This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json) Hash identifier: unvpbSuJtsbsP3ckG8Ix5KHv8zxY/rANw7a52zx2fC4= Subject key identifier: AC:4B:7A:94:44:F6:85:07:E2:93:DD:51:65:4F:87:05:CD:64:B3:38 Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Certificate serial: 019AF3C03323202C4B078DF4071B32EB562B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:00:50 +0000 Manifest this update: Sat 06 Dec 2025 13:00:50 +0000 Manifest next update: Sun 07 Dec 2025 13:00:50 +0000 Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=) 2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: ici6HQvs7U0RXF3eSOFBJkxYzzpLpWPe98PPavg1YXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:33:23:20:2c:4b:07:8d:f4:07:1b:32:eb:56:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Validity Not Before: Dec 6 13:00:50 2025 GMT Not After : Dec 7 13:00:50 2025 GMT Subject: CN=ac4b7a9444f68507e293dd51654f8705cd64b338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:fc:bc:4a:90:c3:d3:a5:45:45:14:90:77: be:14:3c:7e:8e:92:d8:88:ab:68:61:6e:de:38:68: 18:c6:33:15:4a:1d:29:1d:b2:f8:8d:b1:24:d7:61: 15:c4:55:49:b3:00:23:32:97:67:53:ad:4b:d0:9a: 98:94:dc:53:cc:09:ba:41:cd:45:94:3a:41:69:ca: 3b:a2:77:0e:41:90:68:27:21:98:b2:c1:c7:33:a2: 45:7b:0a:9a:9c:3d:e8:20:0b:24:55:01:8e:a0:9e: 2a:ce:c1:ff:44:b9:96:6e:85:58:e5:4c:6d:43:01: 93:0a:6d:4c:8e:6c:85:02:8b:af:73:f9:fd:55:d8: 3c:82:45:f0:70:cc:de:0e:04:80:48:b7:85:55:f9: 40:ab:9e:e9:94:23:a1:16:24:bc:e7:9b:19:aa:59: 34:82:a0:8d:e0:61:48:66:47:0c:43:ca:af:39:0b: bc:68:86:9e:a2:1a:d6:dc:7e:9c:bf:57:8b:f4:ab: 27:9c:27:70:a0:40:2f:0d:7f:32:b2:51:81:59:3f: a6:15:8e:2f:46:3f:1c:e9:51:93:5a:a2:0f:50:81: dc:04:b5:9b:53:73:b4:6b:aa:b1:08:9b:e1:03:30: e1:e9:b5:bf:a0:25:19:3d:30:df:cd:40:3d:85:c9: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4B:7A:94:44:F6:85:07:E2:93:DD:51:65:4F:87:05:CD:64:B3:38 X509v3 Authority Key Identifier: keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:32:95:f0:2b:07:fa:1d:04:56:da:97:e8:39:c8:8a:d3:65: 10:40:ff:a3:ea:44:8a:4b:18:70:bf:88:34:c8:fc:fa:8f:98: 3a:67:a2:0b:93:9b:42:98:c9:1b:e6:ab:cc:3a:6c:19:24:5b: 06:58:38:9f:e5:54:25:db:46:04:52:d9:d9:f0:0b:3c:20:53: a4:5b:c4:65:c7:1a:0d:3b:2d:5c:63:02:3c:85:7e:c7:61:4d: ad:4f:c5:01:32:e2:ef:e2:ee:d8:b5:40:3c:bd:ab:41:49:c4: 63:fc:1c:cc:83:d6:aa:e0:fb:1b:79:d0:6b:1f:1a:5d:78:bf: 4e:b9:47:e5:14:15:82:29:df:fd:bd:0f:92:f5:c4:b6:69:d2: 93:9c:c8:1c:60:3f:83:41:3c:25:be:2c:a3:42:6d:1c:2b:61: df:3b:6a:1a:3c:3c:c2:f5:43:dd:34:94:f4:c7:ad:22:4c:0b: cc:10:02:d6:d0:20:29:cd:08:2e:72:f9:83:61:0b:de:06:4b: 46:41:a4:d6:95:86:4e:d8:b0:40:bd:32:56:e1:c9:a8:e7:f7: 34:bc:3b:e5:4c:29:0a:a9:8b:09:64:59:a4:a3:59:58:72:88: fd:95:40:ce:c0:d1:7c:96:9d:ef:e0:2f:8d:bd:01:65:8b:04: cd:2e:0a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDMjICxLB430Bxsy61YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi Y2E2YmYwHhcNMjUxMjA2MTMwMDUwWhcNMjUxMjA3MTMwMDUwWjAzMTEwLwYDVQQD EyhhYzRiN2E5NDQ0ZjY4NTA3ZTI5M2RkNTE2NTRmODcwNWNkNjRiMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aT8vEqQw9OlRUUUkHe+FDx+jpLY iKtoYW7eOGgYxjMVSh0pHbL4jbEk12EVxFVJswAjMpdnU61L0JqYlNxTzAm6Qc1F lDpBaco7oncOQZBoJyGYssHHM6JFewqanD3oIAskVQGOoJ4qzsH/RLmWboVY5Uxt QwGTCm1MjmyFAouvc/n9Vdg8gkXwcMzeDgSASLeFVflAq57plCOhFiS855sZqlk0 gqCN4GFIZkcMQ8qvOQu8aIaeohrW3H6cv1eL9KsnnCdwoEAvDX8yslGBWT+mFY4v Rj8c6VGTWqIPUIHcBLWbU3O0a6qxCJvhAzDh6bW/oCUZPTDfzUA9hcnQPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxLepRE9oUH4pPdUWVPhwXNZLM4MB8GA1UdIwQY MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt MDUyOTBiZWNkYzYxLzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDKV8CsH +h0EVtqX6DnIitNlEED/o+pEiksYcL+INMj8+o+YOmeiC5ObQpjJG+arzDpsGSRb Blg4n+VUJdtGBFLZ2fALPCBTpFvEZccaDTstXGMCPIV+x2FNrU/FATLi7+Lu2LVA PL2rQUnEY/wczIPWquD7G3nQax8aXXi/TrlH5RQVginf/b0PkvXEtmnSk5zIHGA/ g0E8Jb4so0JtHCth3ztqGjw8wvVD3TSU9MetIkwLzBAC1tAgKc0ILnL5g2EL3gZL RkGk1pWGTtiwQL0yVuHJqOf3NLw75UwpCqmLCWRZpKNZWHKI/ZVAzsDRfJad7+Av jb0BZYsEzS4KOw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:47 2025 by rpki-client