This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json) Hash identifier: 4S7cE5CJP3YMw/w+DjYiWDnCCfYa1625W1KwquezxlI= Subject key identifier: D1:5D:99:D4:BD:60:80:22:3E:38:D0:62:E7:AD:7A:1C:E6:4C:64:08 Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Certificate serial: 019B3CEC3F289663137689E875B851038B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft Manifest number: 0BBF Signing time: Sat 20 Dec 2025 18:01:14 +0000 Manifest this update: Sat 20 Dec 2025 18:01:14 +0000 Manifest next update: Sun 21 Dec 2025 18:01:14 +0000 Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: kJo0xc+LECQfhJ345wASiAziKaFS5SypmJbespSnVp8=) 2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:3f:28:96:63:13:76:89:e8:75:b8:51:03:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Validity Not Before: Dec 20 18:01:14 2025 GMT Not After : Dec 21 18:01:14 2025 GMT Subject: CN=d15d99d4bd6080223e38d062e7ad7a1ce64c6408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:54:03:79:08:48:67:a0:3c:01:f1:d1:a5: b2:37:0b:60:e4:6c:51:7e:21:f2:70:09:19:bb:8c: 62:92:dd:7e:ff:0e:27:78:bf:3f:b3:0c:e4:1a:ed: 62:06:b0:1b:ab:0e:ae:29:28:cb:4b:b4:03:50:08: d2:f1:4c:a6:dd:08:8c:58:40:87:99:d6:0b:ec:6d: 24:68:5a:f9:70:87:e6:69:d2:41:b7:fb:9e:18:8e: ff:77:ea:de:3c:e1:8f:c9:76:d4:34:fc:f4:27:c1: a0:74:ec:db:20:94:b6:d0:8e:36:de:65:cd:b7:45: 3f:93:fb:d4:99:22:51:81:0f:70:2e:4c:03:b5:66: 52:f3:15:8d:c2:91:8e:2d:34:8f:8f:14:f2:8f:08: 20:29:c6:e5:eb:7a:38:26:c3:04:29:30:9c:4a:5c: 86:aa:27:ec:34:77:df:7a:ba:fe:98:22:5e:5c:87: e3:ef:ac:be:5b:6b:8b:19:13:1e:44:9e:d5:97:50: 6f:a9:61:6c:7b:d9:75:a2:69:e2:02:8d:68:83:dc: ea:ab:63:0a:f9:89:29:04:b1:7d:bc:e6:a5:bd:03: 9a:42:b4:69:95:b0:31:41:8a:ad:ff:0c:f7:d3:d8: e7:d0:bd:b9:ab:a3:f2:36:3a:78:13:0d:b6:df:e2: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5D:99:D4:BD:60:80:22:3E:38:D0:62:E7:AD:7A:1C:E6:4C:64:08 X509v3 Authority Key Identifier: keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:82:6a:2d:33:78:6a:50:b8:0b:12:ac:bc:f9:62:83:fb: 08:51:46:72:73:49:17:23:a2:32:87:ea:26:c1:71:a2:0e:f2: af:af:4d:2f:74:58:62:c3:5a:cf:58:bc:2e:60:d4:f6:17:5a: 13:2b:a8:fc:99:27:61:46:64:bc:fe:16:ed:a0:a0:0e:78:3d: d9:ff:18:f1:04:6b:56:c4:95:5e:bd:3c:4e:77:32:c5:36:ce: 8a:b8:95:e6:61:42:2b:cc:84:4d:46:79:fb:26:4b:de:2c:6a: 32:d3:4c:58:99:f3:04:42:13:20:80:fb:1f:d2:8f:d1:9f:c8: 45:e3:83:92:7b:f1:8d:f0:7d:9c:36:c0:eb:2b:94:89:e6:84: 4d:bd:e4:31:8a:4e:21:c4:a8:0a:93:7e:a0:57:43:85:4b:fc: 5f:1f:f7:c5:6b:d9:52:1b:3f:07:14:85:93:f2:91:f7:d5:6f: bc:70:02:78:be:87:d4:e9:da:f7:01:f7:a0:75:82:c6:f8:de: 3c:b3:3b:8c:5a:49:69:22:ff:b1:fe:5e:ef:33:4e:7d:9e:e4: 28:15:a3:98:4e:6d:0c:22:4b:05:a4:e4:9b:7d:9d:79:7d:a1: 8b:e8:d8:88:c0:f3:5e:78:e1:b8:21:80:af:6e:f0:f7:e4:e1: a5:7e:ca:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87D8olmMTdonodbhRA4sgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk NDQ3NTQwHhcNMjUxMjIwMTgwMTE0WhcNMjUxMjIxMTgwMTE0WjAzMTEwLwYDVQQD EyhkMTVkOTlkNGJkNjA4MDIyM2UzOGQwNjJlN2FkN2ExY2U2NGM2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WFUA3kISGegPAHx0aWyNwtg5GxR fiHycAkZu4xikt1+/w4neL8/swzkGu1iBrAbqw6uKSjLS7QDUAjS8Uym3QiMWECH mdYL7G0kaFr5cIfmadJBt/ueGI7/d+rePOGPyXbUNPz0J8GgdOzbIJS20I423mXN t0U/k/vUmSJRgQ9wLkwDtWZS8xWNwpGOLTSPjxTyjwggKcbl63o4JsMEKTCcSlyG qifsNHfferr+mCJeXIfj76y+W2uLGRMeRJ7Vl1BvqWFse9l1omniAo1og9zqq2MK +YkpBLF9vOalvQOaQrRplbAxQYqt/wz309jn0L25q6PyNjp4Ew223+Ki3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFdmdS9YIAiPjjQYuetehzmTGQIMB8GA1UdIwQY MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3 LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl2Cai0z eGpQuAsSrLz5YoP7CFFGcnNJFyOiMofqJsFxog7yr69NL3RYYsNaz1i8LmDU9hda Eyuo/JknYUZkvP4W7aCgDng92f8Y8QRrVsSVXr08TncyxTbOiriV5mFCK8yETUZ5 +yZL3ixqMtNMWJnzBEITIID7H9KP0Z/IReODknvxjfB9nDbA6yuUieaETb3kMYpO IcSoCpN+oFdDhUv8Xx/3xWvZUhs/BxSFk/KR99VvvHACeL6H1Ona9wH3oHWCxvje PLM7jFpJaSL/sf5e7zNOfZ7kKBWjmE5tDCJLBaTkm32deX2hi+jYiMDzXnjhuCGA r27w9+ThpX7KGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:14 2025 by rpki-client