This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json) Hash identifier: pT/gBA2jZfowB2TzVue2+0UGQGbliBl4wEm7amvIKFo= Subject key identifier: C4:5E:6B:67:68:2A:4F:57:6C:CA:A1:B0:C4:02:AF:C3:25:FF:64:06 Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Certificate serial: 019AF389FEE4F6DA3D6EE0685CF51A37CB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft Manifest number: 0DCE Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=) 2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: E6ZgtbBtAXQKZFf+hOkiwEPGDrQ9AitrzPZBVtV7994=) 3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=) 4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fe:e4:f6:da:3d:6e:e0:68:5c:f5:1a:37:cb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=c45e6b67682a4f576ccaa1b0c402afc325ff6406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:a0:ba:d2:47:d1:dc:9a:dd:d9:75:fa:b3: 72:6c:ab:4b:79:8c:a9:60:df:32:3c:11:bc:3f:ae: 51:53:da:42:59:80:79:e8:e4:2f:80:85:25:41:f3: 42:2e:80:a3:36:c9:53:cf:92:a0:6f:ad:a1:1a:46: 9c:6b:9f:4a:b6:1a:69:41:25:84:02:5f:52:ed:9d: 2d:1c:6f:c3:2c:3f:89:8f:84:04:91:6d:8e:7d:66: 73:83:4c:37:ca:f2:2c:dd:86:34:0c:3b:95:1f:34: 4a:9a:73:fe:c2:b7:57:8a:51:1a:f3:e5:1d:b6:e3: 30:87:93:31:3f:d3:61:ea:a8:d6:66:d6:1d:92:88: 72:aa:b6:04:38:cf:10:7a:7f:90:b0:08:fe:01:28: 65:b7:0a:ba:37:8f:ba:58:64:a0:e5:cc:d7:4d:ee: 2a:20:14:68:bc:ca:d2:c6:91:2e:96:f1:58:9b:d9: f1:65:37:ca:77:cb:24:7d:d5:76:9e:7f:40:e2:7e: 51:be:62:69:42:ee:b0:1e:9c:65:4a:84:bd:67:7f: b9:dc:3b:00:f3:34:d6:ab:be:aa:cf:f9:4b:03:7c: b8:0d:c5:1f:42:8f:71:b6:14:20:9e:06:06:37:b2: 90:c9:28:40:e0:48:e0:32:25:c8:4e:02:3f:d9:4d: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:6B:67:68:2A:4F:57:6C:CA:A1:B0:C4:02:AF:C3:25:FF:64:06 X509v3 Authority Key Identifier: keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9f:7b:63:fe:a0:55:8d:30:7b:50:c9:75:cf:bc:c9:e9:6a: 26:dd:de:4a:5a:3e:f0:84:77:24:9f:e6:8d:65:b2:f9:ea:ae: cb:2a:fd:dd:8a:f5:7f:25:d8:ce:e8:25:87:e1:10:ba:e5:c9: 4a:17:17:cc:4e:43:4d:c2:69:2b:83:00:4d:8d:46:a6:8a:4a: 4a:da:c6:4b:8e:65:f6:dd:0d:c4:c9:95:e8:3b:dc:23:9f:a5: 93:dd:b2:73:2e:b8:ab:e3:af:c2:06:a5:54:22:d3:86:a2:0d: 6c:93:d9:8e:2a:02:76:68:98:53:23:d0:c0:be:79:20:9c:7e: 2f:44:2b:ce:a1:13:dc:de:54:7f:54:8e:70:48:f7:07:8a:d7: 04:cf:41:55:bb:2e:93:20:56:a4:3d:41:21:d0:61:ad:68:c8: 92:d6:ca:c5:b4:c9:f9:40:69:ac:8a:85:5b:ea:9e:66:01:8e: 06:69:51:ee:f2:c5:88:27:db:79:70:65:d5:12:3d:9e:71:d5: d1:bc:fb:61:00:0d:29:d7:db:3f:93:4f:23:78:22:38:2c:0e: a8:65:8e:6a:8f:7a:22:3c:d4:94:32:fc:1e:d5:32:6b:47:b9: 10:fc:b5:39:93:87:2a:ae:67:47:77:83:18:72:1c:05:01:5c: 3e:19:2b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzif7k9to9buBoXPUaN8t9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0 NzVjNTEwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD EyhjNDVlNmI2NzY4MmE0ZjU3NmNjYWExYjBjNDAyYWZjMzI1ZmY2NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EmgutJH0dya3dl1+rNybKtLeYyp YN8yPBG8P65RU9pCWYB56OQvgIUlQfNCLoCjNslTz5Kgb62hGkaca59KthppQSWE Al9S7Z0tHG/DLD+Jj4QEkW2OfWZzg0w3yvIs3YY0DDuVHzRKmnP+wrdXilEa8+Ud tuMwh5MxP9Nh6qjWZtYdkohyqrYEOM8Qen+QsAj+AShltwq6N4+6WGSg5czXTe4q IBRovMrSxpEulvFYm9nxZTfKd8skfdV2nn9A4n5RvmJpQu6wHpxlSoS9Z3+53DsA 8zTWq76qz/lLA3y4DcUfQo9xthQgngYGN7KQyShA4EjgMiXITgI/2U0NvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRea2doKk9XbMqhsMQCr8Ml/2QGMB8GA1UdIwQY MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt NTAyYjc3Y2U5MmY4LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4 LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ97Y/6g VY0we1DJdc+8yelqJt3eSlo+8IR3JJ/mjWWy+equyyr93Yr1fyXYzuglh+EQuuXJ ShcXzE5DTcJpK4MATY1GpopKStrGS45l9t0NxMmV6DvcI5+lk92ycy64q+Ovwgal VCLThqINbJPZjioCdmiYUyPQwL55IJx+L0QrzqET3N5Uf1SOcEj3B4rXBM9BVbsu kyBWpD1BIdBhrWjIktbKxbTJ+UBprIqFW+qeZgGOBmlR7vLFiCfbeXBl1RI9nnHV 0bz7YQANKdfbP5NPI3giOCwOqGWOao96IjzUlDL8HtUya0e5EPy1OZOHKq5nR3eD GHIcBQFcPhkrxA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:17 2025 by rpki-client