This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json) Hash identifier: 01Jshch+DRrcZrYoUDpkBSEdz1ee/TB+pNsltxesmac= Subject key identifier: 82:BF:83:27:23:4A:95:A4:39:57:64:8F:71:39:9B:BD:01:CE:3C:37 Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Certificate serial: 019B21747F776E88F8AA50910D1F9A5802A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft Manifest number: 15D9 Signing time: Mon 15 Dec 2025 10:00:41 +0000 Manifest this update: Mon 15 Dec 2025 10:00:41 +0000 Manifest next update: Tue 16 Dec 2025 10:00:41 +0000 Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=) 2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: 6TcVr+D1Jm9nMiN3sLQCs5TFZ3zeYMYwX3QxriWQHP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:7f:77:6e:88:f8:aa:50:91:0d:1f:9a:58:02:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Validity Not Before: Dec 15 10:00:41 2025 GMT Not After : Dec 16 10:00:41 2025 GMT Subject: CN=82bf8327234a95a43957648f71399bbd01ce3c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:d1:b4:c2:4c:65:0d:e1:a4:73:3e:63:b7: de:65:15:ed:79:ad:a3:c4:0e:e7:2f:c1:e1:8a:8d: 15:af:c4:80:ce:5c:1a:8d:31:d7:09:f2:6e:73:75: b3:84:77:1a:9c:be:63:ff:fa:c5:8b:a5:32:2c:9a: be:d1:85:b2:f1:9d:77:14:d2:d0:b8:b8:f1:a2:fd: c9:d6:f8:5c:dd:df:ac:32:93:29:ba:ec:4f:1b:8a: c7:45:ff:4a:45:e2:6d:ab:62:89:ff:ec:e1:70:be: db:e2:f2:27:42:14:0c:65:b2:0b:37:e4:2b:86:56: 64:3e:ad:8d:71:91:8b:ed:d8:2f:43:c9:50:37:04: 12:24:a3:a8:9b:f4:9f:d2:4b:d7:6e:2e:ed:18:a2: cf:76:b6:71:23:c1:a9:4f:4d:58:6c:0c:72:3e:f9: dd:8e:33:fc:03:29:d8:a8:66:bb:5a:62:9e:4f:cc: 06:fe:da:03:1e:ea:a4:33:10:a1:df:80:3e:1c:33: 4b:7f:e2:30:b4:96:2a:eb:22:6c:ef:c8:49:41:23: 3b:01:6d:85:8e:a8:1b:fb:b7:75:1b:b8:e2:50:8a: 39:f1:23:b3:31:cf:b4:e0:18:f0:67:ca:5d:c1:e8: 73:b2:5b:ea:5a:41:e5:cd:2a:52:ef:20:10:76:2f: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:83:27:23:4A:95:A4:39:57:64:8F:71:39:9B:BD:01:CE:3C:37 X509v3 Authority Key Identifier: keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ee:fd:9e:86:bd:54:3c:63:83:a7:1f:11:e4:8f:f1:f2:2c: 02:89:ed:97:af:bc:f5:82:0f:f9:01:1a:05:e1:a7:5a:1f:4a: 82:0b:91:50:22:66:8e:f6:e8:66:24:81:c8:8f:d6:70:1d:09: ae:42:cc:6b:1d:3e:ef:91:f2:4a:16:10:81:36:aa:e1:7a:f8: 83:f5:72:7c:50:04:15:41:f0:51:f7:88:14:06:c4:5f:1f:aa: 01:de:37:cd:6b:9c:0a:37:29:fe:8e:de:35:e4:01:53:7a:eb: e2:d3:e6:39:bd:9b:7f:63:50:66:de:20:c8:43:ed:7d:64:7f: f2:fb:3a:8e:11:92:29:94:fb:e7:30:48:f3:0b:93:34:57:92: ef:5e:d2:ed:c7:de:55:5c:37:a6:d0:85:0c:4f:b8:b5:ff:bf: 73:0b:e4:90:16:3a:68:e8:ee:15:f6:8d:fb:41:eb:e2:43:45: c7:44:0d:c1:01:ef:b8:73:39:6e:09:a0:fa:59:dc:3b:8c:dd: dc:d4:ea:42:b4:5e:6d:c8:39:d1:17:7a:8a:27:8f:ae:9f:61: 55:b5:ca:b2:96:a7:73:0b:4e:e9:f4:5a:07:67:c2:51:00:73: 52:ed:d4:16:b6:21:07:6a:c5:6b:b3:9e:e1:f4:a0:d8:4f:15: 58:fe:ef:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdH93boj4qlCRDR+aWAKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl MTMzYjQwHhcNMjUxMjE1MTAwMDQxWhcNMjUxMjE2MTAwMDQxWjAzMTEwLwYDVQQD Eyg4MmJmODMyNzIzNGE5NWE0Mzk1NzY0OGY3MTM5OWJiZDAxY2UzYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V/RtMJMZQ3hpHM+Y7feZRXtea2j xA7nL8Hhio0Vr8SAzlwajTHXCfJuc3WzhHcanL5j//rFi6UyLJq+0YWy8Z13FNLQ uLjxov3J1vhc3d+sMpMpuuxPG4rHRf9KReJtq2KJ/+zhcL7b4vInQhQMZbILN+Qr hlZkPq2NcZGL7dgvQ8lQNwQSJKOom/Sf0kvXbi7tGKLPdrZxI8GpT01YbAxyPvnd jjP8AynYqGa7WmKeT8wG/toDHuqkMxCh34A+HDNLf+IwtJYq6yJs78hJQSM7AW2F jqgb+7d1G7jiUIo58SOzMc+04BjwZ8pdwehzslvqWkHlzSpS7yAQdi8UGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK/gycjSpWkOVdkj3E5m70Bzjw3MB8GA1UdIwQY MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO79noa9 VDxjg6cfEeSP8fIsAontl6+89YIP+QEaBeGnWh9KgguRUCJmjvboZiSByI/WcB0J rkLMax0+75HyShYQgTaq4Xr4g/VyfFAEFUHwUfeIFAbEXx+qAd43zWucCjcp/o7e NeQBU3rr4tPmOb2bf2NQZt4gyEPtfWR/8vs6jhGSKZT75zBI8wuTNFeS717S7cfe VVw3ptCFDE+4tf+/cwvkkBY6aOjuFfaN+0Hr4kNFx0QNwQHvuHM5bgmg+lncO4zd 3NTqQrRebcg50Rd6iiePrp9hVbXKspancwtO6fRaB2fCUQBzUu3UFrYhB2rFa7Oe 4fSg2E8VWP7vkw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:36:22 2025 by rpki-client