This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json) Hash identifier: NjiWM/yYFkT0PdZ3r0sCR/C8fITCVWPxmqn4PCm++M0= Subject key identifier: 0E:4C:D1:5A:9F:F0:D2:D2:D1:D7:59:3E:53:10:47:DF:56:11:EE:43 Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7 Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7 Certificate serial: 019B59760F1576CF9278B60CA5E9A7D5C7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft Manifest number: 102B Signing time: Fri 26 Dec 2025 07:01:07 +0000 Manifest this update: Fri 26 Dec 2025 07:01:07 +0000 Manifest next update: Sat 27 Dec 2025 07:01:07 +0000 Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: +NCjQ6Y1T6p2God0bAcMjcwLD6KOMu4vSSXVxxT+760=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0f:15:76:cf:92:78:b6:0c:a5:e9:a7:d5:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7 Validity Not Before: Dec 26 07:01:07 2025 GMT Not After : Dec 27 07:01:07 2025 GMT Subject: CN=0e4cd15a9ff0d2d2d1d7593e531047df5611ee43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:71:0e:0d:e4:74:7f:8e:f5:d2:e0:dd:79: 30:94:9a:9e:40:09:7f:55:b3:42:53:3a:4c:1c:66: d6:7c:01:1f:51:86:f0:43:ed:c2:14:26:e8:11:ac: ab:e8:af:21:04:9c:5b:40:41:36:0d:09:45:e8:27: 7c:a2:36:dd:79:d0:e7:b8:90:15:e0:93:2c:c7:cc: 3c:04:51:de:78:c2:76:d7:a8:ab:ec:5a:a6:83:47: 43:e0:bf:d0:fa:6a:4d:87:f2:8e:79:24:70:d7:e8: da:92:e2:fe:2a:33:bb:f0:18:9d:c0:ae:27:6f:7b: 57:a5:aa:d6:e0:43:f9:fe:77:8f:c2:6e:fe:23:c7: b0:c1:72:73:03:b0:5f:e5:a9:d5:f3:38:8c:05:91: 39:b9:e6:12:4d:30:bf:9c:53:0c:68:8b:bd:04:d9: 7f:9f:0f:e7:1d:71:e9:81:e7:d3:ac:37:03:5d:cb: e0:12:73:16:3d:74:d0:a2:e2:f7:40:e0:23:88:5f: aa:66:26:8e:50:74:00:d8:09:62:16:9f:4b:57:22: 86:f8:a3:40:dd:bd:86:42:ec:72:62:ed:c3:8c:b6: c3:40:fe:1f:e1:1d:1d:fc:5b:16:d1:da:6c:22:e1: 05:e0:92:7e:e7:e6:7d:7c:16:6d:80:8f:df:36:7e: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:D1:5A:9F:F0:D2:D2:D1:D7:59:3E:53:10:47:DF:56:11:EE:43 X509v3 Authority Key Identifier: keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3e:0c:12:2a:33:97:6a:bb:e1:2e:0f:2f:35:81:01:1e:22: df:99:ad:56:99:e6:79:66:c7:d9:32:74:97:ca:02:30:92:e7: a5:85:0d:a5:2b:2e:2c:4f:22:21:7b:29:f0:e5:5a:94:d6:ed: 09:48:b3:ef:3a:79:c8:5e:27:f0:00:d2:23:73:2d:68:33:53: 46:2f:77:4a:06:c9:9e:48:32:4e:be:40:b5:48:9f:66:69:3a: 6b:55:0a:23:50:9f:57:a0:f4:22:46:0b:95:3f:29:18:d3:f3: a9:96:94:15:f3:7f:f6:7b:48:a6:61:51:ce:e2:69:ca:91:5b: ae:c3:36:08:81:9d:d3:6c:e5:c8:1b:4b:54:0e:7b:1b:23:4c: f4:72:f5:26:39:fa:83:9c:bc:2b:51:b7:8e:61:ff:89:d5:f1: bb:31:ae:2c:23:a9:a8:e1:12:3a:3d:0b:2f:23:28:fc:c5:c4: 48:c3:4a:16:85:50:ec:34:19:96:27:f1:60:2c:c0:54:81:9f: 9e:0b:de:03:11:32:43:d1:e2:b8:7d:b6:5c:3d:c9:6a:e0:47: 9e:98:7d:64:08:63:b2:e8:eb:3c:3e:83:0d:10:9c:1b:52:0c: 65:2b:bc:74:05:3f:4e:e5:4c:c9:95:5b:6a:3d:24:0c:a3:2e: bb:4f:bf:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdg8Vds+SeLYMpemn1cegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMjkyNDRhYzQwMjY3ZWVjNDdhOTE3MDhmODljZjUzNjZl YWE4ZDcwHhcNMjUxMjI2MDcwMTA3WhcNMjUxMjI3MDcwMTA3WjAzMTEwLwYDVQQD EygwZTRjZDE1YTlmZjBkMmQyZDFkNzU5M2U1MzEwNDdkZjU2MTFlZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNhxDg3kdH+O9dLg3XkwlJqeQAl/ VbNCUzpMHGbWfAEfUYbwQ+3CFCboEayr6K8hBJxbQEE2DQlF6Cd8ojbdedDnuJAV 4JMsx8w8BFHeeMJ216ir7Fqmg0dD4L/Q+mpNh/KOeSRw1+jakuL+KjO78BidwK4n b3tXparW4EP5/nePwm7+I8ewwXJzA7Bf5anV8ziMBZE5ueYSTTC/nFMMaIu9BNl/ nw/nHXHpgefTrDcDXcvgEnMWPXTQouL3QOAjiF+qZiaOUHQA2AliFp9LVyKG+KNA 3b2GQuxyYu3DjLbDQP4f4R0d/FsW0dpsIuEF4JJ+5+Z9fBZtgI/fNn4PfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5M0Vqf8NLS0ddZPlMQR99WEe5DMB8GA1UdIwQY MBaAFGwpJErEAmfuxHqRcI+Jz1Nm6qjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUt ZTM2OTY2YmEwMDVjLzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUtZTM2OTY2YmEwMDVj LzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz4MEioz l2q74S4PLzWBAR4i35mtVpnmeWbH2TJ0l8oCMJLnpYUNpSsuLE8iIXsp8OValNbt CUiz7zp5yF4n8ADSI3MtaDNTRi93SgbJnkgyTr5AtUifZmk6a1UKI1CfV6D0IkYL lT8pGNPzqZaUFfN/9ntIpmFRzuJpypFbrsM2CIGd02zlyBtLVA57GyNM9HL1Jjn6 g5y8K1G3jmH/idXxuzGuLCOpqOESOj0LLyMo/MXESMNKFoVQ7DQZlifxYCzAVIGf ngveAxEyQ9HiuH22XD3JauBHnph9ZAhjsujrPD6DDRCcG1IMZSu8dAU/TuVMyZVb aj0kDKMuu0+/7g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:10 2025 by rpki-client