This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json) Hash identifier: Itzp5K/nHsbwZPQvVoN9NQqGh4bvhRtteV8WqxutjJU= Subject key identifier: 73:3A:28:68:05:F4:74:A8:1E:8C:FB:E4:80:9C:D0:F0:50:AC:B9:33 Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Certificate serial: 019AF49BE06912DDA84B3F93D45315A80C39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:47 +0000 Manifest this update: Sat 06 Dec 2025 17:00:47 +0000 Manifest next update: Sun 07 Dec 2025 17:00:47 +0000 Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: UJln9rupJB8nRtM4auBwFocXoQ3ULuArsCasAZt1+i0=) 2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e0:69:12:dd:a8:4b:3f:93:d4:53:15:a8:0c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Validity Not Before: Dec 6 17:00:47 2025 GMT Not After : Dec 7 17:00:47 2025 GMT Subject: CN=733a286805f474a81e8cfbe4809cd0f050acb933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:b5:8f:19:a2:9f:3a:61:a1:18:a8:9f:c3: 7f:96:94:ed:a2:ce:be:75:33:be:26:16:5a:02:2a: ef:46:fc:17:5d:c2:58:dd:34:6c:6b:53:c8:fb:a1: e2:1d:93:f3:01:23:b4:95:ad:1c:94:3b:a2:9f:10: 6b:ed:ff:f4:5d:d9:d2:af:30:d2:ef:ee:ab:1f:8c: 72:db:ef:49:8f:dc:b3:f3:6d:4f:0b:e3:62:08:5b: 07:3a:0b:2c:4d:81:3d:2c:a3:25:d9:6e:54:a0:51: c3:c9:bd:38:11:d7:48:f5:63:53:84:f3:90:48:87: c7:fe:e5:0b:8a:61:57:70:d6:7e:8a:be:4b:f5:b3: 5b:46:17:12:50:34:dc:c1:0a:ac:6b:04:da:5e:08: 9f:8a:ea:45:c2:92:6e:e2:60:26:aa:42:e7:15:00: d1:35:64:cc:57:57:6e:ff:ed:24:ac:63:19:8d:e0: dd:5f:7a:19:87:0c:83:2b:83:91:a2:f4:83:eb:c5: d2:09:b3:57:5b:a9:e1:01:5d:cc:ea:f9:6a:08:cc: 8d:0f:cb:88:e2:ce:c2:95:d3:17:0a:5b:14:22:85: b3:10:89:d6:9e:72:1e:92:2c:17:45:df:a1:bf:a7: fa:ff:56:dd:cf:d4:7c:a2:3a:7b:03:62:cd:31:d3: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3A:28:68:05:F4:74:A8:1E:8C:FB:E4:80:9C:D0:F0:50:AC:B9:33 X509v3 Authority Key Identifier: keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:fb:78:a4:e4:c5:21:c6:8b:03:34:5f:70:0b:58:b9:31: 84:09:69:a4:9a:8e:6f:7b:03:31:3a:05:83:57:dc:b0:5d:45: e1:c3:92:40:09:cb:fd:43:d3:6a:93:a9:31:06:27:d9:14:3f: 66:e9:98:bf:46:19:32:5e:ff:f9:c2:fb:76:de:c5:22:09:b2: ec:22:78:7f:ca:01:5e:06:44:da:0a:53:c4:9d:da:0a:32:a1: 38:87:6a:33:96:33:30:22:df:e4:14:a7:60:d7:35:bd:c1:76: 1b:54:e0:bb:44:7a:e5:65:58:9d:05:18:c1:70:11:90:c4:bd: 2a:7a:b3:e1:bc:d7:97:4a:13:48:d9:71:b1:43:41:47:c0:c4: c7:7b:42:98:b3:f7:d2:74:fb:da:98:8e:75:da:e2:52:d9:f5: db:15:99:4b:ba:71:28:0b:53:0d:7f:79:7b:d6:60:e5:01:bb: 30:eb:e5:dc:41:cb:85:93:9c:e9:34:57:f8:b3:3f:57:a3:52: 06:af:82:3d:0e:7f:a4:a2:14:73:3d:02:44:64:59:f3:9c:40: 41:82:0c:02:c8:78:43:d4:22:42:ab:1d:37:1c:d5:da:b6:c3: 99:9e:35:2f:35:2c:50:e7:74:25:2b:26:59:fd:92:e2:58:8f: e0:a1:cb:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+BpEt2oSz+T1FMVqAw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl MTUzMGQwHhcNMjUxMjA2MTcwMDQ3WhcNMjUxMjA3MTcwMDQ3WjAzMTEwLwYDVQQD Eyg3MzNhMjg2ODA1ZjQ3NGE4MWU4Y2ZiZTQ4MDljZDBmMDUwYWNiOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8K1jxminzphoRion8N/lpTtos6+ dTO+JhZaAirvRvwXXcJY3TRsa1PI+6HiHZPzASO0la0clDuinxBr7f/0XdnSrzDS 7+6rH4xy2+9Jj9yz821PC+NiCFsHOgssTYE9LKMl2W5UoFHDyb04EddI9WNThPOQ SIfH/uULimFXcNZ+ir5L9bNbRhcSUDTcwQqsawTaXgifiupFwpJu4mAmqkLnFQDR NWTMV1du/+0krGMZjeDdX3oZhwyDK4ORovSD68XSCbNXW6nhAV3M6vlqCMyND8uI 4s7CldMXClsUIoWzEInWnnIekiwXRd+hv6f6/1bdz9R8ojp7A2LNMdNL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM6KGgF9HSoHoz75ICc0PBQrLkzMB8GA1UdIwQY MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0 LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm/7eKTk xSHGiwM0X3ALWLkxhAlppJqOb3sDMToFg1fcsF1F4cOSQAnL/UPTapOpMQYn2RQ/ ZumYv0YZMl7/+cL7dt7FIgmy7CJ4f8oBXgZE2gpTxJ3aCjKhOIdqM5YzMCLf5BSn YNc1vcF2G1Tgu0R65WVYnQUYwXARkMS9Knqz4bzXl0oTSNlxsUNBR8DEx3tCmLP3 0nT72piOddriUtn12xWZS7pxKAtTDX95e9Zg5QG7MOvl3EHLhZOc6TRX+LM/V6NS Bq+CPQ5/pKIUcz0CRGRZ85xAQYIMAsh4Q9QiQqsdNxzV2rbDmZ41LzUsUOd0JSsm Wf2S4liP4KHLXw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:25 2025 by rpki-client