This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json) Hash identifier: +hB/YtR9IB70wzMtuUGmXzWwudWQWLZnirj4qj811xQ= Subject key identifier: 6E:AC:FC:7E:AD:8D:E6:A7:15:F2:6C:80:50:F2:97:9A:82:B0:1C:90 Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45 Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45 Certificate serial: 019AF12D9F289C1E2E66094E9DD8E780A0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft Manifest number: 1195 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: dZCFNNrx79XuP9Azgm6HDGMghdSY/IbCj9I3K75Z2VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9f:28:9c:1e:2e:66:09:4e:9d:d8:e7:80:a0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=6eacfc7ead8de6a715f26c8050f2979a82b01c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:29:cd:28:e5:fe:67:6e:65:45:bf:8f:0e: ab:b7:d9:84:f2:8e:f2:7c:b1:d1:aa:90:e8:9f:dd: bc:8a:cf:f2:ff:fb:f0:23:ec:8c:d2:43:b8:93:ff: c4:c2:30:1e:df:6c:ad:15:5b:34:5f:15:48:a6:87: 79:eb:84:4c:57:cd:de:76:1b:80:27:8b:16:4b:75: 67:14:9a:20:9f:3c:cd:5e:2c:61:77:16:82:dc:eb: c8:b8:04:6c:34:6a:dd:16:bc:c5:39:33:6b:0a:ea: a6:4f:6a:f0:32:93:59:48:97:e0:78:33:fa:e0:2f: 88:de:2c:38:5f:db:d5:0a:3f:5c:95:30:86:d7:72: 4e:63:e5:ac:75:77:20:ed:43:01:ff:fd:7a:5b:20: 8e:98:a9:23:28:e8:90:e3:a8:ab:7f:8a:b3:5b:5b: bd:ad:66:9d:4d:8f:be:ab:4f:29:98:1c:56:72:41: 9c:17:bf:2d:f6:38:12:03:eb:7f:9c:3e:17:6a:1b: e0:a1:54:c6:89:76:59:3a:b5:81:85:12:39:7b:e9: c5:90:af:25:5c:ae:c5:fa:5d:66:26:3d:71:21:ab: 05:8e:ec:73:e9:b4:3f:70:36:c3:3d:33:a8:96:2d: 50:a6:af:4c:1d:b7:f8:13:46:a0:f2:66:a0:08:d1: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AC:FC:7E:AD:8D:E6:A7:15:F2:6C:80:50:F2:97:9A:82:B0:1C:90 X509v3 Authority Key Identifier: keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8d:88:30:40:6d:87:fb:90:8e:35:e9:cc:ea:23:bc:e5:bc: 6d:cd:9b:0d:f5:6b:bd:c8:c8:b0:c1:85:1d:72:d7:7d:bf:04: bd:f8:40:03:ab:21:05:f6:e6:49:ac:56:ca:eb:8f:79:34:41: b3:c8:4f:0a:e4:ce:d8:87:70:9f:f5:2f:31:f3:94:2c:86:16: 77:50:3c:47:31:3c:19:59:13:85:28:03:f6:84:f9:12:eb:63: 8a:eb:3e:53:bf:f3:c7:f0:7b:9f:7c:9f:d8:e9:fa:80:75:ff: d9:b0:b7:e8:73:12:81:3e:b2:d5:b7:bc:34:eb:c6:59:ae:93: 7e:39:74:23:2c:30:2a:ca:ec:3e:38:2c:5b:f7:1a:b2:f2:e0: 38:be:e1:91:eb:11:13:75:fc:c8:02:03:c6:db:17:2f:77:9c: d2:82:d3:d8:6f:d8:d5:4f:fb:d4:a0:90:6a:2f:de:99:21:f1: 16:64:b7:b4:e6:25:b8:f4:d0:72:d7:79:58:86:aa:88:d6:ee: 4f:d4:12:de:8e:cf:d7:94:25:66:6e:70:4a:1e:3e:a0:91:a1: 41:f9:5f:7b:18:ae:67:80:d5:9a:f4:4f:2d:20:77:31:f6:2f: 6b:19:25:ed:e1:61:e7:04:86:64:2a:61:83:7d:fa:e6:8c:11: ec:b7:9a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ8onB4uZglOndjngKDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzJmNzM1ZjcxNDVmNzBkMjcwMjYwMmVlOGM4MTU2NDll YjJlNDUwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD Eyg2ZWFjZmM3ZWFkOGRlNmE3MTVmMjZjODA1MGYyOTc5YTgyYjAxYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLQpzSjl/mduZUW/jw6rt9mE8o7y fLHRqpDon928is/y//vwI+yM0kO4k//EwjAe32ytFVs0XxVIpod564RMV83edhuA J4sWS3VnFJognzzNXixhdxaC3OvIuARsNGrdFrzFOTNrCuqmT2rwMpNZSJfgeDP6 4C+I3iw4X9vVCj9clTCG13JOY+WsdXcg7UMB//16WyCOmKkjKOiQ46irf4qzW1u9 rWadTY++q08pmBxWckGcF78t9jgSA+t/nD4XahvgoVTGiXZZOrWBhRI5e+nFkK8l XK7F+l1mJj1xIasFjuxz6bQ/cDbDPTOoli1Qpq9MHbf4E0ag8magCNFkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6s/H6tjeanFfJsgFDyl5qCsByQMB8GA1UdIwQY MBaAFAbC9zX3FF9w0nAmAu6MgVZJ6y5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQt MWZmNjMwYzM1MGZmLzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQtMWZmNjMwYzM1MGZm LzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI2IMEBt h/uQjjXpzOojvOW8bc2bDfVrvcjIsMGFHXLXfb8EvfhAA6shBfbmSaxWyuuPeTRB s8hPCuTO2Idwn/UvMfOULIYWd1A8RzE8GVkThSgD9oT5Eutjius+U7/zx/B7n3yf 2On6gHX/2bC36HMSgT6y1be8NOvGWa6Tfjl0IywwKsrsPjgsW/casvLgOL7hkesR E3X8yAIDxtsXL3ec0oLT2G/Y1U/71KCQai/emSHxFmS3tOYluPTQctd5WIaqiNbu T9QS3o7P15QlZm5wSh4+oJGhQflfexiuZ4DVmvRPLSB3MfYvaxkl7eFh5wSGZCph g3365owR7Lea6g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:16 2025 by rpki-client