This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json) Hash identifier: Dq6tuCXMTzlIoB7H6pnFWSQ7KYiFJu8jU8j/DP6gyRU= Subject key identifier: C9:10:2E:0F:04:5D:C9:06:89:5B:CD:C1:8C:75:84:38:49:CB:82:0C Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Certificate serial: 019B4C5F0BA5EA29D96FDE1CE5F9A0820231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft Manifest number: 0D5A Signing time: Tue 23 Dec 2025 18:00:55 +0000 Manifest this update: Tue 23 Dec 2025 18:00:55 +0000 Manifest next update: Wed 24 Dec 2025 18:00:55 +0000 Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=) 2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: aBCutsSzQI3JpBlg/FN3BSa+og7Ux9pO8nkN+Gsxl3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:0b:a5:ea:29:d9:6f:de:1c:e5:f9:a0:82:02:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Validity Not Before: Dec 23 18:00:55 2025 GMT Not After : Dec 24 18:00:55 2025 GMT Subject: CN=c9102e0f045dc906895bcdc18c75843849cb820c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:c0:23:c8:d3:5e:73:6c:e5:4e:57:5f:52: 9e:3b:47:bc:73:47:d1:18:1f:7d:27:83:a5:f3:a1: 46:18:72:03:0e:2b:9b:81:12:eb:17:8a:2c:26:da: 90:03:8d:09:a7:fc:3d:8f:b6:25:ae:1d:69:8a:4d: 19:c2:39:cc:fa:ba:9d:e5:b7:46:63:a3:04:8e:ad: c4:55:7f:9b:e6:74:1f:6b:ac:4f:bb:37:d9:df:bf: 15:52:56:db:05:02:d0:50:52:77:d1:9e:5f:10:ee: 7b:b3:0b:9a:90:09:a5:4a:3d:49:35:72:54:ba:22: 03:47:76:16:ce:8c:d2:6c:a5:ab:05:1e:19:c1:5d: a8:57:6a:de:11:d2:93:98:3e:9e:c6:76:c3:70:16: 75:7a:09:e3:e7:b8:43:64:8e:bb:fa:70:f9:fa:73: a7:05:7d:3a:aa:f5:4c:6d:46:02:b6:91:87:6b:11: c6:42:20:58:f2:93:3c:92:f0:6d:bf:98:60:cf:e2: f1:0a:d7:bc:fe:07:3c:c0:14:8d:01:9f:a6:14:74: 81:ad:ae:8f:d7:a3:11:58:7f:9a:97:ce:87:ed:9e: 82:bb:8f:17:33:7a:6f:68:ad:9b:6b:c6:ae:7e:e2: 50:41:61:1b:7f:12:82:fe:63:4b:9e:eb:a8:d7:9f: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:2E:0F:04:5D:C9:06:89:5B:CD:C1:8C:75:84:38:49:CB:82:0C X509v3 Authority Key Identifier: keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c2:87:dc:3f:10:d7:1a:24:f9:cd:a9:67:0f:56:d4:b2:5e: e3:a4:23:f8:46:42:e7:c1:3d:de:0b:a7:77:38:0e:20:d0:ec: b9:75:f8:d6:9e:e1:67:14:63:80:0e:2c:89:fa:88:fd:e7:a5: e9:e7:56:ee:f5:00:99:f0:9f:51:96:8e:1e:99:27:0b:e0:79: ec:cb:76:48:e2:b6:fe:bc:92:7d:2f:cc:d0:1d:ae:41:9e:d3: 83:31:13:ad:00:f8:85:9b:47:e4:57:f2:b2:18:f2:46:ed:85: 06:39:5c:99:da:d1:8d:22:90:f3:14:fc:8e:98:4a:92:34:f4: b4:6f:45:0f:2f:c8:d3:6b:45:e6:b6:b8:54:76:b7:f9:da:cb: 95:b9:ae:bf:03:41:2f:c4:16:64:c3:18:f6:5d:2e:bd:8c:43: ca:05:c0:a9:04:bd:e5:76:1c:06:9a:73:5a:7f:df:87:f4:39: cb:17:72:b0:5d:b3:fc:cf:e0:3e:b5:f7:b6:df:91:20:82:d6: c8:18:01:fa:98:81:a0:3b:82:a9:17:4b:b2:73:0f:b2:2b:92: 5c:dd:37:bf:5b:ff:9c:ac:05:e0:05:7b:f9:68:96:f9:38:a0: 0c:d4:0d:6a:92:43:c7:49:1e:c9:9d:a0:de:8c:ca:0b:37:82: 72:13:af:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXwul6inZb94c5fmgggIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj YzZhYzgwHhcNMjUxMjIzMTgwMDU1WhcNMjUxMjI0MTgwMDU1WjAzMTEwLwYDVQQD EyhjOTEwMmUwZjA0NWRjOTA2ODk1YmNkYzE4Yzc1ODQzODQ5Y2I4MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa7AI8jTXnNs5U5XX1KeO0e8c0fR GB99J4Ol86FGGHIDDiubgRLrF4osJtqQA40Jp/w9j7Ylrh1pik0ZwjnM+rqd5bdG Y6MEjq3EVX+b5nQfa6xPuzfZ378VUlbbBQLQUFJ30Z5fEO57swuakAmlSj1JNXJU uiIDR3YWzozSbKWrBR4ZwV2oV2reEdKTmD6exnbDcBZ1egnj57hDZI67+nD5+nOn BX06qvVMbUYCtpGHaxHGQiBY8pM8kvBtv5hgz+LxCte8/gc8wBSNAZ+mFHSBra6P 16MRWH+al86H7Z6Cu48XM3pvaK2ba8aufuJQQWEbfxKC/mNLnuuo158Y0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkQLg8EXckGiVvNwYx1hDhJy4IMMB8GA1UdIwQY MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1 LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcKH3D8Q 1xok+c2pZw9W1LJe46Qj+EZC58E93gundzgOINDsuXX41p7hZxRjgA4sifqI/eel 6edW7vUAmfCfUZaOHpknC+B57Mt2SOK2/rySfS/M0B2uQZ7TgzETrQD4hZtH5Ffy shjyRu2FBjlcmdrRjSKQ8xT8jphKkjT0tG9FDy/I02tF5ra4VHa3+drLlbmuvwNB L8QWZMMY9l0uvYxDygXAqQS95XYcBppzWn/fh/Q5yxdysF2z/M/gPrX3tt+RIILW yBgB+piBoDuCqRdLsnMPsiuSXN03v1v/nKwF4AV7+WiW+TigDNQNapJDx0keyZ2g 3ozKCzeCchOvRQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:35:07 2025 by rpki-client