This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json) Hash identifier: B3BfSXnsHkxwlirejSj3/VZe0QnuhExVuDE3KbU4brg= Subject key identifier: FE:7B:24:9B:56:06:89:7C:49:B7:C6:41:53:A0:C7:48:05:7A:BD:30 Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Certificate serial: 019AAC14CDF817CEE5AF81CAE855DD4E1200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft Manifest number: 0DA9 Signing time: Sat 22 Nov 2025 15:00:35 +0000 Manifest this update: Sat 22 Nov 2025 15:00:35 +0000 Manifest next update: Sun 23 Nov 2025 15:00:35 +0000 Files and hashes: 1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=) 2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: N1quOQDvxOVJh8leCTdDF4XP0SmaY0kRZv/FlXVcvIs=) 3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=) 4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:cd:f8:17:ce:e5:af:81:ca:e8:55:dd:4e:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Validity Not Before: Nov 22 15:00:35 2025 GMT Not After : Nov 23 15:00:35 2025 GMT Subject: CN=fe7b249b5606897c49b7c64153a0c748057abd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:ec:eb:08:b2:23:64:4c:44:47:43:7b:75: b9:9d:81:8e:1f:76:16:87:11:42:91:2c:27:fc:af: 7d:16:5b:d5:8d:38:cf:44:11:aa:f4:17:71:06:43: fd:e6:da:e1:59:4e:37:e3:24:e2:9e:69:69:dc:50: c2:5f:92:f4:3d:ce:d1:0e:a7:f1:b9:55:3e:8f:e8: 26:35:0e:4a:dd:e5:4f:7d:2f:76:0b:37:ed:9b:4d: b8:2a:07:c4:92:6c:1a:71:e8:56:35:26:ae:1e:5c: 01:df:ba:7d:3b:00:36:31:81:5a:27:82:8a:20:f8: eb:17:f1:41:0f:a1:ad:7b:25:71:64:ec:01:b0:15: 25:d7:0c:b0:72:dc:b1:74:a4:27:51:98:c6:7e:85: 0c:21:f2:40:3d:df:ef:c3:2e:7d:80:19:70:5d:04: e8:e4:c4:e7:c3:d2:e8:af:b2:e1:5e:bb:ca:f9:0a: b1:4a:54:43:ed:72:cc:a7:a7:da:1a:be:74:ee:d0: 9e:a9:2b:c6:72:fe:06:2f:47:f0:3e:85:78:52:76: 7d:86:5b:d9:48:c7:27:6e:cc:10:e4:b6:2c:91:aa: 1e:92:d1:e3:dc:92:9a:27:8f:f8:ce:90:96:e6:15: c0:82:af:43:51:80:57:e0:f3:13:7e:c3:18:c9:17: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:24:9B:56:06:89:7C:49:B7:C6:41:53:A0:C7:48:05:7A:BD:30 X509v3 Authority Key Identifier: keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a1:84:c3:4f:78:4d:28:f6:c2:07:8a:64:1d:63:a8:34:8d: a7:9b:b9:29:89:41:03:7d:e4:11:78:fe:20:07:a4:f6:d0:5e: ad:34:e9:b3:7e:a2:55:4f:13:72:88:4e:9b:dc:17:d8:03:e3: 6c:cd:6c:c6:fa:49:13:3b:b4:38:ac:98:f9:8a:48:25:8f:8a: ff:aa:59:f4:6c:43:69:64:d7:c1:9a:d5:c5:12:cb:98:d6:cd: 01:3b:b4:3c:0f:a9:16:f9:25:be:8c:7a:af:f3:8c:22:91:d6: d1:4d:01:2a:be:3a:5a:25:90:85:b7:09:75:2b:3e:e2:02:2a: f9:69:f8:a2:9d:e5:c2:85:82:cf:72:60:58:e5:7d:82:92:87: e8:e4:04:51:8c:c6:d8:da:21:6e:62:e1:79:23:95:98:ce:16: c7:c2:91:2c:2f:73:ca:a8:43:30:22:92:30:c5:a9:dd:b4:f6: 64:bb:cd:79:1d:e1:77:18:49:86:68:81:b0:4e:18:0b:49:a5: c4:57:22:ff:79:dc:ab:f8:f0:6a:7a:7c:70:48:f2:40:19:3a: 52:c5:cd:ae:0d:0a:7d:96:03:7c:90:b7:be:fe:75:65:45:9e: 2b:ec:0c:b3:ca:a5:91:8e:e9:72:ec:da:94:a0:49:03:ee:52: 0c:b5:27:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFM34F87lr4HK6FXdThIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0 NzVjNTEwHhcNMjUxMTIyMTUwMDM1WhcNMjUxMTIzMTUwMDM1WjAzMTEwLwYDVQQD EyhmZTdiMjQ5YjU2MDY4OTdjNDliN2M2NDE1M2EwYzc0ODA1N2FiZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gHs6wiyI2RMREdDe3W5nYGOH3YW hxFCkSwn/K99FlvVjTjPRBGq9BdxBkP95trhWU434yTinmlp3FDCX5L0Pc7RDqfx uVU+j+gmNQ5K3eVPfS92Czftm024KgfEkmwacehWNSauHlwB37p9OwA2MYFaJ4KK IPjrF/FBD6GteyVxZOwBsBUl1wywctyxdKQnUZjGfoUMIfJAPd/vwy59gBlwXQTo 5MTnw9Lor7LhXrvK+QqxSlRD7XLMp6faGr507tCeqSvGcv4GL0fwPoV4UnZ9hlvZ SMcnbswQ5LYskaoektHj3JKaJ4/4zpCW5hXAgq9DUYBX4PMTfsMYyRcGBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP57JJtWBol8SbfGQVOgx0gFer0wMB8GA1UdIwQY MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt NTAyYjc3Y2U5MmY4LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4 LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKGEw094 TSj2wgeKZB1jqDSNp5u5KYlBA33kEXj+IAek9tBerTTps36iVU8TcohOm9wX2APj bM1sxvpJEzu0OKyY+YpIJY+K/6pZ9GxDaWTXwZrVxRLLmNbNATu0PA+pFvklvox6 r/OMIpHW0U0BKr46WiWQhbcJdSs+4gIq+Wn4op3lwoWCz3JgWOV9gpKH6OQEUYzG 2NohbmLheSOVmM4Wx8KRLC9zyqhDMCKSMMWp3bT2ZLvNeR3hdxhJhmiBsE4YC0ml xFci/3ncq/jwanp8cEjyQBk6UsXNrg0KfZYDfJC3vv51ZUWeK+wMs8qlkY7pcuza lKBJA+5SDLUnBg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:33 2025 by rpki-client