This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json) Hash identifier: NRXws+s8jX7uaExM8u9+tM4g92CjIrw5WWAJITB74+U= Subject key identifier: 48:97:22:1C:80:24:92:10:AA:5C:61:D2:93:D4:CD:E3:06:C3:04:F4 Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Certificate serial: 019B68EA5B2A78A50FE6969AC7985108D6EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft Manifest number: 0C09 Signing time: Mon 29 Dec 2025 07:02:27 +0000 Manifest this update: Mon 29 Dec 2025 07:02:27 +0000 Manifest next update: Tue 30 Dec 2025 07:02:27 +0000 Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: PpZXe8KJ/i7Zzvi1wjgCLPmcSs+wvok43VPxdNZwmO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:5b:2a:78:a5:0f:e6:96:9a:c7:98:51:08:d6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Validity Not Before: Dec 29 07:02:27 2025 GMT Not After : Dec 30 07:02:27 2025 GMT Subject: CN=4897221c80249210aa5c61d293d4cde306c304f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:fd:57:81:ef:3d:69:62:6b:c0:c9:79:74: 53:54:ea:97:07:f0:53:31:04:de:7d:ae:51:73:8e: 99:8b:36:14:2b:f8:d9:01:77:43:66:87:16:8e:14: 4b:07:b1:cc:5f:76:70:e3:24:0a:79:1c:0a:03:92: 83:aa:ac:b0:e2:00:8f:db:fb:19:87:da:de:d6:53: b1:59:59:ad:34:0b:8b:2f:86:17:6d:7a:d0:f8:af: 24:50:3d:19:c0:81:e5:ff:7d:95:d9:91:e5:00:53: 8b:c1:3a:75:0b:d0:e0:4f:1e:dc:71:7f:37:29:b1: 41:6d:93:a2:47:cd:bc:bd:23:73:49:db:b5:e9:92: b9:d3:65:3c:bf:c1:57:4a:bb:c1:47:27:83:f5:c5: 67:c5:35:c0:39:38:fd:fd:29:24:31:af:06:02:e8: 75:85:76:b5:ca:08:40:78:90:31:f0:d6:47:b8:db: 1f:95:6f:0f:8d:e8:52:77:e4:c5:59:06:b6:c4:8e: 74:fa:56:b5:3e:e0:33:b1:5a:4c:7a:fc:19:49:cc: c6:3c:09:0f:2f:ce:cf:68:4e:6d:21:7f:e8:67:c8: 2f:55:ed:df:9f:f3:f9:b9:81:34:23:36:36:57:9a: 75:d7:bb:17:0f:45:fc:44:69:65:13:d3:61:08:af: a6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:97:22:1C:80:24:92:10:AA:5C:61:D2:93:D4:CD:E3:06:C3:04:F4 X509v3 Authority Key Identifier: keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:be:6c:68:fd:eb:5c:b9:dc:51:e3:31:34:95:b6:88:8f:49: b4:93:8b:75:06:92:90:6f:eb:be:02:82:87:00:5b:f5:1b:ed: 31:ae:2f:6a:46:f3:ed:ae:bc:2f:46:40:cc:9a:be:b4:e5:f0: 80:1d:1b:02:05:82:53:ec:1b:cc:f2:c7:90:84:49:ee:8f:20: 12:a6:26:ac:b7:c0:c5:88:31:41:16:60:94:53:02:c6:c9:1d: 5e:11:68:13:3f:c4:34:1a:90:da:ac:2e:cb:81:d3:cb:b1:c7: f8:10:79:9d:f0:23:c4:5a:23:07:77:88:ed:17:b7:05:db:48: ef:c0:22:40:f6:df:67:b6:c4:19:58:f2:da:ba:a1:40:a6:8f: 6a:53:22:e0:34:12:95:bd:f4:a0:89:cc:33:7b:b8:19:95:29: 39:be:73:98:1b:c5:cd:1c:04:d3:50:b2:a5:34:16:dc:54:08: ac:3c:dd:e7:15:47:a3:9e:6c:fd:8a:9c:b9:df:22:0d:11:14: fd:33:6d:3f:73:7c:29:81:d4:86:23:48:86:36:01:44:13:9a: d1:a4:4a:ba:9d:f0:e4:7d:bb:ee:e0:9d:a9:0f:ae:17:86:75: b8:e9:96:6f:53:61:c7:ca:0e:58:3c:c1:de:6f:33:45:09:3f: a6:46:6e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6lsqeKUP5paax5hRCNbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTcwMDkxNmY5MDk4M2JkOGU4OWNkMDVmZTYyOWVjMTgz YmZhNTQwHhcNMjUxMjI5MDcwMjI3WhcNMjUxMjMwMDcwMjI3WjAzMTEwLwYDVQQD Eyg0ODk3MjIxYzgwMjQ5MjEwYWE1YzYxZDI5M2Q0Y2RlMzA2YzMwNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf79V4HvPWlia8DJeXRTVOqXB/BT MQTefa5Rc46ZizYUK/jZAXdDZocWjhRLB7HMX3Zw4yQKeRwKA5KDqqyw4gCP2/sZ h9re1lOxWVmtNAuLL4YXbXrQ+K8kUD0ZwIHl/32V2ZHlAFOLwTp1C9DgTx7ccX83 KbFBbZOiR828vSNzSdu16ZK502U8v8FXSrvBRyeD9cVnxTXAOTj9/SkkMa8GAuh1 hXa1yghAeJAx8NZHuNsflW8PjehSd+TFWQa2xI50+la1PuAzsVpMevwZSczGPAkP L87PaE5tIX/oZ8gvVe3fn/P5uYE0IzY2V5p117sXD0X8RGllE9NhCK+mrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiXIhyAJJIQqlxh0pPUzeMGwwT0MB8GA1UdIwQY MBaAFG1XAJFvkJg72Oic0F/mKewYO/pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgt OTI2YjM0ODE0MTMwLzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgtOTI2YjM0ODE0MTMw LzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVr5saP3r XLncUeMxNJW2iI9JtJOLdQaSkG/rvgKChwBb9RvtMa4vakbz7a68L0ZAzJq+tOXw gB0bAgWCU+wbzPLHkIRJ7o8gEqYmrLfAxYgxQRZglFMCxskdXhFoEz/ENBqQ2qwu y4HTy7HH+BB5nfAjxFojB3eI7Re3BdtI78AiQPbfZ7bEGVjy2rqhQKaPalMi4DQS lb30oInMM3u4GZUpOb5zmBvFzRwE01CypTQW3FQIrDzd5xVHo55s/Yqcud8iDREU /TNtP3N8KYHUhiNIhjYBRBOa0aRKup3w5H277uCdqQ+uF4Z1uOmWb1Nhx8oOWDzB 3m8zRQk/pkZuEA== -----END CERTIFICATE-----Generated at Mon Dec 29 16:18:51 2025 by rpki-client