This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json) Hash identifier: ILu8rgh9SYWhfJCv7MZ9vWDL8iRP8rJfaUews2nFdMA= Subject key identifier: 09:B5:01:99:5E:0E:00:D4:0E:B1:ED:D6:80:2C:04:97:31:26:F2:F3 Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Certificate serial: 019B29D2C4EA5D37B8883725AC869D387415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft Manifest number: 0B8B Signing time: Wed 17 Dec 2025 01:00:37 +0000 Manifest this update: Wed 17 Dec 2025 01:00:37 +0000 Manifest next update: Thu 18 Dec 2025 01:00:37 +0000 Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: Ro9kNfzqizutwhzh9H2fHx3mHjag+39mZZ0vfl4NSYQ=) 2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d2:c4:ea:5d:37:b8:88:37:25:ac:86:9d:38:74:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c Validity Not Before: Dec 17 01:00:37 2025 GMT Not After : Dec 18 01:00:37 2025 GMT Subject: CN=09b501995e0e00d40eb1edd6802c04973126f2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:e1:e6:26:cc:20:5b:72:da:9e:7b:d4:3c: d3:91:6e:20:98:18:8e:8a:20:d4:23:e4:e1:7c:b0: 0a:c7:75:52:71:cc:b8:c4:ef:b6:7f:55:cf:76:8e: 1a:1c:61:35:0d:58:6a:59:97:af:85:d2:b8:b8:54: 71:4c:d1:c2:11:e9:87:dd:e6:01:69:37:38:53:25: de:2e:0e:93:4b:ef:eb:6a:96:77:38:c3:24:d0:fe: d0:af:87:a1:c3:e9:06:81:8b:39:1e:8f:22:c5:56: 6b:b2:90:f4:79:31:6d:26:c0:d9:d5:0e:d9:d4:b4: 9e:65:c1:33:a0:69:22:65:ef:44:a9:3d:1a:51:83: 69:7a:c4:f8:8a:e6:9a:02:b7:cf:89:27:37:7b:33: d2:fe:a1:7d:8e:c9:6a:ea:cc:fe:1e:d6:30:67:87: 46:c7:9b:66:95:df:1a:8a:8a:a3:0f:b8:4e:ab:ea: 5e:c0:0a:bb:a1:b5:6a:a3:2c:e0:2c:6b:bd:59:11: ed:11:d8:5a:3e:21:db:02:b6:e1:47:8a:13:81:a4: c5:45:de:9a:7b:cc:61:06:73:de:d2:76:70:30:49: a2:a3:19:e2:bf:3a:05:78:41:a8:65:57:c5:30:64: 89:91:68:25:fe:55:13:2c:d4:d5:d5:27:e8:fe:17: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B5:01:99:5E:0E:00:D4:0E:B1:ED:D6:80:2C:04:97:31:26:F2:F3 X509v3 Authority Key Identifier: keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e0:06:51:9a:7f:fe:67:97:6e:b2:bc:b4:3b:c8:c5:68:ac: 88:18:9e:b5:cc:8d:83:f7:9e:86:71:b1:4b:2e:83:e9:03:7a: e7:0d:db:da:74:dc:4f:00:49:52:09:e3:f3:d1:7b:a2:56:0d: 7b:04:a9:14:3b:db:2b:ab:76:c8:f9:e4:dc:54:1b:eb:17:cd: 7e:07:3b:41:e2:32:63:c0:32:cf:e3:80:8d:f2:7f:8d:bb:66: 79:e5:04:84:44:fe:5e:7c:90:de:6e:60:06:16:7e:39:16:26: ae:3e:5c:da:88:de:a7:42:fd:f7:a9:6c:0e:85:7b:ef:ea:74: 94:a3:b5:08:e8:03:35:15:b0:80:e4:e6:6c:30:f8:8c:6c:8a: 6b:a4:e2:e2:1a:41:df:93:d6:85:34:fc:99:08:29:3c:c8:61: 27:5b:2e:7a:ae:b3:a1:f8:5e:97:38:50:e9:2d:b1:88:b5:c6: fd:a3:67:8a:5a:54:21:96:c2:3d:e4:23:26:16:45:39:e2:f3: 84:83:00:2d:5b:89:07:c3:97:95:8c:7d:a6:64:5e:21:c5:63: 40:87:6c:47:ad:c1:f6:4d:cd:8d:e7:48:90:d9:af:6a:c6:fd: 9c:0e:70:4d:9c:d8:df:84:68:e6:75:9e:69:6b:5f:84:db:82: 0a:d3:60:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp0sTqXTe4iDclrIadOHQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0 OWFhNmMwHhcNMjUxMjE3MDEwMDM3WhcNMjUxMjE4MDEwMDM3WjAzMTEwLwYDVQQD EygwOWI1MDE5OTVlMGUwMGQ0MGViMWVkZDY4MDJjMDQ5NzMxMjZmMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnjh5ibMIFty2p571DzTkW4gmBiO iiDUI+ThfLAKx3VSccy4xO+2f1XPdo4aHGE1DVhqWZevhdK4uFRxTNHCEemH3eYB aTc4UyXeLg6TS+/rapZ3OMMk0P7Qr4ehw+kGgYs5Ho8ixVZrspD0eTFtJsDZ1Q7Z 1LSeZcEzoGkiZe9EqT0aUYNpesT4iuaaArfPiSc3ezPS/qF9jslq6sz+HtYwZ4dG x5tmld8aioqjD7hOq+pewAq7obVqoyzgLGu9WRHtEdhaPiHbArbhR4oTgaTFRd6a e8xhBnPe0nZwMEmioxnivzoFeEGoZVfFMGSJkWgl/lUTLNTV1Sfo/hdZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm1AZleDgDUDrHt1oAsBJcxJvLzMB8GA1UdIwQY MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOAGUZp/ /meXbrK8tDvIxWisiBietcyNg/eehnGxSy6D6QN65w3b2nTcTwBJUgnj89F7olYN ewSpFDvbK6t2yPnk3FQb6xfNfgc7QeIyY8Ayz+OAjfJ/jbtmeeUEhET+XnyQ3m5g BhZ+ORYmrj5c2ojep0L996lsDoV77+p0lKO1COgDNRWwgOTmbDD4jGyKa6Ti4hpB 35PWhTT8mQgpPMhhJ1sueq6zofhelzhQ6S2xiLXG/aNnilpUIZbCPeQjJhZFOeLz hIMALVuJB8OXlYx9pmReIcVjQIdsR63B9k3NjedIkNmvasb9nA5wTZzY34Ro5nWe aWtfhNuCCtNg0A== -----END CERTIFICATE-----Generated at Wed Dec 17 04:16:04 2025 by rpki-client