This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json) Hash identifier: b439zZyeyxo09kHTJ2wxzSAn3G99gZ+f9GfNqFz2jL0= Subject key identifier: EC:AD:EF:22:19:DB:D7:5A:97:B4:42:25:72:3D:67:20:01:8E:D4:F5 Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006 Certificate serial: 019AF1D2496A73431F452F1250DDBA72840E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft Manifest number: 0648 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: bGCPVNyzjBeJGi/xRg6ZTWmYbydIKfZVJDwb7aPvx9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:49:6a:73:43:1f:45:2f:12:50:dd:ba:72:84:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=ecadef2219dbd75a97b44225723d6720018ed4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:1a:6c:46:e9:d3:5c:a3:af:c2:05:e5:b4: 8d:06:f3:4b:f0:6a:f1:94:49:ec:7d:8f:36:c4:1d: ae:de:e6:8b:15:75:e6:94:48:d2:e1:10:c4:94:16: 49:0a:aa:04:dc:b2:23:78:e2:2e:09:5f:15:c1:0f: 73:6c:7f:ab:02:2e:1b:42:b2:db:80:35:6f:86:e0: 6a:82:17:16:6c:06:11:35:70:72:d3:8a:ed:61:76: 06:51:52:20:47:86:49:cb:df:e7:c0:ec:17:68:d0: 17:d3:a7:bc:ba:61:a6:3e:d5:f8:04:14:db:a2:01: 6e:5c:57:8c:1d:6a:27:87:c8:5d:6d:a3:e5:2b:07: 74:09:85:b7:e9:b3:6d:5c:79:58:5d:57:e2:47:02: f2:3e:ce:08:5a:ef:03:6f:92:bb:18:29:59:01:7a: c7:34:7b:ca:61:47:29:ea:ff:2c:18:c4:87:72:de: 95:68:64:c9:6f:d3:39:c4:9d:10:f7:29:bf:13:4b: 6a:f8:b2:1b:77:e7:aa:f1:0e:d1:70:ad:c6:96:b8: 43:d4:cd:45:af:0e:78:f8:57:cf:4b:2d:03:c4:ba: 06:78:94:f9:63:f3:2e:fa:0a:9f:85:23:0a:5e:4c: 0d:b0:61:2f:25:2c:ad:72:64:5c:cb:f3:17:da:af: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AD:EF:22:19:DB:D7:5A:97:B4:42:25:72:3D:67:20:01:8E:D4:F5 X509v3 Authority Key Identifier: keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a2:c4:5a:42:0d:01:1a:e3:fa:3d:c7:39:a5:55:28:60:7e: 4d:0d:54:7f:fa:c3:cb:ae:22:9a:a4:d7:fc:29:12:83:21:4a: 70:ea:03:d7:92:db:71:0a:99:83:e1:02:e9:3b:57:5b:30:50: 29:7e:ac:b2:a3:c6:16:52:22:11:c1:44:bc:b1:9d:da:e4:76: d5:64:75:5b:52:26:6c:54:ad:35:fc:9c:30:3b:2a:f7:6d:20: 25:48:2d:79:55:64:72:72:45:db:9f:71:ca:3f:5a:83:b5:b6: 7e:6e:9a:17:41:28:15:22:fd:37:af:d3:e4:81:f1:5b:96:be: dd:b6:06:8c:2e:81:9f:ca:39:2f:a2:8b:72:bc:df:0b:0f:10: 9f:57:2d:17:ca:eb:cb:3d:46:10:61:21:32:71:5a:0d:ff:94: b4:e4:49:2b:a5:ff:32:41:1e:6f:ab:72:bc:cf:43:44:8e:cb: 87:f8:5b:41:49:bf:be:df:eb:3f:68:2b:8d:60:d0:ab:7f:37: e7:92:5d:13:a3:68:8a:4d:c2:80:fa:9d:01:6e:5b:53:40:d8: db:bf:c0:9f:ac:2f:d7:1f:79:78:57:d6:4d:d1:8f:5b:bc:72: 52:6a:92:27:0a:a4:b9:c7:85:1e:44:7d:02:12:0a:ae:e9:2a: 06:c1:0d:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0klqc0MfRS8SUN26coQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3 NTgwMDYwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EyhlY2FkZWYyMjE5ZGJkNzVhOTdiNDQyMjU3MjNkNjcyMDAxOGVkNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TMabEbp01yjr8IF5bSNBvNL8Grx lEnsfY82xB2u3uaLFXXmlEjS4RDElBZJCqoE3LIjeOIuCV8VwQ9zbH+rAi4bQrLb gDVvhuBqghcWbAYRNXBy04rtYXYGUVIgR4ZJy9/nwOwXaNAX06e8umGmPtX4BBTb ogFuXFeMHWonh8hdbaPlKwd0CYW36bNtXHlYXVfiRwLyPs4IWu8Db5K7GClZAXrH NHvKYUcp6v8sGMSHct6VaGTJb9M5xJ0Q9ym/E0tq+LIbd+eq8Q7RcK3GlrhD1M1F rw54+FfPSy0DxLoGeJT5Y/Mu+gqfhSMKXkwNsGEvJSytcmRcy/MX2q+ObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyt7yIZ29dal7RCJXI9ZyABjtT1MB8GA1UdIwQY MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4 LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaLEWkIN ARrj+j3HOaVVKGB+TQ1Uf/rDy64imqTX/CkSgyFKcOoD15LbcQqZg+EC6TtXWzBQ KX6ssqPGFlIiEcFEvLGd2uR21WR1W1ImbFStNfycMDsq920gJUgteVVkcnJF259x yj9ag7W2fm6aF0EoFSL9N6/T5IHxW5a+3bYGjC6Bn8o5L6KLcrzfCw8Qn1ctF8rr yz1GEGEhMnFaDf+UtORJK6X/MkEeb6tyvM9DRI7Lh/hbQUm/vt/rP2grjWDQq383 55JdE6Noik3CgPqdAW5bU0DY27/An6wv1x95eFfWTdGPW7xyUmqSJwqkuceFHkR9 AhIKrukqBsENMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:27 2025 by rpki-client