This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json) Hash identifier: vNvb8yIRARQVqynPauFbEHvAfQK7qdy6uoj6MImJ7CE= Subject key identifier: BD:56:6F:15:04:E4:62:4A:C9:4B:FD:41:72:36:0B:C6:78:C0:FA:37 Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d Certificate serial: 019B597649181BD010597194D300984A3A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft Manifest number: 0AC9 Signing time: Fri 26 Dec 2025 07:01:22 +0000 Manifest this update: Fri 26 Dec 2025 07:01:22 +0000 Manifest next update: Sat 27 Dec 2025 07:01:22 +0000 Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: Ibbv6liuDzN/YNQWBWpuPPJeMl65RyGi2b101pJ2J94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:49:18:1b:d0:10:59:71:94:d3:00:98:4a:3a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d Validity Not Before: Dec 26 07:01:22 2025 GMT Not After : Dec 27 07:01:22 2025 GMT Subject: CN=bd566f1504e4624ac94bfd4172360bc678c0fa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:94:03:14:38:ba:f5:56:36:5a:fc:d6:8a: ef:b5:44:1c:15:85:d3:97:95:99:fa:9c:65:b5:b9: ac:16:d9:ac:20:b1:fe:c9:99:47:26:4f:18:9f:8b: db:a6:e6:7e:50:25:44:ed:b4:7b:ac:21:a5:87:9e: 59:02:26:45:41:77:29:4e:e4:39:1e:0a:a6:e7:90: 99:90:87:5b:ae:68:6d:e9:a1:e0:19:28:f3:ac:fa: b8:bb:78:55:18:5f:90:b6:da:cb:90:4f:ad:70:50: 8e:fc:d0:fa:ae:70:b8:fc:db:9a:40:ba:d7:8f:bf: 75:32:f9:5e:01:2f:5c:ed:26:1c:16:c5:04:31:e6: 1d:c6:c1:0d:17:14:4f:7f:b5:e1:bd:91:83:be:d9: 26:20:fe:65:78:77:c3:cf:03:86:e8:b2:27:bc:0a: aa:b0:0f:c8:12:cf:8d:80:86:45:14:be:17:32:d2: ec:7b:57:c5:e4:b3:b4:ce:b4:23:08:35:1f:0d:26: 4f:66:80:fc:03:ee:0c:75:58:93:05:1e:07:79:82: 07:75:20:74:95:03:4a:02:50:54:8b:66:7e:66:fb: 88:88:01:7b:f2:ed:4f:24:ab:15:72:a8:80:e0:30: 93:06:35:13:f7:f5:4a:f3:3d:17:28:2e:97:14:19: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:56:6F:15:04:E4:62:4A:C9:4B:FD:41:72:36:0B:C6:78:C0:FA:37 X509v3 Authority Key Identifier: keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ee:89:82:45:8f:bc:3f:a5:c4:0f:34:07:2c:d1:07:0e:27: e3:87:ff:27:4e:0c:a6:3c:c0:43:c5:eb:23:7d:5b:80:b9:46: 65:f2:de:ba:d1:de:f1:56:8f:b9:59:f2:a2:91:1b:97:b2:d1: 1f:c5:71:5e:d2:0d:2d:bb:c7:80:a6:4e:2d:52:5c:9f:20:9d: 40:d6:2c:db:ab:b2:bd:14:c0:92:b8:8d:e4:82:bb:1a:1f:68: 12:de:d1:eb:32:5d:41:9b:1c:a5:83:68:c4:52:7b:fa:9f:a2: 9b:d6:fc:22:55:65:a5:9d:a3:41:52:30:94:ec:d3:e6:9f:f1: 8e:3c:68:68:9a:66:08:d2:e0:77:02:68:bc:b7:a5:60:d7:97: 72:a5:ce:df:32:95:66:a9:da:90:16:a6:dd:02:50:f1:23:88: 50:60:d8:79:51:32:f6:b2:4e:57:b0:8c:1c:8f:ea:60:5c:b9: d5:65:ff:89:5c:59:bd:e6:10:bf:4b:d3:94:77:ad:d9:64:42: d5:b1:c3:72:e4:94:63:57:22:86:00:7d:09:f0:17:32:52:e4: cf:cd:37:60:fe:40:a5:71:37:6d:f8:46:84:b0:ff:ab:54:16: a9:6b:e9:8c:20:70:bc:84:83:5b:ef:60:39:d4:9e:7f:5b:78: 77:22:26:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkkYG9AQWXGU0wCYSjqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjNkNzAwOTgyYWY5YWMxYmFmZTRmMmFhNzE4NDRhZDAw NzU5MWQwHhcNMjUxMjI2MDcwMTIyWhcNMjUxMjI3MDcwMTIyWjAzMTEwLwYDVQQD EyhiZDU2NmYxNTA0ZTQ2MjRhYzk0YmZkNDE3MjM2MGJjNjc4YzBmYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnaUAxQ4uvVWNlr81orvtUQcFYXT l5WZ+pxltbmsFtmsILH+yZlHJk8Yn4vbpuZ+UCVE7bR7rCGlh55ZAiZFQXcpTuQ5 Hgqm55CZkIdbrmht6aHgGSjzrPq4u3hVGF+QttrLkE+tcFCO/ND6rnC4/NuaQLrX j791MvleAS9c7SYcFsUEMeYdxsENFxRPf7XhvZGDvtkmIP5leHfDzwOG6LInvAqq sA/IEs+NgIZFFL4XMtLse1fF5LO0zrQjCDUfDSZPZoD8A+4MdViTBR4HeYIHdSB0 lQNKAlBUi2Z+ZvuIiAF78u1PJKsVcqiA4DCTBjUT9/VK8z0XKC6XFBmcEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1WbxUE5GJKyUv9QXI2C8Z4wPo3MB8GA1UdIwQY MBaAFAbz1wCYKvmsG6/k8qpxhErQB1kdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEt ZDNiM2U3N2JkOTkzLzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEtZDNiM2U3N2JkOTkz LzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu6JgkWP vD+lxA80ByzRBw4n44f/J04MpjzAQ8XrI31bgLlGZfLeutHe8VaPuVnyopEbl7LR H8VxXtINLbvHgKZOLVJcnyCdQNYs26uyvRTAkriN5IK7Gh9oEt7R6zJdQZscpYNo xFJ7+p+im9b8IlVlpZ2jQVIwlOzT5p/xjjxoaJpmCNLgdwJovLelYNeXcqXO3zKV ZqnakBam3QJQ8SOIUGDYeVEy9rJOV7CMHI/qYFy51WX/iVxZveYQv0vTlHet2WRC 1bHDcuSUY1cihgB9CfAXMlLkz803YP5ApXE3bfhGhLD/q1QWqWvpjCBwvISDW+9g OdSef1t4dyIm0Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:45 2025 by rpki-client