This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json) Hash identifier: whYvNDb/5BB+B1njjuDh11RVXbMdH4kbX/8gbUEUTTg= Subject key identifier: 34:73:3D:18:4F:9B:52:61:D9:DE:00:0A:5B:95:78:00:49:EA:10:8C Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Certificate serial: 019AF1D22A6ADFD0D1A3C4B3DAACF512EA5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft Manifest number: 0723 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=) 2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 0kPBQJxcRotNqn8T2yQ+++aqIykU1MWYaHa/YcmntmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2a:6a:df:d0:d1:a3:c4:b3:da:ac:f5:12:ea:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=34733d184f9b5261d9de000a5b95780049ea108c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:b5:31:ec:81:46:e1:da:4a:c6:b5:4f:2f: f2:a3:03:5a:90:17:62:d8:b6:a0:a4:34:8c:80:ca: ff:3d:f2:09:c3:06:27:97:98:7a:0c:b6:16:d2:e2: c2:18:eb:ac:08:d0:1a:8f:77:72:9a:77:7b:c6:39: 25:b3:ec:88:06:98:88:d1:1e:05:50:10:e2:01:45: b3:88:03:ac:4b:14:a0:ca:98:83:39:5b:a8:47:41: de:9f:53:41:8c:53:69:9e:82:89:39:06:f9:e1:f8: 11:81:4b:a6:df:9d:48:e2:d2:90:d9:80:20:9e:f9: b7:e0:23:ce:90:8e:d3:ae:bd:3c:4d:d2:3d:7d:f0: 63:78:6d:95:78:4c:f7:7a:0f:b6:cf:03:dd:6a:0d: ad:fd:4c:5e:3a:83:a6:29:e7:1e:d6:45:24:d2:db: 83:6b:0c:6f:e4:89:62:13:40:7f:15:81:0d:28:5d: 51:ec:81:e7:90:c6:37:c5:dc:00:8a:de:45:93:73: 51:dc:39:90:24:22:a3:cf:be:8a:45:78:85:35:55: e6:3d:17:78:e5:bb:d4:38:3e:0d:03:18:a3:17:65: 81:3f:35:fd:5a:86:90:5e:01:74:9b:94:13:c5:70: 82:9f:dd:f3:0c:56:ab:d7:6e:1a:8f:db:b7:92:a4: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:73:3D:18:4F:9B:52:61:D9:DE:00:0A:5B:95:78:00:49:EA:10:8C X509v3 Authority Key Identifier: keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:84:52:14:6d:5d:9e:84:6c:98:d8:ac:61:be:e2:a3:e8:33: 28:82:70:79:29:a0:51:56:dd:60:3f:ae:a9:59:f7:1e:44:23: 11:ca:02:15:77:74:57:72:d8:ce:38:9f:31:08:cf:6f:ab:be: 1c:34:1d:6b:db:5c:34:c2:0e:fd:d5:ba:84:54:16:f0:0d:1f: 9c:34:60:60:b8:9e:de:a5:32:eb:3e:75:ee:8b:7f:76:a0:16: 38:2e:01:ac:ef:d9:51:db:f1:25:8b:31:28:17:05:9e:c3:95: 46:fa:cd:02:38:41:3f:7b:8e:cb:05:a0:46:fb:63:70:55:53: 91:81:a9:7a:9c:a3:fe:69:ff:ab:30:99:4e:fd:44:36:0d:e0: 96:1e:cf:f9:b5:f9:d9:d0:a5:d5:65:44:1f:62:6b:0d:cf:89: fc:81:69:4e:e6:11:61:38:48:8e:57:64:ea:93:1d:fc:c0:17: ad:12:80:b4:6f:22:a9:3f:69:8f:13:6f:b4:a2:a2:f5:da:e4: 10:bd:d1:58:0a:b2:d1:da:a6:55:e7:b8:df:86:7c:e3:98:ed: 75:17:67:79:43:47:f3:32:8a:08:fe:6a:04:d8:87:c3:f6:aa: ad:57:7c:fb:39:f7:d1:8a:30:2b:42:fe:77:7f:0c:d3:24:12: 32:1f:c3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ipq39DRo8Sz2qz1EupcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTZkZWY4NDU4ZmQ4ZWIyZWQ3NTRhYzJlOTBkMzUwNWEz MmFhODIwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygzNDczM2QxODRmOWI1MjYxZDlkZTAwMGE1Yjk1NzgwMDQ5ZWExMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUq1MeyBRuHaSsa1Ty/yowNakBdi 2LagpDSMgMr/PfIJwwYnl5h6DLYW0uLCGOusCNAaj3dymnd7xjkls+yIBpiI0R4F UBDiAUWziAOsSxSgypiDOVuoR0Hen1NBjFNpnoKJOQb54fgRgUum351I4tKQ2YAg nvm34CPOkI7Trr08TdI9ffBjeG2VeEz3eg+2zwPdag2t/UxeOoOmKece1kUk0tuD awxv5IliE0B/FYENKF1R7IHnkMY3xdwAit5Fk3NR3DmQJCKjz76KRXiFNVXmPRd4 5bvUOD4NAxijF2WBPzX9WoaQXgF0m5QTxXCCn93zDFar124aj9u3kqRJTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRzPRhPm1Jh2d4ACluVeABJ6hCMMB8GA1UdIwQY MBaAFG1W3vhFj9jrLtdUrC6Q01BaMqqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQt ODI4MWY3N2ViZDIyLzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQtODI4MWY3N2ViZDIy LzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoRSFG1d noRsmNisYb7io+gzKIJweSmgUVbdYD+uqVn3HkQjEcoCFXd0V3LYzjifMQjPb6u+ HDQda9tcNMIO/dW6hFQW8A0fnDRgYLie3qUy6z517ot/dqAWOC4BrO/ZUdvxJYsx KBcFnsOVRvrNAjhBP3uOywWgRvtjcFVTkYGpepyj/mn/qzCZTv1ENg3glh7P+bX5 2dCl1WVEH2JrDc+J/IFpTuYRYThIjldk6pMd/MAXrRKAtG8iqT9pjxNvtKKi9drk EL3RWAqy0dqmVee434Z845jtdRdneUNH8zKKCP5qBNiHw/aqrVd8+zn30YowK0L+ d38M0yQSMh/Dvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:19 2025 by rpki-client