This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json) Hash identifier: BJoJFNMy04OQYgTm6mQgk3G4W2UhLeh5jQTuAeDC8uM= Subject key identifier: 16:DB:4D:9E:6A:36:45:53:3C:B0:9F:AF:9F:29:91:0B:F9:6C:C9:E9 Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267 Certificate serial: 019AF352190653314F7779C5C914B1D63B81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft Manifest number: 08DC Signing time: Sat 06 Dec 2025 11:00:34 +0000 Manifest this update: Sat 06 Dec 2025 11:00:34 +0000 Manifest next update: Sun 07 Dec 2025 11:00:34 +0000 Files and hashes: 1: HuuruuJUnyizGG7iC01ujDUd5zE.roa (hash: zJUuXbnFQXiP5Cz81qdrVSNYrr0dHAG+T0ZkZ/sUgdY=) 2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: Df3HXq6cUu65Lusqv+LT+56BE8t1p02xLCepTT3CV+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:19:06:53:31:4f:77:79:c5:c9:14:b1:d6:3b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267 Validity Not Before: Dec 6 11:00:34 2025 GMT Not After : Dec 7 11:00:34 2025 GMT Subject: CN=16db4d9e6a3645533cb09faf9f29910bf96cc9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:ae:d9:6b:94:16:c0:89:a9:e8:8d:ac:a8: 43:69:79:0b:a6:5d:27:91:79:27:97:8f:ae:87:8a: e9:87:93:03:5f:09:99:0b:c7:e7:10:c7:cc:0b:7d: 88:3a:84:b7:4d:fd:8c:79:75:ba:a4:12:95:52:55: 7f:cf:49:48:b5:e3:fe:0e:44:bc:b6:c4:01:3f:07: 2f:0d:2f:b3:f8:ff:de:ce:7f:b6:79:4e:b0:a9:9c: 98:27:79:b7:3c:36:9e:41:2f:39:a3:5c:25:e8:34: 38:5d:11:f7:a6:20:0c:5a:7d:70:af:3b:2c:90:48: 62:92:3d:fe:bb:47:45:e7:c4:f5:86:5c:94:79:1b: 81:dd:c0:64:fd:14:c0:f3:6d:1f:2f:27:d3:5c:62: 31:90:c1:70:d2:69:69:d5:e1:1d:8d:81:ba:27:e5: 93:ef:8d:19:a9:93:3e:77:f6:2b:c5:95:34:b5:fb: 7e:49:5b:1c:a8:8f:8f:96:ce:d1:18:f7:65:67:9c: cb:ef:b9:e0:7b:db:24:49:ff:f9:27:7c:ca:d1:dd: ce:3d:f6:c7:1a:c2:f9:61:64:fc:f6:11:8c:b2:73: c2:5b:87:81:94:52:d2:19:c2:cd:9a:2d:92:03:69: 20:48:96:7b:c2:17:df:8b:49:53:49:74:56:12:21: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:4D:9E:6A:36:45:53:3C:B0:9F:AF:9F:29:91:0B:F9:6C:C9:E9 X509v3 Authority Key Identifier: keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:04:54:4a:db:da:86:6d:d5:fa:41:81:dd:a8:73:99:01:50: 30:03:fc:ed:0e:17:be:58:9a:18:f0:df:5f:a7:f6:16:ac:07: 30:b3:9d:67:69:72:9d:dc:81:7d:cb:15:4b:08:2e:36:ff:0b: f8:de:f3:0c:b7:38:64:59:e2:37:1e:3f:03:9b:ea:78:38:36: b0:c8:57:eb:bf:fd:a1:dc:3e:9f:29:da:1f:ae:cc:01:52:91: 1f:21:50:f7:17:28:7d:d5:19:cc:3b:d6:24:86:8b:be:48:01: 54:9a:7e:0f:56:d4:2d:c3:34:f4:bb:a4:4f:43:76:5b:46:f0: d1:96:58:02:b1:6d:aa:ed:a8:0c:4c:20:58:f2:03:a5:a1:f4: fe:6a:81:a1:df:04:41:1b:34:66:73:81:3b:8b:61:16:56:25: b9:27:45:24:01:02:6f:66:91:4e:ba:86:28:41:e1:ec:38:04: 28:1b:0d:2c:93:09:cc:18:b0:48:cc:1c:f9:2e:73:84:d5:bd: 1c:a5:1e:94:29:09:cc:63:fe:91:0f:f9:f4:1a:d3:76:1a:05: 68:78:5d:bb:e8:e3:12:1d:f5:15:7f:1f:45:58:71:2e:8e:2b: 49:79:6d:02:0d:12:9d:f6:d7:f1:0e:79:20:df:88:5b:12:1c: 25:1d:9e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhkGUzFPd3nFyRSx1juBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzg1YjY3ODhlNDUwYzA1NDEzNGFlOGMzNjU3NDhiMjNm NzQyNjcwHhcNMjUxMjA2MTEwMDM0WhcNMjUxMjA3MTEwMDM0WjAzMTEwLwYDVQQD EygxNmRiNGQ5ZTZhMzY0NTUzM2NiMDlmYWY5ZjI5OTEwYmY5NmNjOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNWu2WuUFsCJqeiNrKhDaXkLpl0n kXknl4+uh4rph5MDXwmZC8fnEMfMC32IOoS3Tf2MeXW6pBKVUlV/z0lIteP+DkS8 tsQBPwcvDS+z+P/ezn+2eU6wqZyYJ3m3PDaeQS85o1wl6DQ4XRH3piAMWn1wrzss kEhikj3+u0dF58T1hlyUeRuB3cBk/RTA820fLyfTXGIxkMFw0mlp1eEdjYG6J+WT 740ZqZM+d/YrxZU0tft+SVscqI+Pls7RGPdlZ5zL77nge9skSf/5J3zK0d3OPfbH GsL5YWT89hGMsnPCW4eBlFLSGcLNmi2SA2kgSJZ7whffi0lTSXRWEiEnkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbbTZ5qNkVTPLCfr58pkQv5bMnpMB8GA1UdIwQY MBaAFG3IW2eI5FDAVBNK6MNldIsj90JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUt MDgxNzg2YWIwNzQ4LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUtMDgxNzg2YWIwNzQ4 LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgRUStva hm3V+kGB3ahzmQFQMAP87Q4XvliaGPDfX6f2FqwHMLOdZ2lyndyBfcsVSwguNv8L +N7zDLc4ZFniNx4/A5vqeDg2sMhX67/9odw+nynaH67MAVKRHyFQ9xcofdUZzDvW JIaLvkgBVJp+D1bULcM09LukT0N2W0bw0ZZYArFtqu2oDEwgWPIDpaH0/mqBod8E QRs0ZnOBO4thFlYluSdFJAECb2aRTrqGKEHh7DgEKBsNLJMJzBiwSMwc+S5zhNW9 HKUelCkJzGP+kQ/59BrTdhoFaHhdu+jjEh31FX8fRVhxLo4rSXltAg0SnfbX8Q55 IN+IWxIcJR2eZw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:34 2025 by rpki-client