This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft File: bn-6EaMdOqkN48e7i1bTzQbmvnU.mft (raw, json) Hash identifier: JFs7aNAVETrSTaOGPBhFTNcJDh+cSb3OFHmgcF0hr+k= Subject key identifier: 95:29:57:78:04:67:0C:7B:48:1F:C0:F3:C9:F6:76:CE:98:AD:F4:A3 Authority key identifier: 6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75 Certificate issuer: /CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75 Certificate serial: 019AF12D46D944AE1C618C239506C600E77C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft Manifest number: 1747 Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: bn-6EaMdOqkN48e7i1bTzQbmvnU.crl (hash: BB3IqS7n9McJGntMvWXSXhdjaRrVuRy1zbrwWiHpvYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:46:d9:44:ae:1c:61:8c:23:95:06:c6:00:e7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75 Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=9529577804670c7b481fc0f3c9f676ce98adf4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:41:ce:a4:b5:fe:90:cf:2d:61:62:fc:9a: 43:43:ff:d8:57:6a:07:c2:b4:f4:c5:03:91:5b:89: 44:30:9a:18:26:af:fb:c7:de:6d:5f:e7:1a:37:07: 84:80:a9:0a:22:3f:d2:49:0c:f8:c4:29:bf:51:8e: a3:52:14:d0:36:61:14:17:0e:6d:1f:df:17:69:bf: 3a:fc:6e:3b:ef:54:6c:3a:f3:ba:1d:ac:58:e7:8b: 06:95:3c:fa:cb:37:0a:0e:c9:db:55:f5:88:f0:b6: a1:91:d3:6c:b6:bf:f6:df:1a:b0:b7:99:21:75:5e: e4:b3:7b:04:61:00:51:2c:29:b2:f2:5e:3d:df:36: 74:b6:d7:38:f9:9c:54:d7:c6:4a:28:fd:89:a8:f5: 8b:c6:73:26:46:52:46:bf:7a:41:08:7e:f0:90:06: 7c:7a:57:fe:9c:90:bd:50:15:64:4e:22:92:88:b5: da:de:38:a6:0b:70:1d:1d:2e:e9:3e:76:35:c5:bf: 7e:4d:e5:56:0b:88:88:c2:c8:bf:4d:cf:6e:7f:05: 64:b3:41:6e:1c:e8:94:66:0e:0f:f7:1a:db:66:8a: d1:61:a0:f7:e5:a4:7e:87:a9:e1:ff:13:d5:43:57: f9:44:89:15:8b:bc:9e:29:ae:2e:af:dc:22:7e:c0: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:29:57:78:04:67:0C:7B:48:1F:C0:F3:C9:F6:76:CE:98:AD:F4:A3 X509v3 Authority Key Identifier: keyid:6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6b:9a:32:f7:ec:6c:fc:92:5c:3a:1f:5d:49:a4:b4:83:fb: 1f:ad:e2:03:1f:cb:86:7d:60:06:dd:67:63:e1:4d:5f:15:6a: 79:8b:cc:f8:eb:02:ef:71:bc:48:0b:ca:c2:06:b2:74:41:a7: 4b:7b:66:d9:50:b3:9d:57:08:d4:c3:24:c6:05:1e:ce:f4:22: 89:50:fd:58:d4:96:cc:0b:a4:27:16:fc:ca:53:d7:d1:03:26: 9f:68:8f:f9:77:82:61:3d:09:89:15:30:be:ec:34:f0:b2:6f: 63:9b:85:9b:0f:f9:c0:0c:8f:23:62:2d:df:58:66:67:6f:a8: 9a:07:60:0e:69:30:9b:ac:f4:8c:9d:74:4f:e1:6c:a1:96:e7: 68:76:04:87:5b:f3:3c:dd:f8:e5:45:51:54:84:0b:33:80:c7: c7:92:03:9d:6d:b6:36:6e:7b:c1:74:30:1d:b3:3c:be:76:98: 89:ee:b3:00:3e:56:bf:5b:f1:2d:e6:b2:73:24:ff:67:bc:09: a5:9c:21:5a:ce:32:fe:51:af:44:8c:54:0d:80:3e:72:32:56: 32:70:a8:b5:75:7b:64:9a:b9:2b:7d:fc:00:2b:d3:43:9f:42: 84:21:c1:8d:89:73:11:b1:0d:e5:95:c0:a9:62:ea:7b:04:b8: b5:2e:f3:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUbZRK4cYYwjlQbGAOd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2ZiYTExYTMxZDNhYTkwZGUzYzdiYjhiNTZkM2NkMDZl NmJlNzUwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD Eyg5NTI5NTc3ODA0NjcwYzdiNDgxZmMwZjNjOWY2NzZjZTk4YWRmNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFBzqS1/pDPLWFi/JpDQ//YV2oH wrT0xQORW4lEMJoYJq/7x95tX+caNweEgKkKIj/SSQz4xCm/UY6jUhTQNmEUFw5t H98Xab86/G4771RsOvO6HaxY54sGlTz6yzcKDsnbVfWI8LahkdNstr/23xqwt5kh dV7ks3sEYQBRLCmy8l493zZ0ttc4+ZxU18ZKKP2JqPWLxnMmRlJGv3pBCH7wkAZ8 elf+nJC9UBVkTiKSiLXa3jimC3AdHS7pPnY1xb9+TeVWC4iIwsi/Tc9ufwVks0Fu HOiUZg4P9xrbZorRYaD35aR+h6nh/xPVQ1f5RIkVi7yeKa4ur9wifsD0xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUpV3gEZwx7SB/A88n2ds6YrfSjMB8GA1UdIwQY MBaAFG5/uhGjHTqpDePHu4tW080G5r51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MmVmN2MtOWEzNi00MzYyLThlN2Yt NjM5NDIxNGExMjJjLzEvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MmVmN2MtOWEzNi00MzYyLThlN2YtNjM5NDIxNGExMjJj LzEvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGuaMvfs bPySXDofXUmktIP7H63iAx/Lhn1gBt1nY+FNXxVqeYvM+OsC73G8SAvKwgaydEGn S3tm2VCznVcI1MMkxgUezvQiiVD9WNSWzAukJxb8ylPX0QMmn2iP+XeCYT0JiRUw vuw08LJvY5uFmw/5wAyPI2It31hmZ2+omgdgDmkwm6z0jJ10T+FsoZbnaHYEh1vz PN345UVRVIQLM4DHx5IDnW22Nm57wXQwHbM8vnaYie6zAD5Wv1vxLeaycyT/Z7wJ pZwhWs4y/lGvRIxUDYA+cjJWMnCotXV7ZJq5K338ACvTQ59ChCHBjYlzEbEN5ZXA qWLqewS4tS7zAg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:33 2025 by rpki-client