This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json) Hash identifier: dbOPzt33z+BnC+r4yT73EQZecQevxfHbK3S2MiFnhtQ= Subject key identifier: CA:19:96:CF:B0:92:B2:54:53:A6:A8:54:1A:7C:1A:AF:5B:BB:8A:8F Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Certificate serial: 019B748086D8A2C0A2D90EFCAA1F3709735F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft Manifest number: 0926 Signing time: Wed 31 Dec 2025 13:02:18 +0000 Manifest this update: Wed 31 Dec 2025 13:02:18 +0000 Manifest next update: Thu 01 Jan 2026 13:02:18 +0000 Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: OMefLWnZC17fHup9Dr7RLBC86shxZbasuTQnnIkTRF8=) 2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:80:86:d8:a2:c0:a2:d9:0e:fc:aa:1f:37:09:73:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Validity Not Before: Dec 31 13:02:18 2025 GMT Not After : Jan 1 13:02:18 2026 GMT Subject: CN=ca1996cfb092b25453a6a8541a7c1aaf5bbb8a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:56:6e:65:74:99:3d:11:b5:89:7a:da:36: c9:04:82:70:57:c6:93:74:5f:ac:1c:d8:7b:57:de: 4e:e9:4e:54:cf:f3:21:a5:80:22:d8:e3:cc:b9:89: 5b:fc:fd:4f:b1:53:a3:6c:d9:9e:69:83:a1:2c:c5: 19:67:33:ec:80:b9:6d:58:00:aa:56:2c:f5:10:cd: 61:da:f6:a1:27:e5:41:3c:49:4b:d0:60:df:7b:89: 3a:60:d0:f6:82:2b:c9:4b:c3:13:03:d8:58:2b:c2: 3b:16:d8:63:18:c7:64:ce:e4:1f:e3:2f:e7:09:4c: c1:d7:7f:92:09:0d:b2:24:c3:f7:e3:32:e4:c7:2d: 62:28:40:c7:ca:74:39:bc:c4:ea:c8:a6:84:e6:a2: 80:5a:13:83:09:be:bd:18:71:91:77:ab:bb:65:8a: f4:34:3c:ce:b9:8f:29:12:70:c4:4f:5e:9f:e6:d1: 7f:57:0c:18:72:c5:73:19:86:83:92:92:ee:9e:a9: 19:75:08:71:aa:e2:4e:f5:bd:14:e4:2d:e6:35:b3: ea:ba:1d:20:70:da:68:5f:10:21:d5:5c:c1:c9:c9: 25:74:77:6c:3d:5b:95:2c:d1:fe:41:d0:2e:c5:88: a9:6f:ef:17:f6:64:ee:d1:ae:77:84:a9:b4:89:bf: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:19:96:CF:B0:92:B2:54:53:A6:A8:54:1A:7C:1A:AF:5B:BB:8A:8F X509v3 Authority Key Identifier: keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7f:60:4f:39:96:2e:fb:ea:22:1c:c2:e0:25:1f:6a:1a:7a: bf:98:20:15:c4:fe:93:27:61:f6:ba:27:6e:57:25:3c:e9:0a: cb:0e:a9:d0:78:b0:f5:ef:bf:fe:ed:4d:cc:3a:36:84:f2:b8: f5:9e:34:a6:df:1b:18:2a:d0:aa:30:f4:20:07:8b:d7:7a:08: 33:d9:ca:73:9e:64:0e:73:3d:82:c7:d2:53:63:53:01:98:13: bf:2d:27:89:16:ab:07:02:1e:2f:17:9f:13:54:5d:9f:b1:30: 2c:46:09:1f:1d:ff:6c:cc:9b:94:5e:0a:b8:f6:37:fc:b3:97: b1:98:33:cb:f2:0a:53:b7:f8:7f:50:57:56:d8:d8:c2:29:0f: 76:4e:ab:0e:89:bb:74:ca:86:ae:7a:91:63:7c:55:6d:91:1b: 46:c2:7b:d1:24:48:17:34:f4:ce:c3:83:ba:7d:0b:a4:17:c2: d9:05:70:3e:7c:81:3f:4f:b3:2e:60:73:85:96:df:ef:22:05: bc:5c:92:ca:d9:b6:18:81:98:1d:b4:1b:ef:e0:ad:13:3c:ab: 83:6d:7d:b4:d9:9c:3e:7e:98:44:97:fb:58:d3:87:c2:48:0e: 0a:6d:0d:d3:18:d6:26:f4:a7:9a:a4:b9:49:a8:20:44:cf:58: f9:c8:34:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0gIbYosCi2Q78qh83CXNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx YjFlOTEwHhcNMjUxMjMxMTMwMjE4WhcNMjYwMTAxMTMwMjE4WjAzMTEwLwYDVQQD EyhjYTE5OTZjZmIwOTJiMjU0NTNhNmE4NTQxYTdjMWFhZjViYmI4YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G1WbmV0mT0RtYl62jbJBIJwV8aT dF+sHNh7V95O6U5Uz/MhpYAi2OPMuYlb/P1PsVOjbNmeaYOhLMUZZzPsgLltWACq Viz1EM1h2vahJ+VBPElL0GDfe4k6YND2givJS8MTA9hYK8I7FthjGMdkzuQf4y/n CUzB13+SCQ2yJMP34zLkxy1iKEDHynQ5vMTqyKaE5qKAWhODCb69GHGRd6u7ZYr0 NDzOuY8pEnDET16f5tF/VwwYcsVzGYaDkpLunqkZdQhxquJO9b0U5C3mNbPquh0g cNpoXxAh1VzByckldHdsPVuVLNH+QdAuxYipb+8X9mTu0a53hKm0ib8UiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoZls+wkrJUU6aoVBp8Gq9bu4qPMB8GA1UdIwQY MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt NTBlNzQ2NDI0NjMwLzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ39gTzmW LvvqIhzC4CUfahp6v5ggFcT+kydh9ronblclPOkKyw6p0Hiw9e+//u1NzDo2hPK4 9Z40pt8bGCrQqjD0IAeL13oIM9nKc55kDnM9gsfSU2NTAZgTvy0niRarBwIeLxef E1Rdn7EwLEYJHx3/bMyblF4KuPY3/LOXsZgzy/IKU7f4f1BXVtjYwikPdk6rDom7 dMqGrnqRY3xVbZEbRsJ70SRIFzT0zsODun0LpBfC2QVwPnyBP0+zLmBzhZbf7yIF vFySytm2GIGYHbQb7+CtEzyrg219tNmcPn6YRJf7WNOHwkgOCm0N0xjWJvSnmqS5 SaggRM9Y+cg0HQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:59 2025 by rpki-client