This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json) Hash identifier: LRsDhIDX8PP494W+WCDoVZvHVTMOLrzJvHPrcw0rlno= Subject key identifier: 6A:67:20:BF:82:8D:A2:69:5A:58:19:E3:32:7C:A0:01:D2:0B:E8:79 Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Certificate serial: 019AF540CA54BB41145DE2B95561ABF78953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft Manifest number: 0A20 Signing time: Sat 06 Dec 2025 20:00:55 +0000 Manifest this update: Sat 06 Dec 2025 20:00:55 +0000 Manifest next update: Sun 07 Dec 2025 20:00:55 +0000 Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=) 2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: b5Xlf8zPgqVc2gfhl1l6lS05r8fuYfVgfY1M6qDCGik=) 3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ca:54:bb:41:14:5d:e2:b9:55:61:ab:f7:89:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Validity Not Before: Dec 6 20:00:55 2025 GMT Not After : Dec 7 20:00:55 2025 GMT Subject: CN=6a6720bf828da2695a5819e3327ca001d20be879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:15:6e:de:a0:d0:77:b2:4d:d4:b7:2f:52:42: 08:62:9d:8f:04:95:77:27:0c:35:99:9c:25:39:4a: 63:eb:0f:60:24:86:3b:d6:19:b2:e1:e6:77:3a:d5: 9c:06:b3:2e:0c:ac:73:38:c5:1c:e9:5f:d1:bf:b4: f4:e1:71:42:91:51:fa:d8:fb:95:8a:9f:4b:62:10: da:d0:4b:c1:29:50:ff:40:59:04:cb:8c:ed:4d:af: a7:7e:d8:c4:f9:a8:9d:66:f8:36:64:ef:0f:1b:a9: 33:9b:7a:de:40:1a:6e:ab:15:23:ec:28:4a:24:73: 46:93:04:73:35:74:c8:1c:c5:42:32:2c:3a:28:75: e1:27:30:4e:d5:45:4b:0c:1e:69:b6:ee:e3:bd:91: d6:e6:77:a1:37:a8:bd:e8:a9:e7:9d:7c:62:68:6a: 51:43:c3:ea:ad:13:95:57:6f:85:15:ac:a3:7c:a2: 86:8c:81:dc:54:9e:ba:d9:9f:0d:33:da:a5:50:26: 6a:c1:cb:2a:d8:4a:33:b7:c7:99:8c:e0:cf:85:e8: 96:6d:86:92:55:5c:88:ae:d3:08:09:b9:f8:82:68: e9:db:91:91:42:99:bb:90:cb:89:8d:3d:e5:f6:09: ce:b2:bf:ae:fc:c3:30:b3:88:09:78:41:96:05:9e: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:20:BF:82:8D:A2:69:5A:58:19:E3:32:7C:A0:01:D2:0B:E8:79 X509v3 Authority Key Identifier: keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:69:b7:21:fc:47:64:aa:ca:db:d4:95:de:c9:1f:2b:e1:ea: 8f:37:f4:05:b9:1d:fa:f5:fa:79:fa:55:7c:0a:4e:eb:25:e8: 23:3c:6b:60:b2:f4:fa:b6:81:44:05:f7:3b:f3:0c:ff:bc:c9: f9:67:5b:cd:f3:ae:7f:b9:09:23:aa:a0:d4:2d:8b:a2:4e:0c: 7e:41:f4:43:59:00:46:ed:40:36:35:08:0d:48:19:7f:5a:5b: 96:76:46:6e:5d:de:b1:14:22:eb:59:42:57:ff:38:56:0b:31: 3e:b9:e6:75:c4:b4:4b:af:70:50:0d:41:15:78:9c:4d:d1:a0: a2:37:50:36:5c:1b:49:84:06:a0:45:22:c2:5f:ba:64:1a:07: b7:c0:6a:a0:e5:2e:f4:48:b5:7f:b4:fa:04:12:1f:b8:54:9e: 73:6f:99:ab:f6:78:a5:2a:ac:a7:09:54:72:af:3d:3b:0b:cc: c8:88:8e:ed:7e:b0:96:78:a6:d4:51:86:f6:98:22:b1:56:ed: 39:2d:d4:73:24:db:65:46:f8:94:e5:a2:c0:92:d2:bc:89:75: fc:14:a2:0a:8b:ba:5e:d7:31:6f:18:9c:5a:86:67:44:e7:ff: b3:7c:b1:6c:2d:cb:82:9b:67:08:c1:1b:a7:91:25:f3:32:90: 9f:94:2b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMpUu0EUXeK5VWGr94lTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3 NjA4ZjYwHhcNMjUxMjA2MjAwMDU1WhcNMjUxMjA3MjAwMDU1WjAzMTEwLwYDVQQD Eyg2YTY3MjBiZjgyOGRhMjY5NWE1ODE5ZTMzMjdjYTAwMWQyMGJlODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hVu3qDQd7JN1LcvUkIIYp2PBJV3 Jww1mZwlOUpj6w9gJIY71hmy4eZ3OtWcBrMuDKxzOMUc6V/Rv7T04XFCkVH62PuV ip9LYhDa0EvBKVD/QFkEy4ztTa+nftjE+aidZvg2ZO8PG6kzm3reQBpuqxUj7ChK JHNGkwRzNXTIHMVCMiw6KHXhJzBO1UVLDB5ptu7jvZHW5nehN6i96KnnnXxiaGpR Q8PqrROVV2+FFayjfKKGjIHcVJ662Z8NM9qlUCZqwcsq2Eozt8eZjODPheiWbYaS VVyIrtMICbn4gmjp25GRQpm7kMuJjT3l9gnOsr+u/MMws4gJeEGWBZ5EJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpnIL+CjaJpWlgZ4zJ8oAHSC+h5MB8GA1UdIwQY MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3 LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2m3IfxH ZKrK29SV3skfK+Hqjzf0Bbkd+vX6efpVfApO6yXoIzxrYLL0+raBRAX3O/MM/7zJ +WdbzfOuf7kJI6qg1C2Lok4MfkH0Q1kARu1ANjUIDUgZf1pblnZGbl3esRQi61lC V/84VgsxPrnmdcS0S69wUA1BFXicTdGgojdQNlwbSYQGoEUiwl+6ZBoHt8BqoOUu 9Ei1f7T6BBIfuFSec2+Zq/Z4pSqspwlUcq89OwvMyIiO7X6wlnim1FGG9pgisVbt OS3UcyTbZUb4lOWiwJLSvIl1/BSiCou6XtcxbxicWoZnROf/s3yxbC3LgptnCMEb p5El8zKQn5QrQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:04 2025 by rpki-client