This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json) Hash identifier: blms83fsCzbmu5D4Nhn4ICM9v0CRminD/irUIWaq5Es= Subject key identifier: 18:93:47:43:5F:34:D7:E7:5A:D8:04:DB:3F:9C:C8:72:67:92:0E:2A Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8 Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8 Certificate serial: 019AF352342945911832B25F7A42FD3EB3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=) 2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: 9iDasD2CXlR5//mzKOFqQrh3lohYLZUyeqARmPsNI+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:34:29:45:91:18:32:b2:5f:7a:42:fd:3e:b3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=189347435f34d7e75ad804db3f9cc87267920e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:a7:00:94:64:ef:35:b5:b2:f5:1a:92:13: a7:23:c1:05:71:3d:72:33:f8:fc:be:77:7e:a9:5f: 71:44:7b:b3:62:7e:0f:d1:7a:7e:a9:d9:d9:7d:d4: c2:38:f2:0d:e3:82:5c:4b:ee:a1:8c:fd:c8:d3:c6: 24:5b:aa:86:0e:d1:48:89:e0:65:3e:f4:ce:af:e5: 33:58:8e:a1:17:a2:e7:9f:41:90:21:97:36:f0:4e: 62:df:e7:ef:71:83:7d:bf:44:33:7a:ff:0f:58:2d: 33:70:a0:2c:55:8a:41:3b:d3:ae:23:8c:21:e0:24: 23:11:8c:5b:ec:38:bd:34:6c:ed:de:28:71:ce:4e: 67:86:02:68:09:94:f7:9d:cb:8e:71:ca:09:f3:ed: 7d:bc:2f:5d:e8:e3:37:79:fc:3f:d5:36:83:0e:d5: 1e:e1:8f:2a:4a:02:49:0a:ff:ea:dc:f7:26:58:28: 92:cc:3d:e0:58:ff:bb:7b:26:05:cf:a4:7a:28:cf: 0a:4e:23:fc:f7:15:a0:4f:b5:cf:90:06:b5:0c:68: ff:8f:ca:cf:fa:97:16:f7:f7:95:4e:85:9e:9c:50: c1:f9:0b:ed:b9:62:65:f9:4c:e6:a0:54:7b:c1:b8: b5:8f:b2:11:64:cb:bb:ed:42:9f:b0:85:f9:99:2e: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:93:47:43:5F:34:D7:E7:5A:D8:04:DB:3F:9C:C8:72:67:92:0E:2A X509v3 Authority Key Identifier: keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b1:82:18:3b:ea:cf:6d:67:26:58:11:1b:71:8f:19:c3:8b: 28:31:3a:bd:0d:ed:af:ab:c0:39:0a:d9:e6:5c:d8:7a:c1:18: be:22:02:41:a6:e3:21:6a:4e:9d:99:96:31:ef:e6:ab:cb:18: 2c:13:de:32:c6:45:be:dc:09:c7:b6:b0:01:c6:63:8a:1d:28: 40:0a:ea:52:6d:f6:bf:a8:08:9c:f3:a9:6c:35:37:98:ba:16: 15:2b:3f:b2:10:94:6a:ae:8c:51:1c:c2:90:90:f0:1f:56:32: 2f:e1:73:e3:3e:58:a6:1a:de:7e:c0:2f:53:83:5f:0c:a3:f4: 43:e2:17:d0:e9:4e:e2:67:80:a0:cd:73:ca:66:3c:0d:d6:d3: f2:1e:63:8f:47:39:85:e7:98:a3:85:2f:bd:73:4e:e0:2b:ae: 0a:d3:9b:2a:f4:a7:4a:81:91:6f:27:91:9f:ab:60:a6:b9:31: 81:f9:22:ea:10:b7:55:a2:5d:83:47:fa:68:cd:fb:f0:24:9f: 7a:4f:ac:1a:6b:79:41:c4:4f:7c:15:01:8d:d7:cb:af:f1:6a: 3c:dd:9b:75:10:a3:c6:f4:d9:4f:b2:03:8b:87:8c:23:38:f2: ca:e0:99:76:a5:64:eb:6a:f0:4a:69:99:7a:1c:be:b8:03:6d: 8a:98:9e:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjQpRZEYMrJfekL9PrP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNjZkNWNiMmY5Y2FkM2Y0ODQzZjcxNGE0ZGM2MmQ3MjEz ZGViZTgwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD EygxODkzNDc0MzVmMzRkN2U3NWFkODA0ZGIzZjljYzg3MjY3OTIwZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2OnAJRk7zW1svUakhOnI8EFcT1y M/j8vnd+qV9xRHuzYn4P0Xp+qdnZfdTCOPIN44JcS+6hjP3I08YkW6qGDtFIieBl PvTOr+UzWI6hF6Lnn0GQIZc28E5i3+fvcYN9v0Qzev8PWC0zcKAsVYpBO9OuI4wh 4CQjEYxb7Di9NGzt3ihxzk5nhgJoCZT3ncuOccoJ8+19vC9d6OM3efw/1TaDDtUe 4Y8qSgJJCv/q3PcmWCiSzD3gWP+7eyYFz6R6KM8KTiP89xWgT7XPkAa1DGj/j8rP +pcW9/eVToWenFDB+QvtuWJl+UzmoFR7wbi1j7IRZMu77UKfsIX5mS53GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiTR0NfNNfnWtgE2z+cyHJnkg4qMB8GA1UdIwQY MBaAFGxm1csvnK0/SEP3FKTcYtchPevoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEt NmNmMTMxYzFjYWFjLzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEtNmNmMTMxYzFjYWFj LzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7GCGDvq z21nJlgRG3GPGcOLKDE6vQ3tr6vAOQrZ5lzYesEYviICQabjIWpOnZmWMe/mq8sY LBPeMsZFvtwJx7awAcZjih0oQArqUm32v6gInPOpbDU3mLoWFSs/shCUaq6MURzC kJDwH1YyL+Fz4z5YphrefsAvU4NfDKP0Q+IX0OlO4meAoM1zymY8DdbT8h5jj0c5 heeYo4UvvXNO4CuuCtObKvSnSoGRbyeRn6tgprkxgfki6hC3VaJdg0f6aM378CSf ek+sGmt5QcRPfBUBjdfLr/FqPN2bdRCjxvTZT7IDi4eMIzjyyuCZdqVk62rwSmmZ ehy+uANtipiefw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:19:17 2025 by rpki-client