This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json) Hash identifier: OmBxqb17C5zuipgmVSx08w6Jpe1Ig8LqwjYQjBToU0c= Subject key identifier: 97:DA:BD:1D:E6:A8:EB:6C:5E:E0:D1:5E:1E:30:7E:72:5A:AA:8F:11 Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Certificate serial: 019B5260E7FD03A2257A7CCEC04844AA8B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft Manifest number: 0755 Signing time: Wed 24 Dec 2025 22:00:40 +0000 Manifest this update: Wed 24 Dec 2025 22:00:40 +0000 Manifest next update: Thu 25 Dec 2025 22:00:40 +0000 Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=) 2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 8KaBObrVuUC4OYQk+NojmE2f7ZSvOna+FxF2deAuhqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:e7:fd:03:a2:25:7a:7c:ce:c0:48:44:aa:8b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Validity Not Before: Dec 24 22:00:40 2025 GMT Not After : Dec 25 22:00:40 2025 GMT Subject: CN=97dabd1de6a8eb6c5ee0d15e1e307e725aaa8f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ab:05:51:c6:b7:d1:44:9c:df:1e:10:f3:e5: 3f:bb:ed:29:70:6d:1e:89:f0:e2:93:d2:31:c9:55: b0:33:68:d1:29:4d:8f:60:51:0e:b8:96:2f:76:b0: e4:f8:f0:c8:30:f2:10:c2:f7:a5:5b:1d:4a:3a:90: 7b:76:f9:b2:8d:74:d5:9d:6b:b1:0c:7b:06:04:3e: 21:ca:55:18:61:46:49:97:76:8b:07:b4:f8:f4:f7: 9b:bf:cc:3c:3f:18:56:bf:13:76:fb:4f:b6:9f:4e: 3c:90:38:ba:d9:f6:eb:1c:8e:62:4a:d9:01:27:bc: 26:98:27:ce:e9:ce:a1:b1:7b:c6:8f:5d:60:a6:3c: 91:16:52:c6:b1:35:ca:15:6c:94:8e:51:7d:49:af: 1f:b9:28:80:b9:24:44:8b:00:b2:38:58:da:c4:db: 45:cf:2e:b4:16:6e:d5:8a:2f:2e:53:5e:44:51:24: d8:bc:be:02:1e:a2:04:30:b0:26:b3:0b:a6:65:32: a3:37:4f:5b:15:aa:a8:f3:b7:0a:80:64:71:55:57: bd:3c:2c:bd:f0:4c:5a:51:8d:19:4b:06:32:c9:f8: b7:4a:11:b9:50:9a:bc:a8:ca:d7:cc:c6:cd:50:c9: dc:16:e3:73:f2:d0:1a:39:b9:02:63:21:50:e1:47: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:BD:1D:E6:A8:EB:6C:5E:E0:D1:5E:1E:30:7E:72:5A:AA:8F:11 X509v3 Authority Key Identifier: keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:89:5b:6a:3d:f8:0f:83:cc:f2:b7:4d:f7:bc:8a:5f:5c:69: a6:c9:33:05:9d:52:b3:f7:7f:45:17:22:49:fa:c7:49:ca:73: 76:6d:10:99:9e:d0:6e:c7:a9:4e:a9:99:5f:8a:13:a9:05:4a: 22:0d:50:b9:69:25:ca:b4:0e:ed:07:28:a9:60:f5:fb:bb:fc: 1e:e3:07:94:15:12:55:10:d6:60:35:ef:e3:c0:fe:3c:1a:34: d7:3f:6f:0b:62:cf:dd:93:52:71:94:79:7f:27:58:c9:cd:f9: 84:ff:0c:6a:f8:75:53:4d:dd:a7:aa:70:11:f8:4a:65:18:d7: 57:f6:01:92:6a:ad:f6:c0:11:30:67:2b:31:e3:2b:1f:b5:55: 03:6a:e0:39:e3:b6:31:8c:74:5a:65:6f:ed:45:e8:04:e4:53: 7a:34:fa:67:84:a7:ea:6d:a0:3f:f6:bf:fe:7d:5d:a6:c3:66: fe:29:1d:dc:ba:9f:c7:a1:33:f1:d5:ae:cf:74:75:e5:8b:cc: 8a:7a:4c:54:65:61:a5:f4:4b:15:79:13:f6:de:1e:ff:75:a4: 6b:42:0d:4b:9a:19:e5:dc:77:f4:31:d3:39:9d:47:07:d0:c9: cb:47:3b:d2:d9:d2:f7:0d:52:f1:48:7b:a2:b0:80:40:4c:ec: cb:a8:2a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYOf9A6IlenzOwEhEqotWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTZkZWY4NDU4ZmQ4ZWIyZWQ3NTRhYzJlOTBkMzUwNWEz MmFhODIwHhcNMjUxMjI0MjIwMDQwWhcNMjUxMjI1MjIwMDQwWjAzMTEwLwYDVQQD Eyg5N2RhYmQxZGU2YThlYjZjNWVlMGQxNWUxZTMwN2U3MjVhYWE4ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26sFUca30USc3x4Q8+U/u+0pcG0e ifDik9IxyVWwM2jRKU2PYFEOuJYvdrDk+PDIMPIQwvelWx1KOpB7dvmyjXTVnWux DHsGBD4hylUYYUZJl3aLB7T49Pebv8w8PxhWvxN2+0+2n048kDi62fbrHI5iStkB J7wmmCfO6c6hsXvGj11gpjyRFlLGsTXKFWyUjlF9Sa8fuSiAuSREiwCyOFjaxNtF zy60Fm7Vii8uU15EUSTYvL4CHqIEMLAmswumZTKjN09bFaqo87cKgGRxVVe9PCy9 8ExaUY0ZSwYyyfi3ShG5UJq8qMrXzMbNUMncFuNz8tAaObkCYyFQ4UcaOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfavR3mqOtsXuDRXh4wfnJaqo8RMB8GA1UdIwQY MBaAFG1W3vhFj9jrLtdUrC6Q01BaMqqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQt ODI4MWY3N2ViZDIyLzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQtODI4MWY3N2ViZDIy LzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIlbaj34 D4PM8rdN97yKX1xppskzBZ1Ss/d/RRciSfrHScpzdm0QmZ7QbsepTqmZX4oTqQVK Ig1QuWklyrQO7QcoqWD1+7v8HuMHlBUSVRDWYDXv48D+PBo01z9vC2LP3ZNScZR5 fydYyc35hP8Mavh1U03dp6pwEfhKZRjXV/YBkmqt9sARMGcrMeMrH7VVA2rgOeO2 MYx0WmVv7UXoBORTejT6Z4Sn6m2gP/a//n1dpsNm/ikd3Lqfx6Ez8dWuz3R15YvM inpMVGVhpfRLFXkT9t4e/3Wka0INS5oZ5dx39DHTOZ1HB9DJy0c70tnS9w1S8Uh7 orCAQEzsy6gqsg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:20:29 2025 by rpki-client