c:2f:bd:0b:cc:55: e6:93:22:ca:86:e5:4e:15:e1:1b:81:73:fe:95:e7: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:FF:2D:A5:26:89:E7:8D:89:82:5A:AD:E2:A5:1B:1A:0C:11:E7 X509v3 Authority Key Identifier: keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a2:a8:18:4c:82:81:04:be:7a:90:81:5f:c7:af:7c:48:81: 8f:b0:9e:f4:ac:4e:34:3d:6c:c5:49:16:7e:62:90:bf:18:d8: 24:53:c7:33:e3:7c:1f:68:7f:db:89:96:cb:67:58:06:1c:11: b4:77:fe:cd:2f:be:3f:7a:31:89:fc:cb:21:44:09:c5:8d:de: 97:e5:c4:21:1c:97:7d:c9:c6:9a:0d:24:6c:54:15:dc:e5:0f: 15:96:06:cd:cd:94:0e:78:bc:78:27:d5:ef:73:de:dd:72:f3: cf:3e:a8:67:59:be:d0:41:4b:da:bf:d5:e5:12:fc:ca:44:4b: 2a:a3:fe:53:5d:e4:91:59:e7:20:71:7e:32:5c:10:25:bd:be: 97:a8:a9:08:e1:cd:74:0f:89:be:5d:af:bb:7f:bb:65:cf:07: 44:8c:9c:f7:9d:1d:9b:47:01:1a:bf:2f:81:ea:46:12:31:48: c9:17:04:a4:cf:44:28:c8:77:bc:ee:1d:70:e5:de:d3:58:f7: 95:a0:30:03:43:68:c1:d5:63:9d:bc:cc:2a:6b:78:2d:b0:29: c6:6f:6f:b8:91:ef:45:e4:de:d2:cd:b0:63:0e:42:51:70:d0: 31:a7:86:cb:d0:e9:41:72:8c:44:c0:3c:c9:d3:eb:4d:fb:ba: ee:0d:27:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dUIStr5Oxd4qKUOy7PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5 YWE5YmEwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhlMzg5ZmYyZGE1MjY4OWU3OGQ4OTgyNWFhZGUyYTUxYjFhMGMxMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtyyBUu75cSxtL4FlMeHvajT3nPt x/H+RMxqGlSnBQtefAOHXMv0T0e5bxrjROdQOrJ4s+WqzrMfN3c6aKwBsjgEpYlT XX9TgbJsqyy5wsqm11CT30nivN7YFSxfnBwU2niJj/mQomb9HEMjXDsBtQkvipY9 yq9GUPniZGtyX6gl7EP6xD1jnHbvJfZhNCz1dd47zblDK+rR2MSs90/qxwcR3ALn DzWNAA467F2zeMjySDBseJnIq5W2qb5S7CHFP99cidYvH5A0VuQx/fmQthGkR2bD V0EaPuOvkxmluvfxMXg17732vcAcL70LzFXmkyLKhuVOFeEbgXP+lecrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOJ/y2lJonnjYmCWq3ipRsaDBHnMB8GA1UdIwQY MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaKoGEyC gQS+epCBX8evfEiBj7Ce9KxOND1sxUkWfmKQvxjYJFPHM+N8H2h/24mWy2dYBhwR tHf+zS++P3oxifzLIUQJxY3el+XEIRyXfcnGmg0kbFQV3OUPFZYGzc2UDni8eCfV 73Pe3XLzzz6oZ1m+0EFL2r/V5RL8ykRLKqP+U13kkVnnIHF+MlwQJb2+l6ipCOHN dA+Jvl2vu3+7Zc8HRIyc950dm0cBGr8vgepGEjFIyRcEpM9EKMh3vO4dcOXe01j3 laAwA0NowdVjnbzMKmt4LbApxm9vuJHvReTe0s2wYw5CUXDQMaeGy9DpQXKMRMA8 ydPrTfu67g0nJA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:29 2025 by rpki-client