This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json) Hash identifier: D/c5F1dvjRWELVtdhyVvBsDEXQKp6ep8QN6GtPGZ+6s= Subject key identifier: 28:95:3D:33:87:72:11:57:21:66:89:7E:41:FD:16:9C:85:C6:95:45 Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019AF8AF7C3AA18B61732855B87FE92158DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft Manifest number: 0913 Signing time: Sun 07 Dec 2025 12:00:41 +0000 Manifest this update: Sun 07 Dec 2025 12:00:41 +0000 Manifest next update: Mon 08 Dec 2025 12:00:41 +0000 Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=) 2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: TDRh5gxoHgJg+Tt0ddFmvWthaKOqk1OBSZnA8tqTYpI=) 3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:af:7c:3a:a1:8b:61:73:28:55:b8:7f:e9:21:58:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Dec 7 12:00:41 2025 GMT Not After : Dec 8 12:00:41 2025 GMT Subject: CN=28953d33877211572166897e41fd169c85c69545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:34:6b:e8:b7:a0:51:71:c2:5f:c8:1e:e8: 9a:78:07:aa:36:ba:36:1d:1c:08:5d:88:f6:d0:29: f0:6e:fd:b0:98:6f:1b:bf:8a:e2:de:ab:49:97:09: 39:c4:a7:af:fb:c9:7e:93:e6:87:0d:c4:cd:f9:db: 03:fd:18:81:55:6e:ca:f7:e4:ab:75:d6:63:b0:2e: cb:fa:52:b7:69:ae:3e:06:05:f0:ee:8a:25:c4:05: e8:3e:d4:94:f6:2f:fa:70:cd:ca:56:e1:53:46:17: cf:b9:bd:80:79:b9:c8:d9:3c:69:7a:2c:4d:3e:01: 17:e6:1e:4f:de:d0:c6:96:82:0f:63:9a:be:f1:cb: 7c:fa:4e:6b:93:17:61:7e:63:7e:f4:50:a1:12:f4: ec:21:dd:0c:b8:ab:72:38:51:21:29:5c:ab:17:e9: 3e:2d:8c:60:89:b1:36:73:de:6f:94:c7:54:e1:4b: 20:28:2d:10:f2:01:5c:96:d5:26:93:38:e5:c5:0b: ad:eb:22:b2:3f:91:b4:89:1f:c8:98:db:e7:00:13: b2:58:e7:76:2e:d9:59:a7:a2:15:14:3d:1c:5e:86: d5:eb:6f:67:c0:24:bf:ce:a1:36:f3:53:d5:4c:a0: 5c:c1:c0:50:6d:c3:12:9e:0c:0f:88:cf:26:50:93: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:3D:33:87:72:11:57:21:66:89:7E:41:FD:16:9C:85:C6:95:45 X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ff:06:7f:21:40:fb:0f:0d:91:9f:ec:d1:bd:57:d3:ce:2f: 27:92:67:20:f7:3e:9f:9c:c8:b7:da:61:c4:ef:7d:7e:74:7a: 2c:d0:71:47:5c:c3:0e:f5:20:ea:1f:46:c3:05:9f:c4:a2:36: 80:16:98:10:d7:20:d6:71:bf:d2:60:03:50:cd:fb:40:0e:f7: 50:fc:01:00:1a:7e:6d:b7:c0:e5:cd:76:ba:f5:b2:4d:ac:33: 71:ab:23:9c:f6:d4:db:11:b6:ed:ad:86:e4:8b:bc:ab:87:fb: 54:38:d4:a5:f5:f4:22:60:88:d1:c8:3f:a0:f9:0b:63:d8:d0: 40:d4:c4:7c:dd:11:85:41:a5:eb:a3:4e:64:22:aa:86:89:23: 65:d0:f7:c0:c2:7e:8e:ca:73:93:d4:96:2d:ee:bc:92:70:ea: d4:d3:55:4b:0d:a4:56:e0:7e:01:d6:f7:b5:dc:2b:17:bf:ab: e3:95:55:1d:bb:24:29:b1:8d:d5:25:17:38:7f:78:63:a7:19: 1a:ab:dd:ba:93:8f:49:ff:39:32:70:23:a8:f7:d8:f2:99:69: 98:f3:32:4d:72:45:c7:8f:21:3b:96:f6:aa:ed:0f:01:43:15: c5:1d:67:c0:a7:fe:07:e7:20:37:01:b4:90:15:78:89:8a:e1: 8e:5a:88:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4r3w6oYthcyhVuH/pIVjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjUxMjA3MTIwMDQxWhcNMjUxMjA4MTIwMDQxWjAzMTEwLwYDVQQD EygyODk1M2QzMzg3NzIxMTU3MjE2Njg5N2U0MWZkMTY5Yzg1YzY5NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJw0a+i3oFFxwl/IHuiaeAeqNro2 HRwIXYj20Cnwbv2wmG8bv4ri3qtJlwk5xKev+8l+k+aHDcTN+dsD/RiBVW7K9+Sr ddZjsC7L+lK3aa4+BgXw7oolxAXoPtSU9i/6cM3KVuFTRhfPub2AebnI2TxpeixN PgEX5h5P3tDGloIPY5q+8ct8+k5rkxdhfmN+9FChEvTsId0MuKtyOFEhKVyrF+k+ LYxgibE2c95vlMdU4UsgKC0Q8gFcltUmkzjlxQut6yKyP5G0iR/ImNvnABOyWOd2 LtlZp6IVFD0cXobV629nwCS/zqE281PVTKBcwcBQbcMSngwPiM8mUJP1bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiVPTOHchFXIWaJfkH9FpyFxpVFMB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP8GfyFA +w8NkZ/s0b1X084vJ5JnIPc+n5zIt9phxO99fnR6LNBxR1zDDvUg6h9GwwWfxKI2 gBaYENcg1nG/0mADUM37QA73UPwBABp+bbfA5c12uvWyTawzcasjnPbU2xG27a2G 5Iu8q4f7VDjUpfX0ImCI0cg/oPkLY9jQQNTEfN0RhUGl66NOZCKqhokjZdD3wMJ+ jspzk9SWLe68knDq1NNVSw2kVuB+Adb3tdwrF7+r45VVHbskKbGN1SUXOH94Y6cZ GqvdupOPSf85MnAjqPfY8plpmPMyTXJFx48hO5b2qu0PAUMVxR1nwKf+B+cgNwG0 kBV4iYrhjlqIDg== -----END CERTIFICATE-----Generated at Sun Dec 7 22:03:12 2025 by rpki-client