This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json) Hash identifier: F6V1YSdnVJ/xF295k35u6VJowzGuqgrmifkUIjWl2B4= Subject key identifier: 43:EA:7C:8A:3A:44:AA:EC:EA:52:1C:1D:C6:13:96:63:DE:A7:53:E3 Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Certificate serial: 019AF12F10A8D33456E8EDE4E16419F6B191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft Manifest number: 08E2 Signing time: Sat 06 Dec 2025 01:03:04 +0000 Manifest this update: Sat 06 Dec 2025 01:03:04 +0000 Manifest next update: Sun 07 Dec 2025 01:03:04 +0000 Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: oOd/yCOaeIhqmyfIE1skuw5onqCZcL+KKxtrh86JJeI=) 2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:10:a8:d3:34:56:e8:ed:e4:e1:64:19:f6:b1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Validity Not Before: Dec 6 01:03:04 2025 GMT Not After : Dec 7 01:03:04 2025 GMT Subject: CN=43ea7c8a3a44aaecea521c1dc6139663dea753e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:13:77:99:5a:c0:8a:0d:7d:75:d2:64:bc: 79:66:28:4e:48:67:79:63:e3:c9:04:86:b8:71:1a: 8d:56:f7:67:5b:de:44:67:fc:48:e0:19:fa:8a:e3: 29:3a:39:d1:1a:a3:a3:6a:2e:07:aa:4d:06:80:cf: 1a:58:b9:67:1b:1d:0f:ae:a3:17:5b:45:24:ec:b6: 84:e6:fb:ce:15:43:84:6b:83:07:1f:d8:5b:5a:bd: cd:07:b6:ac:2e:44:ba:be:7c:87:ee:f4:c1:b4:88: de:f0:1e:fa:a9:fd:23:01:41:7e:bd:a9:97:89:68: 3f:c3:15:cc:ff:d9:ce:a3:2e:1e:df:36:0f:20:13: f9:03:d5:3f:c3:31:53:3e:1d:71:99:04:66:a6:90: e1:bf:01:99:1a:b3:7b:cc:91:6c:ee:6c:20:c0:81: 33:83:9c:74:e4:ca:42:06:c1:e3:e9:6b:52:fa:c0: 7e:34:1d:03:dd:64:d3:ba:d6:b1:c9:2d:48:6e:07: 7a:cf:57:90:1d:bb:08:45:11:05:a1:f0:4c:07:27: dc:17:09:d3:a4:62:39:ef:19:ee:d5:a6:5e:84:3b: 89:11:b4:84:31:1f:d4:79:36:9d:25:d1:11:93:e5: 1b:7a:1b:97:05:93:e1:a0:f6:f4:9d:f1:fd:4f:33: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:7C:8A:3A:44:AA:EC:EA:52:1C:1D:C6:13:96:63:DE:A7:53:E3 X509v3 Authority Key Identifier: keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:40:09:64:92:14:6f:88:2d:1c:67:9e:5e:64:c7:51:ae:13: cb:44:45:5e:f9:e4:ae:73:75:e6:89:ea:79:42:d5:4e:fe:a2: d4:ba:7d:9e:84:f4:68:ff:d6:e4:59:1c:00:37:44:71:6c:07: e4:6e:15:a4:75:00:59:9f:15:77:94:da:a9:74:fb:2c:fd:d2: 67:84:c0:1c:51:16:fb:06:52:10:c0:5b:ce:fd:0b:18:f3:28: c1:5f:a7:8e:44:ba:d1:5c:f4:d3:d2:c5:8c:0e:5f:96:e3:76: 40:cf:4b:c7:42:71:c8:f2:f0:70:99:99:60:c4:fe:bb:fc:ee: 6f:3c:89:d3:da:e5:e9:39:c0:f7:9c:4f:dd:87:7a:6f:ac:31: 49:fb:49:7c:be:a1:ff:e8:36:33:26:ff:94:cf:94:bc:d9:af: 1f:87:a0:30:13:ee:96:c4:7a:d3:7b:9e:36:d3:35:03:6e:72: 20:f9:90:9e:92:40:e2:c9:e2:46:f2:a3:0d:7a:b9:80:e2:06: 37:d1:ab:e3:8c:5d:79:e4:1f:76:21:08:69:af:8a:ac:90:89: 89:83:ae:f5:a8:94:fa:6d:e7:78:92:e9:0e:63:f1:62:15:9f: df:b7:b4:0f:fd:5a:7f:ad:ca:6d:0d:62:10:bb:ea:82:c4:9e: 0e:01:f8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxCo0zRW6O3k4WQZ9rGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx YjFlOTEwHhcNMjUxMjA2MDEwMzA0WhcNMjUxMjA3MDEwMzA0WjAzMTEwLwYDVQQD Eyg0M2VhN2M4YTNhNDRhYWVjZWE1MjFjMWRjNjEzOTY2M2RlYTc1M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28oTd5lawIoNfXXSZLx5ZihOSGd5 Y+PJBIa4cRqNVvdnW95EZ/xI4Bn6iuMpOjnRGqOjai4Hqk0GgM8aWLlnGx0PrqMX W0Uk7LaE5vvOFUOEa4MHH9hbWr3NB7asLkS6vnyH7vTBtIje8B76qf0jAUF+vamX iWg/wxXM/9nOoy4e3zYPIBP5A9U/wzFTPh1xmQRmppDhvwGZGrN7zJFs7mwgwIEz g5x05MpCBsHj6WtS+sB+NB0D3WTTutaxyS1Ibgd6z1eQHbsIRREFofBMByfcFwnT pGI57xnu1aZehDuJEbSEMR/UeTadJdERk+UbehuXBZPhoPb0nfH9TzPzfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPqfIo6RKrs6lIcHcYTlmPep1PjMB8GA1UdIwQY MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt NTBlNzQ2NDI0NjMwLzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkAJZJIU b4gtHGeeXmTHUa4Ty0RFXvnkrnN15onqeULVTv6i1Lp9noT0aP/W5FkcADdEcWwH 5G4VpHUAWZ8Vd5TaqXT7LP3SZ4TAHFEW+wZSEMBbzv0LGPMowV+njkS60Vz009LF jA5fluN2QM9Lx0JxyPLwcJmZYMT+u/zubzyJ09rl6TnA95xP3Yd6b6wxSftJfL6h /+g2Myb/lM+UvNmvH4egMBPulsR603ueNtM1A25yIPmQnpJA4sniRvKjDXq5gOIG N9Gr44xdeeQfdiEIaa+KrJCJiYOu9aiU+m3neJLpDmPxYhWf37e0D/1af63KbQ1i ELvqgsSeDgH43Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:42 2025 by rpki-client