This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json) Hash identifier: lc6/Ty8wyifJ2xGPMmuNYIqB29IyMifLoRAuFpinDhM= Subject key identifier: B0:9A:86:90:BD:B8:6E:73:ED:0C:D2:BE:AA:F8:F9:E0:C8:40:C6:5F Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Certificate serial: 019B5229D1FE309ABA1D1543777213521721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:30 +0000 Manifest this update: Wed 24 Dec 2025 21:00:30 +0000 Manifest next update: Thu 25 Dec 2025 21:00:30 +0000 Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: cNhiVZ4LeXyqXk7I0/CsRUAl0p+DMmD9eRCr6vIUISU=) 2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:d1:fe:30:9a:ba:1d:15:43:77:72:13:52:17:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Validity Not Before: Dec 24 21:00:30 2025 GMT Not After : Dec 25 21:00:30 2025 GMT Subject: CN=b09a8690bdb86e73ed0cd2beaaf8f9e0c840c65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:5b:f8:74:6c:14:9f:01:7e:21:70:11:9e: 12:51:62:ef:5a:f0:b4:b6:98:9b:9c:74:70:3a:31: 67:1d:e0:8c:76:49:69:ab:35:59:76:37:c6:d1:e8: af:79:46:16:39:7b:c0:f4:f8:6c:56:80:6d:2d:86: 8a:9a:c4:97:85:71:ff:76:41:4d:ce:4f:17:22:46: c0:84:f5:ca:91:c5:a8:94:ce:39:27:e4:f7:22:e2: ca:e2:0e:51:b7:b9:9d:6c:50:17:6d:fc:73:b2:f1: 4c:67:0a:cb:7e:fa:7e:a1:6b:1d:02:00:7c:ad:07: 88:1a:27:7b:1a:90:bc:c3:3e:7e:f2:37:65:9e:dd: 54:fd:76:17:90:cb:b9:d8:8f:c4:da:e3:3d:03:9c: d1:c7:25:8a:66:b7:de:7b:ac:88:81:e3:28:05:9a: f0:4d:6d:cd:c4:83:9c:0f:d1:39:41:43:9c:4a:33: 23:2c:75:47:6b:64:7e:00:22:65:4c:8b:78:e7:95: 27:9a:98:5b:07:d2:bc:06:98:d0:5f:3b:5d:ad:8f: 63:40:5c:16:a5:79:56:90:3b:2b:bf:13:cc:1d:26: e8:73:7f:de:11:d0:de:e3:bc:76:9a:7a:f1:f3:e6: a9:ea:d6:a6:8f:90:37:a6:aa:f1:a5:10:95:c8:30: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9A:86:90:BD:B8:6E:73:ED:0C:D2:BE:AA:F8:F9:E0:C8:40:C6:5F X509v3 Authority Key Identifier: keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a3:0e:59:3e:1d:6b:78:85:fb:ed:90:a2:17:ef:33:0c:10: 43:3b:fb:9e:29:54:05:5f:c4:cc:2b:33:e1:16:d8:6e:f4:ed: 3d:88:d4:c0:36:69:6f:e7:35:4e:2b:f4:a9:81:b0:1b:b4:2f: ee:eb:ed:a9:fe:52:5d:41:b3:32:64:05:e8:b8:7e:e6:40:27: 49:22:00:83:85:3e:27:d2:ef:1e:fa:af:62:aa:61:f5:57:d0: 23:bd:e9:58:49:80:6d:47:74:42:69:a7:7c:2a:9b:c9:a1:b5: cc:df:59:0f:10:2f:cd:9c:90:fa:f9:cd:94:16:bb:8c:2f:07: d5:ac:27:fa:54:bf:b3:1c:38:30:71:1c:ab:f6:3f:a9:c2:c0: 89:33:1d:bb:a4:ff:7b:ea:e5:49:fe:1c:5f:d5:60:86:b5:3e: 85:0c:ed:62:3d:6a:94:b9:44:52:c0:35:53:1c:52:3e:a9:bc: 38:5b:d3:a6:c2:ea:e4:3b:4e:7e:4f:da:43:11:70:83:13:81: e9:18:75:4c:00:e4:1e:29:49:ed:fd:f1:f7:55:9d:90:b2:99: 14:e9:e0:9f:28:71:e1:a6:c7:1e:58:ae:d9:35:c7:08:9f:01: 24:60:a2:33:16:5e:52:47:50:34:f2:4b:71:04:8b:ba:ad:6e: 66:99:82:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKdH+MJq6HRVDd3ITUhchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZmVhZWZlYTgyYjYxMDNkYzJiODk3MWU5YmRkYTAxNjY5 YTEzNTcwHhcNMjUxMjI0MjEwMDMwWhcNMjUxMjI1MjEwMDMwWjAzMTEwLwYDVQQD EyhiMDlhODY5MGJkYjg2ZTczZWQwY2QyYmVhYWY4ZjllMGM4NDBjNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyhb+HRsFJ8BfiFwEZ4SUWLvWvC0 tpibnHRwOjFnHeCMdklpqzVZdjfG0eiveUYWOXvA9PhsVoBtLYaKmsSXhXH/dkFN zk8XIkbAhPXKkcWolM45J+T3IuLK4g5Rt7mdbFAXbfxzsvFMZwrLfvp+oWsdAgB8 rQeIGid7GpC8wz5+8jdlnt1U/XYXkMu52I/E2uM9A5zRxyWKZrfee6yIgeMoBZrw TW3NxIOcD9E5QUOcSjMjLHVHa2R+ACJlTIt455UnmphbB9K8BpjQXztdrY9jQFwW pXlWkDsrvxPMHSboc3/eEdDe47x2mnrx8+ap6tamj5A3pqrxpRCVyDA53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCahpC9uG5z7QzSvqr4+eDIQMZfMB8GA1UdIwQY MBaAFAT+rv6oK2ED3CuJcem92gFmmhNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQt OGVlYjA4OWI1Y2FmLzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQtOGVlYjA4OWI1Y2Fm LzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6MOWT4d a3iF++2QohfvMwwQQzv7nilUBV/EzCsz4RbYbvTtPYjUwDZpb+c1Tiv0qYGwG7Qv 7uvtqf5SXUGzMmQF6Lh+5kAnSSIAg4U+J9LvHvqvYqph9VfQI73pWEmAbUd0Qmmn fCqbyaG1zN9ZDxAvzZyQ+vnNlBa7jC8H1awn+lS/sxw4MHEcq/Y/qcLAiTMdu6T/ e+rlSf4cX9VghrU+hQztYj1qlLlEUsA1UxxSPqm8OFvTpsLq5DtOfk/aQxFwgxOB 6Rh1TADkHilJ7f3x91WdkLKZFOngnyhx4abHHliu2TXHCJ8BJGCiMxZeUkdQNPJL cQSLuq1uZpmC/g== -----END CERTIFICATE-----Generated at Thu Dec 25 02:40:24 2025 by rpki-client