This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json) Hash identifier: ngAaZ+o9f9ZamgxFvrAYO1LFHT3jmVANiRJVw6dqnbg= Subject key identifier: 5F:ED:42:B6:44:F0:CF:9C:C9:F9:27:84:EC:D2:6A:17:32:BA:46:AB Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Certificate serial: 019AF2ADF25239DCC0DC4346803FE959EE4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft Manifest number: 12F0 Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=) 2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: nAiE3H/mReES0dqd88uRjGCEkqLerZN3jr7N4riWc00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f2:52:39:dc:c0:dc:43:46:80:3f:e9:59:ee:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=5fed42b644f0cf9cc9f92784ecd26a1732ba46ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:d1:f4:9a:98:c2:91:2e:0e:d8:67:d4:e8: 63:50:ac:34:67:d2:fb:9e:69:11:61:40:56:44:0f: b8:71:ea:82:40:cb:ff:f2:a0:e5:90:15:67:b3:f3: df:b0:a3:66:3a:e9:03:46:35:6c:6b:c2:17:29:aa: 4e:ac:3b:53:f2:e0:d2:02:1f:4d:b7:8b:f0:6c:3a: 23:aa:ba:93:30:42:6f:7a:33:c5:42:04:42:b1:ad: ec:83:d9:bf:4e:95:f7:4a:cb:ae:f7:70:48:b1:21: e9:4d:00:e6:4f:d5:fd:c7:23:7c:44:0c:ed:ff:bd: fa:39:cc:0a:2c:27:4b:e6:30:ed:dc:35:a4:e4:c2: 40:18:32:71:70:13:bf:e2:72:7f:cd:99:de:64:b0: ba:6b:2b:8c:fd:92:16:93:fd:22:18:60:57:ef:88: 9f:fe:62:f7:ae:a3:db:93:8b:a8:16:58:2a:7f:14: 15:da:1c:99:09:a4:c0:19:5e:e2:45:7d:8b:5b:98: f4:b2:40:0f:7c:87:b5:b0:5c:0e:8c:5c:7a:94:ec: 2d:ba:22:27:fc:8f:7c:6d:d0:85:91:19:1a:6c:dd: be:6d:d3:0e:2b:5e:86:8d:62:48:28:d0:00:10:55: 56:14:7f:44:eb:0c:1a:ad:1f:b6:2e:c0:56:ea:4d: a0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:42:B6:44:F0:CF:9C:C9:F9:27:84:EC:D2:6A:17:32:BA:46:AB X509v3 Authority Key Identifier: keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b4:d8:da:13:6b:d6:bd:27:39:cc:24:12:3e:44:9b:f9:d3: c1:2b:17:fa:d3:93:27:16:03:02:c2:60:f2:c3:75:34:61:c0: f5:7f:47:73:aa:1c:7b:7d:7b:a4:8b:01:bb:f2:e3:fa:fc:01: 06:e0:a2:cb:ea:10:3d:d8:28:a9:9f:1f:34:38:8d:aa:35:b3: 50:b1:e9:64:82:3a:2f:4f:41:52:bb:7a:a1:1d:ea:8b:3d:05: 41:9e:12:9b:a3:ff:a7:5e:79:fa:0a:b5:05:02:7f:c0:9e:f1: d2:90:65:8c:e7:51:03:39:18:b1:5c:c4:3d:62:ee:95:6c:1f: a8:de:93:30:1c:2f:10:67:5c:e8:96:78:bf:f4:74:17:7c:f1: 91:a8:91:18:9b:a1:c8:2d:d5:6d:c6:6a:0f:1c:5e:a6:39:4e: e1:f0:f8:cf:b8:74:67:a2:36:f1:f8:6b:17:24:5a:23:e7:27: 1a:d0:d5:c8:02:f9:88:d3:df:67:97:fd:b6:54:ed:53:1a:d7: 8c:b3:a6:99:cd:73:57:2b:fe:3a:6e:db:40:4e:10:db:fd:fc: 23:b8:f4:65:9d:77:c6:51:86:12:e4:d7:19:9e:c2:de:c5:29: f0:01:66:bf:eb:af:9f:49:18:5e:7b:3c:f2:cd:a2:91:15:dd: 90:d8:65:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfJSOdzA3ENGgD/pWe5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk Y2JiODEwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD Eyg1ZmVkNDJiNjQ0ZjBjZjljYzlmOTI3ODRlY2QyNmExNzMyYmE0NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rPR9JqYwpEuDthn1OhjUKw0Z9L7 nmkRYUBWRA+4ceqCQMv/8qDlkBVns/PfsKNmOukDRjVsa8IXKapOrDtT8uDSAh9N t4vwbDojqrqTMEJvejPFQgRCsa3sg9m/TpX3Ssuu93BIsSHpTQDmT9X9xyN8RAzt /736OcwKLCdL5jDt3DWk5MJAGDJxcBO/4nJ/zZneZLC6ayuM/ZIWk/0iGGBX74if /mL3rqPbk4uoFlgqfxQV2hyZCaTAGV7iRX2LW5j0skAPfIe1sFwOjFx6lOwtuiIn /I98bdCFkRkabN2+bdMOK16GjWJIKNAAEFVWFH9E6wwarR+2LsBW6k2gbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/tQrZE8M+cyfknhOzSahcyukarMB8GA1UdIwQY MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt OTg1MTgyMDAxZTkyLzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7TY2hNr 1r0nOcwkEj5Em/nTwSsX+tOTJxYDAsJg8sN1NGHA9X9Hc6oce317pIsBu/Lj+vwB BuCiy+oQPdgoqZ8fNDiNqjWzULHpZII6L09BUrt6oR3qiz0FQZ4Sm6P/p155+gq1 BQJ/wJ7x0pBljOdRAzkYsVzEPWLulWwfqN6TMBwvEGdc6JZ4v/R0F3zxkaiRGJuh yC3VbcZqDxxepjlO4fD4z7h0Z6I28fhrFyRaI+cnGtDVyAL5iNPfZ5f9tlTtUxrX jLOmmc1zVyv+Om7bQE4Q2/38I7j0ZZ13xlGGEuTXGZ7C3sUp8AFmv+uvn0kYXns8 8s2ikRXdkNhlhg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:11 2025 by rpki-client