This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json) Hash identifier: KHlEj8o3NYUmHCiY/a3gqTiZeSMmP3iFhVh6qKyEnC4= Subject key identifier: 3B:FC:33:13:EA:E9:70:65:B3:5D:35:DA:60:91:A1:49:46:62:89:FD Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2 Certificate serial: 019B3D2346F5A03E7AA0CF9A00AAD0980CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft Manifest number: 06EC Signing time: Sat 20 Dec 2025 19:01:20 +0000 Manifest this update: Sat 20 Dec 2025 19:01:20 +0000 Manifest next update: Sun 21 Dec 2025 19:01:20 +0000 Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: tQOxQ3ZvoGxJ99E48zQNi2UhJvz3jlKzzBxfzptKzu8=) 2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:46:f5:a0:3e:7a:a0:cf:9a:00:aa:d0:98:0c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2 Validity Not Before: Dec 20 19:01:20 2025 GMT Not After : Dec 21 19:01:20 2025 GMT Subject: CN=3bfc3313eae97065b35d35da6091a149466289fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:65:fa:d6:e6:00:6f:f3:fa:43:f3:6a:ec:82: 68:48:3a:1a:50:ba:9e:74:b6:f1:27:7b:89:14:46: dc:94:d8:d1:77:71:68:dd:fb:7a:42:ee:54:2d:23: 60:46:8e:06:b5:77:17:c7:47:ac:7e:75:4e:dd:61: 98:8f:8e:a9:7c:2f:f8:2b:ca:3b:63:47:0b:da:15: 97:6d:6d:39:04:c0:28:4f:d6:79:cd:1c:1f:57:de: 95:26:74:d1:c8:38:97:aa:d1:e2:32:fa:a9:4f:26: 01:4c:6f:40:81:a8:c4:e2:eb:78:c8:f1:05:09:ba: c2:b3:f1:ed:84:33:49:ef:ef:15:70:59:37:82:fb: fa:28:09:36:b7:47:49:9c:66:04:44:ce:d4:da:13: 6e:63:75:52:27:15:94:3a:4a:82:60:52:bf:ce:99: 36:91:05:bd:2e:0b:d6:94:c5:48:c5:87:2f:cd:d0: e4:99:65:3c:bc:df:7c:d8:29:01:f3:1c:79:4f:e3: 24:cd:92:2f:db:b4:d4:79:86:5f:7f:44:e5:c2:dd: ca:31:93:69:ac:6f:4b:b7:a4:29:2d:8a:52:b4:03: 20:02:bf:ec:0b:51:d2:9c:84:8b:b2:02:4b:6a:b2: 3d:cd:6b:39:51:8b:c0:ff:a7:7d:96:41:02:41:79: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:33:13:EA:E9:70:65:B3:5D:35:DA:60:91:A1:49:46:62:89:FD X509v3 Authority Key Identifier: keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ce:91:12:bd:f2:03:2b:fa:c6:c1:48:b8:9c:e9:01:24:c3: 70:69:5c:85:d6:cf:9a:da:f4:9c:9b:60:84:26:bf:6e:56:c4: 51:47:1d:91:9c:c5:7c:99:7b:ba:d2:bd:90:5d:de:f4:82:c1: f6:32:94:4e:bf:e3:af:5b:6a:94:f7:da:f6:e6:79:d3:46:4f: 9f:98:e1:bb:10:1c:d8:e4:d2:9a:11:f1:73:be:84:6b:82:c8: 40:9f:b8:40:55:94:88:0a:a3:5a:b0:6e:48:e7:d8:ba:d6:e7: 08:8e:c2:93:7d:04:d0:a8:c6:03:3e:f5:b3:43:74:66:44:f9: ff:00:09:99:a1:ea:82:ac:1c:90:ef:ca:be:0d:cd:87:b2:3d: e9:47:74:4f:96:53:0a:5f:28:7a:f6:8a:86:14:93:19:97:2c: b2:99:7e:48:29:2c:4b:90:42:e7:66:2d:ca:0f:3c:03:1f:fd: 53:08:10:fc:91:ee:dc:2c:1c:d3:14:31:28:fe:09:91:6b:53: d9:28:fc:8b:af:56:b9:98:e9:7c:91:73:df:11:8e:3c:3a:64: 9d:7f:66:89:3c:d4:95:aa:87:8e:bd:68:ba:c5:b0:2f:a0:a5: 05:b0:dd:0a:ad:ca:cc:13:65:14:81:48:ea:7c:cc:fa:63:1a: 99:82:ac:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0b1oD56oM+aAKrQmAzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx MDYzZTIwHhcNMjUxMjIwMTkwMTIwWhcNMjUxMjIxMTkwMTIwWjAzMTEwLwYDVQQD EygzYmZjMzMxM2VhZTk3MDY1YjM1ZDM1ZGE2MDkxYTE0OTQ2NjI4OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GX61uYAb/P6Q/Nq7IJoSDoaULqe dLbxJ3uJFEbclNjRd3Fo3ft6Qu5ULSNgRo4GtXcXx0esfnVO3WGYj46pfC/4K8o7 Y0cL2hWXbW05BMAoT9Z5zRwfV96VJnTRyDiXqtHiMvqpTyYBTG9AgajE4ut4yPEF CbrCs/HthDNJ7+8VcFk3gvv6KAk2t0dJnGYERM7U2hNuY3VSJxWUOkqCYFK/zpk2 kQW9LgvWlMVIxYcvzdDkmWU8vN982CkB8xx5T+MkzZIv27TUeYZff0Tlwt3KMZNp rG9Lt6QpLYpStAMgAr/sC1HSnISLsgJLarI9zWs5UYvA/6d9lkECQXnuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv8MxPq6XBls1012mCRoUlGYon9MB8GA1UdIwQY MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM6REr3y Ayv6xsFIuJzpASTDcGlchdbPmtr0nJtghCa/blbEUUcdkZzFfJl7utK9kF3e9ILB 9jKUTr/jr1tqlPfa9uZ500ZPn5jhuxAc2OTSmhHxc76Ea4LIQJ+4QFWUiAqjWrBu SOfYutbnCI7Ck30E0KjGAz71s0N0ZkT5/wAJmaHqgqwckO/Kvg3Nh7I96Ud0T5ZT Cl8oevaKhhSTGZcsspl+SCksS5BC52Ytyg88Ax/9UwgQ/JHu3Cwc0xQxKP4JkWtT 2Sj8i69WuZjpfJFz3xGOPDpknX9miTzUlaqHjr1ousWwL6ClBbDdCq3KzBNlFIFI 6nzM+mMamYKsVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:19:38 2025 by rpki-client