This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft File: bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json) Hash identifier: D/7o92pvkYOeFh2iAWGrU1aL2GHV+ezmfkq++IbnBx0= Subject key identifier: 33:C7:EA:70:F8:DC:0B:E8:8C:BE:B4:30:63:AC:B2:06:B8:F4:0E:67 Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78 Certificate issuer: /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78 Certificate serial: 019B5A51F32AB8F64E1C784982F553F27F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft Manifest number: 45 Signing time: Fri 26 Dec 2025 11:01:18 +0000 Manifest this update: Fri 26 Dec 2025 11:01:18 +0000 Manifest next update: Sat 27 Dec 2025 11:01:18 +0000 Files and hashes: 1: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: cgQX8bU333PPmSFgfQDVnVy0yBKOx2lNTgnobUkAqWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f3:2a:b8:f6:4e:1c:78:49:82:f5:53:f2:7f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78 Validity Not Before: Dec 26 11:01:18 2025 GMT Not After : Dec 27 11:01:18 2025 GMT Subject: CN=33c7ea70f8dc0be88cbeb43063acb206b8f40e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:03:3b:45:21:87:0b:a4:6f:e0:3a:8e:9e: a2:67:18:21:52:87:94:46:c3:60:ea:fc:dc:bf:fd: 63:84:54:95:a3:78:be:b6:db:c9:75:e2:91:5b:94: ae:7e:02:44:3e:9e:99:7a:18:49:c8:c0:da:44:13: 36:bc:d4:d3:55:4c:02:4e:5d:fa:9f:06:ed:6c:71: 9d:2e:70:15:f1:37:02:71:aa:4c:e6:56:0a:e0:6d: 25:ce:c6:7d:db:72:ec:f6:45:80:51:3f:6d:1a:56: 82:cf:7c:a0:34:38:4a:1a:7e:1b:4c:bc:e3:44:cd: 2f:9b:97:2a:8a:5f:5c:5d:f1:f9:88:87:47:bf:b6: 67:f9:eb:f5:03:96:a1:56:f3:11:19:27:1c:3d:9d: 8e:d0:85:dc:26:f6:1a:db:25:f4:55:1c:f0:94:54: 7e:01:74:e3:86:49:cc:ec:10:f9:d7:5c:8a:05:52: 9d:90:ab:f1:0d:a4:a0:a4:aa:6b:53:78:dd:9a:51: fd:76:b8:0b:a5:91:29:20:13:54:21:a5:c8:0a:25: b2:d5:a1:a0:51:f3:5d:70:66:a1:95:11:b0:cd:16: 2a:d6:ca:d5:ea:79:c3:c6:99:1c:04:78:71:18:39: 24:28:63:b9:a7:b9:7c:49:61:66:c7:4f:e3:d0:9d: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C7:EA:70:F8:DC:0B:E8:8C:BE:B4:30:63:AC:B2:06:B8:F4:0E:67 X509v3 Authority Key Identifier: keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:19:de:2a:f4:4f:68:b7:82:95:88:d1:0f:2f:5f:f2:39:c5: c0:99:03:34:9e:94:f7:69:cf:66:1a:35:cb:25:fd:bc:11:c4: c8:92:83:a2:5d:60:10:2f:49:69:35:cb:e9:0d:9c:9d:bf:1c: 94:e3:c5:55:d1:b9:76:e3:1a:9c:23:96:3f:3e:df:7d:c3:c1: 2b:22:b4:bd:9b:f0:ed:81:40:93:f2:aa:40:a6:58:d8:02:e3: b2:80:14:5d:f0:b0:72:15:ac:45:9f:ca:ea:b8:c8:61:83:d8: c5:d5:65:b4:02:dc:99:6e:09:af:84:62:38:bf:f3:5d:4e:10: 56:b8:87:d1:f8:43:25:1f:69:da:31:3a:6f:5e:ad:e1:5c:12: 57:2e:03:59:99:2a:0f:11:cf:fb:ab:a7:b9:f3:66:02:c0:57: cc:e9:ea:b6:da:4a:ea:d8:cf:3a:1b:96:ce:81:99:e3:c9:b5: f7:a7:11:34:87:22:f9:e2:b0:b1:68:fe:ff:be:e1:12:9b:de: 4d:04:a0:bf:9d:47:73:cf:a2:52:f0:41:1c:08:a0:1c:e0:e5: df:63:e4:2a:4c:2d:0d:c5:1c:1c:99:09:ed:83:61:68:a7:a0: a7:75:63:b3:b6:3d:80:d1:6c:2d:e1:35:9e:fb:5f:9e:a0:48: 0b:0d:b1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfMquPZOHHhJgvVT8n+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGM2ZTUxNGY0ZjYyZWFkYjNlMjcxMGVhYzljOWYyZjA2 NDVmNzgwHhcNMjUxMjI2MTEwMTE4WhcNMjUxMjI3MTEwMTE4WjAzMTEwLwYDVQQD EygzM2M3ZWE3MGY4ZGMwYmU4OGNiZWI0MzA2M2FjYjIwNmI4ZjQwZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7wDO0Uhhwukb+A6jp6iZxghUoeU RsNg6vzcv/1jhFSVo3i+ttvJdeKRW5SufgJEPp6ZehhJyMDaRBM2vNTTVUwCTl36 nwbtbHGdLnAV8TcCcapM5lYK4G0lzsZ923Ls9kWAUT9tGlaCz3ygNDhKGn4bTLzj RM0vm5cqil9cXfH5iIdHv7Zn+ev1A5ahVvMRGSccPZ2O0IXcJvYa2yX0VRzwlFR+ AXTjhknM7BD511yKBVKdkKvxDaSgpKprU3jdmlH9drgLpZEpIBNUIaXICiWy1aGg UfNdcGahlRGwzRYq1srV6nnDxpkcBHhxGDkkKGO5p7l8SWFmx0/j0J09uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPH6nD43AvojL60MGOssga49A5nMB8GA1UdIwQY MBaAFG3cblFPT2Lq2z4nEOrJyfLwZF94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2Mt YjZiNzRhZDc1MjJhLzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2MtYjZiNzRhZDc1MjJh LzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxneKvRP aLeClYjRDy9f8jnFwJkDNJ6U92nPZho1yyX9vBHEyJKDol1gEC9JaTXL6Q2cnb8c lOPFVdG5duManCOWPz7ffcPBKyK0vZvw7YFAk/KqQKZY2ALjsoAUXfCwchWsRZ/K 6rjIYYPYxdVltALcmW4Jr4RiOL/zXU4QVriH0fhDJR9p2jE6b16t4VwSVy4DWZkq DxHP+6unufNmAsBXzOnqttpK6tjPOhuWzoGZ48m196cRNIci+eKwsWj+/77hEpve TQSgv51Hc8+iUvBBHAigHODl32PkKkwtDcUcHJkJ7YNhaKegp3Vjs7Y9gNFsLeE1 nvtfnqBICw2xbQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client