This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json) Hash identifier: ebivXQVvt1rfeIEeuW5sp85ralf/ASjK+ddKZWGdyaU= Subject key identifier: 93:98:A7:56:FD:22:48:F5:44:8E:A1:E4:BA:19:18:5A:61:48:20:BE Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e Certificate serial: 019AF12CE834CBED3CF84E3B074942DAF662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: KpmqBmEIRlLw1LfmbuGdAD9Ep1KR0gJ/rnVtel1Rs2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e8:34:cb:ed:3c:f8:4e:3b:07:49:42:da:f6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=9398a756fd2248f5448ea1e4ba19185a614820be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:71:61:46:46:3d:78:b5:c7:9a:60:ce:4c: 30:65:73:74:b4:c0:5b:a6:53:0f:ec:1a:bf:4a:66: ff:eb:da:09:28:ed:46:36:cd:86:fb:56:2d:7d:44: 1e:88:22:62:7d:a4:71:b4:7b:ee:76:85:1e:31:89: 71:8b:9b:6d:cf:13:45:b8:c4:46:ff:97:d9:95:17: 66:4f:fc:b1:eb:35:31:c6:7b:98:61:bd:3e:e1:b6: 9f:d3:c1:87:de:98:13:97:30:2c:2b:6f:a4:f5:16: e0:52:f8:af:c9:e6:3d:4d:8c:b4:85:27:98:0c:20: 69:c9:e0:74:d1:e3:70:f3:8e:05:45:c5:10:01:f2: 60:cf:99:86:ba:ee:3a:bd:db:05:4b:17:62:fd:f1: 69:ea:68:2b:d7:84:07:de:5b:c8:40:dc:67:8a:c0: f8:db:ad:ce:89:65:e3:d2:fe:8c:41:57:af:35:c1: d7:cd:fe:9b:a3:ba:47:e6:2d:c7:92:e3:0f:4e:a4: 68:0a:bc:2d:d6:b1:e7:3e:6c:af:fa:0c:6e:4b:60: c6:c0:02:9e:8c:a8:de:ba:78:94:64:01:60:bd:7b: 10:78:5c:00:68:b4:40:45:29:27:18:30:33:89:b1: 19:2c:9f:5e:4e:17:28:cb:dd:81:ae:ba:2e:e8:86: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:A7:56:FD:22:48:F5:44:8E:A1:E4:BA:19:18:5A:61:48:20:BE X509v3 Authority Key Identifier: keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3f:59:f6:4f:46:d5:e9:38:31:db:61:9d:57:85:40:a8:a4: 11:6d:0d:04:94:e4:3c:e2:9c:33:0b:66:4c:47:5e:85:29:fe: 56:e4:73:3b:79:04:70:1b:38:9c:98:18:50:a6:10:33:6c:f3: 0e:6d:27:92:6c:10:1c:fa:ff:27:f9:11:fd:86:19:75:d4:31: 39:cf:ee:41:10:88:cf:88:0d:28:57:f8:61:91:6a:ce:8b:6c: 73:03:cb:75:9d:ec:58:bf:cd:5b:0f:97:69:d5:fe:80:0a:67: a8:f6:fc:09:e3:dd:c1:ff:68:9f:4b:ef:fd:49:0e:4d:16:22: ad:a9:a4:11:5d:16:56:46:e4:c7:1d:96:6f:93:9f:f7:ef:fb: fb:0a:96:dc:dc:25:35:33:d1:0d:23:9f:f8:ee:9c:36:6c:e9: 58:c0:e5:4e:60:2c:96:25:d5:68:54:b1:4b:c4:06:16:71:4f: cd:e0:3e:17:07:90:89:a9:e4:63:4c:f2:73:64:d0:17:7d:35: 9a:1a:60:73:b6:99:97:21:b8:72:48:60:40:69:5a:b0:f5:b9: 13:2a:97:ac:f7:0f:73:72:6f:25:bb:3e:30:4a:d5:e4:77:25: 9d:06:6b:47:f8:31:fe:45:11:35:6f:30:87:58:7e:ae:2b:bc: f8:00:e3:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOg0y+08+E47B0lC2vZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTNjNDMzZjZjMjI1MDE5ZDljYjVhNDMzMDAxMmY0Yzc3 YTFmM2UwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD Eyg5Mzk4YTc1NmZkMjI0OGY1NDQ4ZWExZTRiYTE5MTg1YTYxNDgyMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b9xYUZGPXi1x5pgzkwwZXN0tMBb plMP7Bq/Smb/69oJKO1GNs2G+1YtfUQeiCJifaRxtHvudoUeMYlxi5ttzxNFuMRG /5fZlRdmT/yx6zUxxnuYYb0+4baf08GH3pgTlzAsK2+k9RbgUvivyeY9TYy0hSeY DCBpyeB00eNw844FRcUQAfJgz5mGuu46vdsFSxdi/fFp6mgr14QH3lvIQNxnisD4 263OiWXj0v6MQVevNcHXzf6bo7pH5i3HkuMPTqRoCrwt1rHnPmyv+gxuS2DGwAKe jKjeuniUZAFgvXsQeFwAaLRARSknGDAzibEZLJ9eThcoy92Brrou6IYAaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOYp1b9Ikj1RI6h5LoZGFphSCC+MB8GA1UdIwQY MBaAFAVTxDP2wiUBnZy1pDMAEvTHeh8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEt MTgyNTEyZjhiY2RlLzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEtMTgyNTEyZjhiY2Rl LzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXj9Z9k9G 1ek4MdthnVeFQKikEW0NBJTkPOKcMwtmTEdehSn+VuRzO3kEcBs4nJgYUKYQM2zz Dm0nkmwQHPr/J/kR/YYZddQxOc/uQRCIz4gNKFf4YZFqzotscwPLdZ3sWL/NWw+X adX+gApnqPb8CePdwf9on0vv/UkOTRYiramkEV0WVkbkxx2Wb5Of9+/7+wqW3Nwl NTPRDSOf+O6cNmzpWMDlTmAsliXVaFSxS8QGFnFPzeA+FweQiankY0zyc2TQF301 mhpgc7aZlyG4ckhgQGlasPW5EyqXrPcPc3JvJbs+MErV5HclnQZrR/gx/kURNW8w h1h+riu8+ADjAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:56 2025 by rpki-client