This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json) Hash identifier: 9Rwb0MSt3qKLDfDJWnqI9y7FrM8UkwamYvQU32mJrCo= Subject key identifier: 1A:04:4D:80:33:9B:C9:87:6B:D9:B2:2D:3E:95:FC:B2:A1:BC:B7:7A Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Certificate serial: 019B30E9959C5E1B912060E4C93332F1519B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft Manifest number: 0BEC Signing time: Thu 18 Dec 2025 10:02:52 +0000 Manifest this update: Thu 18 Dec 2025 10:02:52 +0000 Manifest next update: Fri 19 Dec 2025 10:02:52 +0000 Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: RVf38s0l8dsi5qlhMXCxJsvIik0mGjoPSSnTNvingRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:95:9c:5e:1b:91:20:60:e4:c9:33:32:f1:51:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Validity Not Before: Dec 18 10:02:52 2025 GMT Not After : Dec 19 10:02:52 2025 GMT Subject: CN=1a044d80339bc9876bd9b22d3e95fcb2a1bcb77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:a2:ca:e4:7c:f5:0d:2a:7f:a3:69:ba:6c: 2e:65:26:de:c9:79:a4:4a:5b:97:58:81:5a:4d:49: fd:58:e5:55:5e:fd:a6:7a:9a:be:ab:cd:31:e3:bf: b7:9e:85:ad:37:a1:84:02:f8:07:30:2d:3d:08:0d: e8:d4:ec:75:ab:d2:ac:2d:43:09:c6:e9:d1:05:2b: 70:8b:74:0b:f5:aa:44:f5:42:0d:c8:15:81:30:0d: 88:2d:e3:d9:0e:a9:d7:6f:0b:a9:58:fb:a6:7b:cd: 33:32:00:4a:a8:0b:a8:ab:ef:51:d0:4a:b8:e7:91: de:39:e6:4c:94:d2:b5:24:81:9d:b0:fe:96:3e:51: b1:ea:8f:88:7c:ff:55:c2:8b:75:a8:d9:8f:b4:bb: 18:c8:0d:34:a8:85:da:a8:6a:e8:5c:86:c9:6b:1d: e1:b9:f5:ec:8d:a8:c4:a3:4f:af:31:64:e8:cb:32: ac:ed:2c:fa:91:4d:9e:ed:54:00:e9:ca:e1:b9:fb: da:7c:a7:c1:55:53:91:16:79:00:36:d8:b2:10:f2: 79:be:5a:66:de:4f:34:d9:bd:08:c2:4a:fd:09:bd: ec:a2:74:b4:9f:7f:c3:f3:6c:0f:c4:81:7e:a6:9d: 5f:65:c4:6c:2e:31:f2:0f:62:a0:60:c0:ce:23:6b: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:04:4D:80:33:9B:C9:87:6B:D9:B2:2D:3E:95:FC:B2:A1:BC:B7:7A X509v3 Authority Key Identifier: keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:24:f8:14:35:26:27:90:35:30:42:3f:e7:26:ad:d0:30:85: 5a:ba:cf:00:e2:ff:82:a9:d3:fc:04:e2:6f:39:a1:a8:09:61: 09:0a:5b:8d:5a:ca:1e:82:1f:2f:35:33:10:3d:4a:e3:01:c4: e5:4d:65:5c:94:8b:30:cf:b9:f1:9e:05:5e:0a:e8:88:f8:ac: e9:a7:1b:93:82:f5:a7:7c:d5:8f:f9:17:7a:f9:2a:a8:cb:3d: 8d:9a:c9:f3:45:85:51:b1:30:06:63:32:9d:85:77:3a:b3:09: 8a:45:17:78:da:0a:92:06:1b:0f:f8:92:b0:91:b2:de:45:fc: 80:de:46:ff:7e:af:db:ed:47:21:d5:0f:91:b4:f6:07:6d:5c: de:46:7b:13:d1:55:ec:12:4e:0d:51:30:a4:63:d0:e5:92:b3: a4:15:24:b0:2f:55:d2:f2:8f:19:14:41:19:38:fa:ec:51:11: 25:97:35:71:a7:e5:12:32:c6:11:bb:83:c5:0c:7f:2c:40:04: ac:f9:23:05:7e:33:3b:84:4e:11:b0:89:27:60:64:f4:ba:1d: b1:dc:ea:78:c6:c7:c7:94:53:ff:4f:14:33:cd:56:d9:e0:0d: b1:df:06:b2:17:26:75:97:37:f4:c8:15:da:5f:35:e8:93:e2: ea:da:f4:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ZWcXhuRIGDkyTMy8VGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTcwMDkxNmY5MDk4M2JkOGU4OWNkMDVmZTYyOWVjMTgz YmZhNTQwHhcNMjUxMjE4MTAwMjUyWhcNMjUxMjE5MTAwMjUyWjAzMTEwLwYDVQQD EygxYTA0NGQ4MDMzOWJjOTg3NmJkOWIyMmQzZTk1ZmNiMmExYmNiNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHKiyuR89Q0qf6NpumwuZSbeyXmk SluXWIFaTUn9WOVVXv2mepq+q80x47+3noWtN6GEAvgHMC09CA3o1Ox1q9KsLUMJ xunRBStwi3QL9apE9UINyBWBMA2ILePZDqnXbwupWPume80zMgBKqAuoq+9R0Eq4 55HeOeZMlNK1JIGdsP6WPlGx6o+IfP9Vwot1qNmPtLsYyA00qIXaqGroXIbJax3h ufXsjajEo0+vMWToyzKs7Sz6kU2e7VQA6crhufvafKfBVVORFnkANtiyEPJ5vlpm 3k802b0Iwkr9Cb3sonS0n3/D82wPxIF+pp1fZcRsLjHyD2KgYMDOI2up5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoETYAzm8mHa9myLT6V/LKhvLd6MB8GA1UdIwQY MBaAFG1XAJFvkJg72Oic0F/mKewYO/pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgt OTI2YjM0ODE0MTMwLzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgtOTI2YjM0ODE0MTMw LzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiT4FDUm J5A1MEI/5yat0DCFWrrPAOL/gqnT/ATibzmhqAlhCQpbjVrKHoIfLzUzED1K4wHE 5U1lXJSLMM+58Z4FXgroiPis6acbk4L1p3zVj/kXevkqqMs9jZrJ80WFUbEwBmMy nYV3OrMJikUXeNoKkgYbD/iSsJGy3kX8gN5G/36v2+1HIdUPkbT2B21c3kZ7E9FV 7BJODVEwpGPQ5ZKzpBUksC9V0vKPGRRBGTj67FERJZc1caflEjLGEbuDxQx/LEAE rPkjBX4zO4ROEbCJJ2Bk9LodsdzqeMbHx5RT/08UM81W2eANsd8GshcmdZc39MgV 2l816JPi6tr0lg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:48 2025 by rpki-client