This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json) Hash identifier: G+lw+pYQLa84JE5NyRCk6IAeLd6BMY2tcc4b+C5DW8U= Subject key identifier: 22:67:2A:1E:CB:FD:A3:1B:52:61:C5:23:76:86:AF:63:45:11:BA:AA Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc Certificate serial: 019AF20953D693E8F221618C3FA29EB562B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft Manifest number: 14AD Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=) 2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: 0QTiTXsrZ3yNvzMhM/8C4Vwgmuo/DyZ9wpVJqXMnQYc=) 3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=) 4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:53:d6:93:e8:f2:21:61:8c:3f:a2:9e:b5:62:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=22672a1ecbfda31b5261c5237686af634511baaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:0d:76:cf:50:5b:63:47:98:95:41:b9:5b: dd:07:26:4d:42:7d:2c:f0:a8:d8:25:a0:fb:e5:64: 45:65:8b:2c:db:28:8f:57:4e:39:a6:a0:66:eb:cf: fd:1e:9b:87:6f:f4:0b:cf:99:4e:77:d0:61:a3:0d: f0:2a:26:c1:fb:ea:71:44:34:5e:bc:1b:5d:be:33: 3a:6d:ea:ac:3a:70:d5:58:4f:77:7f:41:26:32:4b: 76:dc:25:23:07:5b:de:c2:4f:1c:ea:2c:b6:84:a0: 57:f3:5d:78:df:de:82:24:c0:39:b2:f6:dc:c1:e1: 20:f6:2d:71:57:0c:37:6e:85:cd:bf:9b:d2:91:f1: bb:88:1e:ff:c4:f3:35:e0:5d:0e:93:ba:aa:e4:31: da:d0:2c:69:79:30:26:a4:fe:eb:c7:02:b9:b7:f9: 81:07:3f:5e:80:81:22:14:89:ac:c5:52:94:d1:ad: 97:85:12:2e:4b:b8:91:12:95:d0:c2:09:ae:77:74: 2c:f3:a9:71:54:83:c7:bd:2f:cb:13:e4:de:21:8c: 38:ee:f1:b5:ef:b8:38:32:c4:06:76:0d:6f:9c:bc: 8d:65:a2:c3:bd:c6:50:df:a0:ae:78:ae:63:32:d9: 5e:b4:67:7a:8c:f2:d0:e5:18:3c:98:bf:3e:75:d3: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:67:2A:1E:CB:FD:A3:1B:52:61:C5:23:76:86:AF:63:45:11:BA:AA X509v3 Authority Key Identifier: keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d2:0d:39:6c:13:05:84:38:fa:0b:9c:1f:76:fe:88:56:14: 42:5a:01:09:5f:e6:2b:9c:52:d4:87:24:aa:5e:67:f6:6b:d2: 3c:0b:8e:1e:6e:d0:86:81:92:28:39:3d:d2:96:b5:0d:ab:ef: a9:c2:b1:8f:8b:ec:26:00:2d:94:10:0e:1c:fc:eb:c3:09:d9: 43:76:cc:f5:ee:72:7f:3a:31:45:92:31:0c:67:6e:8b:4d:5a: 65:42:f7:fd:62:b3:ad:8e:1e:d4:a0:b8:2d:c7:87:d7:2b:89: bc:36:f7:43:68:6f:3f:02:f5:32:30:b0:6d:fa:11:83:3c:8f: 67:9b:b9:8e:81:86:e8:3b:85:62:0f:fb:d9:c0:57:d6:ea:b8: 13:46:de:4f:f6:a0:e4:c0:15:cf:08:d3:9b:16:3b:a4:0d:4d: eb:aa:05:88:10:be:75:70:ba:3b:37:e0:03:88:73:14:5c:bf: bf:11:82:f2:ef:1f:08:f4:50:15:e6:74:88:4f:f7:fc:59:ea: e7:9d:9f:56:56:56:c7:8f:c3:eb:d8:48:8b:4d:8f:58:c2:f4: f3:b5:d9:7a:91:7f:b3:5f:dd:b8:da:3e:34:08:bd:89:f7:28: d2:24:94:90:49:e0:b1:1a:c2:1b:87:a7:e2:04:0c:c0:13:64: 79:99:af:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVPWk+jyIWGMP6KetWKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3 OGI0ZmMwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EygyMjY3MmExZWNiZmRhMzFiNTI2MWM1MjM3Njg2YWY2MzQ1MTFiYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxcNds9QW2NHmJVBuVvdByZNQn0s 8KjYJaD75WRFZYss2yiPV045pqBm68/9HpuHb/QLz5lOd9Bhow3wKibB++pxRDRe vBtdvjM6beqsOnDVWE93f0EmMkt23CUjB1vewk8c6iy2hKBX8114396CJMA5svbc weEg9i1xVww3boXNv5vSkfG7iB7/xPM14F0Ok7qq5DHa0CxpeTAmpP7rxwK5t/mB Bz9egIEiFImsxVKU0a2XhRIuS7iREpXQwgmud3Qs86lxVIPHvS/LE+TeIYw47vG1 77g4MsQGdg1vnLyNZaLDvcZQ36CueK5jMtletGd6jPLQ5Rg8mL8+ddOrrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJnKh7L/aMbUmHFI3aGr2NFEbqqMB8GA1UdIwQY MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt OTQ2ODkyZjg4YmViLzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9INOWwT BYQ4+gucH3b+iFYUQloBCV/mK5xS1Ickql5n9mvSPAuOHm7QhoGSKDk90pa1Davv qcKxj4vsJgAtlBAOHPzrwwnZQ3bM9e5yfzoxRZIxDGdui01aZUL3/WKzrY4e1KC4 LceH1yuJvDb3Q2hvPwL1MjCwbfoRgzyPZ5u5joGG6DuFYg/72cBX1uq4E0beT/ag 5MAVzwjTmxY7pA1N66oFiBC+dXC6OzfgA4hzFFy/vxGC8u8fCPRQFeZ0iE/3/Fnq 552fVlZWx4/D69hIi02PWML087XZepF/s1/duNo+NAi9ifco0iSUkEngsRrCG4en 4gQMwBNkeZmvBA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:50 2025 by rpki-client