This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json) Hash identifier: WE7QPXlphLJicSZk8je23DwnqGcvNq1MFitH0LJSifM= Subject key identifier: CF:96:E4:9E:A1:1E:18:7D:04:71:85:74:23:0C:6E:03:57:83:49:29 Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Certificate serial: 019AF5AEC9B97435900C24AF3A14FFD95BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft Manifest number: 06E7 Signing time: Sat 06 Dec 2025 22:01:03 +0000 Manifest this update: Sat 06 Dec 2025 22:01:03 +0000 Manifest next update: Sun 07 Dec 2025 22:01:03 +0000 Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: uUvVxWq6NiQ80AO7IY/n8ftUPu4MQpylLt0FDRAz4Yk=) 2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c9:b9:74:35:90:0c:24:af:3a:14:ff:d9:5b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Validity Not Before: Dec 6 22:01:03 2025 GMT Not After : Dec 7 22:01:03 2025 GMT Subject: CN=cf96e49ea11e187d04718574230c6e0357834929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:34:8b:7a:23:ab:4c:96:bd:ed:38:a6:ae: 94:e6:d3:7b:78:c5:a7:85:a4:53:eb:f6:1d:b1:b2: 6a:23:0c:cc:26:37:58:70:d4:05:52:bc:92:58:4d: ed:f6:a6:7a:c6:16:88:82:9c:9c:47:51:39:47:03: 01:a4:08:ee:62:34:a4:31:45:18:61:1d:cf:5f:cb: 5b:f6:a9:0a:77:fa:b2:f4:a5:9c:0b:02:d7:a5:96: 9c:6c:72:8c:d7:47:08:16:80:b4:6d:9e:e6:1b:c7: e3:8d:ed:c6:ad:d4:ae:0b:f0:9e:8e:8c:9a:2a:bd: 7e:b0:7d:28:fc:f6:08:f9:14:c9:5b:bf:bd:bc:20: d3:5f:03:84:50:39:64:a9:63:36:ba:ca:53:ba:53: 95:c0:3b:78:be:8f:4f:e5:10:a2:3e:04:ca:20:44: 64:78:4e:9e:e9:29:d9:16:4e:a0:d6:83:cc:5a:4c: a7:73:0d:1b:a2:e7:bf:80:0b:f6:d4:3f:47:81:50: ed:60:7c:e6:37:74:fa:ba:44:00:bf:fc:1d:22:36: 81:1a:b9:c6:db:4c:4e:c9:7b:bb:15:df:af:b8:69: e0:1c:12:45:a1:88:65:0f:eb:78:d2:c5:3d:2b:bb: ef:e6:af:d1:4a:59:92:4d:0d:a9:54:dd:de:82:ff: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:E4:9E:A1:1E:18:7D:04:71:85:74:23:0C:6E:03:57:83:49:29 X509v3 Authority Key Identifier: keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4d:f5:a3:6d:68:e0:0e:3d:82:b4:c7:06:7d:ea:d1:38:34: 51:4d:1c:2e:39:f4:12:81:8d:9e:e0:7b:e5:6e:8f:3e:52:79: 6a:2f:c9:c7:57:1c:09:7b:db:b1:5f:8b:92:a5:d2:60:7d:9e: 9b:a3:0a:a2:64:60:4f:59:4f:a5:69:05:33:be:ed:0f:20:89: 79:8f:e0:42:18:b4:69:4a:94:f2:17:d0:ca:87:00:44:e2:96: bd:61:2a:72:23:47:3a:4f:19:ac:19:0a:b6:36:61:fe:65:04: 0b:7b:75:96:2e:f6:be:3d:65:ab:d1:ce:e0:96:75:0b:db:26: c2:81:41:46:03:cf:5f:13:bf:90:7e:9d:90:51:fc:3e:ef:0d: 77:1c:9d:2c:98:41:79:58:bd:a9:5d:9b:0e:25:18:78:39:4e: f9:6d:22:0a:a7:24:30:66:78:a8:4c:2e:3b:e0:bf:65:9b:17: 77:65:89:ce:d2:57:14:1b:d9:2b:ed:b4:3f:bf:fd:ae:bc:5d: fe:c4:0f:b6:42:d8:bb:60:48:0b:da:6c:3d:7c:65:45:e3:59: 54:05:9e:50:6d:16:88:e7:af:07:b9:87:ca:05:73:db:a8:96: f0:05:a5:ac:fa:19:36:dd:a6:b2:16:da:98:3e:36:af:75:ea: 8b:b2:36:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsm5dDWQDCSvOhT/2VviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1 YTgzY2EwHhcNMjUxMjA2MjIwMTAzWhcNMjUxMjA3MjIwMTAzWjAzMTEwLwYDVQQD EyhjZjk2ZTQ5ZWExMWUxODdkMDQ3MTg1NzQyMzBjNmUwMzU3ODM0OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNY0i3ojq0yWve04pq6U5tN7eMWn haRT6/YdsbJqIwzMJjdYcNQFUrySWE3t9qZ6xhaIgpycR1E5RwMBpAjuYjSkMUUY YR3PX8tb9qkKd/qy9KWcCwLXpZacbHKM10cIFoC0bZ7mG8fjje3GrdSuC/Cejoya Kr1+sH0o/PYI+RTJW7+9vCDTXwOEUDlkqWM2uspTulOVwDt4vo9P5RCiPgTKIERk eE6e6SnZFk6g1oPMWkyncw0boue/gAv21D9HgVDtYHzmN3T6ukQAv/wdIjaBGrnG 20xOyXu7Fd+vuGngHBJFoYhlD+t40sU9K7vv5q/RSlmSTQ2pVN3egv8F5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+W5J6hHhh9BHGFdCMMbgNXg0kpMB8GA1UdIwQY MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY031o21o 4A49grTHBn3q0Tg0UU0cLjn0EoGNnuB75W6PPlJ5ai/Jx1ccCXvbsV+LkqXSYH2e m6MKomRgT1lPpWkFM77tDyCJeY/gQhi0aUqU8hfQyocAROKWvWEqciNHOk8ZrBkK tjZh/mUEC3t1li72vj1lq9HO4JZ1C9smwoFBRgPPXxO/kH6dkFH8Pu8NdxydLJhB eVi9qV2bDiUYeDlO+W0iCqckMGZ4qEwuO+C/ZZsXd2WJztJXFBvZK+20P7/9rrxd /sQPtkLYu2BIC9psPXxlReNZVAWeUG0WiOevB7mHygVz26iW8AWlrPoZNt2mshba mD42r3Xqi7I2ag== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:00 2025 by rpki-client