This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json) Hash identifier: WMpNSiDq6rOBeSLt86as77KDOlS9Xu6T/Lx/sgaanH4= Subject key identifier: D8:47:36:9A:B7:FB:8F:6A:A5:68:92:4F:A0:7B:0E:76:28:37:72:B3 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019B0FA54B41F2C914BD28C23D6A4DEEF709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft Manifest number: 1673 Signing time: Thu 11 Dec 2025 23:00:49 +0000 Manifest this update: Thu 11 Dec 2025 23:00:49 +0000 Manifest next update: Fri 12 Dec 2025 23:00:49 +0000 Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: HroExVTnVmIGELXzkaXlxJbiBEv5S685gqu4F/gtplU=) 2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:4b:41:f2:c9:14:bd:28:c2:3d:6a:4d:ee:f7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Dec 11 23:00:49 2025 GMT Not After : Dec 12 23:00:49 2025 GMT Subject: CN=d847369ab7fb8f6aa568924fa07b0e76283772b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:51:1c:1b:fd:53:92:fa:6c:ae:16:64:7d: c3:77:44:1f:62:4f:85:af:d9:98:83:8d:a3:4a:aa: e3:4c:88:f2:dd:2d:77:94:d5:01:86:11:25:14:ea: 4b:fc:48:c2:cf:85:76:9f:c4:96:a7:b6:4f:a3:c6: e7:a9:d1:a1:1c:c7:d6:02:39:ab:1f:0a:f7:18:6f: 51:6b:bd:72:59:df:f8:4a:e0:20:e7:e0:56:b9:59: 69:8e:a5:3f:8c:b9:b9:0c:d2:45:49:06:47:4f:41: 4a:bf:47:d7:c8:6e:b7:92:7d:2f:20:77:82:40:73: 83:f0:fd:58:32:c0:5d:d4:f4:f0:33:e1:b2:43:34: 90:a6:ee:d7:48:6b:d1:45:d4:a0:a3:8a:1b:31:22: b2:83:ef:15:29:b2:40:c1:98:6f:c0:81:09:39:fa: 63:13:74:79:23:97:19:6a:33:0c:56:51:e4:11:ca: fc:76:b5:f6:4b:56:42:e2:ef:1f:49:6a:74:15:17: 11:8b:e0:2a:74:d7:d0:a6:37:48:56:ab:00:c5:74: 77:73:df:3b:79:8c:23:36:7c:6c:e6:66:5b:6c:42: 73:26:53:bb:4d:bc:4c:68:38:8c:7c:fd:9e:bd:73: 44:6c:0c:9e:71:de:9f:d9:e0:ac:61:4a:f8:4b:68: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:47:36:9A:B7:FB:8F:6A:A5:68:92:4F:A0:7B:0E:76:28:37:72:B3 X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:25:f1:0c:99:c7:4d:5b:70:7b:8f:40:bd:24:4a:0c:f3:ac: c9:dd:68:f8:fc:ea:3f:2e:4b:38:04:99:59:13:8c:6c:c0:bf: 80:55:6f:81:87:01:d8:df:38:94:b1:1a:ac:c4:45:b2:1b:bc: 79:34:45:7b:46:33:1d:cb:72:37:a0:98:af:ad:22:cf:f4:3e: 07:df:81:65:2b:10:0e:1f:16:62:69:6e:57:d9:63:e5:f0:ad: 06:5b:e1:be:31:4d:f5:db:f0:de:2d:c1:0e:20:67:31:35:7c: e1:26:7b:f0:bd:50:fb:42:0b:f9:62:c6:a1:b6:28:1d:be:ab: 73:d1:69:6b:1d:4a:4f:5e:d2:f1:68:89:d9:bc:79:d4:df:16: c9:4f:a3:f8:6c:da:7d:c7:90:26:ec:f1:c3:4a:08:75:fa:62: cd:eb:01:e5:b0:8c:a5:2f:c7:94:27:f4:d9:47:df:ec:59:1a: b3:b5:6b:fc:8c:ff:5e:e8:c2:54:fb:36:b7:0b:9f:da:87:30: db:14:e4:9c:e7:09:29:4c:93:4a:a7:45:35:af:e5:7c:ab:2c: 97:2c:e1:22:0a:c3:c5:da:4d:3b:ea:c1:8b:4d:ff:5e:3d:42: 6a:4a:3c:c5:66:91:25:75:30:43:b9:47:07:50:93:a6:87:df: c7:52:84:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUtB8skUvSjCPWpN7vcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjUxMjExMjMwMDQ5WhcNMjUxMjEyMjMwMDQ5WjAzMTEwLwYDVQQD EyhkODQ3MzY5YWI3ZmI4ZjZhYTU2ODkyNGZhMDdiMGU3NjI4Mzc3MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc9RHBv9U5L6bK4WZH3Dd0QfYk+F r9mYg42jSqrjTIjy3S13lNUBhhElFOpL/EjCz4V2n8SWp7ZPo8bnqdGhHMfWAjmr Hwr3GG9Ra71yWd/4SuAg5+BWuVlpjqU/jLm5DNJFSQZHT0FKv0fXyG63kn0vIHeC QHOD8P1YMsBd1PTwM+GyQzSQpu7XSGvRRdSgo4obMSKyg+8VKbJAwZhvwIEJOfpj E3R5I5cZajMMVlHkEcr8drX2S1ZC4u8fSWp0FRcRi+AqdNfQpjdIVqsAxXR3c987 eYwjNnxs5mZbbEJzJlO7TbxMaDiMfP2evXNEbAyecd6f2eCsYUr4S2gxhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhHNpq3+49qpWiST6B7DnYoN3KzMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSXxDJnH TVtwe49AvSRKDPOsyd1o+PzqPy5LOASZWROMbMC/gFVvgYcB2N84lLEarMRFshu8 eTRFe0YzHctyN6CYr60iz/Q+B9+BZSsQDh8WYmluV9lj5fCtBlvhvjFN9dvw3i3B DiBnMTV84SZ78L1Q+0IL+WLGobYoHb6rc9Fpax1KT17S8WiJ2bx51N8WyU+j+Gza fceQJuzxw0oIdfpizesB5bCMpS/HlCf02Uff7Fkas7Vr/Iz/XujCVPs2twuf2ocw 2xTknOcJKUyTSqdFNa/lfKsslyzhIgrDxdpNO+rBi03/Xj1Cako8xWaRJXUwQ7lH B1CTpoffx1KEFw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:36:30 2025 by rpki-client