This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft File: _Bmp6bejYMnT_drVgPsSgllp7y0.mft (raw, json) Hash identifier: z8cUfGbeV4tqqYM0GGzu7gLWS3bVczjBKDt8iGNZ1zY= Subject key identifier: 5D:55:BF:54:6A:F0:EC:4C:E9:C6:18:F6:4E:2C:05:E6:93:D2:01:49 Authority key identifier: FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D Certificate issuer: /CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d Certificate serial: 019AF31D43994413100D7752958D88FA59FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft Manifest number: 83 Signing time: Sat 06 Dec 2025 10:02:52 +0000 Manifest this update: Sat 06 Dec 2025 10:02:52 +0000 Manifest next update: Sun 07 Dec 2025 10:02:52 +0000 Files and hashes: 1: _Bmp6bejYMnT_drVgPsSgllp7y0.crl (hash: Vl1cBd69EeN1Fpvc2x1bDJ4qiEP/V0v4QAZ2E2cw4mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:43:99:44:13:10:0d:77:52:95:8d:88:fa:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d Validity Not Before: Dec 6 10:02:52 2025 GMT Not After : Dec 7 10:02:52 2025 GMT Subject: CN=5d55bf546af0ec4ce9c618f64e2c05e693d20149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ee:af:91:f6:ab:9e:c8:6f:2a:cf:a9:7d:40: ab:dc:ac:47:7c:d7:c9:f8:4d:cf:f5:52:46:7e:a1: 79:74:46:d5:b4:e3:03:6d:a5:4a:2d:6f:c9:af:da: 75:9b:4a:80:df:8a:99:1f:e6:bc:48:b0:5f:b8:80: 46:a3:59:40:a1:46:18:79:cb:03:1a:0e:38:07:2c: 98:74:b1:22:44:38:c8:65:be:a5:2f:32:9c:54:e6: 63:61:05:92:aa:48:b8:9a:cb:db:65:4c:72:3b:76: fa:8a:16:4d:1d:14:3b:97:3e:e1:f4:77:d9:d6:e8: 11:ae:e6:a7:3c:0e:f5:9b:e7:25:99:ac:37:f6:d1: 91:ad:9e:aa:f1:91:a1:8a:10:c2:0e:e3:df:3a:03: b9:25:b2:0d:2c:c8:77:29:89:2d:16:30:7f:c6:8f: 4a:2c:66:11:c2:91:84:81:61:05:99:1a:d3:e6:a0: f8:0e:00:1a:c5:eb:31:c3:69:39:4c:d0:8b:86:4b: 2a:90:44:79:cb:0d:af:71:b2:37:44:06:ff:40:eb: b5:08:4c:cf:45:1c:e5:ed:b6:6f:9b:b1:ce:a1:58: 84:8f:ac:9e:d4:e4:2d:92:cb:48:0d:f2:5f:42:17: 42:ef:a2:5f:81:18:ff:f7:03:ad:dc:a7:af:50:62: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:55:BF:54:6A:F0:EC:4C:E9:C6:18:F6:4E:2C:05:E6:93:D2:01:49 X509v3 Authority Key Identifier: keyid:FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:2d:f3:51:55:e6:46:aa:05:1c:b2:6f:3c:e0:81:7e:1b: 8b:e7:da:4f:ea:1f:03:2d:bd:7a:fd:76:96:de:e3:55:8e:c1: aa:4c:c5:20:eb:ed:d0:71:84:b8:fe:98:17:85:00:e3:b3:8c: 09:a4:ce:96:e7:86:74:f6:d5:11:ff:f3:8c:da:62:3c:58:56: 30:d5:36:29:4c:32:4d:e2:f9:56:8d:f9:f7:16:a1:9c:5b:50: 45:1b:32:03:6a:b7:1a:d2:04:1b:e8:3d:60:42:53:64:e9:f3: 9e:db:dc:ad:27:67:57:fc:64:02:bb:ad:96:78:cd:b6:7c:c4: fa:ed:98:cb:f6:5a:d7:a3:2f:14:7b:69:56:46:ab:3b:9d:76: 08:fc:bc:b4:51:3e:fb:ca:85:7f:9f:8a:c3:72:b9:29:e3:86: 61:27:30:4a:fe:0f:ed:a7:b4:55:9f:f2:a4:95:02:3d:c6:31: 7c:99:bc:e4:03:88:48:2b:28:12:b7:81:32:ae:81:a7:2e:92: e7:d9:2c:a4:f5:02:32:97:47:cb:39:6d:ac:87:be:f5:ca:c9: 90:7b:f9:cc:85:3a:ba:cf:62:14:f3:35:e3:15:1a:18:12:41: ae:5d:6c:bd:c2:ab:4c:4e:48:f8:df:7b:a4:f3:10:65:38:24: 93:26:a3:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUOZRBMQDXdSlY2I+ln9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTlhOWU5YjdhMzYwYzlkM2ZkZGFkNTgwZmIxMjgyNTk2 OWVmMmQwHhcNMjUxMjA2MTAwMjUyWhcNMjUxMjA3MTAwMjUyWjAzMTEwLwYDVQQD Eyg1ZDU1YmY1NDZhZjBlYzRjZTljNjE4ZjY0ZTJjMDVlNjkzZDIwMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe6vkfarnshvKs+pfUCr3KxHfNfJ +E3P9VJGfqF5dEbVtOMDbaVKLW/Jr9p1m0qA34qZH+a8SLBfuIBGo1lAoUYYecsD Gg44ByyYdLEiRDjIZb6lLzKcVOZjYQWSqki4msvbZUxyO3b6ihZNHRQ7lz7h9HfZ 1ugRruanPA71m+clmaw39tGRrZ6q8ZGhihDCDuPfOgO5JbINLMh3KYktFjB/xo9K LGYRwpGEgWEFmRrT5qD4DgAaxesxw2k5TNCLhksqkER5yw2vcbI3RAb/QOu1CEzP RRzl7bZvm7HOoViEj6ye1OQtkstIDfJfQhdC76JfgRj/9wOt3KevUGK2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1Vv1Rq8OxM6cYY9k4sBeaT0gFJMB8GA1UdIwQY MBaAFPwZqem3o2DJ0/3a1YD7EoJZae8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JtcDZiZWpZTW5UX2RyVmdQc1NnbGxwN3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjkwMWItMjM2My00MDgwLWEwYTAt MmIxNWUzNzBmYmFlLzEvX0JtcDZiZWpZTW5UX2RyVmdQc1NnbGxwN3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83YjkwMWItMjM2My00MDgwLWEwYTAtMmIxNWUzNzBmYmFl LzEvX0JtcDZiZWpZTW5UX2RyVmdQc1NnbGxwN3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB8t81FV 5kaqBRyybzzggX4bi+faT+ofAy29ev12lt7jVY7BqkzFIOvt0HGEuP6YF4UA47OM CaTOlueGdPbVEf/zjNpiPFhWMNU2KUwyTeL5Vo359xahnFtQRRsyA2q3GtIEG+g9 YEJTZOnzntvcrSdnV/xkArutlnjNtnzE+u2Yy/Za16MvFHtpVkarO512CPy8tFE+ +8qFf5+Kw3K5KeOGYScwSv4P7ae0VZ/ypJUCPcYxfJm85AOISCsoEreBMq6Bpy6S 59kspPUCMpdHyzltrIe+9crJkHv5zIU6us9iFPM14xUaGBJBrl1svcKrTE5I+N97 pPMQZTgkkyajBw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:47:54 2025 by rpki-client