This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json) Hash identifier: Mc1bKrk0cg3V6u19PpTbQZRchbKivWumQXzB236dai4= Subject key identifier: 6A:42:21:B4:70:35:FB:33:95:4F:B0:67:45:88:0E:38:46:CD:56:B2 Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019B3E35733E259A103886D1D7A77A5F5283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft Manifest number: 0937 Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=) 2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: MtdTsVfLM/gONbGNkMhVUdP/L9U6Xl1D+VmZQrrPPIc=) 3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:73:3e:25:9a:10:38:86:d1:d7:a7:7a:5f:52:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=6a4221b47035fb33954fb06745880e3846cd56b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:52:a0:79:79:e0:8c:73:2c:03:86:6c:a7: dc:91:bb:bf:66:87:86:2f:c6:20:26:ee:48:7f:f1: b9:a7:56:8b:1b:59:70:52:85:48:bd:65:4c:b5:94: 4e:5b:e2:1d:41:80:c9:3a:fa:7c:c7:31:b2:87:e0: f1:a0:1b:40:34:19:14:f7:da:f2:9d:ac:5b:d7:38: e9:49:76:be:ae:73:85:c1:77:15:23:dc:e3:92:d1: 61:7c:6a:c1:01:ee:b4:f5:4f:32:9a:37:ec:12:bc: a3:4d:af:3e:8d:45:86:58:ae:a2:17:b9:b5:34:8c: a8:c6:c9:02:5d:22:2a:f8:99:ea:46:4a:26:94:75: 32:a7:c0:80:68:d3:ef:5d:b4:85:80:54:f0:d0:fe: fb:66:48:0e:0f:93:8d:79:4e:09:f5:41:35:dc:66: b2:b0:3b:c4:6a:a8:04:7f:fe:75:d3:e9:f7:51:86: 60:1d:86:3d:d3:54:75:46:60:66:f4:b4:38:35:5b: b6:f5:7f:dc:b7:8f:ca:9f:07:23:8e:f1:b1:c5:d7: 09:8d:4c:1d:00:37:2b:ab:51:4a:f0:22:1c:dd:e8: e8:9c:c1:9d:06:1e:a3:ad:05:9e:7c:12:e6:50:56: c2:55:7d:68:80:1f:2b:60:5a:33:4a:8d:af:d0:07: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:42:21:B4:70:35:FB:33:95:4F:B0:67:45:88:0E:38:46:CD:56:B2 X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cd:26:8e:09:74:52:62:36:bb:e6:69:d7:fc:e2:f9:4f:21: 3c:5b:2b:b8:76:68:5c:53:09:69:3a:13:22:d8:27:8e:d1:b6: 1b:c5:ed:9b:5d:b5:03:fa:be:89:86:1b:19:92:bc:5f:74:97: a9:88:6c:86:9c:67:86:7e:f9:0d:ee:4b:02:78:a7:aa:79:91: 59:0e:fa:a7:2d:07:91:43:9f:69:bd:8a:d2:f2:9b:2d:25:57: a1:b4:66:27:08:a6:f2:8f:77:db:7b:4f:8f:a5:3b:21:59:df: 95:f6:81:22:14:b9:b3:d1:94:88:ea:70:63:02:80:45:6d:41: f6:76:32:15:a7:2b:be:77:28:f3:66:c5:0c:dc:e1:4f:db:d8: 07:cf:f2:3c:28:38:b7:43:0c:7b:13:54:bb:a3:26:11:f9:fb: 35:ff:1b:b3:5f:14:fe:af:92:0b:c4:39:fc:d1:c9:ac:9f:76: 77:4e:ae:fa:97:2f:a8:1d:48:4c:2e:ac:3e:09:78:a6:14:38: f5:48:80:56:63:13:28:8b:37:da:1c:d1:ac:88:0c:72:e4:a6: ec:02:6d:9c:16:3d:eb:0b:76:b6:5e:0d:0a:93:2c:a1:ca:5f: f1:8d:a7:9a:6e:b9:7f:5b:6b:d8:cb:cf:a2:b7:50:69:c2:ee: 8b:f5:7a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXM+JZoQOIbR16d6X1KDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD Eyg2YTQyMjFiNDcwMzVmYjMzOTU0ZmIwNjc0NTg4MGUzODQ2Y2Q1NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlexSoHl54IxzLAOGbKfckbu/ZoeG L8YgJu5If/G5p1aLG1lwUoVIvWVMtZROW+IdQYDJOvp8xzGyh+DxoBtANBkU99ry naxb1zjpSXa+rnOFwXcVI9zjktFhfGrBAe609U8ymjfsEryjTa8+jUWGWK6iF7m1 NIyoxskCXSIq+JnqRkomlHUyp8CAaNPvXbSFgFTw0P77ZkgOD5ONeU4J9UE13Gay sDvEaqgEf/510+n3UYZgHYY901R1RmBm9LQ4NVu29X/ct4/KnwcjjvGxxdcJjUwd ADcrq1FK8CIc3ejonMGdBh6jrQWefBLmUFbCVX1ogB8rYFozSo2v0AcJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpCIbRwNfszlU+wZ0WIDjhGzVayMB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac0mjgl0 UmI2u+Zp1/zi+U8hPFsruHZoXFMJaToTItgnjtG2G8Xtm121A/q+iYYbGZK8X3SX qYhshpxnhn75De5LAninqnmRWQ76py0HkUOfab2K0vKbLSVXobRmJwim8o9323tP j6U7IVnflfaBIhS5s9GUiOpwYwKARW1B9nYyFacrvnco82bFDNzhT9vYB8/yPCg4 t0MMexNUu6MmEfn7Nf8bs18U/q+SC8Q5/NHJrJ92d06u+pcvqB1ITC6sPgl4phQ4 9UiAVmMTKIs32hzRrIgMcuSm7AJtnBY96wt2tl4NCpMsocpf8Y2nmm65f1tr2MvP ordQacLui/V6CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:05:04 2025 by rpki-client