This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json) Hash identifier: rhXdISo1b+guLvOYy/eaZct8gC3j5SEqb8zcS5WVvns= Subject key identifier: 5D:41:83:98:E0:32:33:A7:B1:49:AB:53:3B:C7:0F:BB:26:D5:9F:40 Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Certificate serial: 019B345694F50C80042E6FB1D7ABC705C719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 02:00:47 +0000 Manifest this update: Fri 19 Dec 2025 02:00:47 +0000 Manifest next update: Sat 20 Dec 2025 02:00:47 +0000 Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=) 2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: b9oQ3W9EGTr7llOs+btsNtog8Tb+NAEET0p1Q4dP3Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:94:f5:0c:80:04:2e:6f:b1:d7:ab:c7:05:c7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Validity Not Before: Dec 19 02:00:47 2025 GMT Not After : Dec 20 02:00:47 2025 GMT Subject: CN=5d418398e03233a7b149ab533bc70fbb26d59f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:7c:09:e9:ca:46:5f:88:82:db:16:85:0f: 1e:73:b2:12:9d:5e:85:eb:0b:b3:fa:b8:de:41:06: 2c:93:9a:ef:6b:de:32:ce:11:fd:49:9d:39:86:0f: 05:5d:a8:d0:f9:cf:ba:c1:f8:f5:17:3f:cf:10:cc: c5:06:e4:aa:66:3a:02:1f:bd:8e:05:5a:3f:bb:a0: 08:f9:0d:c4:ed:cb:5d:d4:31:5b:ec:d3:16:50:37: f8:9e:d0:a1:57:20:cf:93:3a:db:7c:96:b9:e1:01: 2c:2a:01:be:3c:e1:1b:ea:58:b4:be:16:27:47:9d: 1e:de:b3:96:80:e5:03:c7:ff:98:27:33:03:f6:7c: af:9f:07:db:1e:f4:ac:47:f4:15:e2:29:87:73:63: ba:49:b7:23:d8:11:ca:bd:19:18:5b:2c:a1:88:39: 7b:20:cd:9f:b8:8a:fa:a9:34:a8:31:26:43:da:60: 8e:a1:78:4c:7d:b8:9c:f1:2b:9f:52:35:97:04:a6: ef:2b:90:b1:7b:29:b2:23:59:e4:c1:c0:92:98:00: 56:a4:17:79:9c:83:21:aa:7d:1b:dc:e5:64:25:c5: b8:16:5e:09:b2:f9:91:88:2b:af:2d:ea:5c:39:1c: bf:94:e2:0c:31:f6:21:33:d4:aa:df:96:10:a5:a9: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:41:83:98:E0:32:33:A7:B1:49:AB:53:3B:C7:0F:BB:26:D5:9F:40 X509v3 Authority Key Identifier: keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:e4:bf:ea:3a:82:55:73:2e:28:d2:f0:20:6c:10:bd:5c: b0:b2:3c:ec:f8:4f:ff:d6:c5:e9:09:1b:d1:f1:c7:f5:89:47: 22:f7:d2:5b:c4:53:2d:23:4e:68:e7:9f:1c:6e:8c:bf:f0:f2: 89:c6:b9:dd:7e:49:45:c0:80:f0:7c:d3:0e:9a:5d:91:9a:75: 06:a9:9d:4d:7e:d7:1f:6e:32:af:61:33:94:3b:ef:a0:f8:1d: 7e:75:d0:ac:1d:47:89:0f:1f:0d:46:39:c2:bc:22:ca:60:ec: 78:b8:9a:37:ca:8f:4a:f7:ad:a8:33:77:46:3a:76:8e:e1:50: 24:20:bc:72:10:b1:90:99:60:6b:0e:dc:76:92:21:68:f7:9e: ee:19:7d:90:51:df:dd:79:d6:8e:7e:4f:5d:73:d4:2a:8a:c0: e1:fc:11:da:a6:1f:29:0f:06:26:33:0d:b7:45:94:e9:6d:e2: 9e:ef:7c:a5:6c:6e:a6:5e:17:4e:62:a4:7d:34:7f:86:09:1c: 6f:03:12:5d:10:f3:78:0c:48:47:69:7b:57:59:e7:4f:09:8f: 67:5f:bd:40:fb:b6:55:fe:31:b1:02:d2:04:79:75:a6:ee:fc: fc:7d:d0:c3:6a:52:47:f1:56:d1:bc:7d:e4:3e:89:87:31:65: bf:60:56:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpT1DIAELm+x16vHBccZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGVjN2IyZTlmODY2ZWFjMzZiYzMxY2E0YzRmZjYyZDUz ZGQxNjYwHhcNMjUxMjE5MDIwMDQ3WhcNMjUxMjIwMDIwMDQ3WjAzMTEwLwYDVQQD Eyg1ZDQxODM5OGUwMzIzM2E3YjE0OWFiNTMzYmM3MGZiYjI2ZDU5ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNd8CenKRl+IgtsWhQ8ec7ISnV6F 6wuz+rjeQQYsk5rva94yzhH9SZ05hg8FXajQ+c+6wfj1Fz/PEMzFBuSqZjoCH72O BVo/u6AI+Q3E7ctd1DFb7NMWUDf4ntChVyDPkzrbfJa54QEsKgG+POEb6li0vhYn R50e3rOWgOUDx/+YJzMD9nyvnwfbHvSsR/QV4imHc2O6Sbcj2BHKvRkYWyyhiDl7 IM2fuIr6qTSoMSZD2mCOoXhMfbic8SufUjWXBKbvK5CxeymyI1nkwcCSmABWpBd5 nIMhqn0b3OVkJcW4Fl4JsvmRiCuvLepcORy/lOIMMfYhM9Sq35YQpalz5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1Bg5jgMjOnsUmrUzvHD7sm1Z9AMB8GA1UdIwQY MBaAFGzex7Lp+Gbqw2vDHKTE/2LVPdFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDIt NGU2N2JlNGU0MzJlLzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDItNGU2N2JlNGU0MzJl LzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqW3kv+o6 glVzLijS8CBsEL1csLI87PhP/9bF6Qkb0fHH9YlHIvfSW8RTLSNOaOefHG6Mv/Dy ica53X5JRcCA8HzTDppdkZp1BqmdTX7XH24yr2EzlDvvoPgdfnXQrB1HiQ8fDUY5 wrwiymDseLiaN8qPSvetqDN3Rjp2juFQJCC8chCxkJlgaw7cdpIhaPee7hl9kFHf 3XnWjn5PXXPUKorA4fwR2qYfKQ8GJjMNt0WU6W3inu98pWxupl4XTmKkfTR/hgkc bwMSXRDzeAxIR2l7V1nnTwmPZ1+9QPu2Vf4xsQLSBHl1pu78/H3Qw2pSR/FW0bx9 5D6JhzFlv2BWwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:53:31 2025 by rpki-client