This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json) Hash identifier: /JWnVDEnm/yM66hMt36AeDzG0sU5wT7CqWwpG2MJlLw= Subject key identifier: E4:57:E2:F8:9C:91:C4:30:D5:BF:F3:B7:1A:70:33:C1:05:28:07:93 Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8 Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8 Certificate serial: 019B51F3027F21DFB432859253141CA82D31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 20:00:38 +0000 Manifest this update: Wed 24 Dec 2025 20:00:38 +0000 Manifest next update: Thu 25 Dec 2025 20:00:38 +0000 Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=) 2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: q2afg00rkhjtLPmhgfsyswj4iarcb5BfJnbzry+fRlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:02:7f:21:df:b4:32:85:92:53:14:1c:a8:2d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8 Validity Not Before: Dec 24 20:00:38 2025 GMT Not After : Dec 25 20:00:38 2025 GMT Subject: CN=e457e2f89c91c430d5bff3b71a7033c105280793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:18:61:44:22:5a:62:e0:19:21:af:ab:dd: 31:d8:39:ff:b6:ae:03:26:27:3d:78:4b:be:4f:6e: 44:5a:49:be:e7:e2:70:77:40:e6:a7:c1:4a:73:f6: 1e:23:e3:04:b2:39:48:c7:5f:8d:8f:97:25:f8:78: c1:a0:d4:00:74:10:38:1d:ec:e0:d8:37:82:ff:1b: ff:2e:d1:16:18:69:4a:75:06:dc:47:99:86:1c:61: 9b:9c:7a:71:8d:b3:f4:06:f6:3b:9d:52:3b:b3:e3: 66:ca:e6:cd:95:86:20:e6:74:f2:bb:28:0d:c1:99: 0d:c0:b0:4a:67:32:22:8d:05:04:47:0e:cc:d5:91: b3:33:69:48:6c:c1:9d:07:5b:1b:28:ff:65:72:5a: 15:34:cb:f3:3d:e7:3e:21:94:16:bb:f8:25:10:c5: ba:a1:32:52:e8:ba:01:f7:d4:a7:e5:3d:50:4f:a8: 1c:b8:91:93:82:74:c1:82:e3:aa:15:7f:bc:e9:fc: 74:76:f8:5d:84:59:7e:4a:20:2a:87:29:b4:39:29: b7:3a:4d:84:23:04:8b:ae:9a:26:1c:87:a7:3d:d4: 2c:94:70:a4:56:7b:e3:c0:eb:ba:fb:83:18:65:14: dc:10:fd:76:7a:0d:c9:8e:d5:d0:51:25:9d:65:ac: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:E2:F8:9C:91:C4:30:D5:BF:F3:B7:1A:70:33:C1:05:28:07:93 X509v3 Authority Key Identifier: keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:04:14:58:16:cd:50:81:3d:f4:1d:67:25:ef:f9:2c:7b: 0b:90:e6:2b:bf:7f:5d:0e:39:95:3a:ae:64:88:4e:f3:b1:43: 08:bc:5d:da:4f:a8:82:3a:d7:9a:ef:ce:9b:1c:b2:75:f5:1e: 91:22:d5:8c:78:6a:84:b9:81:cc:2c:6e:e2:f8:e8:93:a3:96: 56:cb:6b:e4:25:55:d8:7b:31:7d:e9:5e:4e:ea:87:7e:54:d2: 55:69:b1:eb:dd:a0:19:04:cc:d9:e4:d1:ac:19:0f:9d:f5:60: a7:2a:97:9c:20:b7:23:b5:0b:98:05:6e:da:e5:2f:e5:02:ac: c7:14:00:45:2e:3a:05:3a:b4:01:f3:84:f5:29:c5:c6:9a:28: 5b:c6:af:46:23:75:8c:3c:27:58:5f:9e:01:64:c4:38:70:78: fa:ab:1e:98:a0:4b:32:c3:4d:cf:b5:7f:c0:5a:27:3e:b3:fe: 29:b5:ee:a3:a3:d7:a1:7e:80:f9:6f:97:33:b5:16:2b:b6:47: 0d:44:61:f9:b3:e7:47:68:94:12:0d:19:46:14:5e:28:79:51: 6e:c4:6d:c8:81:6f:32:13:3b:b0:ae:23:96:76:96:78:b0:b3: 26:83:e7:c6:5e:2a:9a:6d:c9:e6:d2:c0:bc:dc:19:ad:b6:ce: 7b:51:e0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8wJ/Id+0MoWSUxQcqC0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNjZkNWNiMmY5Y2FkM2Y0ODQzZjcxNGE0ZGM2MmQ3MjEz ZGViZTgwHhcNMjUxMjI0MjAwMDM4WhcNMjUxMjI1MjAwMDM4WjAzMTEwLwYDVQQD EyhlNDU3ZTJmODljOTFjNDMwZDViZmYzYjcxYTcwMzNjMTA1MjgwNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaEYYUQiWmLgGSGvq90x2Dn/tq4D Jic9eEu+T25EWkm+5+Jwd0Dmp8FKc/YeI+MEsjlIx1+Nj5cl+HjBoNQAdBA4Hezg 2DeC/xv/LtEWGGlKdQbcR5mGHGGbnHpxjbP0BvY7nVI7s+NmyubNlYYg5nTyuygN wZkNwLBKZzIijQUERw7M1ZGzM2lIbMGdB1sbKP9lcloVNMvzPec+IZQWu/glEMW6 oTJS6LoB99Sn5T1QT6gcuJGTgnTBguOqFX+86fx0dvhdhFl+SiAqhym0OSm3Ok2E IwSLrpomHIenPdQslHCkVnvjwOu6+4MYZRTcEP12eg3JjtXQUSWdZayfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORX4vickcQw1b/ztxpwM8EFKAeTMB8GA1UdIwQY MBaAFGxm1csvnK0/SEP3FKTcYtchPevoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEt NmNmMTMxYzFjYWFjLzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEtNmNmMTMxYzFjYWFj LzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnsEFFgW zVCBPfQdZyXv+Sx7C5DmK79/XQ45lTquZIhO87FDCLxd2k+ogjrXmu/OmxyydfUe kSLVjHhqhLmBzCxu4vjok6OWVstr5CVV2HsxfeleTuqHflTSVWmx692gGQTM2eTR rBkPnfVgpyqXnCC3I7ULmAVu2uUv5QKsxxQARS46BTq0AfOE9SnFxpooW8avRiN1 jDwnWF+eAWTEOHB4+qsemKBLMsNNz7V/wFonPrP+KbXuo6PXoX6A+W+XM7UWK7ZH DURh+bPnR2iUEg0ZRhReKHlRbsRtyIFvMhM7sK4jlnaWeLCzJoPnxl4qmm3J5tLA vNwZrbbOe1HgNA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:33:06 2025 by rpki-client