This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json) Hash identifier: 5gY88jLi3O//IuTLC21//fT7qje5rsx5j47y5SEswUk= Subject key identifier: 6A:B2:DE:10:36:4E:ED:B8:BD:BF:CC:14:3F:3E:0C:D2:28:36:DD:96 Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Certificate serial: 019B2F9E388BDA6B247805B10EFCA7A773B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft Manifest number: 0705 Signing time: Thu 18 Dec 2025 04:00:56 +0000 Manifest this update: Thu 18 Dec 2025 04:00:56 +0000 Manifest next update: Fri 19 Dec 2025 04:00:56 +0000 Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: M+468lRwDnjzdG41GrYcDX0SokS2svZFSJN4yzS5+cU=) 2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:38:8b:da:6b:24:78:05:b1:0e:fc:a7:a7:73:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Validity Not Before: Dec 18 04:00:56 2025 GMT Not After : Dec 19 04:00:56 2025 GMT Subject: CN=6ab2de10364eedb8bdbfcc143f3e0cd22836dd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:0e:57:ab:96:41:62:78:32:91:2d:63:5c: 0d:f7:1c:08:c5:ae:55:41:ac:cf:e8:6d:87:22:b3: 48:7f:c6:0f:05:a3:a6:45:39:c8:5b:61:25:68:fd: 79:e5:fd:41:23:de:b7:6f:64:54:90:40:22:5b:c4: fb:19:9a:76:53:ed:99:1c:6c:eb:8e:37:c1:79:ae: c5:ac:bf:7a:0c:61:0d:5b:a6:8c:68:52:0e:05:58: 27:4e:17:0a:30:27:90:90:ee:51:a2:00:a1:37:0c: 8e:71:f7:9a:20:77:00:a8:4c:78:b8:7f:fc:f7:aa: 10:c4:a5:ac:5a:f9:d1:e2:7d:20:97:a6:a0:ac:dc: 0e:14:e5:d0:ef:bf:c4:2f:a6:2e:7f:f6:53:3f:f2: a4:bd:74:3b:31:ef:93:1b:dd:14:64:6f:f2:db:70: 4b:7e:1d:a3:51:f9:46:0a:77:42:da:6a:98:a1:47: 88:6d:d8:b2:5a:a1:a4:4d:42:7d:05:d4:3b:a1:5f: 1c:70:81:c7:f7:7c:8c:3a:18:cb:da:fb:a7:fb:4e: a0:c1:80:c5:bb:91:de:58:b3:0b:3a:ec:1b:f8:60: ae:d2:6e:3c:3b:53:86:4a:b2:43:ab:b6:7f:ac:18: 64:f9:aa:7d:fe:6e:6b:dd:12:62:01:41:27:31:76: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B2:DE:10:36:4E:ED:B8:BD:BF:CC:14:3F:3E:0C:D2:28:36:DD:96 X509v3 Authority Key Identifier: keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f2:de:85:3a:a5:c1:a0:d1:66:8e:8e:89:69:8a:17:80:68: f4:05:76:34:48:4d:48:b5:ff:b1:95:bc:c3:90:ba:3b:ac:20: 27:86:34:cb:e8:8e:d3:09:57:d3:1d:76:06:a9:9a:cf:b2:99: c3:b4:2f:6d:b7:05:fb:22:d2:8b:3f:88:3e:36:ca:6c:7d:01: 6c:bb:6a:f3:0b:ce:6b:97:bb:d5:e5:1c:7d:90:5c:67:0b:ab: 86:88:a6:92:32:a0:09:ce:80:8a:5b:de:e9:01:03:e6:f6:50: 24:bc:ed:ef:89:e4:66:0f:bc:fb:85:2d:e4:43:f2:e8:e6:cb: 20:db:6e:1f:ed:75:8c:15:66:60:86:f0:25:68:51:49:96:4d: 79:be:ba:7d:18:a1:b6:ed:33:13:9b:fa:b6:da:ee:41:5b:e9: f9:49:47:29:ef:65:f0:77:9e:32:d5:62:0b:e5:23:fd:3f:71: fa:8a:be:f4:e4:74:c7:7a:e5:27:0d:f2:46:05:31:f4:7d:22: b2:8e:ec:77:cd:50:f2:9a:66:c5:95:cf:35:81:58:de:6e:df: 3a:43:82:bd:f7:72:73:53:ac:a4:ce:a7:95:2d:87:b0:e1:19: 37:92:25:b0:0f:a2:32:4f:95:45:ed:6e:c7:3b:1b:e9:69:f8: d4:f9:f5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnjiL2mskeAWxDvynp3OyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1 YTgzY2EwHhcNMjUxMjE4MDQwMDU2WhcNMjUxMjE5MDQwMDU2WjAzMTEwLwYDVQQD Eyg2YWIyZGUxMDM2NGVlZGI4YmRiZmNjMTQzZjNlMGNkMjI4MzZkZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMOV6uWQWJ4MpEtY1wN9xwIxa5V QazP6G2HIrNIf8YPBaOmRTnIW2ElaP155f1BI963b2RUkEAiW8T7GZp2U+2ZHGzr jjfBea7FrL96DGENW6aMaFIOBVgnThcKMCeQkO5RogChNwyOcfeaIHcAqEx4uH/8 96oQxKWsWvnR4n0gl6agrNwOFOXQ77/EL6Yuf/ZTP/KkvXQ7Me+TG90UZG/y23BL fh2jUflGCndC2mqYoUeIbdiyWqGkTUJ9BdQ7oV8ccIHH93yMOhjL2vun+06gwYDF u5HeWLMLOuwb+GCu0m48O1OGSrJDq7Z/rBhk+ap9/m5r3RJiAUEnMXaMSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqy3hA2Tu24vb/MFD8+DNIoNt2WMB8GA1UdIwQY MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffLehTql waDRZo6OiWmKF4Bo9AV2NEhNSLX/sZW8w5C6O6wgJ4Y0y+iO0wlX0x12Bqmaz7KZ w7QvbbcF+yLSiz+IPjbKbH0BbLtq8wvOa5e71eUcfZBcZwurhoimkjKgCc6Ailve 6QED5vZQJLzt74nkZg+8+4Ut5EPy6ObLINtuH+11jBVmYIbwJWhRSZZNeb66fRih tu0zE5v6ttruQVvp+UlHKe9l8HeeMtViC+Uj/T9x+oq+9OR0x3rlJw3yRgUx9H0i so7sd81Q8ppmxZXPNYFY3m7fOkOCvfdyc1OspM6nlS2HsOEZN5IlsA+iMk+VRe1u xzsb6Wn41Pn1fQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:19:37 2025 by rpki-client