This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json) Hash identifier: EL5AZZ1gRyyGJmZ4mljyu6b7inzzL8rwM1ynXdIiFww= Subject key identifier: 45:0C:2C:82:E4:A0:66:93:52:28:83:67:D9:22:8A:AB:EB:26:E0:5B Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d Certificate serial: 019AF31CC4684256E5BBFE38F878B2A07A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft Manifest number: 0A94 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: yL/QDokBlqr8hLXDJiPEM/WIyRIYRiX/YVGMJyasM/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c4:68:42:56:e5:bb:fe:38:f8:78:b2:a0:7a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=450c2c82e4a0669352288367d9228aabeb26e05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:17:d5:b3:83:6c:cf:10:1d:e7:9b:a3:30:62: 56:c2:23:2b:9a:1f:2e:b2:32:9e:db:ca:b7:eb:88: ed:70:f0:35:72:b0:29:3b:2f:0d:27:36:9c:d2:d1: 5d:b6:44:68:44:51:89:3e:46:81:b5:7a:d6:39:0b: b6:3a:87:cb:21:93:7d:e5:52:7e:c0:93:e8:cd:14: f0:9d:46:41:c1:11:c1:a8:30:9f:f0:32:cd:0c:8d: 4d:fa:ee:07:a1:b3:57:91:4b:11:f8:87:f8:5c:a8: 54:e0:b3:b8:bb:1d:da:f3:04:de:bb:58:b9:ff:75: 2e:17:48:fe:96:f3:6a:9c:50:15:10:e7:44:7b:84: cf:6d:94:3a:85:e8:74:cf:af:41:d6:d7:38:17:28: c6:f5:e7:c3:7e:88:75:2c:fa:48:27:af:a4:d6:8c: ee:5e:0a:82:64:f3:58:de:50:71:75:93:ec:6c:fa: b3:49:8c:63:94:9d:fe:5e:4a:fc:80:ee:27:3b:a4: 62:d7:b7:87:5e:ba:64:93:51:22:72:22:e3:12:05: de:d8:30:e9:da:96:25:84:c0:19:a7:ae:b0:f0:e3: 09:bb:ad:94:39:f9:ee:55:a3:02:39:32:18:ac:0c: 8a:2b:f8:dc:ff:88:4f:ce:b6:86:8a:78:87:67:40: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0C:2C:82:E4:A0:66:93:52:28:83:67:D9:22:8A:AB:EB:26:E0:5B X509v3 Authority Key Identifier: keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:44:81:db:21:97:5e:c9:b1:b9:b9:9f:16:f4:6b:20:1b:04: 12:61:82:d0:fd:b4:ee:55:98:51:f1:09:0d:59:2d:0b:4d:b8: 5f:b4:07:08:29:d4:02:3d:70:30:3c:3d:ad:3c:99:c3:d0:6b: ce:a8:d3:cb:2c:d9:d4:55:cf:90:6f:f7:0d:59:b3:ab:34:19: 02:bf:c4:bf:e9:3f:f6:6b:aa:38:bc:5d:da:91:4e:2d:e6:aa: bc:08:72:ef:fb:a4:05:fa:d7:27:91:c8:76:55:db:f3:1c:f2: 3f:ff:bf:0d:85:2f:63:3c:75:e6:d4:b6:1d:40:e4:78:18:cf: a4:47:29:3f:7a:4c:5a:d3:88:b3:41:35:4d:bc:38:90:88:96: 6c:cb:1f:2f:87:62:c6:fd:cc:ed:64:a9:f8:f6:2c:36:bd:dd: 5a:30:e1:8d:b3:d6:92:49:40:d3:ee:f8:ed:79:b0:d4:b8:c5: 48:0a:31:27:fc:da:52:34:6a:94:98:84:e1:52:83:6e:56:08: cf:f9:a3:84:e6:f2:01:01:a2:01:1f:41:6b:75:14:d8:8f:cb: 91:62:67:00:60:ef:6a:24:c6:28:52:59:7c:cf:bd:a9:ba:c8: 02:a3:53:77:d2:24:79:fe:e0:42:84:4f:6e:00:fe:e1:d7:4a: 3e:ee:f2:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMRoQlblu/44+HiyoHo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjNkNzAwOTgyYWY5YWMxYmFmZTRmMmFhNzE4NDRhZDAw NzU5MWQwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD Eyg0NTBjMmM4MmU0YTA2NjkzNTIyODgzNjdkOTIyOGFhYmViMjZlMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxfVs4NszxAd55ujMGJWwiMrmh8u sjKe28q364jtcPA1crApOy8NJzac0tFdtkRoRFGJPkaBtXrWOQu2OofLIZN95VJ+ wJPozRTwnUZBwRHBqDCf8DLNDI1N+u4HobNXkUsR+If4XKhU4LO4ux3a8wTeu1i5 /3UuF0j+lvNqnFAVEOdEe4TPbZQ6heh0z69B1tc4FyjG9efDfoh1LPpIJ6+k1ozu XgqCZPNY3lBxdZPsbPqzSYxjlJ3+Xkr8gO4nO6Ri17eHXrpkk1EiciLjEgXe2DDp 2pYlhMAZp66w8OMJu62UOfnuVaMCOTIYrAyKK/jc/4hPzraGiniHZ0AfDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUMLILkoGaTUiiDZ9kiiqvrJuBbMB8GA1UdIwQY MBaAFAbz1wCYKvmsG6/k8qpxhErQB1kdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEt ZDNiM2U3N2JkOTkzLzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEtZDNiM2U3N2JkOTkz LzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0SB2yGX XsmxubmfFvRrIBsEEmGC0P207lWYUfEJDVktC024X7QHCCnUAj1wMDw9rTyZw9Br zqjTyyzZ1FXPkG/3DVmzqzQZAr/Ev+k/9muqOLxd2pFOLeaqvAhy7/ukBfrXJ5HI dlXb8xzyP/+/DYUvYzx15tS2HUDkeBjPpEcpP3pMWtOIs0E1Tbw4kIiWbMsfL4di xv3M7WSp+PYsNr3dWjDhjbPWkklA0+747Xmw1LjFSAoxJ/zaUjRqlJiE4VKDblYI z/mjhObyAQGiAR9Ba3UU2I/LkWJnAGDvaiTGKFJZfM+9qbrIAqNTd9Ikef7gQoRP bgD+4ddKPu7yWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:54 2025 by rpki-client