This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json) Hash identifier: F8Ys50IcDe4n+AfMRys+gvlJMe9vHfMzlEClHHo+pcM= Subject key identifier: D4:86:D6:43:2F:CB:DF:43:6E:CD:9C:0E:1B:78:E5:63:AE:E1:4B:CA Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08 Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08 Certificate serial: 019B3E6C93B9CC69A331AF859EC2407C9DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft Manifest number: 1784 Signing time: Sun 21 Dec 2025 01:01:01 +0000 Manifest this update: Sun 21 Dec 2025 01:01:01 +0000 Manifest next update: Mon 22 Dec 2025 01:01:01 +0000 Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: TXeBxOwwhlfUmVWaA9iiKu7WsvebUoij8TisU+3j3lY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:93:b9:cc:69:a3:31:af:85:9e:c2:40:7c:9d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08 Validity Not Before: Dec 21 01:01:01 2025 GMT Not After : Dec 22 01:01:01 2025 GMT Subject: CN=d486d6432fcbdf436ecd9c0e1b78e563aee14bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:f5:0d:fb:51:96:78:6e:30:ae:75:89:1f: 2b:2a:b9:76:13:0d:09:50:c7:77:d7:9a:71:0c:bc: 06:72:6b:3b:29:b4:55:f9:af:27:7c:ff:2e:22:db: 40:34:9e:f1:85:cc:58:2d:e5:70:a9:c3:7b:93:dc: a6:58:04:ef:ce:d4:52:f0:84:d5:f7:a8:a5:29:5e: 3d:98:bb:85:bf:04:83:3c:ec:96:9a:25:01:e4:9b: a6:19:03:c6:ae:6a:9d:56:ec:bd:40:68:d6:13:b2: e6:0d:af:23:9e:9a:73:15:7d:77:c0:f2:21:7f:dc: c7:ef:ec:5d:e7:c6:3f:2b:14:16:a4:10:da:e9:a1: a9:de:6a:94:9a:5b:ed:f5:99:b0:f5:53:b9:30:e4: 28:28:81:88:25:5e:cb:e0:68:9e:dd:32:06:a2:a5: 56:d4:f2:75:ee:08:15:3e:0a:49:77:7d:01:b0:56: 23:a0:11:8a:b1:96:51:be:bc:f8:7a:7e:ea:df:56: 67:d5:23:3a:f3:21:89:a7:35:78:b2:88:e4:28:e7: ff:88:31:2c:56:99:31:08:dd:ff:c5:f0:0b:57:c5: da:28:1f:6a:32:43:64:74:bf:1d:4a:6b:b5:30:66: 8a:18:e6:18:9d:92:d3:0f:b3:ac:93:2c:03:c1:f5: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:86:D6:43:2F:CB:DF:43:6E:CD:9C:0E:1B:78:E5:63:AE:E1:4B:CA X509v3 Authority Key Identifier: keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2f:6b:b8:0e:46:18:48:fe:b4:17:2f:09:58:f7:fb:8a:1d: e1:25:1f:00:63:13:c5:1d:08:cf:50:84:57:9b:e7:d1:ae:5b: 74:2b:24:38:c4:6d:1c:ff:17:e6:12:f0:67:76:6e:9b:24:52: 2d:86:c8:00:19:fe:8d:5d:d6:3b:32:f5:81:ee:dd:5e:3c:86: 08:cd:06:87:bf:ab:9f:9d:20:70:9f:b5:b7:79:ba:99:b7:d3: 19:fe:fc:d4:bd:15:40:a6:eb:3f:04:44:30:2e:d3:e4:fc:14: ea:23:2d:ca:bf:f5:4a:d4:c9:f7:02:8f:fc:e2:93:f5:b7:1c: 9f:45:3e:57:61:c2:9f:a0:c6:cc:36:f5:89:79:87:76:6c:62: c1:f2:35:fd:b4:62:f3:d7:5c:06:d1:61:3f:3d:11:62:11:6f: d0:47:f0:48:70:4b:c1:fa:4b:38:63:9a:57:fa:42:fb:15:ea: 43:66:97:87:60:98:13:7f:f4:36:ad:94:de:5a:73:ae:51:ae: 10:55:2c:6e:8a:f4:b0:6f:ff:97:6b:a6:21:cb:9c:34:6f:a5: 12:2d:03:a5:8a:02:d4:f8:9a:bf:ca:36:f3:0d:a0:11:b0:55: 63:44:ad:de:c8:92:3d:49:77:43:b1:57:50:05:9f:8e:9f:d3: 4d:28:d8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJO5zGmjMa+FnsJAfJ3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2 YzNlMDgwHhcNMjUxMjIxMDEwMTAxWhcNMjUxMjIyMDEwMTAxWjAzMTEwLwYDVQQD EyhkNDg2ZDY0MzJmY2JkZjQzNmVjZDljMGUxYjc4ZTU2M2FlZTE0YmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd71DftRlnhuMK51iR8rKrl2Ew0J UMd315pxDLwGcms7KbRV+a8nfP8uIttANJ7xhcxYLeVwqcN7k9ymWATvztRS8ITV 96ilKV49mLuFvwSDPOyWmiUB5JumGQPGrmqdVuy9QGjWE7LmDa8jnppzFX13wPIh f9zH7+xd58Y/KxQWpBDa6aGp3mqUmlvt9Zmw9VO5MOQoKIGIJV7L4Gie3TIGoqVW 1PJ17ggVPgpJd30BsFYjoBGKsZZRvrz4en7q31Zn1SM68yGJpzV4sojkKOf/iDEs VpkxCN3/xfALV8XaKB9qMkNkdL8dSmu1MGaKGOYYnZLTD7OskywDwfUxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSG1kMvy99Dbs2cDht45WOu4UvKMB8GA1UdIwQY MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy9ruA5G GEj+tBcvCVj3+4od4SUfAGMTxR0Iz1CEV5vn0a5bdCskOMRtHP8X5hLwZ3ZumyRS LYbIABn+jV3WOzL1ge7dXjyGCM0Gh7+rn50gcJ+1t3m6mbfTGf781L0VQKbrPwRE MC7T5PwU6iMtyr/1StTJ9wKP/OKT9bccn0U+V2HCn6DGzDb1iXmHdmxiwfI1/bRi 89dcBtFhPz0RYhFv0EfwSHBLwfpLOGOaV/pC+xXqQ2aXh2CYE3/0Nq2U3lpzrlGu EFUsbor0sG//l2umIcucNG+lEi0DpYoC1Piav8o28w2gEbBVY0St3siSPUl3Q7FX UAWfjp/TTSjYCw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:48 2025 by rpki-client