This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json) Hash identifier: xtbfpAMEZupgcx7kJJpsn/Mz/kaasFTupkPes9KJuSY= Subject key identifier: AE:4D:CD:8E:C2:92:2A:93:8A:34:57:5F:91:9A:00:56:C2:A6:D2:75 Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Certificate serial: 019AF12D006B6BF87B0F3B844CE49AC55D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: orEGLme7WQmUSOBFLLs95q4fL7lJRS5Rbiw38Q8ojjc=) 2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:00:6b:6b:f8:7b:0f:3b:84:4c:e4:9a:c5:5d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=ae4dcd8ec2922a938a34575f919a0056c2a6d275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:db:76:b6:ab:5a:96:13:18:56:1d:36:9a: 2e:37:e5:a6:5f:f1:e6:eb:96:7f:89:b9:4a:81:52: 87:9b:41:e2:f1:08:07:6d:36:bb:f3:b9:b5:31:e0: 22:d3:7c:0c:6d:55:b6:67:7f:88:fd:b6:28:e4:39: 3d:aa:a8:35:f5:d1:d2:92:11:37:cb:08:92:40:d3: 37:90:b3:3b:ea:f0:ae:d1:f8:65:da:14:b3:a8:a4: e6:3a:e6:d5:73:cb:a3:a5:71:67:e0:57:c6:05:f2: cb:e0:cc:fb:df:8c:5a:5e:6e:de:77:30:15:66:9e: 88:eb:88:cf:d1:3a:da:f1:e8:8f:45:d4:76:f8:7d: 2b:20:6b:0c:f9:e5:22:6d:0b:ff:d6:b5:14:51:0f: 17:39:6b:88:a5:c2:c2:3c:de:81:86:58:99:02:15: d6:1d:3f:19:00:bb:63:32:15:b4:65:64:2f:18:77: 29:29:ae:bb:11:52:08:c8:78:8c:b6:22:f6:7f:90: 83:a5:04:aa:d2:4a:e9:01:5a:87:00:68:6c:a8:9e: f3:77:f8:50:e1:cf:d8:9d:24:0c:a3:31:4e:be:bb: 53:8b:9d:03:55:27:5b:0a:6d:27:37:81:c6:f5:1d: 62:5f:08:2b:c4:1f:00:1a:8b:a1:f2:f2:2f:21:6a: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:CD:8E:C2:92:2A:93:8A:34:57:5F:91:9A:00:56:C2:A6:D2:75 X509v3 Authority Key Identifier: keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:85:0e:d9:5d:aa:35:d9:60:72:b0:70:70:17:e7:52:0f:58: 6b:82:e1:b7:85:5c:aa:f4:81:b1:b9:78:59:f7:35:f6:63:6a: 90:1c:9e:23:03:4c:f8:c8:f7:6f:6b:28:ae:b7:91:a9:47:f1: 4d:f6:95:1f:1f:65:15:5e:dd:0c:b6:ff:ef:ab:35:53:96:96: 59:96:98:23:1f:6e:9e:5d:b8:90:a3:89:c2:3a:8b:4e:ea:05: 27:6e:3b:9e:54:52:67:37:65:0d:26:16:3d:56:2c:ec:cd:24: 91:6f:1f:2e:3a:20:2b:d4:2f:a5:a4:90:f3:45:4e:56:f7:03: 54:b9:ea:07:03:2e:31:3b:1b:a5:50:7d:66:dc:ec:09:bb:4c: 64:64:5d:29:cf:ce:ed:4c:e6:fa:4b:06:3a:d4:d7:19:c1:a4: 37:8f:66:06:50:1f:f8:e8:40:2f:38:61:94:c6:2c:1e:a1:45: 09:29:39:45:ff:26:f4:6e:2c:d0:ba:d9:ca:fb:7f:b6:b5:8a: 4c:48:a9:63:2e:0c:77:fd:7d:b8:1a:c0:3c:dd:c3:b5:d7:e8: ca:63:60:ab:b6:84:ef:06:77:8f:21:c7:25:c9:d9:fe:9b:44: 26:41:77:7a:42:e0:b3:c4:bd:25:f5:8b:42:35:5c:22:2c:df: 16:56:14:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQBra/h7DzuETOSaxV19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3 NWNlMGQwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhhZTRkY2Q4ZWMyOTIyYTkzOGEzNDU3NWY5MTlhMDA1NmMyYTZkMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZvbdrarWpYTGFYdNpouN+WmX/Hm 65Z/iblKgVKHm0Hi8QgHbTa787m1MeAi03wMbVW2Z3+I/bYo5Dk9qqg19dHSkhE3 ywiSQNM3kLM76vCu0fhl2hSzqKTmOubVc8ujpXFn4FfGBfLL4Mz734xaXm7edzAV Zp6I64jP0Tra8eiPRdR2+H0rIGsM+eUibQv/1rUUUQ8XOWuIpcLCPN6BhliZAhXW HT8ZALtjMhW0ZWQvGHcpKa67EVIIyHiMtiL2f5CDpQSq0krpAVqHAGhsqJ7zd/hQ 4c/YnSQMozFOvrtTi50DVSdbCm0nN4HG9R1iXwgrxB8AGouh8vIvIWo2DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5NzY7CkiqTijRXX5GaAFbCptJ1MB8GA1UdIwQY MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoUO2V2q NdlgcrBwcBfnUg9Ya4Lht4VcqvSBsbl4Wfc19mNqkByeIwNM+Mj3b2sorreRqUfx TfaVHx9lFV7dDLb/76s1U5aWWZaYIx9unl24kKOJwjqLTuoFJ247nlRSZzdlDSYW PVYs7M0kkW8fLjogK9QvpaSQ80VOVvcDVLnqBwMuMTsbpVB9ZtzsCbtMZGRdKc/O 7Uzm+ksGOtTXGcGkN49mBlAf+OhALzhhlMYsHqFFCSk5Rf8m9G4s0LrZyvt/trWK TEipYy4Md/19uBrAPN3DtdfoymNgq7aE7wZ3jyHHJcnZ/ptEJkF3ekLgs8S9JfWL QjVcIizfFlYUrA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:42 2025 by rpki-client