This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json) Hash identifier: pVqBytCsBy7+EFuF7nucS/xH08mn/hYlVeq338triTw= Subject key identifier: 78:DC:F6:95:CF:99:0D:16:02:E1:4E:10:29:46:4C:91:A4:8D:E6:6F Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Certificate serial: 019B337B58D0E54DA2518E3CE2CFF70F3179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft Manifest number: 065A Signing time: Thu 18 Dec 2025 22:01:20 +0000 Manifest this update: Thu 18 Dec 2025 22:01:20 +0000 Manifest next update: Fri 19 Dec 2025 22:01:20 +0000 Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: jEOLRy7zwbSbJv6MRknitCtbaHfUXr2zPTWtu8UYRpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:58:d0:e5:4d:a2:51:8e:3c:e2:cf:f7:0f:31:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c Validity Not Before: Dec 18 22:01:20 2025 GMT Not After : Dec 19 22:01:20 2025 GMT Subject: CN=78dcf695cf990d1602e14e1029464c91a48de66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:3b:b3:29:1b:81:06:ae:d9:94:72:ac:5a: 36:91:ea:b7:8a:22:65:b5:63:1e:37:8d:68:69:c4: ca:6a:3a:fe:7e:f9:8f:3f:52:a5:77:04:be:c1:7f: 27:53:b1:c3:ba:f9:84:f4:9a:ad:74:ff:b3:55:85: ce:e4:17:31:c0:64:5d:ce:70:0b:2a:53:73:d2:e7: 71:23:44:f4:8e:5d:04:cb:c3:72:c5:7a:6f:d1:33: 6d:5d:e8:e9:03:e7:02:7d:06:bd:b2:96:f9:71:ee: bc:c4:0f:be:c2:f4:db:54:cd:c8:6b:66:54:b9:8b: c1:38:33:b5:96:e1:0f:72:d0:aa:72:90:c5:b1:bd: c1:36:89:ba:47:5e:06:da:1f:b4:ec:8d:6a:39:70: 45:2a:f7:f4:0e:8c:1c:e4:c0:8a:4e:18:43:46:6a: 3e:db:ae:90:72:3f:a6:86:5c:17:dd:53:c7:e4:e0: c5:58:78:a7:6f:fd:b2:86:b4:26:a5:78:f9:a9:df: 64:95:65:21:7c:4a:4a:95:a5:f1:33:1c:4c:da:4b: 14:aa:6a:14:72:5d:0a:a9:85:b2:1b:34:50:02:dd: 95:5d:43:3c:66:8b:57:7b:51:77:31:0a:a1:62:db: f1:79:b5:cd:b0:2f:0f:22:89:c2:16:e7:9c:1c:6f: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:F6:95:CF:99:0D:16:02:E1:4E:10:29:46:4C:91:A4:8D:E6:6F X509v3 Authority Key Identifier: keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:83:1b:94:ea:24:10:da:cd:14:06:11:d4:c7:61:0e:4b:ae: 29:b9:06:24:fa:6c:93:b9:fb:da:5e:d6:0e:09:6f:64:0e:78: ec:0a:0b:e8:5d:c6:5b:ef:8b:74:80:3f:5e:98:02:dc:2b:5b: f8:59:9c:09:d0:2a:94:80:e6:bb:bf:f1:d8:c4:b1:05:49:e6: 71:23:e5:2e:11:c8:d6:26:c4:97:a4:d8:ed:9d:03:ab:c7:f1: 98:00:09:da:75:8e:f0:76:c9:2f:5e:a2:6f:43:46:42:53:18: b5:55:27:ea:07:d6:65:1f:6e:61:ba:1d:4a:86:b7:c0:e3:e4: 74:41:1c:13:7b:5d:79:1e:5e:97:13:44:fe:94:6a:07:3f:f5: 63:14:22:b1:fb:da:3d:d9:8e:db:ba:64:53:b9:36:f7:41:51: 21:d1:3c:97:e0:1d:c7:92:c6:63:2a:7c:a4:90:00:5d:d8:2a: 0b:65:04:7f:a3:7a:83:ad:4a:37:be:b6:1b:a1:59:e7:d4:c3: 69:46:84:ea:4f:91:53:db:1c:a8:d8:0a:40:fd:d6:3c:c9:2e: 0a:37:fc:98:0f:1c:1d:32:a4:e7:0d:9e:af:8b:21:fc:33:d1: f0:55:78:11:20:c0:5e:3b:33:78:30:40:a9:ca:c9:12:f6:43: 53:a1:a8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1jQ5U2iUY484s/3DzF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTdjYWIyOWRmMDkwNjU1NGMxMWNlOWFiMjljNjBkMWU3 YTY3NWMwHhcNMjUxMjE4MjIwMTIwWhcNMjUxMjE5MjIwMTIwWjAzMTEwLwYDVQQD Eyg3OGRjZjY5NWNmOTkwZDE2MDJlMTRlMTAyOTQ2NGM5MWE0OGRlNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPM7sykbgQau2ZRyrFo2keq3iiJl tWMeN41oacTKajr+fvmPP1KldwS+wX8nU7HDuvmE9JqtdP+zVYXO5BcxwGRdznAL KlNz0udxI0T0jl0Ey8NyxXpv0TNtXejpA+cCfQa9spb5ce68xA++wvTbVM3Ia2ZU uYvBODO1luEPctCqcpDFsb3BNom6R14G2h+07I1qOXBFKvf0Dowc5MCKThhDRmo+ 266Qcj+mhlwX3VPH5ODFWHinb/2yhrQmpXj5qd9klWUhfEpKlaXxMxxM2ksUqmoU cl0KqYWyGzRQAt2VXUM8ZotXe1F3MQqhYtvxebXNsC8PIonCFuecHG8vDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjc9pXPmQ0WAuFOEClGTJGkjeZvMB8GA1UdIwQY MBaAFG8XyrKd8JBlVMEc6aspxg0eemdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUt Njc4MmE3M2MyYjQ3LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMTEzZTEtNDIzMC00MzgwLTk3MWUtNjc4MmE3M2MyYjQ3 LzEvYnhmS3NwM3drR1ZVd1J6cHF5bkdEUjU2WjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYMblOok ENrNFAYR1MdhDkuuKbkGJPpsk7n72l7WDglvZA547AoL6F3GW++LdIA/XpgC3Ctb +FmcCdAqlIDmu7/x2MSxBUnmcSPlLhHI1ibEl6TY7Z0Dq8fxmAAJ2nWO8HbJL16i b0NGQlMYtVUn6gfWZR9uYbodSoa3wOPkdEEcE3tdeR5elxNE/pRqBz/1YxQisfva PdmO27pkU7k290FRIdE8l+Adx5LGYyp8pJAAXdgqC2UEf6N6g61KN762G6FZ59TD aUaE6k+RU9scqNgKQP3WPMkuCjf8mA8cHTKk5w2er4sh/DPR8FV4ESDAXjszeDBA qcrJEvZDU6GoFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:29 2025 by rpki-client