This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json) Hash identifier: MYkbhn5pl9JadykD3v2KPKLPJs/GcvbfZxOedZf5pWc= Subject key identifier: CE:AE:51:41:E6:15:0D:77:70:D7:34:D0:6C:18:8A:FB:5C:C7:5A:5E Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9 Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9 Certificate serial: 019AF27743345D0EBADF0264A20923EAFA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft Manifest number: 0E34 Signing time: Sat 06 Dec 2025 07:01:33 +0000 Manifest this update: Sat 06 Dec 2025 07:01:33 +0000 Manifest next update: Sun 07 Dec 2025 07:01:33 +0000 Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: YiMnLtQqMaNWI2cChWvRYvPIosEfl/MJj1l/aerykGk=) 2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:43:34:5d:0e:ba:df:02:64:a2:09:23:ea:fa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9 Validity Not Before: Dec 6 07:01:33 2025 GMT Not After : Dec 7 07:01:33 2025 GMT Subject: CN=ceae5141e6150d7770d734d06c188afb5cc75a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:75:4c:91:d0:5a:18:82:e3:62:7c:3b:f6: 72:73:ea:b7:63:3d:ad:2e:4f:47:af:3e:9c:5c:55: 05:63:1e:48:14:b5:a4:78:61:cf:48:44:ea:69:30: 39:05:89:c8:42:79:c4:2e:34:5e:52:08:a9:3d:fb: 4d:69:2c:c1:02:5a:77:30:b4:de:e0:16:54:31:02: 0c:fb:c1:b3:a8:65:80:99:13:3d:37:04:bb:06:2c: c8:22:8b:ae:b8:73:24:e2:c5:c7:8c:31:fb:7c:8c: 7f:b2:7d:d3:51:2b:54:96:5c:9f:fe:0b:32:bf:0f: f7:fc:62:4c:a8:5b:5d:30:1b:5b:90:69:5a:66:47: 18:57:c1:87:0b:15:f4:38:d7:6a:5a:cf:30:f6:3e: 54:f4:3e:30:35:e0:ff:92:1b:d6:73:af:ca:8c:73: 02:c4:26:91:5a:b4:90:7d:52:a9:96:b0:2a:b5:9a: e0:f7:71:57:65:3c:f5:37:df:1b:07:a3:37:0e:3a: 0a:56:dc:72:39:e8:fe:24:1d:80:0e:59:2c:1b:f6: 29:23:6d:8d:74:cc:ba:4d:2e:d2:1c:da:20:04:03: d6:f5:70:0d:46:3a:b5:b8:5f:2b:86:cf:01:23:c4: f5:29:72:55:38:a3:db:c2:01:b7:19:c1:b7:08:be: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:51:41:E6:15:0D:77:70:D7:34:D0:6C:18:8A:FB:5C:C7:5A:5E X509v3 Authority Key Identifier: keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:88:31:55:74:12:a2:7e:e7:ce:c8:31:b0:d1:0d:e9:ce:57: 06:ab:17:e1:68:e4:35:b9:34:88:23:52:20:dc:0d:64:46:d5: 04:e3:e4:32:ef:48:9c:c1:6d:a6:63:8b:1e:7d:e6:84:53:6a: 05:bc:5c:c8:5d:99:4d:6b:6e:ff:6e:52:82:63:4d:1b:16:a3: 58:e7:4e:36:7c:1e:12:1c:d3:b0:c4:f2:71:f4:c5:1f:65:5c: 6f:08:23:53:47:39:bd:c4:60:10:89:83:e9:4c:ce:73:52:7d: 1c:4f:1a:6b:9a:20:bf:a9:23:1f:e3:8a:9b:9d:6d:8b:14:cf: 61:10:8f:fa:57:68:ff:28:51:0c:ab:8e:15:38:fd:db:9b:61: 46:b3:c4:36:20:8d:25:d2:c7:90:ae:53:a7:b2:e8:0c:e7:68: 78:04:7b:c2:63:2b:8f:54:5b:fd:8a:fd:80:25:52:18:9c:43: b2:7b:a7:5b:b5:c6:3e:3c:5d:72:4c:36:55:7e:3c:a5:0c:33: e1:05:35:ad:02:76:1b:11:2b:a9:67:5a:81:c8:b0:29:1d:e9: 90:63:0d:ea:8c:d6:80:cb:7f:b5:89:38:2a:b6:80:3a:16:e6: 6a:42:67:ac:8c:fc:39:05:35:4d:8a:05:e3:a2:18:d1:cf:cb: de:4d:10:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0M0XQ663wJkogkj6vp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzA2NjI4NTIwZjdkZGFjZWY3MjQzNmVmYTU0NjM1YzUy Y2ZkYzkwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD EyhjZWFlNTE0MWU2MTUwZDc3NzBkNzM0ZDA2YzE4OGFmYjVjYzc1YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4F1TJHQWhiC42J8O/Zyc+q3Yz2t Lk9Hrz6cXFUFYx5IFLWkeGHPSETqaTA5BYnIQnnELjReUgipPftNaSzBAlp3MLTe 4BZUMQIM+8GzqGWAmRM9NwS7BizIIouuuHMk4sXHjDH7fIx/sn3TUStUllyf/gsy vw/3/GJMqFtdMBtbkGlaZkcYV8GHCxX0ONdqWs8w9j5U9D4wNeD/khvWc6/KjHMC xCaRWrSQfVKplrAqtZrg93FXZTz1N98bB6M3DjoKVtxyOej+JB2ADlksG/YpI22N dMy6TS7SHNogBAPW9XANRjq1uF8rhs8BI8T1KXJVOKPbwgG3GcG3CL4H1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6uUUHmFQ13cNc00GwYivtcx1peMB8GA1UdIwQY MBaAFNdwZihSD33azvckNu+lRjXFLP3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zNzUyOWUtZDk3Ni00N2I1LWI2OTAt Mzg5ZDIxNGFmODMwLzEvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zNzUyOWUtZDk3Ni00N2I1LWI2OTAtMzg5ZDIxNGFmODMw LzEvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIgxVXQS on7nzsgxsNEN6c5XBqsX4WjkNbk0iCNSINwNZEbVBOPkMu9InMFtpmOLHn3mhFNq BbxcyF2ZTWtu/25SgmNNGxajWOdONnweEhzTsMTycfTFH2VcbwgjU0c5vcRgEImD 6UzOc1J9HE8aa5ogv6kjH+OKm51tixTPYRCP+ldo/yhRDKuOFTj925thRrPENiCN JdLHkK5Tp7LoDOdoeAR7wmMrj1Rb/Yr9gCVSGJxDsnunW7XGPjxdckw2VX48pQwz 4QU1rQJ2GxErqWdagciwKR3pkGMN6ozWgMt/tYk4KraAOhbmakJnrIz8OQU1TYoF 46IY0c/L3k0QwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:13 2025 by rpki-client