This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json) Hash identifier: S7AaiJj7f85X20YCQH+zP1JSHmpMAgyw+/aJG82piWQ= Subject key identifier: 33:B3:02:57:89:25:9E:80:C9:9F:C5:E7:B7:FB:47:6A:01:F6:FB:83 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019B3FED2260E8908C4DD5CD57C6DC3A54E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft Manifest number: 168C Signing time: Sun 21 Dec 2025 08:01:03 +0000 Manifest this update: Sun 21 Dec 2025 08:01:03 +0000 Manifest next update: Mon 22 Dec 2025 08:01:03 +0000 Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: O7yVEcNB0iihJX2yRtRTcUAVbSzmzUKET6Hs+yHmVPA=) 2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:22:60:e8:90:8c:4d:d5:cd:57:c6:dc:3a:54:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Dec 21 08:01:03 2025 GMT Not After : Dec 22 08:01:03 2025 GMT Subject: CN=33b3025789259e80c99fc5e7b7fb476a01f6fb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:1e:c7:e9:55:8c:e0:0d:71:39:17:b0:c8: af:66:b7:dd:8d:b1:75:ed:b5:91:0d:ba:f6:43:93: 49:d4:f9:56:23:cd:58:7f:20:99:2b:18:f3:df:8e: d6:86:19:18:16:ca:0a:89:b5:83:ea:e7:cd:2c:29: ed:79:6f:90:0e:41:8e:f0:95:61:a6:7c:04:02:89: 16:40:62:11:8a:57:06:2b:71:87:f5:b5:03:ac:34: 50:c9:98:3c:2c:30:dc:8c:37:b3:44:ae:e5:be:b2: 99:b7:c9:bc:4e:0b:e5:38:48:93:13:a6:c9:b9:46: 07:53:c5:3d:b3:18:fc:23:78:c3:e3:3a:28:4a:dd: e0:b5:29:6b:d7:db:0d:7b:2a:48:4f:32:f8:e8:16: 99:97:6b:3f:e8:81:cc:20:ee:7c:c8:33:9f:75:a2: 11:88:de:8b:15:f2:5d:f1:8e:b9:94:e0:c1:07:d7: f8:14:80:5d:65:81:0a:52:25:22:78:d9:d7:2b:0a: ab:8a:36:fd:58:7d:8e:90:ec:64:1d:d2:dc:cc:28: f7:67:a5:d1:bc:e4:6d:ec:99:d3:d3:2c:d5:57:5a: b4:1e:3f:a8:f2:2b:c8:08:1c:63:b5:2b:55:ef:b1: 66:68:1e:6d:ec:4c:d9:e2:3f:1a:2a:ea:62:e1:a6: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:02:57:89:25:9E:80:C9:9F:C5:E7:B7:FB:47:6A:01:F6:FB:83 X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:6c:93:8a:ff:8a:54:3d:1c:86:0d:91:40:ea:10:90:87: 3c:77:8f:97:1a:35:3e:56:ea:0b:c0:29:a3:bb:e3:37:a5:48: 4d:d7:97:de:f8:13:55:aa:c8:11:b5:c6:41:fd:76:b4:68:88: 75:26:f1:99:ba:71:7b:e0:c0:55:97:54:cb:5f:56:cd:f5:d6: ce:ab:a4:90:9c:fa:0d:0c:0c:98:9c:51:18:e9:79:35:2b:77: c5:48:8a:79:6d:9f:78:75:80:b1:2a:02:81:8d:b5:c9:10:4f: d1:e8:b9:17:cd:a5:29:28:b3:f3:86:9d:57:48:5c:b7:31:49: 58:fe:c7:9d:17:ae:fd:31:d9:d3:e6:f5:7c:60:0b:c1:1d:56: 76:45:dc:43:d3:85:22:2a:fb:c1:48:9e:64:21:a3:f4:c1:e0: c7:2e:e1:7d:9c:f4:59:60:13:5a:56:6e:28:fb:2c:46:10:7f: 57:4e:9d:51:66:bc:fe:5a:ed:99:f5:08:28:6f:45:0b:36:b3: 6f:54:0c:b7:61:5e:cd:f7:a8:dc:a1:ec:0b:f6:52:78:d0:3c: 9f:d7:27:24:fe:60:cd:01:30:80:b4:ab:38:8e:06:56:21:e4: 31:75:60:43:80:d2:d1:55:86:37:c7:10:90:95:3a:22:fa:13: 77:7e:00:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7SJg6JCMTdXNV8bcOlThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjUxMjIxMDgwMTAzWhcNMjUxMjIyMDgwMTAzWjAzMTEwLwYDVQQD EygzM2IzMDI1Nzg5MjU5ZTgwYzk5ZmM1ZTdiN2ZiNDc2YTAxZjZmYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXEex+lVjOANcTkXsMivZrfdjbF1 7bWRDbr2Q5NJ1PlWI81YfyCZKxjz347WhhkYFsoKibWD6ufNLCnteW+QDkGO8JVh pnwEAokWQGIRilcGK3GH9bUDrDRQyZg8LDDcjDezRK7lvrKZt8m8TgvlOEiTE6bJ uUYHU8U9sxj8I3jD4zooSt3gtSlr19sNeypITzL46BaZl2s/6IHMIO58yDOfdaIR iN6LFfJd8Y65lODBB9f4FIBdZYEKUiUieNnXKwqrijb9WH2OkOxkHdLczCj3Z6XR vORt7JnT0yzVV1q0Hj+o8ivICBxjtStV77FmaB5t7EzZ4j8aKupi4aYSCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOzAleJJZ6AyZ/F57f7R2oB9vuDMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSdsk4r/ ilQ9HIYNkUDqEJCHPHePlxo1PlbqC8Apo7vjN6VITdeX3vgTVarIEbXGQf12tGiI dSbxmbpxe+DAVZdUy19WzfXWzqukkJz6DQwMmJxRGOl5NSt3xUiKeW2feHWAsSoC gY21yRBP0ei5F82lKSiz84adV0hctzFJWP7HnReu/THZ0+b1fGALwR1WdkXcQ9OF Iir7wUieZCGj9MHgxy7hfZz0WWATWlZuKPssRhB/V06dUWa8/lrtmfUIKG9FCzaz b1QMt2Fezfeo3KHsC/ZSeNA8n9cnJP5gzQEwgLSrOI4GViHkMXVgQ4DS0VWGN8cQ kJU6IvoTd34AWg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:38 2025 by rpki-client