This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json) Hash identifier: 8UpNc7KNfur0zg8WABT5P4dDcWkv1t+xx1wToPCcotM= Subject key identifier: 89:9C:81:45:D3:5D:7C:9E:F4:42:E5:34:C7:67:BD:1F:87:8B:BF:90 Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07 Certificate serial: 019B3343B5B3D589BBF75C487697F40C0CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 21:00:33 +0000 Manifest this update: Thu 18 Dec 2025 21:00:33 +0000 Manifest next update: Fri 19 Dec 2025 21:00:33 +0000 Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=) 2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: cRhuF0Fv1UY5OSuIJ5bFgLYmEZJYjyWCID27bH+XIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:b5:b3:d5:89:bb:f7:5c:48:76:97:f4:0c:0c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07 Validity Not Before: Dec 18 21:00:33 2025 GMT Not After : Dec 19 21:00:33 2025 GMT Subject: CN=899c8145d35d7c9ef442e534c767bd1f878bbf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:38:f3:b9:ce:78:87:86:2d:60:88:dd:50: a0:2b:55:93:14:c2:65:59:07:13:91:d0:8a:f5:73: 93:b0:7b:c6:4d:9f:47:56:c7:7c:4e:de:b7:cf:c7: 4d:99:c5:4f:4a:2e:d5:c4:3b:fc:e2:a7:ab:15:d5: 69:67:18:1b:d1:3a:3f:4b:62:3f:ad:ee:71:2d:93: 54:42:4f:72:9d:8b:d8:10:80:10:e6:0e:3e:af:9b: 00:fd:a1:9f:9a:33:99:78:a7:a9:b0:87:12:54:c0: 30:99:f4:43:e2:71:20:11:00:cc:ed:e3:29:b0:05: 90:26:25:78:88:47:f3:9c:f0:f8:97:25:b8:0c:52: f4:b1:2a:e8:c9:e9:19:ac:47:07:fb:b5:b8:da:6d: f6:67:ab:09:29:f5:9f:b6:9a:c3:1e:20:84:e9:6f: 51:5a:0e:02:cd:f9:eb:f2:f7:90:39:bd:5c:8e:b4: 36:d9:d9:c4:87:29:8d:2b:b5:31:b0:b7:d1:4f:83: de:40:ad:bd:d5:47:df:69:eb:66:ba:69:23:bc:50: b8:2f:80:8e:95:89:ae:f8:eb:7e:81:ba:26:b0:9c: a5:56:3f:7d:2b:b8:d7:98:26:38:d4:e9:e0:70:83: af:9e:eb:c5:37:dc:f0:b1:27:3f:c2:9f:83:c0:72: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:81:45:D3:5D:7C:9E:F4:42:E5:34:C7:67:BD:1F:87:8B:BF:90 X509v3 Authority Key Identifier: keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2f:d4:26:2a:98:98:9e:d2:d9:20:65:ca:4d:39:25:9c:13: 73:47:29:9f:3a:36:6c:62:16:e0:2a:1a:97:c5:43:87:a2:dd: eb:7a:61:52:e9:77:d4:96:37:90:b8:5c:85:2b:2a:04:76:e9: ba:a1:6e:f4:1f:cc:6e:26:e9:87:57:09:bb:af:4a:3c:c8:35: 19:ee:01:cd:42:40:37:5e:59:24:72:89:bb:18:bc:fb:3c:53: 88:26:71:94:54:bf:2a:e7:4f:3d:8b:a9:84:be:ec:12:a9:1b: 4e:5b:e7:ac:f4:95:b6:ff:04:14:83:d9:60:26:82:e7:f2:72: ff:d2:40:9c:a8:a2:fa:f0:32:91:36:54:4c:2a:25:19:4b:fa: 00:f4:1f:1c:b8:33:84:ca:c9:8a:39:21:d4:4e:23:36:b4:86: 40:32:76:37:06:f3:a5:3c:62:6d:51:79:ed:a1:3d:5f:0c:ee: 2a:35:9e:ee:3a:da:96:8e:5c:37:6c:21:35:f4:2b:44:62:23: 3c:f7:9c:80:54:1e:60:dd:a3:8d:f9:ce:8d:a3:2f:99:89:d3: 76:5e:26:e5:b3:2b:a3:48:f7:f4:08:b4:2c:ec:63:6a:8d:bb: 97:4a:eb:e3:cf:82:b7:c0:bf:67:88:e9:22:bc:15:34:6e:6a: f4:64:4e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ7Wz1Ym791xIdpf0DAz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx NzVlMDcwHhcNMjUxMjE4MjEwMDMzWhcNMjUxMjE5MjEwMDMzWjAzMTEwLwYDVQQD Eyg4OTljODE0NWQzNWQ3YzllZjQ0MmU1MzRjNzY3YmQxZjg3OGJiZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzI487nOeIeGLWCI3VCgK1WTFMJl WQcTkdCK9XOTsHvGTZ9HVsd8Tt63z8dNmcVPSi7VxDv84qerFdVpZxgb0To/S2I/ re5xLZNUQk9ynYvYEIAQ5g4+r5sA/aGfmjOZeKepsIcSVMAwmfRD4nEgEQDM7eMp sAWQJiV4iEfznPD4lyW4DFL0sSroyekZrEcH+7W42m32Z6sJKfWftprDHiCE6W9R Wg4Czfnr8veQOb1cjrQ22dnEhymNK7UxsLfRT4PeQK291UffaetmumkjvFC4L4CO lYmu+Ot+gbomsJylVj99K7jXmCY41OngcIOvnuvFN9zwsSc/wp+DwHLUMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImcgUXTXXye9ELlNMdnvR+Hi7+QMB8GA1UdIwQY MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei/UJiqY mJ7S2SBlyk05JZwTc0cpnzo2bGIW4Coal8VDh6Ld63phUul31JY3kLhchSsqBHbp uqFu9B/Mbibph1cJu69KPMg1Ge4BzUJAN15ZJHKJuxi8+zxTiCZxlFS/KudPPYup hL7sEqkbTlvnrPSVtv8EFIPZYCaC5/Jy/9JAnKii+vAykTZUTColGUv6APQfHLgz hMrJijkh1E4jNrSGQDJ2NwbzpTxibVF57aE9XwzuKjWe7jralo5cN2whNfQrRGIj PPecgFQeYN2jjfnOjaMvmYnTdl4m5bMro0j39Ai0LOxjao27l0rr48+Ct8C/Z4jp IrwVNG5q9GROQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:06 2025 by rpki-client