This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json) Hash identifier: kMbAdaR8mFWQwkx4GpBI3fzNOzwNx7/qjEhmUcEqOeI= Subject key identifier: 09:46:72:91:DC:3D:9D:CA:F4:E7:F1:02:CB:2D:A4:4E:25:C2:36:13 Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Certificate serial: 019B552B0C36202286FC2EC5E1D826277D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft Manifest number: 06D0 Signing time: Thu 25 Dec 2025 11:00:43 +0000 Manifest this update: Thu 25 Dec 2025 11:00:43 +0000 Manifest next update: Fri 26 Dec 2025 11:00:43 +0000 Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=) 2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: mzV24QZ0Ie0jnN8DBlafLwMRjaWSoodwqahI8foUBGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:0c:36:20:22:86:fc:2e:c5:e1:d8:26:27:7d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Validity Not Before: Dec 25 11:00:43 2025 GMT Not After : Dec 26 11:00:43 2025 GMT Subject: CN=09467291dc3d9dcaf4e7f102cb2da44e25c23613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:0e:ab:79:19:58:fd:f0:1e:44:22:48:fd: e3:8a:65:20:59:d0:5f:27:e5:86:cb:35:a6:63:ef: 6f:fe:de:44:e4:86:52:53:61:31:0d:ea:97:89:ed: 99:ab:4b:27:b2:5f:0e:6f:3a:ac:f2:fc:3a:9e:66: 20:56:e4:c6:27:ce:bf:88:b7:ac:11:f0:00:7a:bf: 50:26:2c:38:e0:78:21:b5:91:45:40:ab:f7:35:dc: 10:e7:f7:3a:6b:ad:96:6a:3b:76:96:95:06:e7:55: cb:1b:e0:de:0d:7a:ae:e0:50:ee:9c:d4:ed:35:7a: fa:1d:3b:ae:20:a6:37:c0:89:2c:cc:a2:98:43:40: f8:1e:8e:6b:e3:c6:49:f6:32:7a:ca:06:13:a6:a2: 7a:c8:49:95:f6:66:78:a0:54:89:3f:18:09:ce:ba: 2f:84:4a:05:c5:07:a3:b9:0f:a3:08:d4:1b:00:f3: fb:32:0b:51:e4:99:38:69:25:14:53:ca:63:20:81: 07:01:2b:b2:fc:f1:c7:15:79:82:60:01:bb:07:1b: aa:95:99:29:75:53:37:0a:eb:c8:81:4f:e0:8e:52: 79:a7:62:51:ad:fa:8c:32:f8:41:3f:a2:d8:09:cd: 3b:35:d4:8a:4c:24:f0:e6:82:d9:af:4e:6b:51:6b: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:72:91:DC:3D:9D:CA:F4:E7:F1:02:CB:2D:A4:4E:25:C2:36:13 X509v3 Authority Key Identifier: keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ba:e8:46:35:cc:f9:75:21:1e:26:67:c9:d2:ad:f2:24:b9: 40:9e:72:bd:49:15:fe:8b:0b:79:59:87:39:72:a6:89:7b:bf: 53:f1:0e:86:a4:1f:fe:4d:f6:7a:d7:f2:7d:d4:a9:c2:92:05: 8d:68:0a:e9:df:b4:f4:ac:33:e1:5b:d4:eb:1c:c6:44:fe:ed: 43:c4:f2:74:aa:9c:04:81:56:69:ce:b3:59:51:c7:92:5e:0a: 96:79:fb:50:1e:0d:dc:4a:a7:bc:1f:a1:dc:63:01:fe:72:e3: 06:c6:5f:4a:55:8e:0e:aa:e4:d5:3d:a6:b8:50:d1:27:01:9f: 80:33:97:e3:05:11:fd:b9:03:a4:26:a5:09:93:c1:5f:4a:4f: 0a:cd:e2:ef:3f:ea:6a:77:d8:5f:51:67:f0:d6:43:7c:43:30: f1:a5:ca:29:f7:bd:68:3b:93:9f:38:ae:f4:68:1f:5e:f4:3a: a3:3e:9c:d9:65:16:b7:1f:2b:86:39:06:40:7b:62:37:a4:52: e7:7c:ad:33:7c:8d:85:fc:04:24:90:84:7b:de:97:6e:01:80: 00:c0:42:81:d3:ea:8d:bd:e1:65:7c:2c:e7:0b:3a:96:79:a4: 8a:5c:ad:16:68:bc:bb:33:a9:c8:f9:0c:cd:38:b3:dd:d1:ab: c1:0f:2c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKww2ICKG/C7F4dgmJ314MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1 NzAxMjkwHhcNMjUxMjI1MTEwMDQzWhcNMjUxMjI2MTEwMDQzWjAzMTEwLwYDVQQD EygwOTQ2NzI5MWRjM2Q5ZGNhZjRlN2YxMDJjYjJkYTQ0ZTI1YzIzNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweIOq3kZWP3wHkQiSP3jimUgWdBf J+WGyzWmY+9v/t5E5IZSU2ExDeqXie2Zq0snsl8Obzqs8vw6nmYgVuTGJ86/iLes EfAAer9QJiw44HghtZFFQKv3NdwQ5/c6a62Wajt2lpUG51XLG+DeDXqu4FDunNTt NXr6HTuuIKY3wIkszKKYQ0D4Ho5r48ZJ9jJ6ygYTpqJ6yEmV9mZ4oFSJPxgJzrov hEoFxQejuQ+jCNQbAPP7MgtR5Jk4aSUUU8pjIIEHASuy/PHHFXmCYAG7BxuqlZkp dVM3CuvIgU/gjlJ5p2JRrfqMMvhBP6LYCc07NdSKTCTw5oLZr05rUWvgrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlGcpHcPZ3K9OfxAsstpE4lwjYTMB8GA1UdIwQY MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2 LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbroRjXM +XUhHiZnydKt8iS5QJ5yvUkV/osLeVmHOXKmiXu/U/EOhqQf/k32etfyfdSpwpIF jWgK6d+09Kwz4VvU6xzGRP7tQ8TydKqcBIFWac6zWVHHkl4Klnn7UB4N3EqnvB+h 3GMB/nLjBsZfSlWODqrk1T2muFDRJwGfgDOX4wUR/bkDpCalCZPBX0pPCs3i7z/q anfYX1Fn8NZDfEMw8aXKKfe9aDuTnziu9GgfXvQ6oz6c2WUWtx8rhjkGQHtiN6RS 53ytM3yNhfwEJJCEe96XbgGAAMBCgdPqjb3hZXws5ws6lnmkilytFmi8uzOpyPkM zTiz3dGrwQ8sPQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:21 2025 by rpki-client