This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json) Hash identifier: QJg2OiWjstS0S7bg6GfJVLq02cSCzLzX6nJDxehke1M= Subject key identifier: B9:E1:44:CF:87:74:88:66:F1:5F:7B:DE:12:8E:22:40:95:B4:64:81 Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07 Certificate serial: 019B560787690678BA304B47CAE3CD261564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 15:01:32 +0000 Manifest this update: Thu 25 Dec 2025 15:01:32 +0000 Manifest next update: Fri 26 Dec 2025 15:01:32 +0000 Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=) 2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: FD9qemFA1ykay+jpK37FKMaGLH++AJjSfUm7CkOZPLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:87:69:06:78:ba:30:4b:47:ca:e3:cd:26:15:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07 Validity Not Before: Dec 25 15:01:32 2025 GMT Not After : Dec 26 15:01:32 2025 GMT Subject: CN=b9e144cf87748866f15f7bde128e224095b46481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:6b:1e:0f:a1:12:e8:d7:3a:d2:05:53:80: 17:1e:1f:a4:99:b9:50:c9:00:62:fc:53:7e:10:e6: 47:13:d9:0c:10:2e:9c:01:44:19:8f:bf:1e:ff:56: 60:a7:8d:b6:02:0a:7a:31:bc:2b:51:2a:58:b9:a0: 53:4c:b4:4f:ed:37:7e:bd:58:c7:d6:c5:51:c6:39: a2:8c:dc:cb:91:ff:6b:85:b9:a0:cb:4a:3c:12:cf: 26:24:a0:aa:b3:41:67:a8:2a:7b:74:13:c0:cb:22: a3:1b:f1:d8:9d:7e:07:09:11:2f:52:80:4b:8b:a1: 79:49:e8:b0:d5:7a:26:b0:29:a6:1b:bd:ae:dc:17: 3e:bf:34:eb:a5:a4:d2:86:9f:bf:c7:2b:00:17:dd: 37:75:42:78:bc:22:32:60:6f:51:45:27:bd:b7:55: 1e:72:a5:08:34:3a:4b:8a:60:cb:4a:1c:00:05:61: f4:16:b2:b3:99:bf:1f:a8:53:f1:51:a0:6d:00:16: 2c:ad:53:45:91:91:f6:9b:94:0c:b7:f4:35:d6:95: 88:22:88:6b:fe:98:a6:fb:70:a5:67:b0:73:d8:48: f5:e1:13:58:ed:3b:24:c1:e0:a2:25:15:06:fb:99: 81:32:fb:bd:64:7a:0a:1b:85:33:de:fc:0a:ba:bd: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E1:44:CF:87:74:88:66:F1:5F:7B:DE:12:8E:22:40:95:B4:64:81 X509v3 Authority Key Identifier: keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:a4:89:98:b1:6a:44:65:65:73:97:bf:5f:17:2c:ed:15:11: 35:b7:0f:33:d9:2f:8b:ca:2b:a4:74:1e:02:c3:b9:f2:49:89: 4c:ed:78:55:f6:fb:8d:8e:cd:69:22:80:46:f1:e2:94:65:4f: d6:92:06:d1:f7:76:5b:9e:9d:91:d4:a5:5c:23:10:a4:e5:53: 46:9d:1b:08:c6:2f:5b:e2:69:a8:5d:85:0b:73:5b:34:04:a9: 98:39:99:31:3a:a3:67:50:76:60:5e:97:a0:5b:ad:ae:df:93: 42:f1:87:eb:c9:11:a2:77:6f:7a:8d:ba:3f:4f:8e:f6:f2:d5: cf:fd:86:03:26:9e:63:90:a6:f5:d9:4a:d7:c2:ec:86:24:fd: 07:90:1c:57:89:02:a7:75:fc:af:23:a5:58:62:17:7f:12:94: 29:5e:f0:61:2e:58:b4:cf:de:96:a9:5e:20:6e:a7:d7:88:90: 65:86:84:99:2b:9e:26:93:1e:b4:d7:e4:81:d7:5a:e1:8b:b5: 3c:59:80:35:6f:19:57:79:2c:32:41:e2:2d:ff:b3:6b:10:25: 62:dc:77:e7:05:28:5f:18:b3:ae:fb:7b:34:3c:f0:f1:41:2f: 0d:2b:cd:c9:ee:1e:f1:a8:d3:de:56:b4:92:e9:e2:51:0d:70: 7c:87:5b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWB4dpBni6MEtHyuPNJhVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx NzVlMDcwHhcNMjUxMjI1MTUwMTMyWhcNMjUxMjI2MTUwMTMyWjAzMTEwLwYDVQQD EyhiOWUxNDRjZjg3NzQ4ODY2ZjE1ZjdiZGUxMjhlMjI0MDk1YjQ2NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjhrHg+hEujXOtIFU4AXHh+kmblQ yQBi/FN+EOZHE9kMEC6cAUQZj78e/1Zgp422Agp6MbwrUSpYuaBTTLRP7Td+vVjH 1sVRxjmijNzLkf9rhbmgy0o8Es8mJKCqs0FnqCp7dBPAyyKjG/HYnX4HCREvUoBL i6F5Seiw1XomsCmmG72u3Bc+vzTrpaTShp+/xysAF903dUJ4vCIyYG9RRSe9t1Ue cqUINDpLimDLShwABWH0FrKzmb8fqFPxUaBtABYsrVNFkZH2m5QMt/Q11pWIIohr /pim+3ClZ7Bz2Ej14RNY7TskweCiJRUG+5mBMvu9ZHoKG4Uz3vwKur2atwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnhRM+HdIhm8V973hKOIkCVtGSBMB8GA1UdIwQY MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aSJmLFq RGVlc5e/Xxcs7RURNbcPM9kvi8orpHQeAsO58kmJTO14Vfb7jY7NaSKARvHilGVP 1pIG0fd2W56dkdSlXCMQpOVTRp0bCMYvW+JpqF2FC3NbNASpmDmZMTqjZ1B2YF6X oFutrt+TQvGH68kRondveo26P0+O9vLVz/2GAyaeY5Cm9dlK18LshiT9B5AcV4kC p3X8ryOlWGIXfxKUKV7wYS5YtM/elqleIG6n14iQZYaEmSueJpMetNfkgdda4Yu1 PFmANW8ZV3ksMkHiLf+zaxAlYtx35wUoXxizrvt7NDzw8UEvDSvNye4e8ajT3la0 kuniUQ1wfIdbkw== -----END CERTIFICATE-----Generated at Thu Dec 25 23:05:13 2025 by rpki-client