This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json) Hash identifier: XH5S7TKSeE0oat0plHJjdU/LUOt8ciNiqPN13PhrdCE= Subject key identifier: A5:02:3D:89:16:DC:F1:A5:F4:A6:EC:4B:54:22:3A:09:5F:6C:23:79 Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177 Certificate serial: 019AF12CC804F426EB33B4FFDBDEA5619020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft Manifest number: 0FBD Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: V6+ph1zU7egENSyaJ4r/5Xuvb6GyIcrbkR24L8TGI1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c8:04:f4:26:eb:33:b4:ff:db:de:a5:61:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=a5023d8916dcf1a5f4a6ec4b54223a095f6c2379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:30:eb:9a:72:68:ec:3d:35:d4:31:32:67: f7:7c:32:9f:66:c8:87:7d:4c:02:5f:cd:96:9c:6e: 6e:bd:ea:5b:ab:d3:be:b8:3c:d8:fd:28:07:0c:1b: 5e:cb:cb:1d:38:ef:bb:ed:12:93:8b:da:fb:94:f2: da:7d:27:8f:46:bd:d7:78:0f:af:79:35:b4:41:1d: f8:8b:96:48:4c:8c:9d:e8:2b:5e:2f:0b:5d:77:db: 0f:73:3c:e5:da:85:e4:d3:0a:0a:d5:f0:02:c9:19: 0c:21:e4:72:87:8d:bd:1d:42:44:e3:05:cd:96:35: 31:90:e1:23:dd:90:d3:e9:e2:a5:c3:68:28:f0:48: 35:62:b9:54:bd:40:6b:9d:fb:82:e9:20:21:b9:8a: 1f:92:09:64:75:ae:40:51:20:e3:ea:4a:9a:67:32: b0:e3:46:ab:c2:85:a1:21:22:72:b6:e9:da:6b:2a: df:2a:37:6e:be:d0:0b:de:f2:46:06:bd:df:02:d5: 63:bb:2e:da:2e:6b:dc:f4:01:29:26:90:ca:e8:16: a9:14:9e:45:b5:db:7b:e8:98:03:82:90:45:c8:ed: cb:41:87:ec:0b:99:53:bc:fc:fb:93:81:6c:1f:d5: 30:04:4c:e4:dc:75:51:89:de:01:d2:31:88:f9:6c: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:02:3D:89:16:DC:F1:A5:F4:A6:EC:4B:54:22:3A:09:5F:6C:23:79 X509v3 Authority Key Identifier: keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:02:5e:51:ea:0c:de:de:77:6a:08:3d:87:a2:ce:ba:08:b9: 18:5c:cb:22:cb:ce:4f:bc:d8:b7:a8:59:ff:57:13:20:35:50: 62:e9:f8:5e:de:d6:08:53:11:3f:f9:b4:43:61:28:ac:3d:b3: 8a:1d:2e:df:8c:25:dd:d2:7b:bb:f4:36:89:ea:dd:02:60:f6: 34:27:d3:9a:d8:58:9e:2f:44:c8:f3:c8:a5:9e:3d:63:70:71: 24:ed:15:e6:94:06:73:0c:12:ce:82:f9:c9:ad:92:44:04:90: b0:bd:bb:d6:29:ce:4b:33:4d:84:03:a8:79:44:26:a6:82:23: 4d:89:55:68:47:8a:49:05:2c:42:c7:43:dc:1c:e7:aa:70:24: 70:72:25:33:4c:c4:4c:e9:e6:81:48:99:78:5f:88:d0:6e:aa: df:cd:de:36:4f:58:26:42:5c:18:07:4a:4b:40:a4:8a:59:90: 1e:54:f6:84:bd:96:70:12:b5:b2:ae:30:80:11:94:6e:0e:cf: 2c:42:9c:3e:77:67:8a:d0:89:e3:37:4a:3d:21:11:fe:7b:5d: 5f:82:8b:dc:12:ff:f4:73:08:a9:25:b8:e8:9f:d1:8d:0a:77: ce:05:30:97:e0:78:1a:bd:50:31:06:f4:c1:c2:53:95:49:a1: de:34:e0:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMgE9CbrM7T/296lYZAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMjYxZDlkY2RkZDk4NjdlNTg5MmFkMWE0ZDIwOGRmNjk1 MzExNzcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhhNTAyM2Q4OTE2ZGNmMWE1ZjRhNmVjNGI1NDIyM2EwOTVmNmMyMzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qow65pyaOw9NdQxMmf3fDKfZsiH fUwCX82WnG5uvepbq9O+uDzY/SgHDBtey8sdOO+77RKTi9r7lPLafSePRr3XeA+v eTW0QR34i5ZITIyd6CteLwtdd9sPczzl2oXk0woK1fACyRkMIeRyh429HUJE4wXN ljUxkOEj3ZDT6eKlw2go8Eg1YrlUvUBrnfuC6SAhuYofkglkda5AUSDj6kqaZzKw 40arwoWhISJytunaayrfKjduvtAL3vJGBr3fAtVjuy7aLmvc9AEpJpDK6BapFJ5F tdt76JgDgpBFyO3LQYfsC5lTvPz7k4FsH9UwBEzk3HVRid4B0jGI+Wz1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUCPYkW3PGl9KbsS1QiOglfbCN5MB8GA1UdIwQY MBaAFG4mHZ3N3Zhn5Ykq0aTSCN9pUxF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZjUyZDgtYzJjYS00YTdmLWJkNjMt ZmJhNTY1MjM4MTI5LzEvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83ZjUyZDgtYzJjYS00YTdmLWJkNjMtZmJhNTY1MjM4MTI5 LzEvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwJeUeoM 3t53agg9h6LOugi5GFzLIsvOT7zYt6hZ/1cTIDVQYun4Xt7WCFMRP/m0Q2EorD2z ih0u34wl3dJ7u/Q2ierdAmD2NCfTmthYni9EyPPIpZ49Y3BxJO0V5pQGcwwSzoL5 ya2SRASQsL271inOSzNNhAOoeUQmpoIjTYlVaEeKSQUsQsdD3BznqnAkcHIlM0zE TOnmgUiZeF+I0G6q383eNk9YJkJcGAdKS0CkilmQHlT2hL2WcBK1sq4wgBGUbg7P LEKcPndnitCJ4zdKPSER/ntdX4KL3BL/9HMIqSW46J/RjQp3zgUwl+B4Gr1QMQb0 wcJTlUmh3jTgew== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:06 2025 by rpki-client