This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json) Hash identifier: qpav5/fRzmS10IcxGgW3r6KjxjoJXOtbwLDzKSK8c5o= Subject key identifier: 75:59:4C:6E:57:9C:3C:19:F9:93:45:D4:C2:E7:18:1D:D8:AB:0A:25 Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8 Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8 Certificate serial: 019AF540B20E799A5D2A3EC446BE0750AF7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft Manifest number: 06AF Signing time: Sat 06 Dec 2025 20:00:49 +0000 Manifest this update: Sat 06 Dec 2025 20:00:49 +0000 Manifest next update: Sun 07 Dec 2025 20:00:49 +0000 Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: oV1PXd/iTbwfC2OSQfe+f3hg2ytfW6/fbGQPOeC5+uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b2:0e:79:9a:5d:2a:3e:c4:46:be:07:50:af:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8 Validity Not Before: Dec 6 20:00:49 2025 GMT Not After : Dec 7 20:00:49 2025 GMT Subject: CN=75594c6e579c3c19f99345d4c2e7181dd8ab0a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a4:62:fc:38:db:9b:ad:aa:47:00:4e:a6:8b: 5d:03:06:6f:c3:f9:8b:08:44:fa:70:e4:b9:dc:c5: 52:8c:87:9b:cb:9f:d1:12:0b:a6:ec:e4:65:35:2e: 17:ff:fb:a4:06:79:5c:2c:a3:6f:26:cb:a5:e8:36: ef:52:45:c0:8e:d0:75:18:48:37:b0:4e:35:4e:fb: 5a:ad:86:56:3c:20:92:62:38:74:a1:12:31:8a:b1: 18:77:40:9d:91:62:0e:73:f9:11:e9:74:99:0d:d7: c6:b0:4b:ec:ea:00:33:2f:a7:63:0f:57:53:ad:00: e0:8d:2b:0e:cd:f1:4d:fe:f9:0c:79:d0:16:ce:be: f4:df:5b:22:28:23:6d:6d:fc:73:25:d6:6a:34:9e: 96:d2:5e:70:85:f3:b1:7b:bc:80:8d:41:51:24:38: f1:ca:5b:8e:03:de:d1:5e:ba:c5:8a:55:b9:e1:92: e9:09:65:7f:ad:cd:ce:65:70:a1:65:c7:02:86:63: 02:29:32:b4:32:00:af:65:af:21:60:8d:c3:67:54: 29:43:e4:9d:9f:08:26:c5:5a:1c:c9:af:2a:ce:35: f4:47:69:25:e5:47:f0:d4:21:bf:2b:78:ae:a1:50: bb:af:4a:ab:c4:3c:6b:8d:76:0b:0a:3a:d9:55:03: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:59:4C:6E:57:9C:3C:19:F9:93:45:D4:C2:E7:18:1D:D8:AB:0A:25 X509v3 Authority Key Identifier: keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:98:9b:59:d5:65:e9:93:ba:9e:22:c9:31:d3:9c:97:e8:44: ac:17:dd:94:54:fe:04:de:a3:89:8a:c4:a4:7d:c0:7d:a6:dd: e6:ff:f9:1b:29:39:69:8a:c8:b4:bc:38:28:a0:77:5a:16:af: 19:80:83:11:ad:5c:07:d7:61:f7:e1:7c:85:e0:b1:cc:15:1b: 39:41:ce:3d:92:6f:ba:96:6f:a4:82:f0:b0:78:2b:86:4a:44: ba:b4:c1:c3:71:2a:4d:32:45:16:56:2b:9e:d1:2e:02:1a:76: 15:d3:71:e9:c1:cd:0f:fa:eb:60:b0:7b:88:bb:ff:b8:5f:c8: 94:c6:e7:2a:b2:06:4c:ec:f9:85:ad:f8:75:1b:80:79:72:96: c6:e5:dc:41:0c:81:64:83:0a:43:1f:20:b6:d5:e5:d8:9f:5c: 4a:77:1c:39:ba:7b:10:a8:7c:17:49:49:2e:86:98:c2:ef:7a: 41:8a:ab:54:62:f1:3f:26:27:2c:3e:72:39:28:85:89:2a:22: c4:2c:4b:fb:27:15:11:94:2e:8a:20:1e:49:2e:16:c9:b5:5c: 26:f7:1e:1d:83:6f:86:3b:86:1c:f7:c9:ba:f4:01:e2:fd:9c: b1:57:ee:1a:45:72:27:61:54:b3:80:c6:c3:94:09:a6:e0:96: ae:0c:f8:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLIOeZpdKj7ERr4HUK96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjhjMWI5MGU0NWY5MWJhYjhkNjA3ODhlZWQyNWNiNGEw MTBmZTgwHhcNMjUxMjA2MjAwMDQ5WhcNMjUxMjA3MjAwMDQ5WjAzMTEwLwYDVQQD Eyg3NTU5NGM2ZTU3OWMzYzE5Zjk5MzQ1ZDRjMmU3MTgxZGQ4YWIwYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKRi/Djbm62qRwBOpotdAwZvw/mL CET6cOS53MVSjIeby5/REgum7ORlNS4X//ukBnlcLKNvJsul6DbvUkXAjtB1GEg3 sE41TvtarYZWPCCSYjh0oRIxirEYd0CdkWIOc/kR6XSZDdfGsEvs6gAzL6djD1dT rQDgjSsOzfFN/vkMedAWzr7031siKCNtbfxzJdZqNJ6W0l5whfOxe7yAjUFRJDjx yluOA97RXrrFilW54ZLpCWV/rc3OZXChZccChmMCKTK0MgCvZa8hYI3DZ1QpQ+Sd nwgmxVocya8qzjX0R2kl5Ufw1CG/K3iuoVC7r0qrxDxrjXYLCjrZVQNM3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVZTG5XnDwZ+ZNF1MLnGB3YqwolMB8GA1UdIwQY MBaAFG5owbkORfkbq41geI7tJctKAQ/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEt MTc0MDYzMGZjYzQ1LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEtMTc0MDYzMGZjYzQ1 LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJibWdVl 6ZO6niLJMdOcl+hErBfdlFT+BN6jiYrEpH3Afabd5v/5Gyk5aYrItLw4KKB3Whav GYCDEa1cB9dh9+F8heCxzBUbOUHOPZJvupZvpILwsHgrhkpEurTBw3EqTTJFFlYr ntEuAhp2FdNx6cHND/rrYLB7iLv/uF/IlMbnKrIGTOz5ha34dRuAeXKWxuXcQQyB ZIMKQx8gttXl2J9cSnccObp7EKh8F0lJLoaYwu96QYqrVGLxPyYnLD5yOSiFiSoi xCxL+ycVEZQuiiAeSS4WybVcJvceHYNvhjuGHPfJuvQB4v2csVfuGkVyJ2FUs4DG w5QJpuCWrgz41A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:58 2025 by rpki-client