This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json) Hash identifier: yQlOuQ7v5XDsrLBBYZ05wYp1PFqqiorBqSfKoqBlFoA= Subject key identifier: FD:43:D3:A5:BF:33:E0:D1:09:17:AC:E7:83:FC:75:CA:2C:BC:47:B1 Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6 Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6 Certificate serial: 019B3D59E944639A269B3A95BFC784BBEFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft Manifest number: 1799 Signing time: Sat 20 Dec 2025 20:01:01 +0000 Manifest this update: Sat 20 Dec 2025 20:01:01 +0000 Manifest next update: Sun 21 Dec 2025 20:01:01 +0000 Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: Cy4GzVM2uECaLS+Zq28PcUZEe4QUMUTiT8w+I2C3pcQ=) 2: q95LSd8GymIeo50Qm8hbVA1RWoY.roa (hash: 7jNaAGPtx4Ao10+H4Yq9jrjgoF40dHvaQCVKd1ONv9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e9:44:63:9a:26:9b:3a:95:bf:c7:84:bb:ef:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6 Validity Not Before: Dec 20 20:01:01 2025 GMT Not After : Dec 21 20:01:01 2025 GMT Subject: CN=fd43d3a5bf33e0d10917ace783fc75ca2cbc47b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:a2:d5:45:3b:ba:73:79:ae:06:65:33:48: 3b:49:35:9c:f6:f2:2a:0b:81:78:fb:5e:72:69:63: 7f:35:f0:f7:14:56:9d:ba:c9:11:a0:46:ff:2a:0b: 62:17:9d:14:37:f1:cf:ec:ae:0e:72:78:7a:65:3e: 7e:06:48:10:66:7b:fe:dc:ca:15:d0:41:bb:bd:85: da:d7:bb:5e:d5:85:25:68:18:22:43:4d:35:d1:59: fa:e3:8e:48:22:d9:80:56:ee:d2:70:cb:fe:bb:74: 22:74:c3:02:8b:f2:aa:5a:9d:e6:97:b5:80:a9:c0: 91:b0:ec:e3:26:fc:5f:5b:f0:a1:97:48:f6:46:0b: 71:85:3a:d9:64:13:ea:b5:d7:47:cd:bb:6e:35:4c: a6:46:0d:7a:b5:8f:7a:39:72:c9:8b:84:ac:18:a3: d9:9a:41:c1:2c:86:2b:d8:17:6f:9b:cc:d6:4e:05: 7c:9f:ea:2c:33:fc:46:c8:45:7e:5a:8c:c2:e6:a9: 4e:6a:84:ef:dd:c6:88:d3:8a:2f:77:33:67:d5:c0: 78:cf:86:a7:bb:f3:05:65:56:84:a7:37:d3:62:f3: db:ca:9e:82:06:be:36:28:ec:f5:c7:1f:e6:e2:98: 86:13:48:13:bb:25:5a:2d:9c:75:7e:17:72:4a:96: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:43:D3:A5:BF:33:E0:D1:09:17:AC:E7:83:FC:75:CA:2C:BC:47:B1 X509v3 Authority Key Identifier: keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:5e:3c:2d:fc:1e:89:5a:1e:1c:80:44:dc:47:11:55:44: 39:23:84:30:bc:db:c1:a6:fd:a7:b1:8a:44:ac:56:f8:19:c9: bf:25:d0:0a:19:85:7e:d0:15:f5:de:a6:c2:f6:44:a6:a5:65: 92:9e:35:9c:1f:f4:23:d9:41:a1:02:89:20:2b:bb:bb:ef:76: 2b:09:62:a2:8c:4d:dd:b6:d4:2f:dd:a3:59:ed:d5:d9:3a:ec: 37:55:3c:e3:83:5e:53:e7:26:6e:46:83:70:65:13:26:d4:2d: 06:85:f4:56:7c:20:a8:09:ac:62:90:dd:f4:50:a8:a5:42:29: ce:c6:f2:15:af:b2:ad:22:60:c1:71:1c:12:91:95:60:a7:0a: 20:ed:8e:7b:db:35:3a:ec:4f:3e:f3:aa:6d:fd:fe:f4:9b:36: 2b:5b:c7:d2:08:19:07:23:ec:00:a3:d1:11:c1:83:b1:dd:78: 76:e2:ed:8a:1d:11:09:45:de:a2:78:0a:55:45:e5:b8:3a:b7: f4:74:23:78:22:48:69:05:a3:15:a0:a2:03:cd:d7:d4:e4:88: ac:af:de:e0:69:cd:2a:78:c2:48:72:ef:64:d6:2e:de:75:cc: bc:fe:7d:bf:44:14:f6:dc:e0:c1:f3:ba:e8:bf:6f:62:32:ea: a2:da:87:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WelEY5ommzqVv8eEu++iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1 OWVhZDYwHhcNMjUxMjIwMjAwMTAxWhcNMjUxMjIxMjAwMTAxWjAzMTEwLwYDVQQD EyhmZDQzZDNhNWJmMzNlMGQxMDkxN2FjZTc4M2ZjNzVjYTJjYmM0N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgWi1UU7unN5rgZlM0g7STWc9vIq C4F4+15yaWN/NfD3FFaduskRoEb/KgtiF50UN/HP7K4Ocnh6ZT5+BkgQZnv+3MoV 0EG7vYXa17te1YUlaBgiQ0010Vn6445IItmAVu7ScMv+u3QidMMCi/KqWp3ml7WA qcCRsOzjJvxfW/Chl0j2RgtxhTrZZBPqtddHzbtuNUymRg16tY96OXLJi4SsGKPZ mkHBLIYr2Bdvm8zWTgV8n+osM/xGyEV+WozC5qlOaoTv3caI04ovdzNn1cB4z4an u/MFZVaEpzfTYvPbyp6CBr42KOz1xx/m4piGE0gTuyVaLZx1fhdySpau9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1D06W/M+DRCRes54P8dcosvEexMB8GA1UdIwQY MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt YjZhOGY4ZTgwZjdiLzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7RePC38 HolaHhyARNxHEVVEOSOEMLzbwab9p7GKRKxW+BnJvyXQChmFftAV9d6mwvZEpqVl kp41nB/0I9lBoQKJICu7u+92KwliooxN3bbUL92jWe3V2TrsN1U844NeU+cmbkaD cGUTJtQtBoX0VnwgqAmsYpDd9FCopUIpzsbyFa+yrSJgwXEcEpGVYKcKIO2Oe9s1 OuxPPvOqbf3+9Js2K1vH0ggZByPsAKPREcGDsd14duLtih0RCUXeongKVUXluDq3 9HQjeCJIaQWjFaCiA83X1OSIrK/e4GnNKnjCSHLvZNYu3nXMvP59v0QU9tzgwfO6 6L9vYjLqotqHTw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:29 2025 by rpki-client