This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json) Hash identifier: c6gTZNtT1EuL9+Hoeh0IdNwvzK1lRW7INdHL+af2AvY= Subject key identifier: 85:3C:0D:A4:8A:CF:20:CD:34:9E:C8:B2:49:5F:6F:29:68:3C:E2:A0 Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07 Certificate serial: 019AF389E79F9D6E8191DCC1454F4F5691C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 12:01:32 +0000 Manifest next update: Sun 07 Dec 2025 12:01:32 +0000 Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=) 2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: rrKcpvmcoNPUlvywguIgb2imsqdqmQXSqcYYRH5xNYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e7:9f:9d:6e:81:91:dc:c1:45:4f:4f:56:91:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07 Validity Not Before: Dec 6 12:01:32 2025 GMT Not After : Dec 7 12:01:32 2025 GMT Subject: CN=853c0da48acf20cd349ec8b2495f6f29683ce2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:2e:07:08:97:04:08:01:27:e8:01:fb:95: f8:5a:9b:db:04:59:72:25:a7:82:bc:26:b4:ef:2f: 18:3a:36:65:be:74:2c:2a:09:03:04:4a:bb:35:6d: 2a:a7:50:0c:98:a3:4e:8c:67:51:85:85:c6:19:1a: 15:0a:ac:4f:fc:98:30:e9:67:55:5b:c4:bf:b6:bc: 2e:5a:1d:05:33:2d:6e:23:db:81:3e:87:01:e3:d0: 81:0c:93:40:4f:5f:5d:a7:4b:f3:f8:5c:aa:06:a9: e6:fa:37:fa:6d:25:e8:bb:80:c9:f2:c4:c2:0d:3a: 6b:e8:bb:e7:d9:75:44:73:e3:4e:15:d9:bf:e5:ab: 38:96:7c:70:fe:e7:58:f1:fb:cd:35:6f:57:5d:22: 55:52:c5:26:e9:d0:f6:98:8d:1d:87:6e:c7:69:b9: 51:5a:cb:5e:d4:51:0b:01:e1:1e:03:a7:2a:1c:77: 44:9d:a7:bf:88:9b:98:6a:7c:d8:e1:55:60:eb:aa: c1:b4:01:62:13:de:f5:81:ac:46:3e:e8:d3:b3:bd: 19:d3:ee:66:ca:4b:9f:34:ec:58:82:9e:c4:c6:47: 46:49:8d:f1:04:61:a6:16:07:7b:3b:b4:68:cb:be: 7d:3a:d0:a5:4d:bc:62:57:77:c5:b4:02:0a:15:f5: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3C:0D:A4:8A:CF:20:CD:34:9E:C8:B2:49:5F:6F:29:68:3C:E2:A0 X509v3 Authority Key Identifier: keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f2:87:7e:b8:37:85:c7:e9:10:0f:25:1b:b0:e8:09:7a:d6: 8f:97:f7:6c:2c:6d:74:85:76:13:88:63:a0:54:8a:c7:0c:23: bf:53:45:79:c7:41:ff:73:48:50:10:ac:71:cf:4c:83:6f:2b: 6d:43:de:e8:1f:e6:09:17:94:2a:9c:2b:a4:7d:38:6f:a5:bc: d9:23:2c:7a:07:2c:97:c6:e7:b0:c4:54:2e:81:99:1f:d2:62: f4:64:ce:c8:1d:8a:34:1e:b9:37:63:0f:fd:d0:24:56:10:2a: 3e:ba:38:a4:70:0a:d3:8a:da:bc:4d:e8:7e:6e:d2:98:74:70: 53:b8:ae:0b:74:7c:68:13:0c:29:86:a9:80:98:69:cd:02:8d: a8:b7:a4:b8:d0:fc:00:8b:c0:15:84:82:0b:4f:52:86:c9:99: 56:a1:ba:f9:c6:98:98:61:3e:af:29:15:09:39:25:82:5b:d7: 27:e7:67:e2:7d:4e:19:9d:d4:9e:89:dc:42:cd:19:60:8c:c7: b4:b5:0a:3e:01:ad:a7:50:4e:82:fc:f6:e3:93:9c:f2:b0:d7: 0a:20:5f:8d:50:fa:af:20:48:32:d4:ae:a2:01:ba:3b:6d:65: fe:84:de:4f:fd:3e:dc:68:a4:5f:dc:63:d3:da:fe:08:89:cf: b5:55:66:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieefnW6BkdzBRU9PVpHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx NzVlMDcwHhcNMjUxMjA2MTIwMTMyWhcNMjUxMjA3MTIwMTMyWjAzMTEwLwYDVQQD Eyg4NTNjMGRhNDhhY2YyMGNkMzQ5ZWM4YjI0OTVmNmYyOTY4M2NlMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUcuBwiXBAgBJ+gB+5X4WpvbBFly JaeCvCa07y8YOjZlvnQsKgkDBEq7NW0qp1AMmKNOjGdRhYXGGRoVCqxP/Jgw6WdV W8S/trwuWh0FMy1uI9uBPocB49CBDJNAT19dp0vz+FyqBqnm+jf6bSXou4DJ8sTC DTpr6Lvn2XVEc+NOFdm/5as4lnxw/udY8fvNNW9XXSJVUsUm6dD2mI0dh27HablR Wste1FELAeEeA6cqHHdEnae/iJuYanzY4VVg66rBtAFiE971gaxGPujTs70Z0+5m ykufNOxYgp7ExkdGSY3xBGGmFgd7O7Roy759OtClTbxiV3fFtAIKFfXw2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU8DaSKzyDNNJ7IsklfbyloPOKgMB8GA1UdIwQY MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPKHfrg3 hcfpEA8lG7DoCXrWj5f3bCxtdIV2E4hjoFSKxwwjv1NFecdB/3NIUBCscc9Mg28r bUPe6B/mCReUKpwrpH04b6W82SMsegcsl8bnsMRULoGZH9Ji9GTOyB2KNB65N2MP /dAkVhAqPro4pHAK04ravE3ofm7SmHRwU7iuC3R8aBMMKYapgJhpzQKNqLekuND8 AIvAFYSCC09ShsmZVqG6+caYmGE+rykVCTklglvXJ+dn4n1OGZ3UnoncQs0ZYIzH tLUKPgGtp1BOgvz245Oc8rDXCiBfjVD6ryBIMtSuogG6O21l/oTeT/0+3GikX9xj 09r+CInPtVVmXA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:54 2025 by rpki-client