This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json) Hash identifier: eBHoD7WkuM5GdtKQFc+Ghj3A2zVFrY0ynJVt5Adbmes= Subject key identifier: 77:24:CE:E8:9F:D2:6B:B5:48:26:D7:2D:A9:26:2E:DD:D4:2B:FB:8E Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4 Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4 Certificate serial: 019AF12D6A82B439479515BDDD733F9AA089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: wHw9ikC0VhdzwWyzNNZP4ywv9JVSiKKspKRqSBxYHyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6a:82:b4:39:47:95:15:bd:dd:73:3f:9a:a0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=7724cee89fd26bb54826d72da9262eddd42bfb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:07:a6:77:c2:29:b8:66:81:a5:4b:a3:07: b8:b2:a2:53:02:6f:7b:af:31:c6:87:06:4d:09:9d: 70:86:5a:11:c4:e4:a3:b2:b4:77:d0:9c:4e:5e:60: 13:a0:f4:26:be:f7:50:2d:8f:41:3c:15:16:40:17: 58:16:9b:38:ec:1e:4d:31:ae:b1:e9:8c:52:66:71: 1a:0c:32:4f:30:f1:81:3c:5d:24:73:a0:19:0f:f5: aa:e0:9f:39:75:2b:ac:e8:34:81:f2:01:82:da:4f: ed:c3:13:5f:49:13:a1:de:9c:73:a7:72:ff:2f:48: 11:08:5b:e7:b2:ee:20:03:97:25:64:6f:af:95:8b: bf:01:ff:62:c3:a8:86:7e:e0:91:2e:21:1a:25:ce: 08:ab:6b:93:7b:66:9b:55:f6:90:93:b0:89:19:b2: fb:79:d8:43:c1:29:53:38:53:51:29:c0:50:6a:7b: fe:80:0b:86:9d:61:4c:c3:a3:17:06:58:2f:2f:23: 5a:c5:9e:2e:05:6c:45:6f:14:bb:21:77:b4:1a:42: 26:83:8f:a3:18:63:9e:18:8f:e2:c8:bc:f3:86:74: 10:d9:10:0c:4a:63:e6:43:7a:4b:cc:1f:ec:65:17: 21:43:de:6d:e5:b2:98:15:c9:ae:90:f9:57:61:0d: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:CE:E8:9F:D2:6B:B5:48:26:D7:2D:A9:26:2E:DD:D4:2B:FB:8E X509v3 Authority Key Identifier: keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:92:a4:b1:e2:68:d5:07:0a:1e:d6:f7:84:d9:24:d0:4c:51: 6c:a9:5c:9a:0c:90:6c:24:24:34:fb:84:6a:3c:b3:e4:b3:66: 8a:37:d6:22:80:0f:c5:d4:05:3b:65:4a:08:f1:78:44:bd:0e: d9:df:42:72:33:02:ad:fa:d2:b0:2a:19:c5:7f:92:14:c4:af: 0f:b8:d3:53:bd:2b:ce:a8:93:29:3b:49:81:da:4c:a7:37:98: be:1b:5e:25:cb:38:ba:13:e1:e4:d3:03:88:1f:7c:67:82:f9: 24:9f:39:e5:2a:ef:e7:4e:96:2d:15:60:15:b5:19:2e:0f:ff: 73:de:57:05:33:46:56:60:94:b3:41:e8:22:3d:30:14:cb:72: fb:40:d8:bf:47:b6:2a:74:63:4e:f0:18:5f:7e:f7:57:e5:7a: 27:36:9e:78:5e:c4:24:7d:df:b9:b3:64:fa:16:b3:0d:84:c2: e1:60:3e:58:7e:57:34:46:51:57:9f:58:f0:f0:ee:7c:56:d2: c1:f3:e5:b5:a7:02:7e:b4:9e:e1:b0:0d:4c:52:a1:30:b3:18: 17:ff:3a:f6:bf:22:7f:67:e6:9e:ba:f9:d4:70:7e:cd:86:3f: 77:c7:5a:84:f2:48:eb:ec:e2:8a:5c:56:c5:1e:4b:df:23:e5: 8e:c8:3b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWqCtDlHlRW93XM/mqCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NmJhMjA5YzUwYzAyYTg1OGI1NDMwOGM4MmFlNWJmMzAy ZWZhYTQwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD Eyg3NzI0Y2VlODlmZDI2YmI1NDgyNmQ3MmRhOTI2MmVkZGQ0MmJmYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+kHpnfCKbhmgaVLowe4sqJTAm97 rzHGhwZNCZ1whloRxOSjsrR30JxOXmAToPQmvvdQLY9BPBUWQBdYFps47B5NMa6x 6YxSZnEaDDJPMPGBPF0kc6AZD/Wq4J85dSus6DSB8gGC2k/twxNfSROh3pxzp3L/ L0gRCFvnsu4gA5clZG+vlYu/Af9iw6iGfuCRLiEaJc4Iq2uTe2abVfaQk7CJGbL7 edhDwSlTOFNRKcBQanv+gAuGnWFMw6MXBlgvLyNaxZ4uBWxFbxS7IXe0GkImg4+j GGOeGI/iyLzzhnQQ2RAMSmPmQ3pLzB/sZRchQ95t5bKYFcmukPlXYQ1bXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHckzuif0mu1SCbXLakmLt3UK/uOMB8GA1UdIwQY MBaAFAZrognFDAKoWLVDCMgq5b8wLvqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYt OTNmZmVjNWMzYzgxLzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYtOTNmZmVjNWMzYzgx LzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJKkseJo 1QcKHtb3hNkk0ExRbKlcmgyQbCQkNPuEajyz5LNmijfWIoAPxdQFO2VKCPF4RL0O 2d9CcjMCrfrSsCoZxX+SFMSvD7jTU70rzqiTKTtJgdpMpzeYvhteJcs4uhPh5NMD iB98Z4L5JJ855Srv506WLRVgFbUZLg//c95XBTNGVmCUs0HoIj0wFMty+0DYv0e2 KnRjTvAYX373V+V6JzaeeF7EJH3fubNk+hazDYTC4WA+WH5XNEZRV59Y8PDufFbS wfPltacCfrSe4bANTFKhMLMYF/869r8if2fmnrr51HB+zYY/d8dahPJI6+ziilxW xR5L3yPljsg7cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:02 2025 by rpki-client