This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json) Hash identifier: LbspukLIGP1tu9ct6akUD9uR3U5HGikpVS6+JEqz2GI= Subject key identifier: D6:A4:E0:37:61:FF:0F:E7:25:44:4E:D1:9F:43:21:60:A4:9E:F0:F1 Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Certificate serial: 019B3D232DE71A451EC3BCFF274604AF6510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft Manifest number: 070C Signing time: Sat 20 Dec 2025 19:01:14 +0000 Manifest this update: Sat 20 Dec 2025 19:01:14 +0000 Manifest next update: Sun 21 Dec 2025 19:01:14 +0000 Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: 3web47ioiKuIFmQay79J1mCab0aF4i0CPcvqUUYPQkk=) 2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:2d:e7:1a:45:1e:c3:bc:ff:27:46:04:af:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Validity Not Before: Dec 20 19:01:14 2025 GMT Not After : Dec 21 19:01:14 2025 GMT Subject: CN=d6a4e03761ff0fe725444ed19f432160a49ef0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:39:c3:e7:3e:db:63:ed:71:88:24:a1:cd: 93:5e:7d:a9:1a:78:92:49:77:e5:f6:d9:6a:70:cb: 22:a2:88:18:fd:59:63:ff:32:f5:5f:50:b8:5c:93: 03:bc:51:f3:04:56:c4:5e:84:16:8e:5a:06:33:cc: cf:5d:71:45:65:a1:3b:c5:5f:30:65:e4:6a:f5:ba: 81:19:21:d6:05:7f:c9:ee:b4:a3:c0:a2:83:76:64: cb:c2:84:aa:7c:4f:5e:27:86:86:a5:27:8d:f6:cf: 79:9b:e1:ed:da:4d:18:af:52:68:e9:81:e9:bd:11: 4b:7c:c3:71:63:93:ff:bf:5c:ad:12:62:1c:0e:08: e2:62:79:c6:c6:1c:4e:6f:a1:2a:22:b0:11:e2:b2: f9:0a:19:35:b6:5e:2e:ca:c6:1d:69:10:1a:d3:93: c3:ad:a7:f6:27:48:fc:c4:ed:b1:d7:56:10:c4:aa: ef:3f:96:a8:e3:94:6b:0c:fe:a4:10:be:41:6c:35: ec:32:b7:7c:d8:66:16:2e:98:50:f3:86:1d:42:b4: 04:fe:3a:ad:ec:67:13:c7:4c:d0:e5:2e:59:e7:87: 0c:5d:1a:51:5b:b9:5d:e5:ff:51:43:47:d6:c3:b5: 6a:b5:8c:5a:e3:cf:22:f8:d6:65:c1:f4:36:8a:a1: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:E0:37:61:FF:0F:E7:25:44:4E:D1:9F:43:21:60:A4:9E:F0:F1 X509v3 Authority Key Identifier: keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0e:bd:01:3d:25:69:94:74:e0:e4:a5:01:55:49:de:37:53: c5:9b:9a:af:38:6a:2c:e2:4b:9d:c0:81:c7:83:72:6a:a2:b5: 91:dd:c4:74:fe:26:98:d6:36:c2:06:d4:06:cf:ad:6c:5f:7f: 86:ec:05:c5:d1:52:07:42:39:d2:d1:bc:d4:8b:b8:fc:55:11: af:74:e8:11:3f:fd:ad:fd:8a:83:be:1f:b4:8d:fa:c4:94:fc: 8f:aa:2c:10:1a:92:13:88:94:75:d4:e7:8b:f3:5f:23:25:8f: 57:9b:91:ff:f4:bd:ec:44:ec:67:80:bc:93:8a:30:31:be:0e: fa:6c:b5:a3:42:4d:04:0b:c3:21:ba:bf:75:72:44:97:b4:2a: 65:c9:bb:5f:55:0d:79:01:2b:d4:fd:b6:54:7b:9b:87:0d:e8: cb:12:77:6d:7a:93:cf:b8:c7:2e:c8:92:14:e8:ec:bc:a2:06: 89:44:fb:e8:c0:ec:0a:2f:fe:22:14:21:f8:fb:27:d1:ef:a1: d1:d8:b9:7e:08:fe:35:74:40:de:e6:3c:50:52:8d:02:9b:19: 74:b9:9f:44:7f:ab:d1:98:d8:c4:4d:14:ba:b0:2d:26:78:02: f5:bd:e6:aa:21:88:ca:ca:99:c0:d4:2f:98:1a:9b:40:ce:34: 8e:6f:1f:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iy3nGkUew7z/J0YEr2UQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1 YTgzY2EwHhcNMjUxMjIwMTkwMTE0WhcNMjUxMjIxMTkwMTE0WjAzMTEwLwYDVQQD EyhkNmE0ZTAzNzYxZmYwZmU3MjU0NDRlZDE5ZjQzMjE2MGE0OWVmMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSA5w+c+22PtcYgkoc2TXn2pGniS SXfl9tlqcMsioogY/Vlj/zL1X1C4XJMDvFHzBFbEXoQWjloGM8zPXXFFZaE7xV8w ZeRq9bqBGSHWBX/J7rSjwKKDdmTLwoSqfE9eJ4aGpSeN9s95m+Ht2k0Yr1Jo6YHp vRFLfMNxY5P/v1ytEmIcDgjiYnnGxhxOb6EqIrAR4rL5Chk1tl4uysYdaRAa05PD raf2J0j8xO2x11YQxKrvP5ao45RrDP6kEL5BbDXsMrd82GYWLphQ84YdQrQE/jqt 7GcTx0zQ5S5Z54cMXRpRW7ld5f9RQ0fWw7VqtYxa488i+NZlwfQ2iqEFbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNak4Ddh/w/nJURO0Z9DIWCknvDxMB8GA1UdIwQY MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ69AT0l aZR04OSlAVVJ3jdTxZuarzhqLOJLncCBx4NyaqK1kd3EdP4mmNY2wgbUBs+tbF9/ huwFxdFSB0I50tG81Iu4/FURr3ToET/9rf2Kg74ftI36xJT8j6osEBqSE4iUddTn i/NfIyWPV5uR//S97ETsZ4C8k4owMb4O+my1o0JNBAvDIbq/dXJEl7QqZcm7X1UN eQEr1P22VHubhw3oyxJ3bXqTz7jHLsiSFOjsvKIGiUT76MDsCi/+IhQh+Psn0e+h 0di5fgj+NXRA3uY8UFKNApsZdLmfRH+r0ZjYxE0UurAtJngC9b3mqiGIysqZwNQv mBqbQM40jm8fiw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:23 2025 by rpki-client