This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json) Hash identifier: +Y8qGDsJRKwYjtmo2wy1zkioJhscZ7O25dhjjeXe+Yk= Subject key identifier: 36:1F:7E:5A:FF:3B:D8:B2:3B:50:0D:AB:93:93:2C:D4:5B:05:23:A0 Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Certificate serial: 019AF2ADF4561BC245081432FC5DEDC78C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft Manifest number: 069D Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=) 2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: oesDONpWjStVVaO8D09JlQ+S9qbJrU3gJJzNtsOLOzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f4:56:1b:c2:45:08:14:32:fc:5d:ed:c7:8c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=361f7e5aff3bd8b23b500dab93932cd45b0523a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:b5:74:33:91:79:a0:13:da:83:85:dd:73: fa:30:81:f5:62:c0:ca:4c:86:67:2f:27:ea:90:7d: 55:13:c0:8c:31:1c:5d:b2:d7:53:8d:31:3b:c5:ab: 3a:b1:8c:8e:c3:85:d4:83:1b:70:e9:27:d7:ab:24: 38:56:10:f3:27:80:56:6b:e8:cf:cb:16:63:d8:f3: 5a:f5:20:df:15:81:7f:ca:60:43:6f:e2:ea:2d:b1: ab:ad:c2:21:77:da:e5:d1:dd:dd:b2:f5:32:88:f8: e6:df:e5:35:9f:56:50:43:eb:88:e0:6d:37:a6:b0: 36:25:7d:dd:bf:3f:4a:ff:39:a0:e0:28:b0:b8:94: 88:0f:0b:a2:c2:cb:c6:a8:6b:9b:d5:9c:67:06:d0: a2:15:b8:86:b5:c5:ff:9a:47:3f:48:2f:f6:b5:0f: c0:01:27:31:a5:bb:ea:ab:77:50:e5:fe:4c:63:22: d6:52:9d:94:f3:dd:c2:ba:0d:5e:e9:01:c5:41:7a: cf:76:96:e4:03:f8:79:69:be:80:ad:a5:14:e2:16: 2b:ea:f2:e0:5d:86:ef:52:32:83:5c:34:a8:ca:0f: f7:5a:ee:3a:9c:ef:f2:93:a9:37:d9:16:ff:22:27: aa:ff:d3:0a:8c:2b:94:42:cd:71:ef:30:59:4a:97: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1F:7E:5A:FF:3B:D8:B2:3B:50:0D:AB:93:93:2C:D4:5B:05:23:A0 X509v3 Authority Key Identifier: keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:af:97:1b:39:74:fa:0b:5c:76:47:7d:62:36:fb:79:46:9d: 74:9e:06:4b:75:09:1b:8f:88:a8:56:10:8b:df:a8:af:78:df: 1e:d1:2d:03:6f:35:da:25:3d:18:11:57:d3:ce:d4:7f:cf:ee: 57:77:7d:4c:83:8e:f9:d5:7e:29:cd:8a:31:e8:a7:f4:0b:7a: 4d:47:f5:8e:c8:ed:72:b4:ee:22:e5:02:2b:b7:d2:3a:d7:f3: 10:55:b1:f1:22:e1:e7:0f:0f:fe:fa:98:32:07:59:9e:e3:41: 2e:13:94:55:0f:22:5a:46:82:19:f3:d2:ae:db:be:64:84:31: 7e:77:2f:1f:c2:50:e2:bf:26:f3:02:39:3d:5a:10:25:9c:41: d2:72:63:7a:57:82:4e:99:6a:3b:cb:28:f6:1d:8d:bd:49:88: 86:a2:a6:82:07:2e:05:da:f7:21:0b:59:41:61:29:18:75:7f: 85:a2:93:4a:29:9c:ff:c9:a5:b8:ae:d8:9d:06:70:87:08:4e: db:33:27:86:a5:ff:b2:99:51:d8:9f:6e:43:8c:8a:52:ec:b4: 4b:17:46:c3:f8:24:a8:fa:6c:49:f8:0e:8e:9b:78:f1:fc:b3: 90:9c:aa:68:70:a0:7f:06:64:e7:e5:9b:ad:5a:17:c6:97:e5: 14:94:0c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfRWG8JFCBQy/F3tx4yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1 NzAxMjkwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EygzNjFmN2U1YWZmM2JkOGIyM2I1MDBkYWI5MzkzMmNkNDViMDUyM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwda1dDOReaAT2oOF3XP6MIH1YsDK TIZnLyfqkH1VE8CMMRxdstdTjTE7xas6sYyOw4XUgxtw6SfXqyQ4VhDzJ4BWa+jP yxZj2PNa9SDfFYF/ymBDb+LqLbGrrcIhd9rl0d3dsvUyiPjm3+U1n1ZQQ+uI4G03 prA2JX3dvz9K/zmg4CiwuJSIDwuiwsvGqGub1ZxnBtCiFbiGtcX/mkc/SC/2tQ/A AScxpbvqq3dQ5f5MYyLWUp2U893Cug1e6QHFQXrPdpbkA/h5ab6AraUU4hYr6vLg XYbvUjKDXDSoyg/3Wu46nO/yk6k32Rb/Iieq/9MKjCuUQs1x7zBZSpeSbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYfflr/O9iyO1ANq5OTLNRbBSOgMB8GA1UdIwQY MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2 LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK+XGzl0 +gtcdkd9Yjb7eUaddJ4GS3UJG4+IqFYQi9+or3jfHtEtA2812iU9GBFX087Uf8/u V3d9TIOO+dV+Kc2KMein9At6TUf1jsjtcrTuIuUCK7fSOtfzEFWx8SLh5w8P/vqY MgdZnuNBLhOUVQ8iWkaCGfPSrtu+ZIQxfncvH8JQ4r8m8wI5PVoQJZxB0nJjeleC TplqO8so9h2NvUmIhqKmggcuBdr3IQtZQWEpGHV/haKTSimc/8mluK7YnQZwhwhO 2zMnhqX/splR2J9uQ4yKUuy0SxdGw/gkqPpsSfgOjpt48fyzkJyqaHCgfwZk5+Wb rVoXxpflFJQMpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:41 2025 by rpki-client