This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json) Hash identifier: IX/cEOcIZ308kHmwdW+Lu6zGmqV7J5IFpw1koJTD6nQ= Subject key identifier: 7C:54:5A:49:0D:EC:76:B6:56:0A:DE:86:9E:18:C5:E4:2B:35:D3:F4 Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Certificate serial: 019AF19B9A5A366F81BD14611D81771A9201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft Manifest number: 07D6 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: hgmPOzScX4ZRtorAhgjvG9sJCS1z1PEIes7Hmivps6w=) 2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9a:5a:36:6f:81:bd:14:61:1d:81:77:1a:92:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=7c545a490dec76b6560ade869e18c5e42b35d3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:88:4d:df:8f:08:91:63:11:3c:8a:aa:7e: dd:15:90:de:70:72:08:5d:9c:a1:d5:1c:93:8d:55: 69:19:25:1d:8f:fe:80:58:24:e9:2c:84:7c:82:03: 86:d4:97:9c:e3:aa:34:69:d2:b8:2a:b3:6e:a6:25: 2d:0c:b7:80:76:c7:f4:52:6f:e2:95:04:82:8d:c7: 7e:32:bc:9c:67:dd:d4:18:dd:a6:40:57:63:23:f5: fc:22:f7:16:9f:c0:9e:b0:38:a0:58:15:30:78:24: b9:e8:9a:48:d3:7e:3f:b5:91:77:4d:03:46:8f:fd: 93:78:cb:7d:a2:fc:e9:e6:a7:71:47:0a:fd:30:a5: d3:1a:ed:28:7c:ec:35:37:67:f6:5a:2b:8f:a7:54: ae:b5:22:ea:99:70:06:8e:62:8e:90:33:80:0d:0e: b6:06:7b:da:66:7b:d1:e3:f6:66:23:2e:45:c9:8e: a1:80:c6:f5:bb:3f:2f:3e:0f:0a:f9:19:e6:15:45: c2:a1:cd:5c:96:ac:47:01:6c:d8:aa:50:76:ca:3d: 75:87:7f:fe:15:9c:94:05:e4:b0:24:40:8a:4d:75: 94:45:8c:7e:8b:4d:70:34:be:8c:2f:47:7e:fb:99: 11:9c:eb:d9:0c:9b:1f:69:91:87:16:88:30:db:75: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:54:5A:49:0D:EC:76:B6:56:0A:DE:86:9E:18:C5:E4:2B:35:D3:F4 X509v3 Authority Key Identifier: keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4e:8a:41:e3:ad:f4:db:28:ac:3e:10:3b:82:a2:d9:09:d4: bb:90:23:67:a9:92:2b:48:99:22:a3:6d:7d:58:4b:bc:b9:4d: 0c:d3:dc:54:ad:67:a8:ce:0b:5a:96:4f:a1:19:8e:7c:25:ee: b5:ce:26:e7:5e:b6:30:0c:57:7d:45:83:dd:e8:9c:93:7b:41: db:61:94:d3:2e:52:f6:17:48:1f:bc:77:b6:39:a5:7f:50:4e: d2:61:9e:4a:ba:4f:04:b4:cc:3e:76:60:b2:11:28:91:f1:73: b7:cd:92:70:d4:c9:28:74:40:c3:38:4d:52:36:d6:80:c6:20: 8b:fe:cd:ff:a1:90:d0:ea:bc:4e:7e:fb:5c:36:98:35:7b:4d: ba:6f:1e:21:c2:93:6b:a9:ec:10:62:00:6e:0c:51:48:b8:ab: 26:c4:ff:01:42:a7:ae:66:71:25:f3:b1:d3:a1:6d:18:7c:66: f3:66:29:e2:3b:ce:07:8d:7c:2f:89:79:62:49:3c:bc:44:3f: a6:db:1e:65:ef:99:9b:38:6f:f3:29:a6:38:33:1e:e9:fc:6c: 15:1e:77:45:0f:05:a6:5c:8f:eb:a6:a9:5c:d1:21:7a:04:1d: 3b:82:4c:ee:a1:86:c3:94:44:51:c4:6a:80:4c:50:78:a5:dd: 45:e4:72:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5paNm+BvRRhHYF3GpIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew Nzc4NzAwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg3YzU0NWE0OTBkZWM3NmI2NTYwYWRlODY5ZTE4YzVlNDJiMzVkM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+mITd+PCJFjETyKqn7dFZDecHII XZyh1RyTjVVpGSUdj/6AWCTpLIR8ggOG1Jec46o0adK4KrNupiUtDLeAdsf0Um/i lQSCjcd+MrycZ93UGN2mQFdjI/X8IvcWn8CesDigWBUweCS56JpI034/tZF3TQNG j/2TeMt9ovzp5qdxRwr9MKXTGu0ofOw1N2f2WiuPp1SutSLqmXAGjmKOkDOADQ62 BnvaZnvR4/ZmIy5FyY6hgMb1uz8vPg8K+RnmFUXCoc1clqxHAWzYqlB2yj11h3/+ FZyUBeSwJECKTXWURYx+i01wNL6ML0d++5kRnOvZDJsfaZGHFogw23W/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxUWkkN7Ha2Vgrehp4YxeQrNdP0MB8GA1UdIwQY MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt NDQ5NzNhNjAyZDlmLzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk06KQeOt 9NsorD4QO4Ki2QnUu5AjZ6mSK0iZIqNtfVhLvLlNDNPcVK1nqM4LWpZPoRmOfCXu tc4m5162MAxXfUWD3eick3tB22GU0y5S9hdIH7x3tjmlf1BO0mGeSrpPBLTMPnZg shEokfFzt82ScNTJKHRAwzhNUjbWgMYgi/7N/6GQ0Oq8Tn77XDaYNXtNum8eIcKT a6nsEGIAbgxRSLirJsT/AUKnrmZxJfOx06FtGHxm82Yp4jvOB418L4l5Ykk8vEQ/ ptseZe+Zmzhv8ymmODMe6fxsFR53RQ8FplyP66apXNEhegQdO4JM7qGGw5REUcRq gExQeKXdReRy8g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:57 2025 by rpki-client