This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json) Hash identifier: ccpBOv08ZByIGgtAo41bw/owsI5aq4PH9tgBi0Wk0KU= Subject key identifier: 43:C3:19:F2:D3:94:A3:0F:17:5D:A3:25:6F:74:94:ED:48:8B:F6:7D Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee Certificate serial: 019AF12F321E53BD30E1EDCB4982C45FDAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:13 +0000 Manifest this update: Sat 06 Dec 2025 01:03:13 +0000 Manifest next update: Sun 07 Dec 2025 01:03:13 +0000 Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=) 2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: vs1KbUoMBDLor+/nGifRmpXHSfBxsMsdkK8X8JPgsXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:32:1e:53:bd:30:e1:ed:cb:49:82:c4:5f:da:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee Validity Not Before: Dec 6 01:03:13 2025 GMT Not After : Dec 7 01:03:13 2025 GMT Subject: CN=43c319f2d394a30f175da3256f7494ed488bf67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:3b:26:0e:ed:68:97:61:24:94:81:c6:86: 76:ca:57:3d:8a:f3:e0:a7:d9:a6:f9:c5:19:d9:49: ee:26:32:55:d9:f2:fe:de:b8:f0:5c:fe:f4:d6:43: d0:2f:1d:a0:23:e3:eb:73:de:92:a1:54:15:51:08: ae:31:a2:64:2e:0b:84:11:6b:25:85:b0:b0:c6:c6: d4:a9:7c:13:03:58:93:63:e4:f5:c7:0b:5c:97:69: e8:ea:c9:ba:a2:b0:1d:ba:28:9e:08:34:b6:42:5f: 12:4e:15:82:fc:98:59:ea:74:d3:68:67:ee:3a:12: 9c:3e:0e:47:64:93:68:43:70:ef:23:47:28:34:e3: 14:1c:f3:83:a8:93:d5:2d:0c:65:a0:51:65:ed:4c: 75:7d:63:18:4e:ec:56:1e:ec:b8:01:a3:01:96:9d: 2b:3f:36:8a:59:02:f9:8e:c0:a9:b4:8e:62:2a:bd: 9d:55:77:8d:68:ee:ff:5d:2f:1e:8e:d9:b8:94:ef: 01:d0:a0:1e:64:69:b7:21:0a:a1:b8:35:c4:91:0b: 80:4e:b9:d5:f5:9d:6f:47:c8:f8:1c:bc:66:2a:9f: e3:1e:82:96:61:b6:7f:53:bd:ca:df:b2:c8:69:c9: 5e:5b:45:60:a2:e4:76:d9:0f:49:98:1f:b7:1f:32: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C3:19:F2:D3:94:A3:0F:17:5D:A3:25:6F:74:94:ED:48:8B:F6:7D X509v3 Authority Key Identifier: keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:cf:91:91:c2:c5:2d:ce:c1:61:7e:05:b1:1b:e3:d0:82: 93:e7:94:a2:f4:5a:9c:ad:fe:e5:58:85:cb:02:28:a9:23:aa: bd:0b:04:4c:1c:c7:1c:c8:75:3a:aa:cd:78:fe:85:0d:80:a0: f5:b2:48:ec:de:33:19:f5:f5:d8:8d:9c:b1:c9:55:9e:fd:03: a5:53:3b:b5:62:37:a2:fa:8e:ed:55:d2:02:27:65:a5:02:59: bd:9b:9f:fb:1a:8f:78:f9:ca:4e:59:7f:97:ac:81:a9:b1:4b: fc:47:5c:24:f5:b2:27:d6:44:c4:9d:7b:17:d8:23:88:dd:62: 49:39:27:59:4a:fa:f3:fd:93:11:e7:3a:7a:bc:6c:66:ec:2d: cf:1b:b2:14:2a:e6:8c:45:a9:11:ba:a3:d8:12:64:b6:1c:0f: 1a:45:77:a7:8b:e0:14:4e:44:d6:63:58:b4:68:24:0a:60:1a: 2c:63:ae:08:52:57:2d:c1:57:8b:9e:84:90:b0:a2:49:4e:29: 17:6b:cf:38:f5:be:30:53:c7:c2:eb:f7:93:c6:9f:d2:7f:b3: 99:b0:ef:be:48:68:e6:2b:49:5b:ac:16:06:32:24:e9:86:c0: 38:09:43:3d:5a:9c:bb:15:7f:5a:81:df:e6:52:33:45:7f:8e: 8f:f6:14:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzIeU70w4e3LSYLEX9rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMWQ3NmU4ODJiZjQxMDQ5YjVhZDkzZDI1YTFkZGNiYTE5 MjI3ZWUwHhcNMjUxMjA2MDEwMzEzWhcNMjUxMjA3MDEwMzEzWjAzMTEwLwYDVQQD Eyg0M2MzMTlmMmQzOTRhMzBmMTc1ZGEzMjU2Zjc0OTRlZDQ4OGJmNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2og7Jg7taJdhJJSBxoZ2ylc9ivPg p9mm+cUZ2UnuJjJV2fL+3rjwXP701kPQLx2gI+Prc96SoVQVUQiuMaJkLguEEWsl hbCwxsbUqXwTA1iTY+T1xwtcl2no6sm6orAduiieCDS2Ql8SThWC/JhZ6nTTaGfu OhKcPg5HZJNoQ3DvI0coNOMUHPODqJPVLQxloFFl7Ux1fWMYTuxWHuy4AaMBlp0r PzaKWQL5jsCptI5iKr2dVXeNaO7/XS8ejtm4lO8B0KAeZGm3IQqhuDXEkQuATrnV 9Z1vR8j4HLxmKp/jHoKWYbZ/U73K37LIacleW0VgouR22Q9JmB+3HzLXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPDGfLTlKMPF12jJW90lO1Ii/Z9MB8GA1UdIwQY MBaAFG8dduiCv0EEm1rZPSWh3cuhkifuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5Nzkt YjE4ZjVmNjI2MmFlLzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5NzktYjE4ZjVmNjI2MmFl LzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptfPkZHC xS3OwWF+BbEb49CCk+eUovRanK3+5ViFywIoqSOqvQsETBzHHMh1OqrNeP6FDYCg 9bJI7N4zGfX12I2csclVnv0DpVM7tWI3ovqO7VXSAidlpQJZvZuf+xqPePnKTll/ l6yBqbFL/EdcJPWyJ9ZExJ17F9gjiN1iSTknWUr68/2TEec6erxsZuwtzxuyFCrm jEWpEbqj2BJkthwPGkV3p4vgFE5E1mNYtGgkCmAaLGOuCFJXLcFXi56EkLCiSU4p F2vPOPW+MFPHwuv3k8af0n+zmbDvvkho5itJW6wWBjIk6YbAOAlDPVqcuxV/WoHf 5lIzRX+Oj/YUDA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:43 2025 by rpki-client