This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json) Hash identifier: L5qXVZV/gzOHg6EsHPrEDtuy7xp4fgy5M7ccCFrHMGQ= Subject key identifier: FE:9F:C6:DA:91:22:F0:AD:C2:04:CF:01:D9:B0:0E:29:40:5B:A8:14 Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2 Certificate serial: 019B40FF9E7E9934FC0D29079B922AF43D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft Manifest number: 06EE Signing time: Sun 21 Dec 2025 13:00:52 +0000 Manifest this update: Sun 21 Dec 2025 13:00:52 +0000 Manifest next update: Mon 22 Dec 2025 13:00:52 +0000 Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: 0OIAaxkaAygLXOiqDKkgM/pW69ZQnm9HBRzLUn/oCqI=) 2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:9e:7e:99:34:fc:0d:29:07:9b:92:2a:f4:3d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2 Validity Not Before: Dec 21 13:00:52 2025 GMT Not After : Dec 22 13:00:52 2025 GMT Subject: CN=fe9fc6da9122f0adc204cf01d9b00e29405ba814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:a5:db:85:a5:ab:9c:18:f9:fc:05:be:82: 64:0b:21:5c:76:8b:b2:64:fb:04:aa:2e:7a:20:0d: 98:91:eb:3d:de:1d:e8:4e:e2:19:3d:66:32:da:38: ca:fe:01:1b:4b:9e:b3:bc:86:33:b7:74:e0:ac:a5: 69:db:65:50:ff:60:b8:07:78:43:49:a2:a4:f7:33: 31:98:e2:49:a4:b1:97:8f:66:18:f2:e9:0b:52:01: 71:a1:97:19:24:03:0b:d8:d7:db:a5:6a:5a:e9:3c: f1:8e:9a:55:ca:36:53:db:df:4d:37:38:41:bd:fd: 61:14:0f:90:94:0e:2f:a8:2b:97:28:ef:78:35:c9: 68:e2:76:07:f0:15:86:fd:23:39:4a:34:ab:a8:3a: 7c:04:6c:ed:05:b3:b3:8d:c8:17:3a:91:a4:96:f3: a2:6c:c4:6b:58:8c:35:d4:e4:77:16:5b:68:03:ec: 13:b1:b0:a4:74:2d:70:e1:47:77:9a:4d:81:ba:9e: 8e:80:91:26:1e:c0:0c:c0:bc:64:43:85:83:b7:7b: 37:e7:da:5c:38:d4:af:a8:74:67:71:5c:11:8e:36: 4d:cb:7f:4a:f0:82:f0:eb:51:f2:4d:38:2b:a3:51: eb:fd:95:f4:a3:ee:45:74:e6:f4:07:72:49:fc:09: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9F:C6:DA:91:22:F0:AD:C2:04:CF:01:D9:B0:0E:29:40:5B:A8:14 X509v3 Authority Key Identifier: keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:21:97:d3:90:95:e2:3f:7a:48:06:fb:f6:07:4a:b6:d1: ac:2b:c9:00:98:7b:77:2f:8c:6b:3c:7c:51:dd:60:07:75:ea: 1b:f7:3d:8f:fa:a9:a9:17:48:fa:34:e0:01:ca:66:27:79:d8: 00:1e:1f:a2:85:b8:e4:19:af:cd:c6:0b:bd:0d:38:4e:6c:4a: 16:68:92:11:1e:d1:06:99:d2:b6:d9:79:bf:a7:30:ee:6f:47: 15:61:b4:5c:57:34:27:f5:ac:3f:ce:c5:f2:40:ae:1c:c5:fb: af:26:4e:f5:fc:de:96:0e:d0:d0:27:6d:c0:31:88:35:02:16: 2f:87:38:ff:6b:72:59:c3:2f:5b:fb:63:17:12:16:18:cc:03: 2f:49:49:e7:2e:00:04:f9:b8:7f:65:d1:c8:50:da:4e:38:bb: 2d:f9:66:65:d8:4f:a8:d9:e3:78:17:ad:af:94:83:15:15:ae: 4d:59:75:91:9f:a6:47:41:24:8a:db:ab:b6:c7:69:2c:ee:65: d4:61:bc:db:71:1d:24:89:25:be:b2:46:e9:ef:c7:82:b7:8f: 5e:3f:88:c8:f3:97:ab:c6:a1:85:b4:9a:2d:e2:30:07:12:a1: 2c:6d:71:07:c9:78:01:73:03:0f:56:17:45:5f:20:cb:b3:92: 77:09:0c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/55+mTT8DSkHm5Iq9D03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx MDYzZTIwHhcNMjUxMjIxMTMwMDUyWhcNMjUxMjIyMTMwMDUyWjAzMTEwLwYDVQQD EyhmZTlmYzZkYTkxMjJmMGFkYzIwNGNmMDFkOWIwMGUyOTQwNWJhODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ECl24Wlq5wY+fwFvoJkCyFcdouy ZPsEqi56IA2Ykes93h3oTuIZPWYy2jjK/gEbS56zvIYzt3TgrKVp22VQ/2C4B3hD SaKk9zMxmOJJpLGXj2YY8ukLUgFxoZcZJAML2NfbpWpa6TzxjppVyjZT299NNzhB vf1hFA+QlA4vqCuXKO94Nclo4nYH8BWG/SM5SjSrqDp8BGztBbOzjcgXOpGklvOi bMRrWIw11OR3FltoA+wTsbCkdC1w4Ud3mk2Bup6OgJEmHsAMwLxkQ4WDt3s359pc ONSvqHRncVwRjjZNy39K8ILw61HyTTgro1Hr/ZX0o+5FdOb0B3JJ/AnjmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6fxtqRIvCtwgTPAdmwDilAW6gUMB8GA1UdIwQY MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEYhl9OQ leI/ekgG+/YHSrbRrCvJAJh7dy+Mazx8Ud1gB3XqG/c9j/qpqRdI+jTgAcpmJ3nY AB4fooW45BmvzcYLvQ04TmxKFmiSER7RBpnSttl5v6cw7m9HFWG0XFc0J/WsP87F 8kCuHMX7ryZO9fzelg7Q0CdtwDGINQIWL4c4/2tyWcMvW/tjFxIWGMwDL0lJ5y4A BPm4f2XRyFDaTji7LflmZdhPqNnjeBetr5SDFRWuTVl1kZ+mR0EkiturtsdpLO5l 1GG823EdJIklvrJG6e/HgrePXj+IyPOXq8ahhbSaLeIwBxKhLG1xB8l4AXMDD1YX RV8gy7OSdwkMgA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:22 2025 by rpki-client