This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json) Hash identifier: dYUDhMKH0MYxgSM9ZVLL0HeAkgNZO/Vy8m30iXKTCXw= Subject key identifier: 80:B5:91:CD:47:16:A9:7E:E5:30:B3:B9:32:4E:50:BF:07:62:F9:6C Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f Certificate serial: 019B3CEC94DCDB7D9775DF20D71219B43B36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft Manifest number: 0689 Signing time: Sat 20 Dec 2025 18:01:36 +0000 Manifest this update: Sat 20 Dec 2025 18:01:36 +0000 Manifest next update: Sun 21 Dec 2025 18:01:36 +0000 Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: YHUwIhgkV2guk/BUY5IWMR+X6F9KRqDGHFbEFfvxpAw=) 2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:94:dc:db:7d:97:75:df:20:d7:12:19:b4:3b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f Validity Not Before: Dec 20 18:01:36 2025 GMT Not After : Dec 21 18:01:36 2025 GMT Subject: CN=80b591cd4716a97ee530b3b9324e50bf0762f96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:74:20:b4:0f:2a:5b:c7:b2:01:e4:d8:53: 49:7f:6c:ba:85:a6:2a:a8:c4:c9:28:f3:5f:00:87: b4:7b:3b:86:37:bc:e9:8f:3b:03:55:be:be:c8:b0: 65:b1:15:4c:63:4d:a7:b8:97:ad:9d:02:41:2d:21: c5:f1:7b:2d:1b:59:db:ca:6d:4e:53:e6:06:b1:56: 48:c0:11:d3:f8:8b:26:e2:3c:20:ce:57:c7:79:82: 46:ab:54:1c:1b:23:d2:a0:3f:fe:f4:56:e2:96:f4: 91:64:cb:e7:9c:25:bf:e6:dc:a9:bc:7e:c9:57:de: e6:ca:5a:35:d8:f6:51:64:e9:1d:91:a7:32:c2:30: 38:39:7e:6e:ed:2e:b3:ec:dc:a3:86:8d:0b:06:6a: ef:05:88:9a:28:a0:3c:e9:3e:b7:87:f5:3d:0c:e1: 0f:29:d9:7c:fb:da:3c:21:87:21:60:e9:8e:c1:6f: 09:99:6d:e5:bb:5a:f2:e6:75:b1:73:5a:45:cc:bb: d6:be:86:f7:45:af:53:d6:f9:e0:ec:73:f3:c9:23: 76:9f:8d:f8:9e:ae:a4:bf:f7:e0:33:16:4a:ed:6f: c8:a0:7c:f4:f5:35:f0:61:18:d5:3e:6b:0d:00:0b: 2a:5b:4c:20:ce:9e:c9:73:0c:d1:f5:9b:ac:cf:33: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B5:91:CD:47:16:A9:7E:E5:30:B3:B9:32:4E:50:BF:07:62:F9:6C X509v3 Authority Key Identifier: keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f9:0a:e6:f6:bf:ed:b8:23:a5:d2:dc:d3:43:85:ac:28:66: 87:d7:71:19:36:7f:90:52:6b:80:25:b4:62:64:90:63:0c:97: 30:86:56:36:54:07:63:c0:27:33:a8:63:6e:0b:86:96:d4:2c: 12:59:a2:9f:2b:b9:23:f8:69:a2:ce:5f:89:0c:4c:49:19:c5: c0:cf:2a:16:96:d9:a2:cf:8f:2a:3e:a4:2e:54:23:6d:3d:78: 35:63:3f:f0:82:fb:2a:57:e7:5d:f0:7a:80:c3:72:9c:70:f7: 92:9d:b1:ff:c1:6e:76:39:20:11:c3:21:8d:89:5d:ed:ad:a4: 5a:32:77:a4:51:71:23:8b:54:29:39:5c:d6:b3:8f:02:76:fc: 44:f0:2e:27:a6:45:d8:c2:92:3a:0e:70:15:8f:56:87:2d:99: af:f9:88:2f:94:13:26:41:4f:f7:e9:b8:dc:1e:ce:04:8e:70: ed:8b:a3:e5:64:2d:5d:18:3e:e2:2a:4c:97:fa:e9:29:0e:08: 9f:37:79:d1:b9:45:1e:99:25:d3:7c:0a:a0:8a:f0:9f:99:b3: f5:6c:8c:a8:2e:cd:ab:b4:6a:28:3f:4f:24:7b:bf:36:c6:28: 93:4a:b0:a1:23:28:4c:71:de:1c:02:61:62:17:73:9d:bc:79: 46:33:9d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JTc232Xdd8g1xIZtDs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjNkNmQzMTJkNjVlZTRlYTI4ZGFmNDNhZmNjODZlY2Vk NDA4MGYwHhcNMjUxMjIwMTgwMTM2WhcNMjUxMjIxMTgwMTM2WjAzMTEwLwYDVQQD Eyg4MGI1OTFjZDQ3MTZhOTdlZTUzMGIzYjkzMjRlNTBiZjA3NjJmOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthR0ILQPKlvHsgHk2FNJf2y6haYq qMTJKPNfAIe0ezuGN7zpjzsDVb6+yLBlsRVMY02nuJetnQJBLSHF8XstG1nbym1O U+YGsVZIwBHT+Ism4jwgzlfHeYJGq1QcGyPSoD/+9FbilvSRZMvnnCW/5typvH7J V97mylo12PZRZOkdkacywjA4OX5u7S6z7Nyjho0LBmrvBYiaKKA86T63h/U9DOEP Kdl8+9o8IYchYOmOwW8JmW3lu1ry5nWxc1pFzLvWvob3Ra9T1vng7HPzySN2n434 nq6kv/fgMxZK7W/IoHz09TXwYRjVPmsNAAsqW0wgzp7JcwzR9ZuszzNF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC1kc1HFql+5TCzuTJOUL8HYvlsMB8GA1UdIwQY MBaAFG5j1tMS1l7k6ija9Dr8yG7O1AgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83NWIwNmQtNmJjYi00YjE5LWFlYmIt NDE1ODQ1ZGM4MGZiLzEvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83NWIwNmQtNmJjYi00YjE5LWFlYmItNDE1ODQ1ZGM4MGZi LzEvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePkK5va/ 7bgjpdLc00OFrChmh9dxGTZ/kFJrgCW0YmSQYwyXMIZWNlQHY8AnM6hjbguGltQs Elminyu5I/hpos5fiQxMSRnFwM8qFpbZos+PKj6kLlQjbT14NWM/8IL7KlfnXfB6 gMNynHD3kp2x/8FudjkgEcMhjYld7a2kWjJ3pFFxI4tUKTlc1rOPAnb8RPAuJ6ZF 2MKSOg5wFY9Why2Zr/mIL5QTJkFP9+m43B7OBI5w7Yuj5WQtXRg+4ipMl/rpKQ4I nzd50blFHpkl03wKoIrwn5mz9WyMqC7Nq7RqKD9PJHu/NsYok0qwoSMoTHHeHAJh Yhdznbx5RjOdBw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:11 2025 by rpki-client