This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json) Hash identifier: yadqehk7RqkWn8LSgoc9HRHCWKJCo6IpAHdB1yEdIbk= Subject key identifier: B0:1E:65:92:1D:EA:70:A3:98:B1:FE:17:67:ED:AC:93:E7:64:D3:0A Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d Certificate serial: 019B4EBB4AB3F22A64600661457F5160AF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 05:00:55 +0000 Manifest this update: Wed 24 Dec 2025 05:00:55 +0000 Manifest next update: Thu 25 Dec 2025 05:00:55 +0000 Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: h8U4jTagwieIon9xgBJUyNjRV7W27zH5LzIexmEaur4=) 2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:4a:b3:f2:2a:64:60:06:61:45:7f:51:60:af:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d Validity Not Before: Dec 24 05:00:55 2025 GMT Not After : Dec 25 05:00:55 2025 GMT Subject: CN=b01e65921dea70a398b1fe1767edac93e764d30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:eb:69:0a:21:13:9e:f2:bc:e4:47:ab:7e: d8:21:5f:6c:cb:db:68:e8:22:fd:86:28:fa:f9:20: 82:3e:d8:ae:90:bd:e0:1c:2f:6e:9c:6e:3a:e2:27: 93:37:ff:cb:77:0b:f7:cd:c6:a2:5e:b7:0f:b4:ff: df:89:0e:70:f1:fc:c8:1e:57:e1:c1:6d:af:49:e6: a1:18:49:4d:a0:95:5c:57:8b:4f:d6:20:db:44:ef: 6c:30:21:89:cd:fa:25:f3:7b:e7:5c:0b:ee:22:08: dd:d6:c8:08:05:f8:3e:98:fa:39:cc:a9:54:48:4d: 5f:89:08:7f:5c:6b:4b:f8:a1:08:c1:80:fb:1f:23: 2d:6c:eb:de:84:63:62:ef:1f:8f:69:1f:a3:3a:40: 78:c6:cf:84:a6:53:b7:92:bb:41:f9:3e:79:44:56: 9d:5b:93:8d:21:68:97:28:79:8e:5f:90:e6:28:f7: b1:70:36:4d:00:9a:b2:bd:11:5b:13:e6:a5:53:e0: 3d:3c:4d:ec:c6:b9:ca:8b:37:c2:9d:be:db:13:9e: 3c:9e:d9:cf:f3:77:b9:c2:e5:67:59:ca:13:f0:97: 2a:39:51:09:13:55:38:de:df:d4:a9:ae:b8:92:b6: 7e:d4:82:b1:7b:8d:fd:73:4b:81:3f:fd:6a:20:32: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1E:65:92:1D:EA:70:A3:98:B1:FE:17:67:ED:AC:93:E7:64:D3:0A X509v3 Authority Key Identifier: keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:ea:b5:45:d2:3f:a3:08:9b:89:ba:d7:b0:78:fc:1e:a2: 5f:c7:8d:57:71:07:9a:58:da:0d:ab:d5:3e:3f:7a:11:9b:18: 58:ce:e4:7e:89:8d:be:ec:63:b9:f8:19:35:38:2d:12:f6:97: 3c:ea:7f:95:f9:e6:aa:a0:7f:93:2b:a9:ce:a2:49:2d:44:50: 3a:5d:b9:e2:4f:6e:c1:dc:be:4a:d8:14:2a:d6:28:37:30:96: 80:5b:48:62:77:d4:3e:73:f3:44:8a:b7:c2:56:88:fc:12:2b: 43:4a:d4:64:fe:f8:13:d1:76:5e:5a:63:54:40:8b:eb:71:7f: 3f:e5:25:9a:37:69:09:5a:f2:fd:f3:ed:16:23:e0:85:56:f2: 8e:e8:af:d1:1d:60:f3:71:1f:00:a2:5f:07:e0:42:4b:ac:a8: f8:7f:21:f1:e3:e7:75:dc:e5:5a:5b:e7:e6:67:3e:19:0e:ee: de:31:e7:4f:3a:a2:82:13:c8:37:a8:86:a2:76:ad:d0:1b:76: 0b:76:64:cc:24:94:27:76:58:5a:0f:24:4f:67:f5:ed:06:f7: 86:30:43:02:4e:15:8e:c8:73:2b:31:ea:f2:2e:2a:71:10:ae: 27:d8:89:09:98:9b:7e:f5:7a:e4:18:f9:f9:52:08:e7:55:b1: c6:84:6c:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu0qz8ipkYAZhRX9RYK8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDNkNTJjZjVjNzIxNjE2NjM4YTFhYjljM2Q4OWZhOWE5 N2RjNmQwHhcNMjUxMjI0MDUwMDU1WhcNMjUxMjI1MDUwMDU1WjAzMTEwLwYDVQQD EyhiMDFlNjU5MjFkZWE3MGEzOThiMWZlMTc2N2VkYWM5M2U3NjRkMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyojraQohE57yvORHq37YIV9sy9to 6CL9hij6+SCCPtiukL3gHC9unG464ieTN//Ldwv3zcaiXrcPtP/fiQ5w8fzIHlfh wW2vSeahGElNoJVcV4tP1iDbRO9sMCGJzfol83vnXAvuIgjd1sgIBfg+mPo5zKlU SE1fiQh/XGtL+KEIwYD7HyMtbOvehGNi7x+PaR+jOkB4xs+EplO3krtB+T55RFad W5ONIWiXKHmOX5DmKPexcDZNAJqyvRFbE+alU+A9PE3sxrnKizfCnb7bE548ntnP 83e5wuVnWcoT8JcqOVEJE1U43t/Uqa64krZ+1IKxe439c0uBP/1qIDJH0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAeZZId6nCjmLH+F2ftrJPnZNMKMB8GA1UdIwQY MBaAFG5D1Sz1xyFhZjihq5w9ifqal9xtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTct NmIxYzgyY2U3MTZkLzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTctNmIxYzgyY2U3MTZk LzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPzqtUXS P6MIm4m617B4/B6iX8eNV3EHmljaDavVPj96EZsYWM7kfomNvuxjufgZNTgtEvaX POp/lfnmqqB/kyupzqJJLURQOl254k9uwdy+StgUKtYoNzCWgFtIYnfUPnPzRIq3 wlaI/BIrQ0rUZP74E9F2XlpjVECL63F/P+UlmjdpCVry/fPtFiPghVbyjuiv0R1g 83EfAKJfB+BCS6yo+H8h8ePnddzlWlvn5mc+GQ7u3jHnTzqighPIN6iGonat0Bt2 C3ZkzCSUJ3ZYWg8kT2f17Qb3hjBDAk4VjshzKzHq8i4qcRCuJ9iJCZibfvV65Bj5 +VII51WxxoRs6w== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:21 2025 by rpki-client