This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json) Hash identifier: xDmcn2kQGD4J0IoHGtaIxO8q6ZIAHh2QID78fKZPzHM= Subject key identifier: 74:C4:6E:BC:66:0C:52:29:CC:60:5E:A4:C0:E7:09:52:98:E3:25:F2 Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d Certificate serial: 019AF2097F49021B3ABA65116B76BBB0E50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: y2wbeVAmc4mnDLrfTzN+9+moV10uqmt0dJIYBwaiazo=) 2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7f:49:02:1b:3a:ba:65:11:6b:76:bb:b0:e5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=74c46ebc660c5229cc605ea4c0e7095298e325f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:17:4b:98:17:61:0f:46:c3:7b:39:84:36: 72:8e:f0:14:83:fd:ed:04:0c:70:a9:d5:e5:fc:fe: 2f:14:f8:1d:51:6a:4b:91:5a:29:62:cb:0e:23:ad: 93:d8:0b:56:a2:c9:8c:db:f5:7c:00:f2:34:b2:55: 31:72:4a:46:e9:a4:32:df:5b:9d:39:fa:fb:df:5f: dd:23:b4:66:9b:22:1a:24:3f:c3:ca:e7:ba:1c:f2: 09:3f:37:9f:d7:4e:c6:9d:90:54:d2:23:ce:d0:19: 22:a6:3a:b0:34:a9:e4:96:bc:2e:d3:96:a5:c5:08: 11:d5:25:76:76:35:13:32:0a:24:72:95:50:2d:c0: 32:b4:94:fd:a6:7a:d7:00:16:82:8e:3c:89:1a:07: e1:47:de:8f:5b:d1:81:29:99:8c:c8:f2:fa:26:23: 48:94:65:4f:0a:04:fd:bd:1f:51:b3:e7:f2:1c:67: b3:b4:e3:77:d2:d2:6d:23:66:d3:6c:15:f9:b3:e7: 3d:f1:f9:e3:5b:59:4f:d4:a2:a1:bf:70:e0:39:cf: ae:56:b9:50:a1:52:e7:eb:e1:81:dc:60:59:eb:68: e9:f7:ee:c4:28:77:51:55:70:2e:73:97:bf:fa:59: 14:64:9d:c9:4c:0b:b1:09:59:c7:f5:05:9c:9d:57: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:6E:BC:66:0C:52:29:CC:60:5E:A4:C0:E7:09:52:98:E3:25:F2 X509v3 Authority Key Identifier: keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:cb:16:9f:92:7e:77:0d:51:64:1e:e1:07:3c:81:68:3d: d8:b1:42:9d:48:0a:c1:e4:c7:f4:5f:d5:8d:e6:0f:93:c3:5b: 65:32:47:bd:36:d5:03:fa:7c:f6:18:6e:77:18:45:d0:d2:d5: bb:53:f1:74:f7:67:0f:3d:23:0d:80:38:fe:75:13:4c:dc:ee: 6a:c4:ef:0d:96:cd:87:c0:c2:97:c6:09:e0:0b:d4:fa:e4:6c: dd:3a:f8:08:0f:4b:e8:93:43:19:99:98:83:ab:4d:21:c2:03: ba:8b:1d:7d:a2:a8:c6:a4:c6:5c:7e:b0:b6:f0:1e:a4:c0:0c: 2f:2f:57:c0:95:e9:59:c3:d2:c8:a1:50:69:e0:e7:41:ee:c5: 77:61:99:6c:7a:0f:55:c3:45:a3:3e:96:35:da:41:c7:bc:ed: c0:7c:34:1d:6a:6c:96:65:89:d8:fd:6b:b4:d2:87:8c:cb:2b: 19:c4:74:98:18:f8:de:e1:60:d2:1f:aa:bb:27:c1:37:58:2a: 58:b9:53:05:ce:ed:ab:80:5b:bb:2c:2b:6a:b8:48:3a:08:aa: 06:a9:42:56:a4:5c:e7:c7:6a:bd:69:fc:3d:78:36:e1:61:9f: d9:85:38:13:cc:e3:13:66:05:b9:53:6f:54:0d:bc:33:f5:43: 83:67:fe:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX9JAhs6umURa3a7sOUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDNkNTJjZjVjNzIxNjE2NjM4YTFhYjljM2Q4OWZhOWE5 N2RjNmQwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg3NGM0NmViYzY2MGM1MjI5Y2M2MDVlYTRjMGU3MDk1Mjk4ZTMyNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwXS5gXYQ9Gw3s5hDZyjvAUg/3t BAxwqdXl/P4vFPgdUWpLkVopYssOI62T2AtWosmM2/V8API0slUxckpG6aQy31ud Ofr731/dI7RmmyIaJD/Dyue6HPIJPzef107GnZBU0iPO0BkipjqwNKnklrwu05al xQgR1SV2djUTMgokcpVQLcAytJT9pnrXABaCjjyJGgfhR96PW9GBKZmMyPL6JiNI lGVPCgT9vR9Rs+fyHGeztON30tJtI2bTbBX5s+c98fnjW1lP1KKhv3DgOc+uVrlQ oVLn6+GB3GBZ62jp9+7EKHdRVXAuc5e/+lkUZJ3JTAuxCVnH9QWcnVdxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTEbrxmDFIpzGBepMDnCVKY4yXyMB8GA1UdIwQY MBaAFG5D1Sz1xyFhZjihq5w9ifqal9xtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTct NmIxYzgyY2U3MTZkLzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTctNmIxYzgyY2U3MTZk LzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE3LFp+S fncNUWQe4Qc8gWg92LFCnUgKweTH9F/VjeYPk8NbZTJHvTbVA/p89hhudxhF0NLV u1PxdPdnDz0jDYA4/nUTTNzuasTvDZbNh8DCl8YJ4AvU+uRs3Tr4CA9L6JNDGZmY g6tNIcIDuosdfaKoxqTGXH6wtvAepMAMLy9XwJXpWcPSyKFQaeDnQe7Fd2GZbHoP VcNFoz6WNdpBx7ztwHw0HWpslmWJ2P1rtNKHjMsrGcR0mBj43uFg0h+quyfBN1gq WLlTBc7tq4BbuywrarhIOgiqBqlCVqRc58dqvWn8PXg24WGf2YU4E8zjE2YFuVNv VA28M/VDg2f+LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:14 2025 by rpki-client