This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json) Hash identifier: KRRVX/ZXuvZif6F0k44fWk05vVJYbp446n4ejrcTY5k= Subject key identifier: 02:04:F9:7A:DD:4C:AB:7A:90:5A:82:F8:AA:99:7F:09:B0:08:44:E2 Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Certificate serial: 019AF12E5045F2EB0FE2F61400674D3EB32A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=) 2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: PbZcbe2+7u1IWwsnYie8Ue7tEZcrS4zJe9pgHe6jn60=) 3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=) 4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:50:45:f2:eb:0f:e2:f6:14:00:67:4d:3e:b3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=0204f97add4cab7a905a82f8aa997f09b00844e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:e7:63:2f:4a:a2:20:5c:74:41:fc:01:48: bb:f9:57:ea:22:53:ad:ac:d9:7f:0c:a4:82:ee:c9: 60:45:f4:70:a4:86:31:62:f6:7f:6e:24:5f:9a:32: 45:7e:f3:4c:6e:ac:a6:9c:82:dd:6f:f3:c8:74:56: f2:22:6c:53:7d:33:fb:2f:74:67:81:5e:ad:29:07: 9f:8e:ec:1c:88:41:69:1e:b3:d7:56:6a:5d:c1:6e: 02:05:4e:0f:2e:8f:2c:c7:5b:3b:f1:a2:af:8c:94: 10:f3:94:a2:0e:03:db:53:c6:75:f6:26:fc:2f:be: 39:9d:01:ce:19:33:7f:30:ea:e9:81:8d:39:ec:7f: e4:4d:5b:bd:b6:15:20:82:e0:a8:43:b4:08:f8:10: f9:f4:79:1d:40:2f:81:c4:85:0b:7c:02:e4:f0:4f: cc:90:c5:03:e7:67:42:5d:13:de:22:cb:7f:63:c2: 76:75:8b:9f:c9:2a:00:11:5d:53:af:72:c4:5c:58: ea:7a:f3:62:87:e5:7e:7b:7e:b4:5e:60:a7:ff:53: de:56:00:8c:87:21:99:ff:b6:f3:4c:57:bc:e0:62: 4d:4d:64:23:e0:dc:7f:24:62:39:62:6f:1c:a4:ac: cd:ad:34:3d:30:68:7d:b6:15:1b:91:55:04:b5:36: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:F9:7A:DD:4C:AB:7A:90:5A:82:F8:AA:99:7F:09:B0:08:44:E2 X509v3 Authority Key Identifier: keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5b:f5:27:b8:96:48:02:d3:1a:86:e3:6f:98:4e:cf:81:f6: eb:3c:19:b1:41:e6:15:d6:9b:cd:cc:db:69:7e:ac:eb:e2:9b: c3:3e:8f:56:6b:2d:4c:aa:a6:1c:7e:9a:bc:d5:b9:c2:2a:17: 9a:d3:48:0f:dd:d1:a4:b8:20:b4:bb:ce:ab:e2:09:40:21:fd: 52:e8:d7:cb:d6:41:2c:75:ac:4a:13:5b:d1:29:56:83:f2:f5: 72:3b:5e:f1:9b:1a:82:fa:0f:87:30:ae:1c:69:a5:bb:7d:85: 75:af:f9:9d:d9:3b:6c:3f:d2:81:5a:04:f6:81:bd:4d:10:d7: ed:e9:85:37:70:f2:43:b5:2e:76:68:ad:1c:27:d3:fb:52:79: 2f:19:5e:18:70:08:b3:17:81:14:64:9e:4d:d4:d3:ef:c2:56: 58:76:5c:76:57:ef:90:01:07:23:d0:c8:04:2d:c6:34:7e:a0: a4:b6:13:51:85:82:61:ad:cc:6e:43:35:ae:f4:99:ff:96:85: 9b:bf:15:d8:cb:11:6b:af:af:03:52:fa:8f:ee:e5:f0:53:df: d7:fd:db:17:e0:dd:1e:98:5f:2d:1f:24:bb:ad:b3:75:88:c6: 17:b9:8e:d7:74:95:e0:86:79:a9:f4:be:79:33:ba:34:fa:93: dc:c6:39:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlBF8usP4vYUAGdNPrMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw ZGMzMjQwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygwMjA0Zjk3YWRkNGNhYjdhOTA1YTgyZjhhYTk5N2YwOWIwMDg0NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MnnYy9KoiBcdEH8AUi7+VfqIlOt rNl/DKSC7slgRfRwpIYxYvZ/biRfmjJFfvNMbqymnILdb/PIdFbyImxTfTP7L3Rn gV6tKQefjuwciEFpHrPXVmpdwW4CBU4PLo8sx1s78aKvjJQQ85SiDgPbU8Z19ib8 L745nQHOGTN/MOrpgY057H/kTVu9thUgguCoQ7QI+BD59HkdQC+BxIULfALk8E/M kMUD52dCXRPeIst/Y8J2dYufySoAEV1Tr3LEXFjqevNih+V+e360XmCn/1PeVgCM hyGZ/7bzTFe84GJNTWQj4Nx/JGI5Ym8cpKzNrTQ9MGh9thUbkVUEtTaFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIE+XrdTKt6kFqC+KqZfwmwCETiMB8GA1UdIwQY MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt ZjYyOTdhNzdhMzdiLzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlv1J7iW SALTGobjb5hOz4H26zwZsUHmFdabzczbaX6s6+Kbwz6PVmstTKqmHH6avNW5wioX mtNID93RpLggtLvOq+IJQCH9UujXy9ZBLHWsShNb0SlWg/L1cjte8ZsagvoPhzCu HGmlu32Fda/5ndk7bD/SgVoE9oG9TRDX7emFN3DyQ7UudmitHCfT+1J5LxleGHAI sxeBFGSeTdTT78JWWHZcdlfvkAEHI9DIBC3GNH6gpLYTUYWCYa3MbkM1rvSZ/5aF m78V2MsRa6+vA1L6j+7l8FPf1/3bF+DdHphfLR8ku62zdYjGF7mO13SV4IZ5qfS+ eTO6NPqT3MY5XA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:18 2025 by rpki-client