This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json) Hash identifier: 3ThzCMxGhxrsYf6kqKMf9D3fVJkag0ZNBYlMrq1uras= Subject key identifier: 8B:32:98:19:5F:25:A1:97:CB:F5:CA:8C:45:7A:20:AE:88:7B:E0:48 Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19 Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19 Certificate serial: 019B2741A7B120795F0F4DE0DA47FFE01E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft Manifest number: 0B8D Signing time: Tue 16 Dec 2025 13:02:52 +0000 Manifest this update: Tue 16 Dec 2025 13:02:52 +0000 Manifest next update: Wed 17 Dec 2025 13:02:52 +0000 Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: RJvn7L6zlafuhtxDlfWK4wI0CUN6aZSMCd10pYOvuRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:a7:b1:20:79:5f:0f:4d:e0:da:47:ff:e0:1e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19 Validity Not Before: Dec 16 13:02:52 2025 GMT Not After : Dec 17 13:02:52 2025 GMT Subject: CN=8b3298195f25a197cbf5ca8c457a20ae887be048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:59:6f:f1:f4:df:ad:3e:c8:ce:3b:96:a8: 15:4f:a6:1d:e9:f8:ff:b0:fe:2f:18:6f:42:68:6b: c5:19:ee:db:40:50:c8:4f:c5:da:31:f4:30:97:97: 1e:ba:3a:9b:ff:54:5b:82:a9:54:e1:e7:e6:81:9f: 35:68:a4:d4:89:b6:83:5f:e7:a0:4d:f4:f2:22:3e: 69:7f:a9:52:20:5f:2b:36:90:58:14:05:6b:07:1f: 0f:2d:07:d5:b9:7d:32:2a:95:c8:3a:c5:97:96:a1: e6:77:bd:d6:78:d9:30:5a:41:73:86:ee:57:ed:fe: ee:62:a3:22:81:a6:2b:fc:51:70:80:92:16:77:ce: 6b:c3:3f:e5:a0:80:52:ec:ec:51:7b:1e:ab:c2:e8: de:ee:d9:8c:91:d1:7e:ba:27:33:8a:05:b0:a3:0f: 1a:a0:07:2a:eb:ee:45:33:d1:c4:bb:a5:5a:4d:2e: a3:73:75:65:83:ed:3e:50:df:73:4e:3e:79:08:72: cb:2c:58:a3:95:66:f1:1b:50:8f:19:ef:a4:61:d7: a2:ee:e3:71:41:4e:0c:b2:99:d6:56:5a:ac:25:64: bd:70:dc:11:f8:f8:9b:3d:4e:cb:d2:44:18:53:85: 64:19:34:7d:6e:91:be:90:02:d4:3c:21:82:9b:7d: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:32:98:19:5F:25:A1:97:CB:F5:CA:8C:45:7A:20:AE:88:7B:E0:48 X509v3 Authority Key Identifier: keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:47:d6:65:07:08:ef:b7:12:18:d1:82:4c:8c:c7:68:cb:70: a5:58:43:98:05:7e:11:ce:b3:0c:a0:1f:67:90:f4:3c:b4:21: e1:b8:48:9a:6f:1a:e4:e2:42:15:be:d6:49:4c:d2:6d:e2:e0: 08:d1:4c:cf:ec:99:ca:cd:1c:fd:19:68:ff:8d:62:09:4c:33: ef:87:9f:54:43:09:e7:22:b0:39:a1:7b:66:b1:0c:e9:2c:9c: ae:95:c4:4d:25:01:a8:d4:f0:3b:fd:e9:82:4d:d0:74:05:ac: 7c:7b:58:8b:38:0f:56:a5:32:0b:97:46:28:2d:de:12:d2:c3: 2e:26:e6:d6:a8:a3:0c:a2:ff:b3:04:a6:a7:0f:62:d2:40:25: 8e:dd:78:93:3f:b6:5f:32:72:89:21:b0:0e:df:66:f6:1b:65: e9:e1:37:24:3e:ce:c7:ec:d5:52:a7:1a:d0:8b:ee:ab:bb:73: 52:dd:cf:37:6e:4e:56:e9:66:8a:2a:e9:47:17:0d:07:7f:c0: 3d:17:07:67:7a:0f:94:92:c1:e9:77:04:35:28:56:8d:33:ba: 15:ba:69:35:69:49:d3:c7:1a:86:ce:2a:44:92:53:0d:95:38: a9:51:10:88:74:25:e5:0b:13:70:22:fc:a5:75:d7:fd:0a:9e: 7d:b3:a6:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQaexIHlfD03g2kf/4B4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NGMxYTk4NmM1OTMzYTNiOTEwODRlOGEzZmYwODA2NmQz OThlMTkwHhcNMjUxMjE2MTMwMjUyWhcNMjUxMjE3MTMwMjUyWjAzMTEwLwYDVQQD Eyg4YjMyOTgxOTVmMjVhMTk3Y2JmNWNhOGM0NTdhMjBhZTg4N2JlMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzBZb/H0360+yM47lqgVT6Yd6fj/ sP4vGG9CaGvFGe7bQFDIT8XaMfQwl5ceujqb/1RbgqlU4efmgZ81aKTUibaDX+eg TfTyIj5pf6lSIF8rNpBYFAVrBx8PLQfVuX0yKpXIOsWXlqHmd73WeNkwWkFzhu5X 7f7uYqMigaYr/FFwgJIWd85rwz/loIBS7OxRex6rwuje7tmMkdF+uiczigWwow8a oAcq6+5FM9HEu6VaTS6jc3Vlg+0+UN9zTj55CHLLLFijlWbxG1CPGe+kYdei7uNx QU4MspnWVlqsJWS9cNwR+PibPU7L0kQYU4VkGTR9bpG+kALUPCGCm31HGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsymBlfJaGXy/XKjEV6IK6Ie+BIMB8GA1UdIwQY MBaAFAZMGphsWTOjuRCE6KP/CAZtOY4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgt N2Y2YTY1NWZkNzg4LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgtN2Y2YTY1NWZkNzg4 LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEfWZQcI 77cSGNGCTIzHaMtwpVhDmAV+Ec6zDKAfZ5D0PLQh4bhImm8a5OJCFb7WSUzSbeLg CNFMz+yZys0c/Rlo/41iCUwz74efVEMJ5yKwOaF7ZrEM6SycrpXETSUBqNTwO/3p gk3QdAWsfHtYizgPVqUyC5dGKC3eEtLDLibm1qijDKL/swSmpw9i0kAljt14kz+2 XzJyiSGwDt9m9htl6eE3JD7Ox+zVUqca0Ivuq7tzUt3PN25OVulmiirpRxcNB3/A PRcHZ3oPlJLB6XcENShWjTO6FbppNWlJ08cahs4qRJJTDZU4qVEQiHQl5QsTcCL8 pXXX/QqefbOmfQ== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:52 2025 by rpki-client