This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json) Hash identifier: UhXE0S7/O6b3aMPEesLEhjh0Y+cMWluUAAUrfL2EC+A= Subject key identifier: 5B:00:9A:DD:C3:1F:C7:B2:9E:1E:63:C5:8A:8B:8F:EA:D7:DF:5B:DC Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Certificate serial: 019AF50A79B2CC63E80E41AF66D3290F73FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 19:01:35 +0000 Manifest this update: Sat 06 Dec 2025 19:01:35 +0000 Manifest next update: Sun 07 Dec 2025 19:01:35 +0000 Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: u5gTlfBiqrMd3rTqLqqHLQOBCkPePSJo22ZhIykg/Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:79:b2:cc:63:e8:0e:41:af:66:d3:29:0f:73:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Validity Not Before: Dec 6 19:01:35 2025 GMT Not After : Dec 7 19:01:35 2025 GMT Subject: CN=5b009addc31fc7b29e1e63c58a8b8fead7df5bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:1b:bd:b9:17:2e:48:51:57:8a:a0:da:7f: 93:8e:0a:fe:c6:a3:18:ce:01:8f:61:b2:32:31:97: 72:05:ce:88:75:b7:ec:2d:e7:db:1f:f7:73:7e:95: 18:a8:c3:00:aa:32:68:81:17:2a:ee:97:c6:85:bd: e6:81:d3:de:40:a3:13:b3:8d:2f:bf:de:7b:cf:d0: d0:87:97:d1:58:59:96:d4:16:1d:95:4d:71:e1:18: 3c:ff:00:ab:4c:25:6b:ff:70:cf:bf:5b:aa:89:72: a0:62:ca:3c:60:7b:69:6d:c3:0d:53:70:57:d4:2b: ac:d3:78:9e:6f:08:2f:00:8b:44:ca:a6:72:da:c3: 0c:b5:a1:b9:01:0e:bf:30:b5:87:37:3d:af:68:ab: f5:2e:34:c6:2a:af:2e:62:5b:cc:cd:9f:c4:68:18: 90:a8:dc:09:f6:d7:8a:b6:be:a9:9d:78:80:18:6c: 37:4f:19:c4:c1:e1:ab:d8:4d:59:8a:da:ff:9a:fd: f4:7e:e2:83:bc:96:96:68:53:78:75:84:a7:1a:4a: 9f:e1:d5:14:e7:cb:d7:1d:e5:97:48:81:3c:00:22: 26:82:8e:2a:d8:bf:f8:37:0a:2d:96:33:41:a1:42: 97:29:3d:f2:e4:58:e3:da:a9:d3:ef:a7:ab:d4:e8: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:00:9A:DD:C3:1F:C7:B2:9E:1E:63:C5:8A:8B:8F:EA:D7:DF:5B:DC X509v3 Authority Key Identifier: keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:11:64:6c:36:52:f6:50:ad:13:14:17:c3:c8:65:78:05:55: 18:a6:73:de:7d:5e:e6:73:96:72:fb:ae:3c:06:d3:95:58:93: db:6a:b1:58:1f:c3:41:ba:d7:75:cd:2e:a6:47:f2:f6:9d:4f: 2e:1e:1c:5e:2d:c2:7e:72:83:25:34:ae:ee:31:7b:8f:3c:10: e0:3b:38:e4:b4:77:08:81:cb:7c:4d:2c:d9:9e:77:69:76:31: 6e:74:01:0f:c8:5f:ee:b2:d7:d2:55:34:0b:c3:67:8f:cc:03: 96:98:9f:43:ad:bb:e0:a1:2f:50:19:d1:ae:5a:9d:72:99:87: 5f:36:91:3c:52:3f:97:87:5a:74:95:2e:91:12:8c:55:da:7f: 85:6c:5c:ce:be:71:e9:d2:2e:eb:b9:c3:c5:eb:ee:ba:96:1d: 45:fb:0f:74:78:60:b1:30:ee:c2:fe:00:2a:77:69:22:d2:df: f1:c8:41:0d:d1:02:83:01:aa:62:01:82:f0:67:5b:2b:29:45: ee:d4:95:3d:50:3d:41:23:4a:65:8d:7b:3a:f5:fe:c0:5c:a0: 2e:80:52:2c:98:dc:73:6a:07:f3:79:3a:2f:22:8a:f6:fd:e0: 08:61:da:8d:db:f3:5a:4f:87:7f:7e:97:63:5e:14:7d:ca:c0: 6e:64:e5:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnmyzGPoDkGvZtMpD3P/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTcwMDkxNmY5MDk4M2JkOGU4OWNkMDVmZTYyOWVjMTgz YmZhNTQwHhcNMjUxMjA2MTkwMTM1WhcNMjUxMjA3MTkwMTM1WjAzMTEwLwYDVQQD Eyg1YjAwOWFkZGMzMWZjN2IyOWUxZTYzYzU4YThiOGZlYWQ3ZGY1YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBMbvbkXLkhRV4qg2n+Tjgr+xqMY zgGPYbIyMZdyBc6IdbfsLefbH/dzfpUYqMMAqjJogRcq7pfGhb3mgdPeQKMTs40v v957z9DQh5fRWFmW1BYdlU1x4Rg8/wCrTCVr/3DPv1uqiXKgYso8YHtpbcMNU3BX 1Cus03iebwgvAItEyqZy2sMMtaG5AQ6/MLWHNz2vaKv1LjTGKq8uYlvMzZ/EaBiQ qNwJ9teKtr6pnXiAGGw3TxnEweGr2E1Zitr/mv30fuKDvJaWaFN4dYSnGkqf4dUU 58vXHeWXSIE8ACImgo4q2L/4NwotljNBoUKXKT3y5Fjj2qnT76er1OhRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsAmt3DH8eynh5jxYqLj+rX31vcMB8GA1UdIwQY MBaAFG1XAJFvkJg72Oic0F/mKewYO/pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgt OTI2YjM0ODE0MTMwLzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgtOTI2YjM0ODE0MTMw LzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5hFkbDZS 9lCtExQXw8hleAVVGKZz3n1e5nOWcvuuPAbTlViT22qxWB/DQbrXdc0upkfy9p1P Lh4cXi3CfnKDJTSu7jF7jzwQ4Ds45LR3CIHLfE0s2Z53aXYxbnQBD8hf7rLX0lU0 C8Nnj8wDlpifQ6274KEvUBnRrlqdcpmHXzaRPFI/l4dadJUukRKMVdp/hWxczr5x 6dIu67nDxevuupYdRfsPdHhgsTDuwv4AKndpItLf8chBDdECgwGqYgGC8GdbKylF 7tSVPVA9QSNKZY17OvX+wFygLoBSLJjcc2oH83k6LyKK9v3gCGHajdvzWk+Hf36X Y14UfcrAbmTl1w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:27 2025 by rpki-client