This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json) Hash identifier: UMldFmeHdjaOP3cC8VFvVFyD4zJOBwYhP57suTbRwJc= Subject key identifier: CD:F0:91:CD:30:11:95:FE:3C:E6:81:03:CF:81:50:4A:6B:D8:9C:A5 Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973 Certificate serial: 019AF12CEFC41741E4463E4E9CFB067BB612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft Manifest number: 12CE Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=) 2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: Ketrqu/UQAHpzOhRzlea6MDgm4liQUfNNCMaNx+P3uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ef:c4:17:41:e4:46:3e:4e:9c:fb:06:7b:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=cdf091cd301195fe3ce68103cf81504a6bd89ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:7d:fc:c9:35:67:b7:5c:e3:31:f5:b0:c3: 30:c1:47:ba:a8:6d:1f:ad:81:17:21:dd:12:22:27: 9f:82:8a:b3:8f:4d:2b:16:aa:57:fb:0c:0f:e8:96: b4:e9:28:2f:df:f5:21:cd:f4:3c:0f:2f:8d:ba:8a: f6:ff:3e:50:8b:ae:cf:01:83:7b:9d:bc:3c:21:98: ef:db:1c:1e:55:81:e9:3e:28:7b:ad:92:12:c2:14: 70:67:6b:b0:78:6a:ab:69:ba:f5:d8:02:9f:ea:46: 16:8a:ca:3d:9a:c8:45:8f:c6:4e:d7:8d:ee:a1:f1: 90:3a:71:30:6b:e3:fe:46:58:49:89:41:a6:ef:97: 8b:9a:60:11:d0:36:e9:03:4f:11:06:a9:2e:9a:45: 7d:f4:54:ca:2d:35:b4:3b:76:4b:d5:01:f2:0b:bc: 22:9a:93:49:3b:6e:c6:60:10:5d:06:df:70:5a:d6: b5:f6:80:ce:9e:aa:c1:ce:9a:f1:b1:76:f7:6d:a7: 6b:dd:22:74:de:8f:ed:d4:b7:30:ba:91:f7:ad:88: bb:53:15:e7:54:8a:b2:89:ed:46:a1:5c:dd:03:b0: d2:6a:9f:98:38:a5:41:70:25:9a:08:75:56:9a:f4: 71:16:d4:26:70:d9:e8:3a:fe:0b:72:c0:b4:24:c9: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:91:CD:30:11:95:FE:3C:E6:81:03:CF:81:50:4A:6B:D8:9C:A5 X509v3 Authority Key Identifier: keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:fd:1d:1e:04:f1:aa:31:16:80:a1:72:8b:6f:c3:27:75:9f: 24:21:09:a1:91:0b:45:00:80:82:97:34:9d:2c:1f:e1:d0:56: 83:e5:e4:29:7c:1a:8c:76:fa:1e:0a:22:90:bd:8e:bb:69:4c: 2e:eb:f0:b9:9d:8e:82:e7:3b:86:88:62:55:67:c5:76:3d:15: 7b:2e:99:8f:ee:07:da:e2:2c:fe:a1:0d:8d:0f:15:28:49:03: 05:41:28:1b:d8:49:05:05:88:31:67:56:b6:87:7f:38:51:dd: 6c:be:f5:0a:f8:1a:6c:96:69:f9:c0:ee:a2:c3:c6:bd:ca:3e: 55:a9:d9:0f:17:f3:8c:db:9e:4a:57:e9:a1:fe:2f:e4:67:8b: 2f:dd:53:d5:a4:ab:50:6e:fe:3c:ab:07:94:9d:3c:9d:bd:57: 25:04:cc:bb:6b:c8:fe:53:f8:1a:9d:d6:bb:06:a0:84:39:1b: 20:07:2d:f9:71:7d:d8:94:f6:90:38:f3:0f:69:c1:e2:a1:0c: fe:07:5f:41:eb:a1:a6:e2:fc:87:7d:7a:81:51:8c:b6:ec:30: c7:75:a5:e2:b0:d0:5d:2e:5d:b7:8d:62:b4:59:c2:f0:c6:16: ae:16:3c:7f:a9:0d:63:20:27:f3:05:f8:ba:a3:55:ee:5a:f9: 1f:c1:93:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO/EF0HkRj5OnPsGe7YSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2 MmQ5NzMwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhjZGYwOTFjZDMwMTE5NWZlM2NlNjgxMDNjZjgxNTA0YTZiZDg5Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZ9/Mk1Z7dc4zH1sMMwwUe6qG0f rYEXId0SIiefgoqzj00rFqpX+wwP6Ja06Sgv3/UhzfQ8Dy+Nuor2/z5Qi67PAYN7 nbw8IZjv2xweVYHpPih7rZISwhRwZ2uweGqrabr12AKf6kYWiso9mshFj8ZO143u ofGQOnEwa+P+RlhJiUGm75eLmmAR0DbpA08RBqkumkV99FTKLTW0O3ZL1QHyC7wi mpNJO27GYBBdBt9wWta19oDOnqrBzprxsXb3badr3SJ03o/t1LcwupH3rYi7UxXn VIqyie1GoVzdA7DSap+YOKVBcCWaCHVWmvRxFtQmcNnoOv4LcsC0JMlkqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3wkc0wEZX+POaBA8+BUEpr2JylMB8GA1UdIwQY MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2 LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf0dHgTx qjEWgKFyi2/DJ3WfJCEJoZELRQCAgpc0nSwf4dBWg+XkKXwajHb6HgoikL2Ou2lM LuvwuZ2Oguc7hohiVWfFdj0Vey6Zj+4H2uIs/qENjQ8VKEkDBUEoG9hJBQWIMWdW tod/OFHdbL71CvgabJZp+cDuosPGvco+VanZDxfzjNueSlfpof4v5GeLL91T1aSr UG7+PKsHlJ08nb1XJQTMu2vI/lP4Gp3WuwaghDkbIAct+XF92JT2kDjzD2nB4qEM /gdfQeuhpuL8h316gVGMtuwwx3Wl4rDQXS5dt41itFnC8MYWrhY8f6kNYyAn8wX4 uqNV7lr5H8GTiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:25 2025 by rpki-client