This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json) Hash identifier: Qp9cJBUdozb+FzaVFdVEL50KEWNKZgs9O/mHSSww+vE= Subject key identifier: D8:13:A2:BA:FE:08:CA:18:7E:FF:C8:55:93:76:F0:AC:D6:53:89:30 Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Certificate serial: 019B390FA8DB80501277E7D0DE9343863440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft Manifest number: 0DF2 Signing time: Sat 20 Dec 2025 00:01:26 +0000 Manifest this update: Sat 20 Dec 2025 00:01:26 +0000 Manifest next update: Sun 21 Dec 2025 00:01:26 +0000 Files and hashes: 1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=) 2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: aFn2OrLQzr489+uBFkJG9UWNNacfX1rLZ86VWIk/HAw=) 3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=) 4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a8:db:80:50:12:77:e7:d0:de:93:43:86:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Validity Not Before: Dec 20 00:01:26 2025 GMT Not After : Dec 21 00:01:26 2025 GMT Subject: CN=d813a2bafe08ca187effc8559376f0acd6538930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:e4:89:dd:62:56:13:d5:e6:98:fe:c0:21: c2:fd:21:0a:f9:e9:97:59:1f:2d:b0:c8:cf:a3:99: b0:16:11:6b:e7:ea:1b:a4:0f:01:e8:31:22:c6:20: 77:36:b8:09:44:d3:25:88:5f:26:aa:16:8a:a4:f4: 5d:ca:ec:de:16:68:5c:6b:09:58:b2:71:54:64:49: 40:6b:8d:cf:a8:6b:af:84:4b:0e:dd:92:78:e1:9a: dc:51:2a:e0:97:e2:cf:a1:86:0e:00:52:fd:fc:36: 73:f6:be:74:0e:e0:0f:98:79:ff:e7:ee:94:9c:5a: 18:23:26:0e:bb:fe:50:70:77:13:0e:74:eb:2e:1e: 46:9b:6b:a3:fe:17:9f:98:f8:ce:95:aa:3e:1c:2d: f0:4c:e7:d0:f3:a4:4a:43:aa:e8:55:86:07:2b:b3: 59:cc:2e:6b:22:12:70:c0:19:7c:2a:8c:3a:39:f0: 8f:ef:5b:d6:9b:63:38:bd:b0:da:b3:36:ba:54:67: 41:6d:91:de:b2:44:d6:58:7d:d9:e0:17:0a:08:79: 03:9d:38:90:5d:a4:1a:5e:73:ce:30:79:6b:43:73: 9b:54:1a:35:00:4f:59:4d:e0:d2:10:1a:cf:9e:85: 95:ff:f9:af:18:24:86:a1:44:51:6b:9f:1e:6f:5c: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:A2:BA:FE:08:CA:18:7E:FF:C8:55:93:76:F0:AC:D6:53:89:30 X509v3 Authority Key Identifier: keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fd:d0:00:81:3f:b2:6a:6f:a0:3a:37:2a:f7:bf:e3:56:62: 55:9a:b6:0d:a5:cd:f9:29:fd:6e:46:3c:07:d8:c2:bc:41:44: d0:da:02:23:c0:ea:ad:6c:f9:1a:64:4f:cc:7e:76:c1:90:f6: 8b:46:d0:dc:dc:4d:5e:51:52:f1:14:1d:80:34:4b:38:d9:9d: d2:63:d0:3c:78:11:7d:37:3a:c8:13:bf:c0:36:f6:75:0e:5e: d9:d7:76:2c:af:8b:02:75:56:e6:09:78:5d:00:3b:6b:00:63: c6:d7:f8:60:50:77:c2:21:14:42:bb:48:ea:6c:20:ba:45:f8: ff:12:55:df:97:b4:b6:db:ca:40:d2:82:79:e8:5f:b0:67:3b: 7a:36:4b:4d:fc:cc:ef:75:dd:ab:d2:e9:d6:0b:cd:12:68:7d: af:d8:a8:e2:2d:e0:6e:df:7a:2e:0a:87:57:0e:62:8f:ac:ef: a9:b0:4d:cf:76:ec:08:be:c0:e8:e5:58:5d:7e:a4:17:76:e8: 11:36:52:7b:63:aa:4f:18:8d:ea:f3:c8:37:3d:4f:c0:e4:b7: 84:e6:ae:1d:08:dc:5c:29:80:1f:64:1f:22:28:16:7b:1c:5b: b1:eb:e7:a3:ec:a9:04:fe:7b:25:8b:a1:ff:be:6d:43:ef:5a: ec:44:b2:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6jbgFASd+fQ3pNDhjRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0 NzVjNTEwHhcNMjUxMjIwMDAwMTI2WhcNMjUxMjIxMDAwMTI2WjAzMTEwLwYDVQQD EyhkODEzYTJiYWZlMDhjYTE4N2VmZmM4NTU5Mzc2ZjBhY2Q2NTM4OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Pkid1iVhPV5pj+wCHC/SEK+emX WR8tsMjPo5mwFhFr5+obpA8B6DEixiB3NrgJRNMliF8mqhaKpPRdyuzeFmhcawlY snFUZElAa43PqGuvhEsO3ZJ44ZrcUSrgl+LPoYYOAFL9/DZz9r50DuAPmHn/5+6U nFoYIyYOu/5QcHcTDnTrLh5Gm2uj/hefmPjOlao+HC3wTOfQ86RKQ6roVYYHK7NZ zC5rIhJwwBl8Kow6OfCP71vWm2M4vbDasza6VGdBbZHeskTWWH3Z4BcKCHkDnTiQ XaQaXnPOMHlrQ3ObVBo1AE9ZTeDSEBrPnoWV//mvGCSGoURRa58eb1xIhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgTorr+CMoYfv/IVZN28KzWU4kwMB8GA1UdIwQY MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt NTAyYjc3Y2U5MmY4LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4 LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASP3QAIE/ smpvoDo3Kve/41ZiVZq2DaXN+Sn9bkY8B9jCvEFE0NoCI8DqrWz5GmRPzH52wZD2 i0bQ3NxNXlFS8RQdgDRLONmd0mPQPHgRfTc6yBO/wDb2dQ5e2dd2LK+LAnVW5gl4 XQA7awBjxtf4YFB3wiEUQrtI6mwgukX4/xJV35e0ttvKQNKCeehfsGc7ejZLTfzM 73Xdq9Lp1gvNEmh9r9io4i3gbt96LgqHVw5ij6zvqbBNz3bsCL7A6OVYXX6kF3bo ETZSe2OqTxiN6vPINz1PwOS3hOauHQjcXCmAH2QfIigWexxbsevno+ypBP57JYuh /75tQ+9a7ESy5w== -----END CERTIFICATE-----Generated at Sat Dec 20 06:05:15 2025 by rpki-client