This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json) Hash identifier: sy9tzIvAnFkFdpArtb3vGhZSGhD4flUxctCk86mxGA8= Subject key identifier: 6C:92:7B:DE:28:A6:B8:28:2F:7F:BD:CC:84:8D:B5:5E:05:0D:83:4D Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Certificate serial: 019B59E360D220A29A5978350CFF868019C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:00:32 +0000 Manifest this update: Fri 26 Dec 2025 09:00:32 +0000 Manifest next update: Sat 27 Dec 2025 09:00:32 +0000 Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: uEJSAQDtlZb7O3jvNlS00YxjPRfiEf7S5O3/S+UCNeU=) 2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:60:d2:20:a2:9a:59:78:35:0c:ff:86:80:19:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Validity Not Before: Dec 26 09:00:32 2025 GMT Not After : Dec 27 09:00:32 2025 GMT Subject: CN=6c927bde28a6b8282f7fbdcc848db55e050d834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:65:67:d8:ba:ec:82:9b:6a:88:05:87:57: ce:bf:b6:1e:59:63:b7:bd:5d:8d:2a:1d:ef:f5:a3: 60:03:60:c5:c8:e7:6c:4c:e1:e9:c4:72:9f:01:f6: 32:0c:2f:af:cb:cc:d3:db:2d:05:2f:c5:33:c9:88: e5:d9:73:56:05:8d:c4:00:98:86:c8:c9:d2:e5:e4: ad:87:03:30:41:f7:e1:ab:19:e9:d5:95:29:04:7f: 8f:ff:fd:36:db:93:70:8a:df:be:19:ed:64:c0:5b: 87:f6:e3:1a:fa:0f:0c:cf:ae:6a:67:a6:e9:dc:11: 47:26:3c:9a:9c:0f:4e:98:10:5f:3c:39:b9:7b:7d: 6d:5f:76:13:97:60:37:ce:90:0b:b3:e3:93:e6:d8: fb:50:80:a3:59:56:8d:bf:00:1d:22:4e:97:52:b9: 8f:e0:47:9d:a0:2b:71:da:a4:82:5f:b2:be:90:a3: 36:4f:37:2d:6e:9a:10:33:08:d7:8d:5c:be:78:a9: a7:96:5b:0d:d7:ad:64:65:03:dd:92:22:85:48:98: 3c:79:e4:6f:26:c6:d2:47:89:18:35:78:c9:e8:6a: aa:ba:bc:b4:5e:aa:9b:6c:4b:1c:e4:8f:5e:51:12: c7:32:e1:10:c5:17:27:c9:8f:4e:7a:87:3d:72:f4: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:92:7B:DE:28:A6:B8:28:2F:7F:BD:CC:84:8D:B5:5E:05:0D:83:4D X509v3 Authority Key Identifier: keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4d:a1:51:6a:db:e6:55:02:ac:ff:c3:d6:dc:7a:c3:5c:98: 89:dd:06:9b:a8:92:a4:83:20:43:1c:9a:89:6c:f0:cd:43:ae: ec:6f:e2:41:8b:0b:11:95:9f:17:84:ce:03:90:64:a9:7b:d7: d2:ba:21:0b:04:e5:31:08:c4:57:38:19:75:1f:06:80:9f:64: 10:aa:bc:d8:f9:77:bd:55:6e:17:0b:d0:e1:b5:20:da:f7:08: e9:74:93:b4:fa:97:60:63:59:bf:b0:85:10:74:79:2f:fb:4e: 20:33:fc:8f:6d:ea:c8:ff:d2:71:b8:a7:de:e1:80:b6:74:57: dc:37:eb:82:85:06:e9:83:60:f9:98:b1:02:24:d4:d4:e3:90: 65:17:94:32:bb:7b:2d:b6:34:e9:e7:07:ae:a2:05:7c:54:f0: 22:de:8c:4b:4a:26:cc:9a:6c:04:cc:50:f4:e3:a0:22:50:7b: e7:a6:ab:f0:2e:70:5b:87:a4:16:19:85:82:dc:30:c0:e1:1e: dd:f0:81:90:5e:08:f2:91:ce:26:7b:31:71:d2:8f:98:d0:03: 5d:ca:a8:24:56:58:66:34:be:71:73:1c:4a:fc:35:5d:67:2b: fc:f2:83:63:12:a4:49:67:0a:98:18:03:64:3e:24:42:4b:b5: 55:f2:7b:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42DSIKKaWXg1DP+GgBnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZmVhZWZlYTgyYjYxMDNkYzJiODk3MWU5YmRkYTAxNjY5 YTEzNTcwHhcNMjUxMjI2MDkwMDMyWhcNMjUxMjI3MDkwMDMyWjAzMTEwLwYDVQQD Eyg2YzkyN2JkZTI4YTZiODI4MmY3ZmJkY2M4NDhkYjU1ZTA1MGQ4MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfdlZ9i67IKbaogFh1fOv7YeWWO3 vV2NKh3v9aNgA2DFyOdsTOHpxHKfAfYyDC+vy8zT2y0FL8UzyYjl2XNWBY3EAJiG yMnS5eSthwMwQffhqxnp1ZUpBH+P//0225Nwit++Ge1kwFuH9uMa+g8Mz65qZ6bp 3BFHJjyanA9OmBBfPDm5e31tX3YTl2A3zpALs+OT5tj7UICjWVaNvwAdIk6XUrmP 4EedoCtx2qSCX7K+kKM2TzctbpoQMwjXjVy+eKmnllsN161kZQPdkiKFSJg8eeRv JsbSR4kYNXjJ6Gqqury0XqqbbEsc5I9eURLHMuEQxRcnyY9Oeoc9cvRkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGySe94oprgoL3+9zISNtV4FDYNNMB8GA1UdIwQY MBaAFAT+rv6oK2ED3CuJcem92gFmmhNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQt OGVlYjA4OWI1Y2FmLzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQtOGVlYjA4OWI1Y2Fm LzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJU2hUWrb 5lUCrP/D1tx6w1yYid0Gm6iSpIMgQxyaiWzwzUOu7G/iQYsLEZWfF4TOA5BkqXvX 0rohCwTlMQjEVzgZdR8GgJ9kEKq82Pl3vVVuFwvQ4bUg2vcI6XSTtPqXYGNZv7CF EHR5L/tOIDP8j23qyP/Scbin3uGAtnRX3DfrgoUG6YNg+ZixAiTU1OOQZReUMrt7 LbY06ecHrqIFfFTwIt6MS0omzJpsBMxQ9OOgIlB756ar8C5wW4ekFhmFgtwwwOEe 3fCBkF4I8pHOJnsxcdKPmNADXcqoJFZYZjS+cXMcSvw1XWcr/PKDYxKkSWcKmBgD ZD4kQku1VfJ7Cw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client