This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft File: bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json) Hash identifier: E1zsHpd9awaC6ZSlb2Tvs1JhT9rp70jFstNjBXcdimA= Subject key identifier: 0D:04:DD:3E:FB:45:40:30:46:B8:59:93:32:3A:3F:25:CA:A8:9A:74 Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26 Certificate issuer: /CN=6d62c36d8742869f97555b7c98394f9f65c8e826 Certificate serial: 019B766E720B0FA230C9FCE351897140FD64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft Manifest number: 1737 Signing time: Wed 31 Dec 2025 22:01:48 +0000 Manifest this update: Wed 31 Dec 2025 22:01:48 +0000 Manifest next update: Thu 01 Jan 2026 22:01:48 +0000 Files and hashes: 1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: 1FddJyzthEs4djFOhAnuWGwRCjMF262VWap9oA6vLks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:72:0b:0f:a2:30:c9:fc:e3:51:89:71:40:fd:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826 Validity Not Before: Dec 31 22:01:48 2025 GMT Not After : Jan 1 22:01:48 2026 GMT Subject: CN=0d04dd3efb45403046b85993323a3f25caa89a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:9b:5d:c5:82:b6:f9:b8:28:a2:af:5d:39: c3:3c:a3:32:e9:28:5d:3f:2d:a3:57:f7:84:19:f1: de:0f:14:bf:08:7d:58:94:a9:26:6f:35:6b:b8:4e: 89:c2:97:7d:51:ae:10:3e:e7:a0:d7:b0:72:02:b1: bd:4c:65:24:61:94:a3:c3:13:67:77:36:41:69:bf: e9:22:44:f9:3e:2e:02:70:ce:86:da:c5:d0:c7:19: a8:fe:b1:6c:85:40:f2:82:51:c0:bd:c9:9e:d7:31: 2c:65:e1:20:1d:82:55:73:61:5f:a2:aa:32:1d:c4: 76:81:33:53:18:e4:f8:c9:cf:ae:cc:13:cc:18:3c: f7:5e:44:96:56:c3:65:f5:d0:75:2b:1a:5a:f0:17: d5:4c:c7:06:44:a9:0d:f9:5e:fd:e4:0b:25:ef:b8: c1:2a:03:90:38:20:e1:16:c0:5e:11:0c:61:12:d8: c9:3a:5f:7d:cf:a3:80:41:ef:ef:b6:e0:dd:14:c9: 35:3e:32:10:b8:4c:bb:4c:2e:e4:0f:b9:76:e5:37: 8e:4d:98:e2:e1:59:6d:a7:5a:4b:89:91:b8:16:f1: 5f:59:39:08:91:cb:14:70:30:bf:43:c3:80:aa:c7: a9:3e:7a:63:5b:b2:c0:13:22:f8:f0:63:9a:47:f1: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:04:DD:3E:FB:45:40:30:46:B8:59:93:32:3A:3F:25:CA:A8:9A:74 X509v3 Authority Key Identifier: keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7c:56:dd:e8:66:55:e8:42:e4:12:65:37:b8:23:39:05:cb: a3:62:12:9e:8f:5c:a0:3a:9e:9b:b2:ae:8c:d9:1b:9a:da:23: b4:1f:a0:32:7b:1a:07:41:b7:b2:0a:6d:2e:e8:61:0f:09:94: 04:db:20:6b:5e:a4:2b:77:62:6b:3b:25:cc:d2:21:b4:c3:e6: b4:e1:78:b6:43:df:c4:6a:d6:05:b0:3e:d5:71:8b:98:27:99: 4e:82:65:93:f3:21:5b:2d:f0:96:2a:4e:7e:06:f8:f4:e0:6a: 35:14:fc:ef:2f:c0:a3:ec:37:42:4d:0a:ac:df:cf:9d:a6:ad: eb:0a:1a:76:24:79:0b:bc:e7:4a:43:40:a9:0b:56:8d:11:17: fe:94:30:50:bf:67:16:43:11:7d:89:f2:d7:cd:b2:11:52:b1: c9:b9:38:87:7a:1a:15:0a:ac:83:d3:e6:06:e5:bc:64:74:7a: 72:97:26:c5:18:0b:0c:61:a5:1a:68:e3:f5:8a:a2:d7:cb:a1: 21:15:e7:da:db:f4:21:9a:4d:34:5a:92:92:a8:14:d6:18:4a: fb:c1:23:b0:80:5f:98:f9:1d:b0:1a:99:17:eb:ab:b0:ef:2f: 97:15:b5:af:ca:b4:9c:df:eb:37:25:32:6c:b0:47:9f:87:e8: 6e:81:d2:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bnILD6IwyfzjUYlxQP1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjJjMzZkODc0Mjg2OWY5NzU1NWI3Yzk4Mzk0ZjlmNjVj OGU4MjYwHhcNMjUxMjMxMjIwMTQ4WhcNMjYwMTAxMjIwMTQ4WjAzMTEwLwYDVQQD EygwZDA0ZGQzZWZiNDU0MDMwNDZiODU5OTMzMjNhM2YyNWNhYTg5YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtWbXcWCtvm4KKKvXTnDPKMy6Shd Py2jV/eEGfHeDxS/CH1YlKkmbzVruE6Jwpd9Ua4QPueg17ByArG9TGUkYZSjwxNn dzZBab/pIkT5Pi4CcM6G2sXQxxmo/rFshUDyglHAvcme1zEsZeEgHYJVc2Ffoqoy HcR2gTNTGOT4yc+uzBPMGDz3XkSWVsNl9dB1Kxpa8BfVTMcGRKkN+V795Asl77jB KgOQOCDhFsBeEQxhEtjJOl99z6OAQe/vtuDdFMk1PjIQuEy7TC7kD7l25TeOTZji 4Vltp1pLiZG4FvFfWTkIkcsUcDC/Q8OAqsepPnpjW7LAEyL48GOaR/EgXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0E3T77RUAwRrhZkzI6PyXKqJp0MB8GA1UdIwQY MBaAFG1iw22HQoafl1VbfJg5T59lyOgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2Yt M2E1ODU4ODZhZTRjLzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2YtM2E1ODU4ODZhZTRj LzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHxW3ehm VehC5BJlN7gjOQXLo2ISno9coDqem7KujNkbmtojtB+gMnsaB0G3sgptLuhhDwmU BNsga16kK3diazslzNIhtMPmtOF4tkPfxGrWBbA+1XGLmCeZToJlk/MhWy3wlipO fgb49OBqNRT87y/Ao+w3Qk0KrN/Pnaat6woadiR5C7znSkNAqQtWjREX/pQwUL9n FkMRfYny182yEVKxybk4h3oaFQqsg9PmBuW8ZHR6cpcmxRgLDGGlGmjj9Yqi18uh IRXn2tv0IZpNNFqSkqgU1hhK+8EjsIBfmPkdsBqZF+ursO8vlxW1r8q0nN/rNyUy bLBHn4foboHSww== -----END CERTIFICATE-----Generated at Thu Jan 1 00:01:37 2026 by rpki-client