This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json) Hash identifier: y2ZZiNyGSH7oRxiCTlZQB11npBUNVBCoPil61AbODaQ= Subject key identifier: 21:93:97:A0:91:78:19:CE:CB:AD:31:9D:05:46:03:DE:9E:A6:A6:40 Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45 Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45 Certificate serial: 019B4DE1421F43B30F596AC5E45B14C56F1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft Manifest number: 11C5 Signing time: Wed 24 Dec 2025 01:02:46 +0000 Manifest this update: Wed 24 Dec 2025 01:02:46 +0000 Manifest next update: Thu 25 Dec 2025 01:02:46 +0000 Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: IYUXNeAIBIAQE8Fms4XgRqdnrRFM6CtWpa5OSlJWsi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:42:1f:43:b3:0f:59:6a:c5:e4:5b:14:c5:6f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45 Validity Not Before: Dec 24 01:02:46 2025 GMT Not After : Dec 25 01:02:46 2025 GMT Subject: CN=219397a0917819cecbad319d054603de9ea6a640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:8b:ce:8b:5e:fc:16:03:7e:2e:19:eb:b3: ab:35:18:51:1d:51:00:d8:bc:46:93:ef:e4:5f:c7: 13:65:76:b1:89:2c:73:cc:61:d5:d1:47:e6:29:e7: ba:1d:9a:7f:fe:2b:54:90:3c:54:78:35:94:0e:84: e6:ca:45:d4:43:0c:25:29:e5:6b:0b:25:94:7e:fd: 73:8a:8c:7f:cd:fb:40:37:9e:78:d7:f4:ed:84:50: eb:6e:4e:5c:76:a2:1f:22:93:f2:7e:37:91:1a:fe: 53:32:3d:a8:ca:97:d4:cb:d3:f6:b1:7f:12:14:c8: f5:cf:fe:41:92:e6:a9:62:29:6f:e2:bf:21:a8:2d: 0b:a9:ef:ca:4b:5e:54:90:29:98:e8:3a:04:c6:e8: 9f:16:aa:a3:b5:0d:2f:d0:f9:db:8c:90:53:4d:e5: d0:db:b8:4c:88:2c:2f:e4:f7:97:10:52:35:60:79: 57:ac:20:cc:10:c3:dd:ea:91:26:df:49:32:34:8b: 9e:e1:7c:5b:33:c4:62:f0:04:1d:cf:f0:d0:b5:94: f9:91:62:1d:64:c8:4f:2f:27:7c:8f:ea:a9:15:3c: 33:21:c1:82:58:d8:90:c8:2b:ae:e0:28:c3:a2:90: 9b:bb:ba:94:68:4a:7f:01:e5:31:ec:8b:80:2f:c3: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:97:A0:91:78:19:CE:CB:AD:31:9D:05:46:03:DE:9E:A6:A6:40 X509v3 Authority Key Identifier: keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:53:dc:ae:b6:e2:48:01:42:7f:8c:c1:f5:ce:cf:4a:f3:00: 2f:52:cb:9c:af:b8:87:cd:6e:df:5e:74:03:7a:41:62:cd:97: 14:31:10:9a:ee:7f:b8:27:84:6a:a7:f2:b4:c0:30:67:23:4e: 59:52:e7:4d:38:0e:f0:cc:6f:6a:b4:e2:ae:62:18:d3:b4:67: cc:fd:a3:39:cd:32:b4:9c:f9:04:6e:f2:8c:2e:26:89:b6:18: 5b:f5:8e:79:83:98:9a:05:e8:12:51:02:7e:aa:0b:c5:56:c8: 1d:f3:3c:64:32:ba:28:ee:6c:c7:b9:f2:85:99:d7:3c:f3:01: 0e:6c:83:3a:84:20:09:12:86:45:1d:bb:70:f8:9a:c2:79:df: 00:81:9f:95:71:20:20:03:5a:8e:e6:e6:8e:14:74:e5:76:b7: d4:c4:9d:5a:df:5e:f2:28:dc:e7:0d:c6:e7:18:b8:a6:34:76: d2:60:ca:94:89:6e:88:3a:30:27:da:1f:22:0c:89:0c:c0:bf: 39:e5:1b:65:78:ad:7b:8f:28:90:a7:05:8f:f4:c1:bb:2f:76: ba:34:60:de:89:98:f8:48:e2:86:a4:78:93:ff:61:66:90:b0: 6e:88:f7:d0:2e:87:a0:ae:95:b6:fe:b4:d9:f5:3e:97:2d:0b: ba:b5:13:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4UIfQ7MPWWrF5FsUxW8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzJmNzM1ZjcxNDVmNzBkMjcwMjYwMmVlOGM4MTU2NDll YjJlNDUwHhcNMjUxMjI0MDEwMjQ2WhcNMjUxMjI1MDEwMjQ2WjAzMTEwLwYDVQQD EygyMTkzOTdhMDkxNzgxOWNlY2JhZDMxOWQwNTQ2MDNkZTllYTZhNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmyLzote/BYDfi4Z67OrNRhRHVEA 2LxGk+/kX8cTZXaxiSxzzGHV0UfmKee6HZp//itUkDxUeDWUDoTmykXUQwwlKeVr CyWUfv1ziox/zftAN5541/TthFDrbk5cdqIfIpPyfjeRGv5TMj2oypfUy9P2sX8S FMj1z/5BkuapYilv4r8hqC0Lqe/KS15UkCmY6DoExuifFqqjtQ0v0PnbjJBTTeXQ 27hMiCwv5PeXEFI1YHlXrCDMEMPd6pEm30kyNIue4XxbM8Ri8AQdz/DQtZT5kWId ZMhPLyd8j+qpFTwzIcGCWNiQyCuu4CjDopCbu7qUaEp/AeUx7IuAL8MijwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGTl6CReBnOy60xnQVGA96epqZAMB8GA1UdIwQY MBaAFAbC9zX3FF9w0nAmAu6MgVZJ6y5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQt MWZmNjMwYzM1MGZmLzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQtMWZmNjMwYzM1MGZm LzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFPcrrbi SAFCf4zB9c7PSvMAL1LLnK+4h81u3150A3pBYs2XFDEQmu5/uCeEaqfytMAwZyNO WVLnTTgO8MxvarTirmIY07RnzP2jOc0ytJz5BG7yjC4mibYYW/WOeYOYmgXoElEC fqoLxVbIHfM8ZDK6KO5sx7nyhZnXPPMBDmyDOoQgCRKGRR27cPiawnnfAIGflXEg IANajubmjhR05Xa31MSdWt9e8ijc5w3G5xi4pjR20mDKlIluiDowJ9ofIgyJDMC/ OeUbZXite48okKcFj/TBuy92ujRg3omY+EjihqR4k/9hZpCwboj30C6HoK6Vtv60 2fU+ly0LurUTQw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:01:56 2025 by rpki-client