This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json) Hash identifier: ncXCaxhoe8SITM79YAOU3+Y11zEZfVjVzAsINFKVWLY= Subject key identifier: 4B:84:A0:C5:0D:94:08:B6:D6:AB:89:D6:AB:4A:50:09:DF:4C:9E:FF Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Certificate serial: 019AF23FE2C0D7C540648DD0301AEFD8C3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft Manifest number: 0B9E Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: SXN+HxkIt1XuBfk2LmtifqbRwnpErnSWNbjocmhetew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:c0:d7:c5:40:64:8d:d0:30:1a:ef:d8:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=4b84a0c50d9408b6d6ab89d6ab4a5009df4c9eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:2d:36:f9:00:e9:35:78:eb:87:d0:8b:ad: aa:eb:d8:93:6b:44:bd:67:b3:8e:27:93:ed:f5:be: 0c:8e:85:af:81:c9:ec:f3:70:d9:8d:a0:e3:af:1c: 86:a9:1e:a0:43:41:f9:1f:fb:fb:a9:9e:a1:f9:eb: 8c:26:3e:fb:34:a0:96:51:b5:85:11:b6:c3:7d:ae: ce:09:7b:7d:40:eb:cf:9a:72:d7:f1:57:e1:4f:1d: 31:7b:9f:b6:ad:19:69:e3:12:63:5f:1a:ef:03:f9: 64:b5:3a:d9:b0:4f:f5:54:41:7a:c1:9b:80:ec:23: 7e:c1:9e:e7:cf:50:ee:04:a4:40:d2:07:d6:8a:f3: a4:59:e9:26:06:64:e8:fb:2d:1b:7c:51:5c:b9:70: bc:6d:9e:e7:a4:83:2c:dd:8c:a7:65:fb:3b:73:98: 74:a2:02:01:75:50:40:29:0a:ae:fd:98:83:7d:da: 51:7f:f6:25:45:a7:53:3d:fe:cf:b7:10:4a:95:e0: b9:a3:39:06:23:29:f0:3a:f8:36:30:28:a8:19:9f: d6:fb:04:ce:9c:f9:8e:06:89:8f:23:c1:25:0a:89: f0:55:a8:f8:83:d9:4a:e8:03:4f:b1:39:f9:bd:24: 4c:61:cb:c5:94:d0:8f:63:9a:e2:8d:4b:23:46:25: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:84:A0:C5:0D:94:08:B6:D6:AB:89:D6:AB:4A:50:09:DF:4C:9E:FF X509v3 Authority Key Identifier: keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e1:6c:89:44:57:b0:fc:fa:ef:02:90:ca:80:da:03:ee:5b: e4:53:92:28:7e:d4:49:60:2f:03:2f:ed:4c:26:2a:92:85:14: ad:64:47:d0:86:a8:95:09:df:52:42:82:43:58:00:e6:aa:f0: a2:d4:45:7d:29:f9:44:b7:04:57:bf:95:aa:b3:1d:48:8c:1b: 07:24:ed:99:3c:76:b9:75:01:f6:18:97:b9:a0:7a:d1:d3:3f: 40:93:f5:ec:f2:07:23:1c:80:46:19:7a:9e:bb:70:7a:92:d0: f3:56:75:94:9f:22:92:60:e6:9f:6b:65:61:2c:64:9a:d3:76: 8a:5f:2f:89:f8:97:93:b8:23:2f:f9:6a:1a:03:b5:2c:79:22: c6:44:dd:8b:9c:f3:bd:70:de:55:4e:44:56:a5:81:64:7d:88: 12:72:3f:19:8e:4b:27:c5:5f:7f:16:4c:11:97:3a:82:1a:c4: 18:10:0e:7b:b8:70:a2:30:f9:77:da:5c:39:91:98:8f:40:14: 62:f4:8a:4d:e5:05:7d:3c:04:71:5e:9a:04:3d:f9:66:fa:75: b9:79:95:2e:c2:4e:2a:f1:d0:2e:f0:72:f8:ae:50:bf:fa:28: d5:3e:ee:65:5f:f3:ed:f3:35:42:93:d0:95:d2:cd:2b:1a:90: 36:71:e8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+LA18VAZI3QMBrv2MO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYTBlZTlmZjA5YzdjZmM3ZWU5NzYxZjFhM2M4ZjMwZWZh YzU4NDgwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg0Yjg0YTBjNTBkOTQwOGI2ZDZhYjg5ZDZhYjRhNTAwOWRmNGM5ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAAtNvkA6TV464fQi62q69iTa0S9 Z7OOJ5Pt9b4MjoWvgcns83DZjaDjrxyGqR6gQ0H5H/v7qZ6h+euMJj77NKCWUbWF EbbDfa7OCXt9QOvPmnLX8VfhTx0xe5+2rRlp4xJjXxrvA/lktTrZsE/1VEF6wZuA 7CN+wZ7nz1DuBKRA0gfWivOkWekmBmTo+y0bfFFcuXC8bZ7npIMs3YynZfs7c5h0 ogIBdVBAKQqu/ZiDfdpRf/YlRadTPf7PtxBKleC5ozkGIynwOvg2MCioGZ/W+wTO nPmOBomPI8ElConwVaj4g9lK6ANPsTn5vSRMYcvFlNCPY5rijUsjRiUOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuEoMUNlAi21quJ1qtKUAnfTJ7/MB8GA1UdIwQY MBaAFG2g7p/wnHz8ful2Hxo8jzDvrFhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDkt YTRkOWRjNzZjMmI4LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDktYTRkOWRjNzZjMmI4 LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+FsiURX sPz67wKQyoDaA+5b5FOSKH7USWAvAy/tTCYqkoUUrWRH0IaolQnfUkKCQ1gA5qrw otRFfSn5RLcEV7+VqrMdSIwbByTtmTx2uXUB9hiXuaB60dM/QJP17PIHIxyARhl6 nrtwepLQ81Z1lJ8ikmDmn2tlYSxkmtN2il8vifiXk7gjL/lqGgO1LHkixkTdi5zz vXDeVU5EVqWBZH2IEnI/GY5LJ8VffxZMEZc6ghrEGBAOe7hwojD5d9pcOZGYj0AU YvSKTeUFfTwEcV6aBD35Zvp1uXmVLsJOKvHQLvBy+K5Qv/oo1T7uZV/z7fM1QpPQ ldLNKxqQNnHoQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:31 2025 by rpki-client