This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json) Hash identifier: yajFwGy80Wrl6lFVKLB/MgES+TYxYg/Jq785QX46DFU= Subject key identifier: 18:66:AF:0B:FC:5F:2B:D3:18:9C:9F:8F:7B:6E:A6:00:B5:55:F9:A7 Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019AF4657DD7117D88AAA52AB0FF228CFBA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 16:01:23 +0000 Manifest this update: Sat 06 Dec 2025 16:01:23 +0000 Manifest next update: Sun 07 Dec 2025 16:01:23 +0000 Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: K4Ogl0S92qDXazbVeUdqWokVl/8pvqMB5e+XfeXHHoo=) 2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:7d:d7:11:7d:88:aa:a5:2a:b0:ff:22:8c:fb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Dec 6 16:01:23 2025 GMT Not After : Dec 7 16:01:23 2025 GMT Subject: CN=1866af0bfc5f2bd3189c9f8f7b6ea600b555f9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:64:7a:43:b9:dc:10:b9:2a:c2:c5:f3:8c: 56:cd:5e:65:a1:41:22:23:94:7d:f5:41:b1:90:59: fd:f3:b7:10:f1:dd:b4:ad:b3:42:9b:14:c1:1a:7c: e0:56:85:23:c5:b1:4c:35:de:b2:dd:4d:67:6c:c5: af:f4:c2:fe:6e:84:12:bb:47:b0:d7:f9:65:4b:37: ec:7f:15:b7:cd:94:1e:2b:28:0f:25:63:18:73:95: 5a:4a:57:55:69:0c:0a:06:f1:47:0a:e1:90:c1:2f: ea:3a:91:82:3d:b3:e6:e9:d6:6c:77:b4:19:68:31: fd:27:14:c4:46:c2:35:c2:ed:49:cb:cc:d4:64:68: 88:e8:ec:38:e7:db:d4:69:09:28:14:7f:88:67:29: 5b:fd:76:46:cd:ae:0d:a7:82:7f:08:e5:e9:7b:53: 59:0c:5c:65:a5:db:bf:64:83:33:6a:b0:b9:58:a9: 9d:0d:db:7c:67:fb:4f:db:8d:59:b7:9c:55:5d:8a: 35:75:88:9d:d1:a2:d0:71:1c:4b:79:bb:94:6d:5f: 71:58:fd:2f:99:1a:da:fe:72:0d:b2:9a:c2:fa:1b: d4:31:cd:2f:cf:54:82:92:ab:8a:23:36:7a:ee:a0: 87:b7:63:0f:be:38:b2:77:4b:8e:cc:44:f5:77:a9: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:AF:0B:FC:5F:2B:D3:18:9C:9F:8F:7B:6E:A6:00:B5:55:F9:A7 X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:ae:af:ba:e3:59:4d:56:f4:16:9c:ce:26:37:01:ac:9f: 80:45:9e:0f:24:67:c2:1b:a2:b5:9a:06:7d:8c:91:27:0c:db: d6:c5:5a:78:30:47:07:9c:b4:2e:f5:d1:df:e6:4c:04:1f:48: d6:f5:6e:f0:02:84:61:ba:ae:3f:23:be:5d:3a:d9:5a:1c:06: 11:d2:c3:75:31:6d:61:b2:3f:c3:a3:74:49:ed:7f:05:5d:d5: 62:14:fe:75:c8:30:7c:22:13:f7:73:9e:e0:6e:b6:1f:17:99: 92:16:8a:9c:84:fd:c6:7c:17:f9:1a:09:7f:bc:e7:12:73:6c: a3:da:a9:96:0a:3d:a4:ce:01:a2:7d:cc:9d:7f:77:b5:e6:0c: e0:c8:73:04:a6:a9:92:32:96:e8:2b:51:89:3e:91:5a:8b:7b: e4:36:bc:aa:f8:46:c8:0c:7c:cd:c2:1f:95:5d:94:d2:c7:14: 4f:b6:b9:18:cc:97:3a:41:66:9f:c3:50:b3:11:cc:9c:ea:c5: 3d:8c:20:86:29:71:f2:d6:49:d8:7b:d3:07:74:06:5e:eb:73: b3:ac:14:fb:18:86:2e:fa:49:74:ce:94:25:fb:0c:fd:a0:db: 5c:56:76:ee:c6:82:71:1c:72:7e:fd:19:74:ec:a0:ef:63:81: 80:42:66:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZX3XEX2IqqUqsP8ijPukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjUxMjA2MTYwMTIzWhcNMjUxMjA3MTYwMTIzWjAzMTEwLwYDVQQD EygxODY2YWYwYmZjNWYyYmQzMTg5YzlmOGY3YjZlYTYwMGI1NTVmOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mpkekO53BC5KsLF84xWzV5loUEi I5R99UGxkFn987cQ8d20rbNCmxTBGnzgVoUjxbFMNd6y3U1nbMWv9ML+boQSu0ew 1/llSzfsfxW3zZQeKygPJWMYc5VaSldVaQwKBvFHCuGQwS/qOpGCPbPm6dZsd7QZ aDH9JxTERsI1wu1Jy8zUZGiI6Ow459vUaQkoFH+IZylb/XZGza4Np4J/COXpe1NZ DFxlpdu/ZIMzarC5WKmdDdt8Z/tP241Zt5xVXYo1dYid0aLQcRxLebuUbV9xWP0v mRra/nINsprC+hvUMc0vz1SCkquKIzZ67qCHt2MPvjiyd0uOzET1d6kZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhmrwv8XyvTGJyfj3tupgC1VfmnMB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp2ur7rj WU1W9BacziY3AayfgEWeDyRnwhuitZoGfYyRJwzb1sVaeDBHB5y0LvXR3+ZMBB9I 1vVu8AKEYbquPyO+XTrZWhwGEdLDdTFtYbI/w6N0Se1/BV3VYhT+dcgwfCIT93Oe 4G62HxeZkhaKnIT9xnwX+RoJf7znEnNso9qplgo9pM4Bon3MnX93teYM4MhzBKap kjKW6CtRiT6RWot75Da8qvhGyAx8zcIflV2U0scUT7a5GMyXOkFmn8NQsxHMnOrF PYwghilx8tZJ2HvTB3QGXutzs6wU+xiGLvpJdM6UJfsM/aDbXFZ27saCcRxyfv0Z dOyg72OBgEJmtA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:03 2025 by rpki-client