This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json) Hash identifier: KLyAyis/ifYJgF08+1nF2Wnyl5hVkLvifk+wly2LEOU= Subject key identifier: 86:87:27:BE:DA:E2:BB:D3:4F:18:58:3B:F4:AA:49:5D:29:D8:6F:FE Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Certificate serial: 019AF19AB3DF6675E7DB39D0C347726A6C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=) 2: DPfDzK5MIgt9uCqb-OzrjnTt0XE.asa (hash: xVJ7dS76yV9K4GLx/NHqZB5JP3AMDX7XWVpGOyoTdvQ=) 3: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=) 4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: y9zlTl15m5gqM0BzMMT+V/qjX/CyPm58LeTfEPa1G1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b3:df:66:75:e7:db:39:d0:c3:47:72:6a:6c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=868727bedae2bbd34f18583bf4aa495d29d86ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:60:15:96:14:a9:f7:e3:99:1b:f9:af:b1: 47:dd:a6:9d:23:d0:43:ad:ec:80:ee:a9:4e:ca:6c: ce:c0:32:21:e2:d6:b2:7d:6f:d2:77:68:01:22:bd: 93:43:b3:57:a6:ae:f7:0d:81:b1:32:80:62:f9:21: aa:25:f0:fd:66:6e:62:3d:7f:98:70:13:bb:ff:9b: 01:c9:2b:80:72:e2:fe:9e:0f:9c:50:5a:7b:a5:79: fc:10:27:53:10:4e:ef:f4:4b:e9:0d:ff:52:29:fe: 3c:93:ad:98:84:bf:0d:f4:47:ff:bb:b0:f0:4e:b8: 83:6f:e9:dc:6d:89:40:40:9b:88:e9:ee:68:63:a2: 58:ff:75:6e:da:7e:dd:c2:74:36:6d:a8:49:60:c8: 9c:25:8d:73:53:5a:f7:15:7e:18:81:17:6e:40:5a: 97:c0:c3:45:76:3b:41:0d:89:58:39:4e:c5:bc:eb: 9a:0d:97:82:78:bd:3e:6f:26:53:16:93:56:e3:78: b9:96:2a:32:bb:f8:02:55:a6:a1:ac:f6:b4:7d:b0: 3e:d2:04:da:15:df:67:2f:0f:dd:cc:a0:a6:b1:37: e2:fc:8b:4a:6d:92:72:53:81:84:90:b7:2a:df:01: 85:c8:e3:9d:03:b3:7c:a1:12:45:2e:97:66:de:ba: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:27:BE:DA:E2:BB:D3:4F:18:58:3B:F4:AA:49:5D:29:D8:6F:FE X509v3 Authority Key Identifier: keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:55:f3:ec:1d:21:94:96:86:1b:66:45:4e:d4:5c:36:6b:e0: 31:e4:d1:f7:03:b3:7d:83:6e:50:ed:30:cf:3f:c8:ff:85:4c: d5:8d:3a:5f:15:2e:3c:17:72:f0:b3:14:6d:11:c3:76:55:8e: 2e:e4:4e:1b:06:41:a5:8d:67:2d:91:76:90:36:9b:51:4c:fe: ae:52:ab:6c:9c:a1:3d:93:af:20:d0:f8:24:ff:b3:a5:3d:73: 94:42:03:74:62:9c:57:7d:d7:53:c5:f7:dd:c3:9e:3c:55:b3: 1b:72:29:5a:f3:90:4a:e2:75:89:ee:84:90:e1:9e:b6:e6:57: 13:aa:ca:05:c4:46:bf:95:58:be:51:86:a6:70:9d:a9:e4:c9: 59:a4:15:8d:5c:26:96:a2:0f:0a:c5:d8:12:3f:f4:cd:34:cf: b9:91:fc:eb:ef:82:d8:69:2b:00:64:cc:ef:c8:a0:1c:c9:e5: 75:0c:3c:34:22:8e:67:10:30:29:3a:17:3a:1e:6e:36:d0:9c: ee:50:a5:c4:0d:82:ab:f8:fb:01:a3:8d:d9:ef:f8:57:fe:ae: 9e:28:d2:9b:88:f2:1e:e9:3c:2b:5c:35:56:1f:e8:02:3c:69: 7e:93:58:34:24:2d:d0:a2:76:53:34:d0:35:1e:86:5e:32:60: 51:a4:5b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrPfZnXn2znQw0dyamyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0 M2YxNzQwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg4Njg3MjdiZWRhZTJiYmQzNGYxODU4M2JmNGFhNDk1ZDI5ZDg2ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYtgFZYUqffjmRv5r7FH3aadI9BD reyA7qlOymzOwDIh4tayfW/Sd2gBIr2TQ7NXpq73DYGxMoBi+SGqJfD9Zm5iPX+Y cBO7/5sBySuAcuL+ng+cUFp7pXn8ECdTEE7v9EvpDf9SKf48k62YhL8N9Ef/u7Dw TriDb+ncbYlAQJuI6e5oY6JY/3Vu2n7dwnQ2bahJYMicJY1zU1r3FX4YgRduQFqX wMNFdjtBDYlYOU7FvOuaDZeCeL0+byZTFpNW43i5lioyu/gCVaahrPa0fbA+0gTa Fd9nLw/dzKCmsTfi/ItKbZJyU4GEkLcq3wGFyOOdA7N8oRJFLpdm3rr3DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaHJ77a4rvTTxhYO/SqSV0p2G/+MB8GA1UdIwQY MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFXz7B0h lJaGG2ZFTtRcNmvgMeTR9wOzfYNuUO0wzz/I/4VM1Y06XxUuPBdy8LMUbRHDdlWO LuROGwZBpY1nLZF2kDabUUz+rlKrbJyhPZOvIND4JP+zpT1zlEIDdGKcV33XU8X3 3cOePFWzG3IpWvOQSuJ1ie6EkOGetuZXE6rKBcRGv5VYvlGGpnCdqeTJWaQVjVwm lqIPCsXYEj/0zTTPuZH86++C2GkrAGTM78igHMnldQw8NCKOZxAwKToXOh5uNtCc 7lClxA2Cq/j7AaON2e/4V/6unijSm4jyHuk8K1w1Vh/oAjxpfpNYNCQt0KJ2UzTQ NR6GXjJgUaRbHw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:14 2025 by rpki-client