This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json) Hash identifier: 26e0Ds6nct1HlRkBIpA00zgi7TSRBDWydW3dvibrKvU= Subject key identifier: A0:82:41:8F:6E:41:D3:8D:A7:33:23:15:0C:61:1A:03:D3:5C:8F:99 Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Certificate serial: 019B65B0D281BFDD0540A816C4AB584C307E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 16:00:45 +0000 Manifest this update: Sun 28 Dec 2025 16:00:45 +0000 Manifest next update: Mon 29 Dec 2025 16:00:45 +0000 Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=) 2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: 8ZJTNSL7PsWHuGXSUpWwTDXEvTMmJ+LFkeXykYu1M6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:d2:81:bf:dd:05:40:a8:16:c4:ab:58:4c:30:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Validity Not Before: Dec 28 16:00:45 2025 GMT Not After : Dec 29 16:00:45 2025 GMT Subject: CN=a082418f6e41d38da73323150c611a03d35c8f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:df:98:21:0c:21:e0:d6:ab:3a:de:c2:b4: aa:da:50:66:79:83:ef:21:1e:93:af:16:ab:f0:e7: f7:b1:34:a1:35:11:29:2a:61:d3:86:31:23:87:73: 65:a0:6b:46:6b:db:87:ed:e1:d5:a8:24:7a:c0:48: 2d:19:25:1a:3c:74:14:3e:20:e6:1d:13:52:85:9d: 59:90:a2:cb:0a:bc:64:ae:3e:c5:76:64:7d:56:5f: d6:9c:3f:d3:ee:8f:19:ae:ab:15:b7:78:1e:36:00: af:df:8b:37:2c:d6:2b:7f:13:ed:cc:73:49:45:f6: 19:4b:0b:b7:ab:ed:8f:df:95:77:d2:89:66:d4:42: 65:03:03:28:69:9a:12:59:78:52:5c:46:18:53:fa: 8f:bd:4b:76:cf:38:30:00:11:d9:6c:b2:02:ad:80: 9e:fb:77:f5:3d:1e:90:c0:a9:48:77:3f:a8:e8:5a: 11:7b:4a:53:bc:97:4f:3f:94:c5:42:80:76:9b:d9: 6c:07:65:f1:04:71:ee:5e:8e:f7:eb:37:df:2c:47: 59:f9:95:eb:71:13:07:2b:3e:7f:a1:25:b0:e1:da: 6a:7f:68:97:67:ae:b3:29:3f:01:c0:33:0d:91:6e: bd:23:45:3f:08:10:4a:f6:30:88:f0:3f:d8:41:4f: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:82:41:8F:6E:41:D3:8D:A7:33:23:15:0C:61:1A:03:D3:5C:8F:99 X509v3 Authority Key Identifier: keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:eb:7b:af:b4:07:7b:11:09:42:cd:09:0d:a2:96:cb:b9:7a: a1:1f:bf:74:fc:34:2b:b7:52:e5:2e:6a:12:02:62:d0:dd:e0: b3:37:55:c7:f7:1a:97:dc:3f:6d:f5:e6:d0:45:60:57:07:91: 03:33:c9:60:89:18:be:ea:66:a6:26:8f:fe:df:c9:c2:ed:fb: 8b:bd:ca:e6:8e:c6:5c:f8:a5:55:50:cc:a2:28:58:d2:09:22: 97:5b:f5:ed:0c:9a:34:a4:1d:db:61:11:2a:21:dd:ee:a0:86: de:a8:e5:e4:9f:36:f0:46:ed:74:5a:28:71:70:5f:9c:62:9b: 4a:3c:e9:47:fd:32:a9:2e:ab:f3:65:09:32:dc:5b:0f:5b:01: bb:c9:ad:1e:d5:25:56:3c:ba:e1:b6:14:02:6b:d2:9a:9e:c0: 22:64:03:80:27:1a:0b:9e:68:45:c0:3c:67:be:ef:f7:fa:3a: 16:9a:9b:6c:68:f6:a6:d7:8d:21:8a:d9:f5:7b:7e:e2:6b:5d: 32:1a:40:a6:45:6d:c9:20:46:eb:70:92:fe:97:3d:60:67:07: 37:17:c9:4b:e1:7d:f6:53:a8:cc:54:01:64:80:3c:a5:aa:e3: c5:57:4f:4a:9e:ba:5f:de:6b:fe:07:4a:21:f4:5e:52:c9:47: de:09:ae:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsNKBv90FQKgWxKtYTDB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi Y2E2YmYwHhcNMjUxMjI4MTYwMDQ1WhcNMjUxMjI5MTYwMDQ1WjAzMTEwLwYDVQQD EyhhMDgyNDE4ZjZlNDFkMzhkYTczMzIzMTUwYzYxMWEwM2QzNWM4Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorLfmCEMIeDWqzrewrSq2lBmeYPv IR6Trxar8Of3sTShNREpKmHThjEjh3NloGtGa9uH7eHVqCR6wEgtGSUaPHQUPiDm HRNShZ1ZkKLLCrxkrj7FdmR9Vl/WnD/T7o8ZrqsVt3geNgCv34s3LNYrfxPtzHNJ RfYZSwu3q+2P35V30olm1EJlAwMoaZoSWXhSXEYYU/qPvUt2zzgwABHZbLICrYCe +3f1PR6QwKlIdz+o6FoRe0pTvJdPP5TFQoB2m9lsB2XxBHHuXo736zffLEdZ+ZXr cRMHKz5/oSWw4dpqf2iXZ66zKT8BwDMNkW69I0U/CBBK9jCI8D/YQU+9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCCQY9uQdONpzMjFQxhGgPTXI+ZMB8GA1UdIwQY MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt MDUyOTBiZWNkYzYxLzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALet7r7QH exEJQs0JDaKWy7l6oR+/dPw0K7dS5S5qEgJi0N3gszdVx/cal9w/bfXm0EVgVweR AzPJYIkYvupmpiaP/t/Jwu37i73K5o7GXPilVVDMoihY0gkil1v17QyaNKQd22ER KiHd7qCG3qjl5J828EbtdFoocXBfnGKbSjzpR/0yqS6r82UJMtxbD1sBu8mtHtUl Vjy64bYUAmvSmp7AImQDgCcaC55oRcA8Z77v9/o6FpqbbGj2pteNIYrZ9Xt+4mtd MhpApkVtySBG63CS/pc9YGcHNxfJS+F99lOozFQBZIA8parjxVdPSp66X95r/gdK IfReUslH3gmuCA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:24:40 2025 by rpki-client