This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json) Hash identifier: MRxA8lvfacQlawtMhuu3s83ozIL4AHvbLI/hRssdAmk= Subject key identifier: 49:C4:32:20:2C:89:D0:24:C3:00:FA:F5:69:D6:A6:A3:39:12:D0:48 Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Certificate serial: 019B3C7FA2902E39199813B32A4BD9A4A3E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft Manifest number: 0909 Signing time: Sat 20 Dec 2025 16:02:36 +0000 Manifest this update: Sat 20 Dec 2025 16:02:36 +0000 Manifest next update: Sun 21 Dec 2025 16:02:36 +0000 Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: /l3uEBGRrnFKpVeYMVTSaMGsiuEPUPmV3qPP/UOuv1E=) 2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:a2:90:2e:39:19:98:13:b3:2a:4b:d9:a4:a3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Validity Not Before: Dec 20 16:02:36 2025 GMT Not After : Dec 21 16:02:36 2025 GMT Subject: CN=49c432202c89d024c300faf569d6a6a33912d048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:f4:07:b5:d4:1f:32:6c:39:b4:09:bb:6d: 28:e7:8d:04:fb:1c:33:9f:14:b1:cb:a5:a0:02:01: d6:2a:f0:71:c0:bb:e2:ea:f7:30:be:1b:ea:22:ae: 29:05:71:b9:ea:8e:14:45:8f:34:1e:c3:11:b4:33: 43:f4:be:08:be:e5:9d:2b:c1:9d:6b:25:b1:da:f6: 60:cc:61:9b:f3:1f:5b:5b:30:b2:74:43:31:a6:5f: 42:e2:b2:1f:13:96:c0:bd:1f:1b:43:a8:2b:2f:0e: 18:f3:a5:12:cc:4f:cd:b4:d0:11:d3:fb:51:e7:1f: 94:4c:7c:1e:fd:d4:bd:7d:c0:e9:be:76:a4:b4:20: f2:f8:71:08:6d:16:fb:ad:50:12:29:19:4e:bd:d1: af:f3:a9:05:dd:d6:b0:49:e5:0c:40:2f:6e:12:c6: 90:78:05:0d:98:f7:23:2b:b9:af:7e:ca:cf:1d:64: df:fb:53:5d:02:80:47:9e:3e:cb:61:31:9c:c0:c9: 7e:a9:c9:ac:38:db:25:cc:83:60:a3:8a:e9:b7:1b: c0:32:08:df:4d:78:70:a2:c3:50:1a:2a:6a:57:a0: fa:5d:88:72:e8:d8:8d:b5:5f:c1:14:06:c6:ba:40: da:c3:29:f1:41:b0:a8:82:28:ec:6b:b8:b6:25:da: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:32:20:2C:89:D0:24:C3:00:FA:F5:69:D6:A6:A3:39:12:D0:48 X509v3 Authority Key Identifier: keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a6:58:36:96:7f:23:c5:74:46:02:98:d7:cd:cc:16:bd:46: 3f:0b:7c:86:31:25:a7:cb:53:2f:22:9b:84:e0:e6:4d:ba:f9: 3b:f5:fb:88:4a:2d:ab:b6:5d:d4:55:fa:78:3e:45:43:bb:d0: 2a:7d:e3:61:ee:ef:03:d4:d2:85:86:46:b5:fc:ac:35:ae:f7: 60:89:7d:f4:d3:18:26:43:af:a0:8b:c1:5d:9f:db:29:ba:84: 1b:00:44:a2:20:7b:52:e0:7c:4a:d7:7f:f6:da:88:8c:d9:af: 4f:53:36:27:bd:ba:bd:7d:fd:77:88:c5:bd:64:fe:22:3a:43: d1:67:c4:7d:29:8b:dc:85:3b:da:4e:eb:7c:57:12:4b:20:fc: c0:d7:bc:cc:67:bb:f5:05:a3:65:04:57:1d:b6:dd:4c:fd:4b: 6f:4b:7e:c3:c7:bf:c2:8b:a3:57:33:4f:61:4f:47:10:54:fa: 53:b1:bf:81:57:6b:fd:99:8d:9a:bd:c6:a5:e3:98:2f:77:73: 1e:f0:c7:0e:6d:da:89:3b:a4:65:a5:89:4d:6d:3a:c6:2a:7c: 19:09:33:fe:53:b0:34:a1:48:f7:98:f2:5d:99:fb:6e:16:34: 19:1e:74:84:87:ea:cc:ba:59:73:fd:5a:62:a7:23:26:8f:bb: ea:2f:bf:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6KQLjkZmBOzKkvZpKPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx YjFlOTEwHhcNMjUxMjIwMTYwMjM2WhcNMjUxMjIxMTYwMjM2WjAzMTEwLwYDVQQD Eyg0OWM0MzIyMDJjODlkMDI0YzMwMGZhZjU2OWQ2YTZhMzM5MTJkMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FX0B7XUHzJsObQJu20o540E+xwz nxSxy6WgAgHWKvBxwLvi6vcwvhvqIq4pBXG56o4URY80HsMRtDND9L4IvuWdK8Gd ayWx2vZgzGGb8x9bWzCydEMxpl9C4rIfE5bAvR8bQ6grLw4Y86USzE/NtNAR0/tR 5x+UTHwe/dS9fcDpvnaktCDy+HEIbRb7rVASKRlOvdGv86kF3dawSeUMQC9uEsaQ eAUNmPcjK7mvfsrPHWTf+1NdAoBHnj7LYTGcwMl+qcmsONslzINgo4rptxvAMgjf TXhwosNQGipqV6D6XYhy6NiNtV/BFAbGukDawynxQbCogijsa7i2JdogpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnEMiAsidAkwwD69WnWpqM5EtBIMB8GA1UdIwQY MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt NTBlNzQ2NDI0NjMwLzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaZYNpZ/ I8V0RgKY183MFr1GPwt8hjElp8tTLyKbhODmTbr5O/X7iEotq7Zd1FX6eD5FQ7vQ Kn3jYe7vA9TShYZGtfysNa73YIl99NMYJkOvoIvBXZ/bKbqEGwBEoiB7UuB8Std/ 9tqIjNmvT1M2J726vX39d4jFvWT+IjpD0WfEfSmL3IU72k7rfFcSSyD8wNe8zGe7 9QWjZQRXHbbdTP1Lb0t+w8e/woujVzNPYU9HEFT6U7G/gVdr/ZmNmr3GpeOYL3dz HvDHDm3aiTukZaWJTW06xip8GQkz/lOwNKFI95jyXZn7bhY0GR50hIfqzLpZc/1a YqcjJo+76i+/YQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:33 2025 by rpki-client