This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json) Hash identifier: hLoCttQXVioOR6vhWX3QaKew3L5OSAsH345Mzeivo6Q= Subject key identifier: C0:90:72:DE:13:E0:D4:CD:53:99:B5:71:9F:60:B3:B3:C9:26:88:71 Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006 Certificate serial: 019B341F80EBF462B465F3BC4AB9DF8B5359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft Manifest number: 066B Signing time: Fri 19 Dec 2025 01:00:38 +0000 Manifest this update: Fri 19 Dec 2025 01:00:38 +0000 Manifest next update: Sat 20 Dec 2025 01:00:38 +0000 Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=) 2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: kF0TPfezOwSVZusfCqC/K31L2jmY+0pY0w7U7Is6Yi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:80:eb:f4:62:b4:65:f3:bc:4a:b9:df:8b:53:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006 Validity Not Before: Dec 19 01:00:38 2025 GMT Not After : Dec 20 01:00:38 2025 GMT Subject: CN=c09072de13e0d4cd5399b5719f60b3b3c9268871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:96:9e:75:50:d4:64:a3:29:b3:06:aa:e4: 4c:01:0a:5f:b1:ae:a2:9c:0d:30:b1:9d:10:10:20: 69:42:86:64:3e:df:0e:6e:a0:8a:39:e1:ff:4a:68: 37:af:0b:7b:b2:f2:81:f4:0a:86:72:2a:f9:ea:d3: 6a:58:c6:11:71:be:c1:81:24:68:df:8d:c3:d8:23: 03:2a:36:21:77:84:60:84:c8:55:0a:10:37:8f:f9: 83:aa:c8:e0:49:32:01:e1:67:03:98:8b:63:5f:e8: ff:97:fe:36:fb:b4:9a:22:13:6f:c6:79:3f:8f:40: 08:63:b9:12:d2:89:a9:71:99:47:76:5c:35:09:a8: bf:f1:8c:b3:ca:75:8f:4c:19:d1:ae:9b:9b:77:4d: 26:72:c3:23:bd:37:8e:c0:14:16:a3:42:49:f3:f7: cc:2b:70:3d:be:ac:c0:4f:d8:58:bb:a8:78:8d:59: a0:7c:cf:76:e8:30:eb:ad:82:50:90:43:d4:ca:42: 36:e2:f8:ea:fa:8e:d4:36:3c:45:7a:14:6e:66:70: eb:14:41:d6:36:db:56:e9:82:b7:49:18:61:9c:53: 52:90:77:e6:52:5a:8e:fb:b5:2e:4a:a6:6a:c2:23: 88:df:34:29:ff:ab:74:32:d8:4d:78:cd:51:b5:22: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:90:72:DE:13:E0:D4:CD:53:99:B5:71:9F:60:B3:B3:C9:26:88:71 X509v3 Authority Key Identifier: keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d9:f3:31:85:83:2e:8a:ce:fa:79:4a:f7:20:b3:87:b0:a0: 5f:c4:5e:f3:bf:a5:ff:e2:8b:15:67:25:8e:48:62:70:b8:f5: ba:e4:1b:ee:49:0c:e7:6c:3e:b6:a9:91:b6:dd:07:d2:62:b3: 4d:e9:da:9e:48:27:6d:7e:79:b2:a5:31:f5:f2:27:85:af:f5: 0a:fc:8b:91:c0:83:5f:dc:09:ab:41:22:d4:4f:22:92:24:89: f5:75:4e:f3:b8:42:bd:03:14:da:24:97:f1:40:0c:09:57:b9: 9f:9a:77:f0:da:4e:6a:d4:4b:85:b1:72:02:6e:5d:46:3e:67: 3b:d2:70:89:44:e9:fc:40:4f:c5:3b:a0:5c:af:d9:b7:d1:0c: 9e:25:3d:13:81:ba:5d:8c:10:93:c3:a9:98:08:9b:2b:15:68: 85:73:82:3e:c5:ce:8b:57:96:0c:97:0e:af:42:61:24:bf:c8: 01:3d:e4:da:9e:e7:9f:59:93:27:f3:37:2b:cb:08:a2:23:3b: 32:0c:a9:76:74:eb:f8:67:77:fa:84:26:20:d4:d6:58:ae:2c: 01:57:34:7c:5b:94:4d:26:5e:1d:3f:99:6d:82:82:63:01:79: 56:55:15:6f:9b:42:a6:7f:f4:05:d2:51:70:c2:51:fa:fb:38: 72:57:2d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H4Dr9GK0ZfO8Srnfi1NZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3 NTgwMDYwHhcNMjUxMjE5MDEwMDM4WhcNMjUxMjIwMDEwMDM4WjAzMTEwLwYDVQQD EyhjMDkwNzJkZTEzZTBkNGNkNTM5OWI1NzE5ZjYwYjNiM2M5MjY4ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6GWnnVQ1GSjKbMGquRMAQpfsa6i nA0wsZ0QECBpQoZkPt8ObqCKOeH/Smg3rwt7svKB9AqGcir56tNqWMYRcb7BgSRo 343D2CMDKjYhd4RghMhVChA3j/mDqsjgSTIB4WcDmItjX+j/l/42+7SaIhNvxnk/ j0AIY7kS0ompcZlHdlw1Cai/8YyzynWPTBnRrpubd00mcsMjvTeOwBQWo0JJ8/fM K3A9vqzAT9hYu6h4jVmgfM926DDrrYJQkEPUykI24vjq+o7UNjxFehRuZnDrFEHW NttW6YK3SRhhnFNSkHfmUlqO+7UuSqZqwiOI3zQp/6t0MthNeM1RtSLw0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCQct4T4NTNU5m1cZ9gs7PJJohxMB8GA1UdIwQY MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4 LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNnzMYWD LorO+nlK9yCzh7CgX8Re87+l/+KLFWcljkhicLj1uuQb7kkM52w+tqmRtt0H0mKz TenankgnbX55sqUx9fInha/1CvyLkcCDX9wJq0Ei1E8ikiSJ9XVO87hCvQMU2iSX 8UAMCVe5n5p38NpOatRLhbFyAm5dRj5nO9JwiUTp/EBPxTugXK/Zt9EMniU9E4G6 XYwQk8OpmAibKxVohXOCPsXOi1eWDJcOr0JhJL/IAT3k2p7nn1mTJ/M3K8sIoiM7 MgypdnTr+Gd3+oQmINTWWK4sAVc0fFuUTSZeHT+ZbYKCYwF5VlUVb5tCpn/0BdJR cMJR+vs4clctRA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:57:15 2025 by rpki-client