This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft File: bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json) Hash identifier: lGOL4FHNkRz31yqkRi4RzOGsAHEHYCCzpBjGsSQQopI= Subject key identifier: 6A:33:1E:46:0E:D8:21:1B:D7:AE:BD:61:33:7B:F7:64:4F:9E:4B:9F Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26 Certificate issuer: /CN=6d62c36d8742869f97555b7c98394f9f65c8e826 Certificate serial: 019AF12DFE34D3F7C4631E9AD8B814108878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: ciIPBf/GHe5DLhtxNTp24/kc/YJnITPhKCIiz1Z7yQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fe:34:d3:f7:c4:63:1e:9a:d8:b8:14:10:88:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826 Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=6a331e460ed8211bd7aebd61337bf7644f9e4b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:62:16:b9:bc:dd:4b:30:37:a1:95:c1:06: 83:b1:5d:7e:22:d9:de:bf:3f:d4:51:c6:29:e3:89: 12:8c:d1:fd:cd:35:7a:62:9d:f0:59:f3:32:b4:79: b3:39:00:28:97:7f:e2:ea:54:1b:27:bb:44:62:75: 41:9b:e1:0b:1a:e9:d0:62:c2:93:a8:39:0e:13:a5: dd:28:5a:9d:b1:19:3f:2f:db:89:d4:7e:6d:e3:1a: 45:d8:cb:22:7f:99:78:64:6d:46:4f:af:44:58:86: 44:d0:72:2b:7b:54:71:c1:fb:d2:b9:a7:0d:82:3d: 3f:a2:0b:ee:94:8d:f3:6a:86:8f:63:85:44:e1:ed: 5e:23:5d:40:32:ac:8a:84:bc:50:b6:dc:98:6b:33: b9:26:d3:c8:36:57:bf:64:58:af:da:b9:fc:cf:6c: 88:81:ba:67:bd:d3:e3:79:a4:3b:29:25:fc:d3:ed: b4:89:94:b2:19:7a:89:9e:9e:c4:0e:82:72:a2:21: 3a:d1:6d:9b:bb:6f:3d:d1:e6:f2:1a:59:c3:e7:d6: 29:90:1c:4b:6d:31:78:1c:69:6e:1c:93:d7:09:99: 02:c5:91:0c:6a:e7:e3:43:f1:10:33:0c:c6:0a:44: 76:28:ad:70:94:d1:9b:ff:a9:58:14:b1:07:a5:77: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:1E:46:0E:D8:21:1B:D7:AE:BD:61:33:7B:F7:64:4F:9E:4B:9F X509v3 Authority Key Identifier: keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:49:1d:dd:2a:b0:f6:c2:49:e4:24:3f:19:5e:e1:1f:ec:c7: 48:0d:54:3e:4a:b2:28:37:b1:ff:39:02:c0:da:76:40:86:19: f9:02:b2:3b:66:65:0e:73:47:55:82:4a:9d:c6:dc:e5:a5:f1: a6:63:cb:aa:fd:d4:34:43:ae:67:9f:74:68:f1:9b:54:78:ec: d1:a0:ae:83:cc:5b:9b:49:dc:35:19:90:52:cb:ba:bd:dd:21: 81:3c:e1:f8:1c:9d:3a:c4:bc:e1:91:14:5a:fc:fe:52:a4:67: 14:ef:dd:99:92:f0:ff:49:58:2f:7e:ea:83:3e:10:2d:e3:4e: bf:b1:10:1a:1a:40:7e:af:af:8d:f8:31:55:de:6f:85:8c:af: d0:41:75:34:99:c7:05:c2:de:a0:fb:46:f7:00:46:e6:14:61: bd:2b:21:2f:ba:bf:9d:ee:f3:ea:21:ff:f5:3f:12:53:e0:02: 8b:90:74:eb:7f:fe:97:0d:fa:9d:6e:d2:cf:2a:62:71:b2:d2: d0:e9:3e:3b:b5:dd:31:5b:e4:5e:fd:28:ba:4e:ae:a7:fa:1f: 59:9c:7a:94:5b:cc:03:26:34:47:35:54:53:a5:d4:e4:15:b1: 2c:49:8f:62:1e:3c:88:a8:29:ec:f8:a3:f5:0d:ea:d7:a6:b2: 7e:c3:ff:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf400/fEYx6a2LgUEIh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjJjMzZkODc0Mjg2OWY5NzU1NWI3Yzk4Mzk0ZjlmNjVj OGU4MjYwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD Eyg2YTMzMWU0NjBlZDgyMTFiZDdhZWJkNjEzMzdiZjc2NDRmOWU0YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eZiFrm83UswN6GVwQaDsV1+Itne vz/UUcYp44kSjNH9zTV6Yp3wWfMytHmzOQAol3/i6lQbJ7tEYnVBm+ELGunQYsKT qDkOE6XdKFqdsRk/L9uJ1H5t4xpF2Msif5l4ZG1GT69EWIZE0HIre1RxwfvSuacN gj0/ogvulI3zaoaPY4VE4e1eI11AMqyKhLxQttyYazO5JtPINle/ZFiv2rn8z2yI gbpnvdPjeaQ7KSX80+20iZSyGXqJnp7EDoJyoiE60W2bu2890ebyGlnD59YpkBxL bTF4HGluHJPXCZkCxZEMaufjQ/EQMwzGCkR2KK1wlNGb/6lYFLEHpXfODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGozHkYO2CEb1669YTN792RPnkufMB8GA1UdIwQY MBaAFG1iw22HQoafl1VbfJg5T59lyOgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2Yt M2E1ODU4ODZhZTRjLzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2YtM2E1ODU4ODZhZTRj LzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0kd3Sqw 9sJJ5CQ/GV7hH+zHSA1UPkqyKDex/zkCwNp2QIYZ+QKyO2ZlDnNHVYJKncbc5aXx pmPLqv3UNEOuZ590aPGbVHjs0aCug8xbm0ncNRmQUsu6vd0hgTzh+BydOsS84ZEU Wvz+UqRnFO/dmZLw/0lYL37qgz4QLeNOv7EQGhpAfq+vjfgxVd5vhYyv0EF1NJnH BcLeoPtG9wBG5hRhvSshL7q/ne7z6iH/9T8SU+ACi5B063/+lw36nW7SzypicbLS 0Ok+O7XdMVvkXv0ouk6up/ofWZx6lFvMAyY0RzVUU6XU5BWxLEmPYh48iKgp7Pij 9Q3q16ayfsP/iA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:16 2025 by rpki-client