This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json) Hash identifier: OpUh3GrEtRjoCp4D/RzlG47X7AIP9SwfzdYhDujA/G8= Subject key identifier: E3:2F:E1:EA:A3:7D:8F:C3:3C:79:8A:2B:D2:67:65:E0:88:D9:DE:5C Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71 Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71 Certificate serial: 019AF5AEEA7945473CE55B56A8170D0EFB9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft Manifest number: 0D26 Signing time: Sat 06 Dec 2025 22:01:12 +0000 Manifest this update: Sat 06 Dec 2025 22:01:12 +0000 Manifest next update: Sun 07 Dec 2025 22:01:12 +0000 Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: zhlCerKNzjQEls3XyuwrspRZeqE1CdfcoPVXfdR6FIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ea:79:45:47:3c:e5:5b:56:a8:17:0d:0e:fb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71 Validity Not Before: Dec 6 22:01:12 2025 GMT Not After : Dec 7 22:01:12 2025 GMT Subject: CN=e32fe1eaa37d8fc33c798a2bd26765e088d9de5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:3c:73:c3:27:80:91:7a:3b:0b:35:b6:0c: f4:6d:5e:7d:a4:f0:e8:06:f0:d6:1a:fc:40:b2:ee: 8e:62:21:21:9e:11:83:28:a3:85:b6:0d:10:b1:30: 78:d6:9d:9b:fb:49:f3:f8:68:7b:bf:46:64:75:57: 7c:1d:a5:2e:6b:13:59:22:bf:d4:e3:99:5f:59:2a: 4b:b7:4d:63:f4:41:1b:13:70:74:b4:fa:91:9a:ee: 25:80:cf:df:63:5e:cd:3f:14:42:81:f6:23:f3:7d: 0c:02:2d:7b:e0:a0:06:ec:f5:74:73:94:b0:92:f1: f2:89:69:48:00:3e:79:9b:35:f7:01:a0:c0:b9:0e: 45:f1:96:06:ca:54:58:fa:7a:9b:d7:bd:a8:45:47: 73:1f:aa:3a:c4:56:00:26:b3:e4:96:c0:83:89:70: 11:9f:e1:30:37:53:16:da:77:4b:b6:e1:c1:01:9e: cd:ad:a9:e5:b4:55:04:e7:a2:1a:57:94:53:68:a7: f7:55:d5:d0:95:ba:75:5d:d6:c3:30:42:65:fb:dc: 3b:83:dd:03:54:92:fa:7c:2e:93:ff:41:a5:e2:64: 43:b7:4b:57:f3:f8:c3:c1:8e:2d:e1:d7:98:ce:19: f0:68:92:0e:79:89:80:4f:45:47:4c:c9:a8:41:07: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:E1:EA:A3:7D:8F:C3:3C:79:8A:2B:D2:67:65:E0:88:D9:DE:5C X509v3 Authority Key Identifier: keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2a:80:ba:3a:9b:ee:2e:09:bb:95:95:e9:1d:bc:9c:c2:b0: 4e:c4:d6:5e:c2:5e:5e:e5:3f:ae:3c:31:37:3c:39:af:55:76: bd:a6:c3:9c:18:de:a5:26:2e:b3:a2:0a:25:ff:80:a6:6e:53: 17:a2:6b:0e:71:00:70:fc:72:81:fc:0d:af:9f:f7:67:9c:71: 12:16:a9:64:17:07:f7:ac:9d:5b:48:c3:18:f8:43:79:06:5c: cc:47:f0:46:0f:72:bf:11:ec:f1:57:e7:f9:8b:b1:85:f6:5a: 66:7e:e3:e7:a6:21:af:bf:03:c4:1c:d5:d5:cc:f3:6e:d1:a7: 30:ed:cc:fd:e7:69:6c:0f:42:59:a6:bf:ff:af:9a:a6:16:20: 73:d3:9e:08:bd:fa:16:3a:3c:41:ac:c6:98:76:07:02:1d:3a: 79:eb:71:bf:60:9f:8d:9a:42:89:2c:86:33:70:a9:cb:c9:d1: f9:4a:f4:f5:95:8d:fd:bd:55:41:20:16:83:61:15:49:2f:87: 43:6c:df:fc:5d:67:fd:cd:b6:9a:1f:84:51:0b:2d:3b:79:85: 8c:b6:6d:bf:07:7b:e3:65:40:d7:09:b4:a8:e1:17:b0:48:3a: 3b:12:8d:7d:fb:7b:32:89:6d:bb:11:cb:c0:b2:26:da:ef:43: 03:60:1b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rup5RUc85VtWqBcNDvueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm MGNhNzEwHhcNMjUxMjA2MjIwMTEyWhcNMjUxMjA3MjIwMTEyWjAzMTEwLwYDVQQD EyhlMzJmZTFlYWEzN2Q4ZmMzM2M3OThhMmJkMjY3NjVlMDg4ZDlkZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uc8c8MngJF6Ows1tgz0bV59pPDo BvDWGvxAsu6OYiEhnhGDKKOFtg0QsTB41p2b+0nz+Gh7v0ZkdVd8HaUuaxNZIr/U 45lfWSpLt01j9EEbE3B0tPqRmu4lgM/fY17NPxRCgfYj830MAi174KAG7PV0c5Sw kvHyiWlIAD55mzX3AaDAuQ5F8ZYGylRY+nqb172oRUdzH6o6xFYAJrPklsCDiXAR n+EwN1MW2ndLtuHBAZ7NranltFUE56IaV5RTaKf3VdXQlbp1XdbDMEJl+9w7g90D VJL6fC6T/0Gl4mRDt0tX8/jDwY4t4deYzhnwaJIOeYmAT0VHTMmoQQcP2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMv4eqjfY/DPHmKK9JnZeCI2d5cMB8GA1UdIwQY MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISqAujqb 7i4Ju5WV6R28nMKwTsTWXsJeXuU/rjwxNzw5r1V2vabDnBjepSYus6IKJf+Apm5T F6JrDnEAcPxygfwNr5/3Z5xxEhapZBcH96ydW0jDGPhDeQZczEfwRg9yvxHs8Vfn +YuxhfZaZn7j56Yhr78DxBzV1czzbtGnMO3M/edpbA9CWaa//6+aphYgc9OeCL36 Fjo8QazGmHYHAh06eetxv2CfjZpCiSyGM3Cpy8nR+Ur09ZWN/b1VQSAWg2EVSS+H Q2zf/F1n/c22mh+EUQstO3mFjLZtvwd742VA1wm0qOEXsEg6OxKNfft7MoltuxHL wLIm2u9DA2Ab0A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:15 2025 by rpki-client