This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: +U9916XcbgvRQoML7JkJeump8yNPxkEWLgWj6fNRNXY=
Subject key identifier: 58:6C:CA:6F:77:23:63:05:5C:7B:28:7A:77:F4:8B:76:A9:D8:CC:2B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019AF6F9008930621B01DECE1BC685074289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0ABD
Signing time: Sun 07 Dec 2025 04:01:44 +0000
Manifest this update: Sun 07 Dec 2025 04:01:44 +0000
Manifest next update: Mon 08 Dec 2025 04:01:44 +0000
Files and hashes: 1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=)
2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=)
3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=)
4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=)
5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=)
6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=)
7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=)
8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=)
9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=)
10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=)
11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=)
12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: DGJ3/Vf69DpwD403FQ8CN8nBySL67Arfo1csnwB1LUA=)
13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=)
14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=)
15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=)
16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=)
17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=)
18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=)
19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=)
20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=)
21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:f9:00:89:30:62:1b:01:de:ce:1b:c6:85:07:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Dec 7 04:01:44 2025 GMT
Not After : Dec 8 04:01:44 2025 GMT
Subject: CN=586cca6f772363055c7b287a77f48b76a9d8cc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:14:3c:85:4a:8d:27:12:74:6b:9e:a8:09:
63:ae:72:82:e3:be:0a:98:3f:03:3e:99:10:38:6f:
37:88:2f:c4:f6:a2:7c:e8:c7:b9:94:76:8d:17:4d:
e2:c9:d0:0f:13:00:d3:da:bf:15:72:8a:38:35:fd:
bb:54:bd:e9:7b:f5:90:b2:1a:cb:41:18:a0:d7:c7:
fa:fc:1c:05:09:92:c6:89:fb:3d:b2:de:fb:1b:1b:
9a:de:b2:cd:ad:86:ed:5c:41:a2:22:bb:6e:4a:3f:
ba:bd:4b:6a:4e:a0:94:00:46:cd:7b:27:68:d7:c2:
ba:bd:a7:70:36:74:a3:1d:c8:47:6d:6e:46:c8:e8:
1f:cf:ce:3d:29:f0:18:8a:95:0e:62:c3:15:37:93:
d7:ba:24:a1:51:73:44:14:62:4a:ab:ce:87:9e:75:
4c:49:d5:5f:c3:05:04:70:5a:25:c5:1d:0a:96:62:
57:3f:6c:65:b7:4f:a6:d2:3a:5c:e4:1a:3a:55:4d:
e0:1d:a1:79:26:4f:f7:27:25:b3:00:01:9c:45:ab:
32:e7:16:a0:e0:02:d8:6a:d9:79:28:54:1c:46:4e:
a7:5b:d8:62:13:85:19:96:11:c9:2d:78:31:fc:01:
cf:94:8c:01:55:24:d6:61:8e:f4:b6:99:5c:a1:cc:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:CA:6F:77:23:63:05:5C:7B:28:7A:77:F4:8B:76:A9:D8:CC:2B
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:9d:68:2b:e6:73:d2:ad:6b:60:7e:0d:3b:6e:1c:93:8d:
b8:15:d8:44:f0:95:b0:03:8d:9e:26:f6:64:f8:2f:fc:47:50:
b4:7c:50:a9:d5:a2:9b:1e:06:9e:a5:34:75:7f:5d:4c:f3:44:
40:ac:9d:14:09:c4:f7:1a:12:95:2d:68:e4:b5:4a:2f:0e:ee:
03:07:c6:44:0e:e1:81:54:87:13:0e:cd:6f:d2:80:b5:32:4e:
c1:ac:48:1a:20:88:e5:9b:bc:c6:29:b4:50:50:2b:ca:7e:ef:
7b:c5:9e:8a:55:78:68:c7:37:73:c2:5c:27:dd:39:ea:d6:82:
f4:46:1e:92:18:4c:f3:e5:8b:9f:c3:a0:db:69:40:70:08:84:
bd:23:4b:bf:a8:18:0a:cf:8d:ec:2b:6f:69:35:d2:d4:65:f0:
13:59:1e:2b:ec:5a:8b:37:f7:bb:2b:3c:c1:fd:55:98:4e:3b:
d1:09:68:4c:b4:50:d4:70:45:ae:49:3d:6d:d4:69:02:b1:7d:
4a:7f:37:72:b9:e2:29:c8:4e:48:fa:49:1c:1a:40:c8:7a:4d:
28:a9:b4:8e:a8:d5:ef:49:bc:4b:7e:f3:4d:24:80:82:7a:8d:
c7:30:52:53:fe:ab:6c:5d:39:47:cb:83:7e:72:32:7e:2f:b8:
0d:61:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:52:29 2025 by rpki-client