This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json) Hash identifier: lY/agSKr8E+qTAjoSG6Dyt3eRz0kSK5/zIR8km1X3C4= Subject key identifier: A3:D9:14:FF:74:48:25:A5:42:3B:8E:69:2F:F5:57:42:58:9E:CB:E6 Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d Certificate serial: 019B75FFB44CEE11F1C372FCFA52AC7AA6A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 20:00:50 +0000 Manifest this update: Wed 31 Dec 2025 20:00:50 +0000 Manifest next update: Thu 01 Jan 2026 20:00:50 +0000 Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: Sk/ByuQ+I42eKisswjre58kePDPmk9m+VMOPchJa5fo=) 2: oGJ3VwT7Kor9HUj6Ls93pR91zps.roa (hash: aLxAJ/2BMqLJ72HUFwwNF6sObyfI6ewUQ19ZgSavYnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:b4:4c:ee:11:f1:c3:72:fc:fa:52:ac:7a:a6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d Validity Not Before: Dec 31 20:00:50 2025 GMT Not After : Jan 1 20:00:50 2026 GMT Subject: CN=a3d914ff744825a5423b8e692ff55742589ecbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:da:7b:8e:e8:73:86:71:46:30:d0:ac:15: a5:be:6c:4c:7c:72:9a:5d:03:41:fa:d4:fe:60:76: 83:61:1e:a5:f0:5c:27:d1:aa:d0:2c:3c:c7:24:a1: e4:4a:cb:8f:9f:1d:2c:f8:3d:0d:f8:d5:4a:48:af: e6:84:c2:96:9f:a3:d5:f4:01:96:10:93:29:67:74: 13:6b:53:c6:4b:b5:83:dd:ce:7d:ed:9c:17:9e:b1: 62:38:e3:70:f9:54:60:57:9e:f6:eb:24:b6:8f:c3: 26:d7:7b:f2:1d:56:03:08:94:95:4b:93:f4:a0:62: fd:1e:5f:0b:f0:f3:b6:52:dc:27:ca:7a:55:fe:54: 84:7d:4a:81:a5:19:95:08:e9:b8:80:54:ce:c7:f7: 1c:3f:04:05:fe:34:07:ae:be:2a:a3:e4:ad:60:89: 37:a6:74:d9:96:33:9e:5e:11:36:39:7d:72:5a:fa: 71:8d:e5:e1:ab:00:8c:c7:2d:75:31:a3:d7:58:f4: 61:d1:22:c4:7f:4d:8e:97:32:a7:f5:24:92:86:16: ed:de:fc:0c:75:16:2d:b2:9c:be:08:24:46:28:3e: e5:de:c8:0e:c5:2d:fd:4d:52:b3:d8:18:c3:dd:b4: 53:c4:29:08:99:40:bb:41:53:41:71:65:a7:0b:40: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:14:FF:74:48:25:A5:42:3B:8E:69:2F:F5:57:42:58:9E:CB:E6 X509v3 Authority Key Identifier: keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:47:41:37:ba:7a:95:d4:6d:46:74:02:5d:0d:6c:b4:d7:4a: d7:82:df:f0:f7:c8:d1:49:e7:4b:ad:bb:2a:e3:c3:e6:dd:7e: 7c:ff:cb:a3:72:05:9f:d0:90:25:3a:bf:10:c1:2a:b1:2c:93: b5:1d:06:4a:85:e2:30:cd:a2:e8:dd:32:e5:65:7c:c0:22:c0: 9b:c0:02:59:bf:94:f4:c1:34:30:cc:40:e5:2f:56:27:6b:24: 44:0a:75:50:89:52:2e:a4:bd:52:c2:33:4e:df:6c:d4:bb:6a: c3:53:59:7d:a1:ad:cc:cf:19:b3:ba:ba:6e:f6:8f:1d:f9:12: 5b:ef:d1:55:5e:20:ac:40:63:42:22:7e:a6:86:76:a4:c7:70: 0e:86:0c:88:60:a3:dc:50:7e:37:0a:06:3f:02:c0:b0:e6:15: 75:89:4a:01:b2:55:3e:00:24:ab:89:19:67:13:f3:30:3d:45: c6:10:b1:5d:69:f3:dd:d6:1b:64:88:26:8e:eb:c3:17:0a:ba: 4f:f5:d1:16:8a:4e:94:7d:2c:d1:ec:b8:d8:c6:ef:f0:c6:67: a2:88:ca:07:51:a0:0c:3c:e5:28:06:0c:d1:a4:da:86:85:d3: 94:a9:8e:89:50:54:28:72:20:2f:52:ce:5e:45:6a:37:aa:80: 51:b4:61:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/7RM7hHxw3L8+lKseqamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Zjc2NmYxZGUxM2FlYzdmYjA1MDE5M2Y4MzI5YTY2MDll MDA5NWQwHhcNMjUxMjMxMjAwMDUwWhcNMjYwMTAxMjAwMDUwWjAzMTEwLwYDVQQD EyhhM2Q5MTRmZjc0NDgyNWE1NDIzYjhlNjkyZmY1NTc0MjU4OWVjYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHnae47oc4ZxRjDQrBWlvmxMfHKa XQNB+tT+YHaDYR6l8Fwn0arQLDzHJKHkSsuPnx0s+D0N+NVKSK/mhMKWn6PV9AGW EJMpZ3QTa1PGS7WD3c597ZwXnrFiOONw+VRgV5726yS2j8Mm13vyHVYDCJSVS5P0 oGL9Hl8L8PO2UtwnynpV/lSEfUqBpRmVCOm4gFTOx/ccPwQF/jQHrr4qo+StYIk3 pnTZljOeXhE2OX1yWvpxjeXhqwCMxy11MaPXWPRh0SLEf02OlzKn9SSShhbt3vwM dRYtspy+CCRGKD7l3sgOxS39TVKz2BjD3bRTxCkImUC7QVNBcWWnC0BOUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPZFP90SCWlQjuOaS/1V0JYnsvmMB8GA1UdIwQY MBaAFAb3ZvHeE67H+wUBk/gymmYJ4AldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQt ZWQxNDA4ZTcxYzFmLzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQtZWQxNDA4ZTcxYzFm LzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0dBN7p6 ldRtRnQCXQ1stNdK14Lf8PfI0UnnS627KuPD5t1+fP/Lo3IFn9CQJTq/EMEqsSyT tR0GSoXiMM2i6N0y5WV8wCLAm8ACWb+U9ME0MMxA5S9WJ2skRAp1UIlSLqS9UsIz Tt9s1Ltqw1NZfaGtzM8Zs7q6bvaPHfkSW+/RVV4grEBjQiJ+poZ2pMdwDoYMiGCj 3FB+NwoGPwLAsOYVdYlKAbJVPgAkq4kZZxPzMD1FxhCxXWnz3dYbZIgmjuvDFwq6 T/XRFopOlH0s0ey42Mbv8MZnoojKB1GgDDzlKAYM0aTahoXTlKmOiVBUKHIgL1LO XkVqN6qAUbRh/A== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:56 2025 by rpki-client