This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json) Hash identifier: pUIPlUlWsGlEt98caZdK/awPf0WtTPzVR6HS1JcWVlk= Subject key identifier: 96:10:42:9E:47:48:A0:A1:1C:49:97:95:E3:1F:03:26:0D:8C:1D:76 Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec Certificate serial: 019AF16438FE49B2A273420E433682E43D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft Manifest number: 0595 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: vaaYfcD/hu/EAJhkMHTuMLfQN8LaDAedG4LGVlQobdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:38:fe:49:b2:a2:73:42:0e:43:36:82:e4:3d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=9610429e4748a0a11c499795e31f03260d8c1d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:5c:4f:00:f5:d6:cc:23:61:51:2a:25:94: e6:19:8c:e5:16:ce:4b:9f:d3:5a:d4:50:20:5f:db: 8c:eb:06:11:e8:58:c0:47:c0:44:d8:76:cc:86:5e: 1e:2b:fa:09:26:ea:43:01:ed:e5:87:14:bb:c1:5b: 70:b8:44:84:2d:05:72:1c:87:b9:9f:8e:af:0e:6a: 27:7b:72:bc:25:5b:0a:36:e1:ac:3a:60:22:c2:87: 4b:7c:ce:07:cf:a8:d4:4a:9c:27:db:48:e4:21:20: 3a:c9:bb:01:e6:40:92:7b:be:6a:dd:5e:3b:f7:08: cc:15:3b:d9:c1:f7:e3:08:2b:59:41:19:cc:af:cf: 3e:2a:e4:c9:93:52:d4:85:25:7a:ac:3c:61:04:34: 4c:cd:e7:e5:e7:27:e0:53:9a:56:5c:8f:a6:76:69: 84:16:4e:39:be:f6:10:c2:4e:ae:28:6a:24:f3:8f: db:d1:cf:e2:cf:a4:09:d1:28:0b:d9:bb:ba:f7:45: 01:51:6c:99:42:48:1f:ad:95:ad:c9:d5:d1:53:a2: 50:4b:d8:14:7e:35:8c:5b:38:1d:1e:75:fd:94:74: e9:ed:7d:51:44:ef:d3:06:81:7a:4a:e4:d8:a5:04: 3a:f0:f9:54:e2:00:09:86:d4:8d:9a:db:c2:63:d1: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:10:42:9E:47:48:A0:A1:1C:49:97:95:E3:1F:03:26:0D:8C:1D:76 X509v3 Authority Key Identifier: keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:d9:7f:fa:e9:06:cd:5f:fd:c4:e6:48:a0:02:ad:eb:35: 40:70:98:e2:3d:92:c2:be:28:92:c1:f5:c5:a4:6e:1f:4e:1c: 53:4f:5a:01:ff:9f:33:83:12:aa:10:25:eb:1b:69:3d:69:d7: 64:a6:d6:c4:a3:9f:83:c4:96:ad:31:ca:65:5e:46:b0:ef:2a: c0:07:21:ca:c9:44:c3:e2:59:2d:78:33:41:1c:04:e3:73:51: 56:17:ea:f1:39:b7:b0:ed:78:1c:85:38:32:14:63:50:32:3c: 14:c5:4b:56:f1:23:fb:cc:23:24:62:15:3b:9a:7f:02:dd:22: 0f:b4:13:54:65:6f:4e:3d:74:a0:31:a5:51:94:76:e7:5f:a0: f7:a2:58:10:f0:95:9e:b6:09:07:82:ea:e0:51:53:54:3e:49: 66:1b:e5:c6:24:60:37:e5:cb:b2:8e:1c:5f:2f:40:65:7f:1a: c0:3b:60:ba:d8:5b:c9:16:bf:1e:5e:4b:1d:f4:37:01:a0:5d: 93:02:7e:5d:b5:1d:08:06:3c:90:a8:d4:a0:39:11:37:32:2d: 02:65:a0:8b:b4:f2:9e:2f:52:dc:45:8a:15:10:16:c9:13:ff: a4:12:02:57:09:ba:aa:ec:cb:44:c9:df:cc:5f:c2:1a:5b:e6: 99:6f:59:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDj+SbKic0IOQzaC5D2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDEyODJhNzdlMjU2NjUwMTY4ZDJlNTY1NmFlZmNlOWFk NmEyZWMwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg5NjEwNDI5ZTQ3NDhhMGExMWM0OTk3OTVlMzFmMDMyNjBkOGMxZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKtcTwD11swjYVEqJZTmGYzlFs5L n9Na1FAgX9uM6wYR6FjAR8BE2HbMhl4eK/oJJupDAe3lhxS7wVtwuESELQVyHIe5 n46vDmone3K8JVsKNuGsOmAiwodLfM4Hz6jUSpwn20jkISA6ybsB5kCSe75q3V47 9wjMFTvZwffjCCtZQRnMr88+KuTJk1LUhSV6rDxhBDRMzefl5yfgU5pWXI+mdmmE Fk45vvYQwk6uKGok84/b0c/iz6QJ0SgL2bu690UBUWyZQkgfrZWtydXRU6JQS9gU fjWMWzgdHnX9lHTp7X1RRO/TBoF6SuTYpQQ68PlU4gAJhtSNmtvCY9E8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYQQp5HSKChHEmXleMfAyYNjB12MB8GA1UdIwQY MBaAFG3RKCp34lZlAWjS5WVq786a1qLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgt ZTAyMzNiN2M2MGFhLzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgtZTAyMzNiN2M2MGFh LzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhTZf/rp Bs1f/cTmSKACres1QHCY4j2Swr4oksH1xaRuH04cU09aAf+fM4MSqhAl6xtpPWnX ZKbWxKOfg8SWrTHKZV5GsO8qwAchyslEw+JZLXgzQRwE43NRVhfq8Tm3sO14HIU4 MhRjUDI8FMVLVvEj+8wjJGIVO5p/At0iD7QTVGVvTj10oDGlUZR251+g96JYEPCV nrYJB4Lq4FFTVD5JZhvlxiRgN+XLso4cXy9AZX8awDtguthbyRa/Hl5LHfQ3AaBd kwJ+XbUdCAY8kKjUoDkRNzItAmWgi7Tyni9S3EWKFRAWyRP/pBICVwm6quzLRMnf zF/CGlvmmW9Z5g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:39 2025 by rpki-client