This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json) Hash identifier: 1IIboaqEoWTIHDlcgtn+O8YxTb9POFyVr3HWocbbSjs= Subject key identifier: BA:6E:C5:CF:8B:C7:DE:64:E0:89:1A:90:3C:1F:3A:CE:54:42:E8:4C Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Certificate serial: 019B36455B395A72B6E0282A97C66F19920F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft Manifest number: 06C0 Signing time: Fri 19 Dec 2025 11:01:13 +0000 Manifest this update: Fri 19 Dec 2025 11:01:13 +0000 Manifest next update: Sat 20 Dec 2025 11:01:13 +0000 Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=) 2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: tg1jmPsqETU93hVMk19j8vnRAyTB9ARKr96NHZf/2qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:5b:39:5a:72:b6:e0:28:2a:97:c6:6f:19:92:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Validity Not Before: Dec 19 11:01:13 2025 GMT Not After : Dec 20 11:01:13 2025 GMT Subject: CN=ba6ec5cf8bc7de64e0891a903c1f3ace5442e84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:7a:c7:15:69:cc:97:d1:71:39:5b:c4:14: 43:1c:c5:a7:d6:3d:6e:ec:73:0b:a8:f3:c0:8c:3b: 60:11:bd:19:0c:56:61:1f:d3:b7:2c:69:c1:81:62: a7:2e:98:ab:69:c6:95:89:d7:2b:d8:3d:da:98:15: df:b6:d3:5f:68:27:db:b8:1b:5f:6c:0f:04:e0:c6: 4a:c2:10:b9:78:d4:2e:ba:3b:df:d0:f4:88:8f:b5: 53:9d:1d:29:d6:72:44:83:83:f5:d6:b5:dd:0a:d6: 30:53:76:10:e7:fc:c1:a9:94:c6:f0:13:43:1b:38: 72:7e:2b:6f:d5:c0:5d:dc:2f:f4:df:da:3a:96:97: 05:0b:02:3a:53:01:5a:ef:e4:c8:41:a7:6a:ee:60: 40:5b:9e:6c:ee:b9:97:4f:d0:a1:c9:6f:cb:32:92: b5:d4:d0:c3:a9:00:dc:4d:a2:81:42:d1:e9:f4:53: ca:78:1b:f9:2d:33:e6:98:75:6b:41:a0:5c:a6:13: 9d:86:12:6f:15:2b:6c:fa:53:95:57:28:34:dc:9d: de:7e:1b:66:d2:77:ec:a4:3c:15:96:62:ed:90:79: 81:2b:22:7c:be:58:2e:74:13:cb:1c:5b:ec:91:41: eb:88:59:99:9f:78:70:ed:c7:64:fb:70:0b:84:e8: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6E:C5:CF:8B:C7:DE:64:E0:89:1A:90:3C:1F:3A:CE:54:42:E8:4C X509v3 Authority Key Identifier: keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5e:d8:ad:3c:c8:78:e7:ba:19:48:bf:30:92:a5:ae:ca:0f: 0d:5f:97:e1:76:4f:a4:a9:6f:32:cb:0b:c9:b0:66:37:3d:30: 7b:a2:ec:f5:10:18:d0:bd:fc:9c:64:64:7a:df:3d:ed:0b:e1: 8f:35:7c:d9:0a:bc:bc:21:45:46:86:87:f2:f9:72:d2:b2:c8: 3c:d3:9c:29:84:f2:10:b1:22:60:aa:93:60:b4:e9:e1:af:2b: c3:54:70:86:06:77:95:73:84:8b:15:23:bc:d5:78:85:30:d3: ad:be:5d:a2:64:93:45:25:35:a4:4a:8f:fa:61:cd:c9:43:cc: 19:f2:1b:a9:c3:42:76:23:2c:33:e0:94:6b:24:5b:45:ef:01: 2f:59:30:87:16:14:70:dc:52:4b:5b:68:6d:09:f6:8d:2b:35: 98:45:5e:30:35:3b:07:ff:4e:02:5b:09:9e:4a:ff:21:3d:05: 25:29:6e:dd:34:e2:8a:3e:bb:5a:b8:dd:97:63:08:79:d3:04: 0f:b8:46:4f:19:ec:80:94:f3:d1:3f:e6:65:d9:93:77:db:44: ec:7f:de:b4:c0:76:cf:60:04:65:45:f7:cd:5b:8e:90:be:13: 4a:1f:aa:42:2d:4b:e4:82:d9:8c:1b:10:7e:4c:ab:28:6f:33: b2:ad:f8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RVs5WnK24Cgql8ZvGZIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1 NzAxMjkwHhcNMjUxMjE5MTEwMTEzWhcNMjUxMjIwMTEwMTEzWjAzMTEwLwYDVQQD EyhiYTZlYzVjZjhiYzdkZTY0ZTA4OTFhOTAzYzFmM2FjZTU0NDJlODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVR6xxVpzJfRcTlbxBRDHMWn1j1u 7HMLqPPAjDtgEb0ZDFZhH9O3LGnBgWKnLpiracaVidcr2D3amBXfttNfaCfbuBtf bA8E4MZKwhC5eNQuujvf0PSIj7VTnR0p1nJEg4P11rXdCtYwU3YQ5/zBqZTG8BND Gzhyfitv1cBd3C/039o6lpcFCwI6UwFa7+TIQadq7mBAW55s7rmXT9ChyW/LMpK1 1NDDqQDcTaKBQtHp9FPKeBv5LTPmmHVrQaBcphOdhhJvFSts+lOVVyg03J3efhtm 0nfspDwVlmLtkHmBKyJ8vlgudBPLHFvskUHriFmZn3hw7cdk+3ALhOjAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpuxc+Lx95k4IkakDwfOs5UQuhMMB8GA1UdIwQY MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2 LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX17YrTzI eOe6GUi/MJKlrsoPDV+X4XZPpKlvMssLybBmNz0we6Ls9RAY0L38nGRket897Qvh jzV82Qq8vCFFRoaH8vly0rLIPNOcKYTyELEiYKqTYLTp4a8rw1RwhgZ3lXOEixUj vNV4hTDTrb5domSTRSU1pEqP+mHNyUPMGfIbqcNCdiMsM+CUayRbRe8BL1kwhxYU cNxSS1tobQn2jSs1mEVeMDU7B/9OAlsJnkr/IT0FJSlu3TTiij67Wrjdl2MIedME D7hGTxnsgJTz0T/mZdmTd9tE7H/etMB2z2AEZUX3zVuOkL4TSh+qQi1L5ILZjBsQ fkyrKG8zsq34tw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:13 2025 by rpki-client