This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json) Hash identifier: mvZ4Pzlv9aWRxjdRP+kSNnCnK4elg8q4BUvtwMuTWdE= Subject key identifier: 0C:D6:F4:F9:54:4B:0E:FE:FC:F5:AB:0D:70:71:3F:C8:49:14:38:97 Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e Certificate serial: 019B0935EE6D18BD3AE174ACCE4A9742843A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft Manifest number: 04F5 Signing time: Wed 10 Dec 2025 17:01:27 +0000 Manifest this update: Wed 10 Dec 2025 17:01:27 +0000 Manifest next update: Thu 11 Dec 2025 17:01:27 +0000 Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: U2xgkPeqZH5EI6XZUUACUg84DbofXfRriUafPFdKsXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:ee:6d:18:bd:3a:e1:74:ac:ce:4a:97:42:84:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e Validity Not Before: Dec 10 17:01:27 2025 GMT Not After : Dec 11 17:01:27 2025 GMT Subject: CN=0cd6f4f9544b0efefcf5ab0d70713fc849143897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:9e:80:6c:ab:57:00:b8:27:d5:bd:c6:4f: 7c:f4:4d:fd:21:a6:d6:d4:ca:8c:14:3a:d2:26:aa: 31:99:a3:6f:6d:f9:e7:c9:e7:8e:64:68:a9:8b:fb: 6c:10:af:37:79:5b:a7:c8:ee:e5:7d:c4:d8:74:fc: 93:49:7e:53:95:fa:0f:93:35:07:c7:4e:b7:89:5b: 7a:9d:16:fa:b7:56:ac:8d:1d:d0:20:37:bc:da:77: 1a:b0:1e:62:0e:6c:a3:52:fb:0d:9c:da:41:bc:7d: 77:73:13:7f:f2:8b:b3:ad:4c:9c:7f:f2:83:8f:78: 38:76:d5:62:17:6f:a6:c6:13:13:df:00:ec:d6:de: 39:7e:c0:92:7d:e7:4f:55:14:fd:3c:e5:7f:e5:fd: 8f:4e:e5:50:2a:ea:82:d9:d2:e6:00:1a:79:4c:0b: af:b4:64:5b:9a:29:7f:6c:ca:0e:95:0e:b7:35:bf: 28:e3:e7:19:63:df:1e:fb:fb:ca:c9:bc:9c:8a:50: a3:2d:3c:eb:8e:5d:4d:28:56:b1:30:ed:76:23:99: 15:70:e6:79:c3:a9:a4:23:e9:12:77:c2:5d:14:e3: 14:bb:25:f5:2c:9d:b8:a1:ab:c4:83:c8:fc:fe:dd: 16:42:35:77:08:07:65:39:40:74:41:39:f7:62:67: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:F4:F9:54:4B:0E:FE:FC:F5:AB:0D:70:71:3F:C8:49:14:38:97 X509v3 Authority Key Identifier: keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7e:26:32:1d:7e:48:5b:86:9e:c9:1e:3d:af:8a:e4:f0:70: 45:1b:e9:a7:97:43:28:66:bd:51:b6:87:91:cc:9a:e6:8b:6e: ca:15:7d:aa:d4:a3:4d:d7:65:fb:c9:ee:e7:8c:6d:ea:d6:92: e1:e9:31:e8:bc:26:f1:8f:9f:8f:98:2e:2f:a5:d0:15:1d:4f: 2b:a4:bd:89:3a:e6:46:ed:d2:67:55:6d:c8:6e:b1:2c:1a:3a: c0:92:74:5f:74:8d:a5:54:ce:3d:3f:4f:8a:a0:6e:9a:87:b3: c1:fb:f3:86:97:18:df:f0:4a:11:dc:ad:6d:ed:1d:cf:22:fb: 88:75:32:0b:5a:81:d1:2d:07:5d:62:60:bc:f6:39:4e:4d:77: 69:98:43:0f:4e:b1:3e:5b:45:a6:29:e4:ec:ed:2f:99:04:13: d4:37:22:13:68:05:88:da:dc:2c:1c:9f:a5:01:e7:ad:8b:70: 0c:29:ae:97:19:1f:3d:b9:a7:60:7e:5d:aa:59:a7:3d:c1:44: be:55:ef:fb:0a:7a:58:84:42:b3:b9:89:95:55:19:87:ee:b0: 98:e5:ad:db:23:df:48:aa:4a:8b:32:2b:9f:b4:5c:3c:b4:d3: 23:4c:73:a8:dd:35:9c:7e:bf:28:62:30:d5:53:1a:f7:01:c1: 92:e4:b0:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNe5tGL064XSszkqXQoQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl MTE3MmUwHhcNMjUxMjEwMTcwMTI3WhcNMjUxMjExMTcwMTI3WjAzMTEwLwYDVQQD EygwY2Q2ZjRmOTU0NGIwZWZlZmNmNWFiMGQ3MDcxM2ZjODQ5MTQzODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a6egGyrVwC4J9W9xk989E39IabW 1MqMFDrSJqoxmaNvbfnnyeeOZGipi/tsEK83eVunyO7lfcTYdPyTSX5TlfoPkzUH x063iVt6nRb6t1asjR3QIDe82ncasB5iDmyjUvsNnNpBvH13cxN/8ouzrUycf/KD j3g4dtViF2+mxhMT3wDs1t45fsCSfedPVRT9POV/5f2PTuVQKuqC2dLmABp5TAuv tGRbmil/bMoOlQ63Nb8o4+cZY98e+/vKybycilCjLTzrjl1NKFaxMO12I5kVcOZ5 w6mkI+kSd8JdFOMUuyX1LJ24oavEg8j8/t0WQjV3CAdlOUB0QTn3YmeyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzW9PlUSw7+/PWrDXBxP8hJFDiXMB8GA1UdIwQY MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH4mMh1+ SFuGnskePa+K5PBwRRvpp5dDKGa9UbaHkcya5otuyhV9qtSjTddl+8nu54xt6taS 4ekx6Lwm8Y+fj5guL6XQFR1PK6S9iTrmRu3SZ1VtyG6xLBo6wJJ0X3SNpVTOPT9P iqBumoezwfvzhpcY3/BKEdytbe0dzyL7iHUyC1qB0S0HXWJgvPY5Tk13aZhDD06x PltFpink7O0vmQQT1DciE2gFiNrcLByfpQHnrYtwDCmulxkfPbmnYH5dqlmnPcFE vlXv+wp6WIRCs7mJlVUZh+6wmOWt2yPfSKpKizIrn7RcPLTTI0xzqN01nH6/KGIw 1VMa9wHBkuSwUg== -----END CERTIFICATE-----Generated at Wed Dec 10 19:58:30 2025 by rpki-client