This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json) Hash identifier: 1pNdAHqlG4cpnwYs8JKPzjAvNHMmPgS0UYPlkUBb0Xw= Subject key identifier: 4E:22:B1:E8:DF:F4:9A:31:1B:7A:EE:A8:81:CC:2F:1D:1D:DA:C9:49 Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2 Certificate serial: 019AF3C0865D698E7CC9A6CB6F33CB62CF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft Manifest number: 06C6 Signing time: Sat 06 Dec 2025 13:01:11 +0000 Manifest this update: Sat 06 Dec 2025 13:01:11 +0000 Manifest next update: Sun 07 Dec 2025 13:01:11 +0000 Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: AQrm3vuH2AumxbI5GVbTfi8OhthziJpAa0hV9suHKOo=) 2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:86:5d:69:8e:7c:c9:a6:cb:6f:33:cb:62:cf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2 Validity Not Before: Dec 6 13:01:11 2025 GMT Not After : Dec 7 13:01:11 2025 GMT Subject: CN=4e22b1e8dff49a311b7aeea881cc2f1d1ddac949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a8:78:4c:3c:7b:c5:c8:e7:22:61:98:f1:20: a6:5e:42:bc:ba:bf:68:ab:e8:ca:0a:25:2f:1d:74: 4e:ef:48:69:a5:5e:2e:70:cf:d0:31:87:f8:6d:f8: 3a:47:6f:3a:9d:64:cd:63:54:3d:18:cc:79:22:e7: e8:e0:6b:7e:84:39:b2:7a:03:69:9b:21:38:a4:71: a0:22:49:d7:ea:94:c8:b8:d9:7f:ad:fb:de:1e:14: 7c:67:7b:cf:f7:a9:ea:b8:eb:16:6b:ac:29:4c:3f: 2d:91:3c:eb:ca:79:bb:4a:f1:87:ca:0e:40:4f:34: 7c:85:7c:c2:33:72:f1:59:83:a7:de:de:c9:1d:a8: 1f:28:eb:b7:39:7c:41:d4:ac:c9:f9:09:9e:2e:7b: 81:7a:81:78:c8:34:15:b8:54:b5:7c:af:7f:20:ea: 22:41:c1:4b:3f:a5:c4:86:e3:fc:f5:74:0b:ac:83: 05:da:58:75:7e:d2:09:03:19:78:c9:79:47:de:a1: 89:45:e7:c2:85:03:93:50:45:33:d6:39:69:92:bb: e2:9b:27:39:a7:80:28:a1:57:f2:71:17:09:c5:a4: 49:4a:18:20:45:4a:97:64:86:8c:24:1b:cd:29:f8: 29:a7:3c:d2:29:b8:15:88:b4:15:a1:6e:22:19:0e: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:B1:E8:DF:F4:9A:31:1B:7A:EE:A8:81:CC:2F:1D:1D:DA:C9:49 X509v3 Authority Key Identifier: keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:e7:7a:0c:e5:92:cf:2d:10:9b:11:d4:f4:14:49:2c:88: 45:a8:f7:8e:97:a4:3a:ba:bf:32:f8:f7:03:ca:c5:fc:8b:1b: 47:ff:15:4a:29:3f:40:21:a8:1c:8e:2e:34:89:be:b8:3c:5a: dc:be:1a:b9:33:2f:bb:01:73:a1:8e:fc:74:6a:8b:16:d0:3d: 25:42:04:8a:5f:55:70:15:d7:29:51:e8:0f:b6:ff:49:c9:e6: f6:89:54:6f:49:34:2c:0c:b9:d4:3c:1a:fb:68:37:c1:f3:55: 85:38:20:7b:82:9a:66:37:be:c6:50:ed:ed:57:2f:50:1e:56: 7c:62:9f:d3:e1:ca:be:b7:10:49:df:63:27:5f:a9:ab:d9:95: 4b:ce:57:eb:78:2d:2f:eb:2f:01:a1:3c:4d:ba:35:42:ee:ce: 3b:8d:ca:c5:3e:5a:0a:e5:58:72:84:e6:9e:c5:83:cc:74:96: 1d:36:d0:58:4a:cf:87:1d:7d:e6:52:23:10:6e:b7:c4:a5:f4: 32:d7:e0:90:c6:a8:2a:fb:5a:f5:a4:fb:c6:04:c8:cb:82:bc: 02:81:ef:65:66:8d:f2:84:e9:89:07:78:55:56:9f:ab:9c:e9: 50:00:53:b5:06:34:d7:6e:5e:22:1b:09:b6:85:9d:d8:e4:d2: b8:ec:71:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIZdaY58yabLbzPLYs91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx MDYzZTIwHhcNMjUxMjA2MTMwMTExWhcNMjUxMjA3MTMwMTExWjAzMTEwLwYDVQQD Eyg0ZTIyYjFlOGRmZjQ5YTMxMWI3YWVlYTg4MWNjMmYxZDFkZGFjOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qh4TDx7xcjnImGY8SCmXkK8ur9o q+jKCiUvHXRO70hppV4ucM/QMYf4bfg6R286nWTNY1Q9GMx5Iufo4Gt+hDmyegNp myE4pHGgIknX6pTIuNl/rfveHhR8Z3vP96nquOsWa6wpTD8tkTzrynm7SvGHyg5A TzR8hXzCM3LxWYOn3t7JHagfKOu3OXxB1KzJ+QmeLnuBeoF4yDQVuFS1fK9/IOoi QcFLP6XEhuP89XQLrIMF2lh1ftIJAxl4yXlH3qGJRefChQOTUEUz1jlpkrvimyc5 p4AooVfycRcJxaRJShggRUqXZIaMJBvNKfgppzzSKbgViLQVoW4iGQ7+aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4isejf9JoxG3ruqIHMLx0d2slJMB8GA1UdIwQY MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhPnegzl ks8tEJsR1PQUSSyIRaj3jpekOrq/Mvj3A8rF/IsbR/8VSik/QCGoHI4uNIm+uDxa 3L4auTMvuwFzoY78dGqLFtA9JUIEil9VcBXXKVHoD7b/Scnm9olUb0k0LAy51Dwa +2g3wfNVhTgge4KaZje+xlDt7VcvUB5WfGKf0+HKvrcQSd9jJ1+pq9mVS85X63gt L+svAaE8Tbo1Qu7OO43KxT5aCuVYcoTmnsWDzHSWHTbQWErPhx195lIjEG63xKX0 MtfgkMaoKvta9aT7xgTIy4K8AoHvZWaN8oTpiQd4VVafq5zpUABTtQY0125eIhsJ toWd2OTSuOxxYg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:51 2025 by rpki-client