This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json) Hash identifier: RvX/C6eq+YdsxCAs1kMe7YlsBKNx3QTtqnXPRGZyYIc= Subject key identifier: E3:A1:1C:3C:7C:E9:1C:31:C9:01:E5:06:3A:64:04:E2:D3:F0:7F:82 Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Certificate serial: 019B31FAB4B3838C389F086F8BD23CD4DA38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft Manifest number: 0BBF Signing time: Thu 18 Dec 2025 15:01:12 +0000 Manifest this update: Thu 18 Dec 2025 15:01:12 +0000 Manifest next update: Fri 19 Dec 2025 15:01:12 +0000 Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: +1V6jyqrCyOcUvPg5HxomACxUeRkWv2Cx02hf+ej2nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:b4:b3:83:8c:38:9f:08:6f:8b:d2:3c:d4:da:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Validity Not Before: Dec 18 15:01:12 2025 GMT Not After : Dec 19 15:01:12 2025 GMT Subject: CN=e3a11c3c7ce91c31c901e5063a6404e2d3f07f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:24:da:2f:85:5c:a9:88:2f:54:42:02:ab: 09:a0:84:25:0a:49:1e:ee:0b:81:73:cd:bb:d8:19: 7c:de:2f:fc:51:be:fe:a5:f8:3e:e7:db:46:f6:7d: 1b:18:d4:97:46:f2:95:dc:a5:5f:85:1e:cf:ad:77: 36:71:57:ce:3c:10:1c:8e:46:46:99:7a:85:65:61: 30:de:18:23:64:02:8f:ce:a2:74:08:a2:83:cb:04: 97:ee:4b:34:50:ff:e1:a5:f3:0f:3e:de:09:31:f0: 89:24:35:09:80:bb:70:aa:26:e7:c5:4c:4c:b7:59: ff:a6:ca:31:46:77:29:1a:62:26:53:4a:f2:7b:3a: 6c:e9:ab:1e:0f:6b:3d:50:47:56:0e:16:84:e4:49: 1b:59:0d:a2:f5:01:87:11:7b:99:b1:d1:91:a0:01: 80:78:4e:06:c3:7a:9c:01:e4:34:6b:3f:8d:81:52: 4a:b9:ba:d3:54:61:bb:12:58:de:83:43:6f:33:94: dd:9b:83:a3:4d:a3:b4:62:1a:99:0f:3c:6d:1f:f2: 00:8e:ba:9b:7e:a9:c8:48:41:07:a6:ed:93:26:e9: 6b:77:ee:84:96:58:22:68:3b:a0:3f:d8:10:a2:01: 98:e6:9e:48:3f:96:89:ec:3e:fd:b3:c1:e7:7e:fe: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:1C:3C:7C:E9:1C:31:C9:01:E5:06:3A:64:04:E2:D3:F0:7F:82 X509v3 Authority Key Identifier: keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:fc:a9:79:0a:22:42:09:24:38:11:a5:42:19:06:f6:5b: c5:5f:2e:ff:99:1f:80:63:b5:33:06:18:78:05:19:47:30:6e: 39:2c:d1:c9:b1:73:43:73:f1:ce:b9:0b:48:fa:e9:2a:10:61: e9:3c:6d:bc:d2:6e:29:d5:4f:a5:0c:92:4e:ac:65:44:3b:f8: bd:b1:fd:17:fb:f1:4f:f2:99:3c:80:30:d2:c1:7a:01:94:62: cc:6a:05:b9:a4:04:80:4a:7d:05:32:c2:01:76:96:0c:e5:10: 4e:28:b5:39:24:65:08:c6:24:0b:4f:30:25:ad:dc:c8:35:90: 3f:cf:e9:e1:db:56:8b:f6:a4:9d:6e:95:8c:95:0d:fd:c4:0a: 78:20:cf:8f:63:2a:ee:d3:96:90:5d:c0:7e:96:55:a4:4e:f5: b8:31:cc:ec:08:61:2d:96:95:6a:9d:72:b7:3e:08:f0:86:06: 31:b1:5b:41:e3:8d:b4:93:7b:7c:b9:22:eb:e3:18:ec:20:84: 36:f2:71:c0:7c:bd:78:0a:d4:12:3f:f2:b6:13:8a:b2:cb:4b: 87:db:99:87:18:e1:13:6c:3e:4c:3d:33:60:a0:2c:50:31:b0: 09:43:22:fd:41:67:b9:b5:67:92:ca:a4:5f:bf:4f:40:63:5b: 3c:5a:c8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+rSzg4w4nwhvi9I81No4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYTBlZTlmZjA5YzdjZmM3ZWU5NzYxZjFhM2M4ZjMwZWZh YzU4NDgwHhcNMjUxMjE4MTUwMTEyWhcNMjUxMjE5MTUwMTEyWjAzMTEwLwYDVQQD EyhlM2ExMWMzYzdjZTkxYzMxYzkwMWU1MDYzYTY0MDRlMmQzZjA3ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQk2i+FXKmIL1RCAqsJoIQlCkke 7guBc8272Bl83i/8Ub7+pfg+59tG9n0bGNSXRvKV3KVfhR7PrXc2cVfOPBAcjkZG mXqFZWEw3hgjZAKPzqJ0CKKDywSX7ks0UP/hpfMPPt4JMfCJJDUJgLtwqibnxUxM t1n/psoxRncpGmImU0ryezps6aseD2s9UEdWDhaE5EkbWQ2i9QGHEXuZsdGRoAGA eE4Gw3qcAeQ0az+NgVJKubrTVGG7Eljeg0NvM5Tdm4OjTaO0YhqZDzxtH/IAjrqb fqnISEEHpu2TJulrd+6EllgiaDugP9gQogGY5p5IP5aJ7D79s8Hnfv5EXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOhHDx86RwxyQHlBjpkBOLT8H+CMB8GA1UdIwQY MBaAFG2g7p/wnHz8ful2Hxo8jzDvrFhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDkt YTRkOWRjNzZjMmI4LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDktYTRkOWRjNzZjMmI4 LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnX8qXkK IkIJJDgRpUIZBvZbxV8u/5kfgGO1MwYYeAUZRzBuOSzRybFzQ3PxzrkLSPrpKhBh 6TxtvNJuKdVPpQySTqxlRDv4vbH9F/vxT/KZPIAw0sF6AZRizGoFuaQEgEp9BTLC AXaWDOUQTii1OSRlCMYkC08wJa3cyDWQP8/p4dtWi/aknW6VjJUN/cQKeCDPj2Mq 7tOWkF3AfpZVpE71uDHM7AhhLZaVap1ytz4I8IYGMbFbQeONtJN7fLki6+MY7CCE NvJxwHy9eArUEj/ythOKsstLh9uZhxjhE2w+TD0zYKAsUDGwCUMi/UFnubVnksqk X79PQGNbPFrInw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:25:55 2025 by rpki-client