This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json) Hash identifier: DXomy3J0o4zBxeDiwUVhi+u3sef1HbFdZ9UIotIGcS0= Subject key identifier: B1:2C:42:39:F8:C2:77:0E:BB:94:81:DF:66:32:6F:25:DD:6F:8D:81 Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d Certificate serial: 019AF2ADE60942B4020788E562019123FBE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: QVhU+uisOGgGqeqPgOarN+O61e0LQ9r4nDN5J3s6Cy0=) 2: oGJ3VwT7Kor9HUj6Ls93pR91zps.roa (hash: aLxAJ/2BMqLJ72HUFwwNF6sObyfI6ewUQ19ZgSavYnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e6:09:42:b4:02:07:88:e5:62:01:91:23:fb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=b12c4239f8c2770ebb9481df66326f25dd6f8d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:aa:e3:47:3d:4b:10:2a:47:80:f0:54:18: 2f:46:6a:55:36:e7:e2:6f:f3:6d:39:05:ea:e9:83: 47:2c:c9:2d:27:ff:83:ad:01:3f:29:9a:c1:8d:d4: cd:ce:c5:a2:7a:3b:5a:49:06:9c:82:16:ca:a8:76: 61:7b:14:83:ec:6e:77:27:be:3d:40:c1:bd:5c:3c: 76:56:4c:e4:cf:11:d3:43:97:14:a5:a3:13:ea:bc: 80:54:fe:22:bf:ba:46:07:c2:be:9d:08:2e:f6:68: 93:13:41:c8:d8:04:43:e8:e4:7c:20:89:09:8e:ca: ca:ff:b7:d6:bf:99:b5:a0:39:73:47:22:a8:a5:7a: 7a:12:71:a0:86:4c:e2:4a:8a:39:d3:9d:f8:63:ec: b7:57:33:76:8b:fb:e5:40:3d:3a:dd:1b:96:2a:30: 44:1e:89:16:3a:71:f9:e8:fe:aa:2e:d6:4a:50:fc: e2:bd:2e:10:26:8a:4a:d3:71:e2:01:bf:5d:56:4c: 90:65:02:ef:f4:22:87:2f:98:00:8c:9a:56:cb:ce: 19:71:70:c5:9a:d2:a6:0b:d2:88:f4:4f:df:67:fd: eb:ce:85:21:47:4b:fa:39:ab:83:25:4e:f6:80:e4: 26:b8:c7:17:ad:0f:54:18:55:87:0b:a9:b5:ef:96: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2C:42:39:F8:C2:77:0E:BB:94:81:DF:66:32:6F:25:DD:6F:8D:81 X509v3 Authority Key Identifier: keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f9:ba:31:7d:07:55:fe:b5:47:94:6a:b4:f5:42:d4:4b:6b: 23:71:10:89:f3:f0:f2:15:ea:1a:d6:58:25:a3:0d:a4:48:d8: 8d:65:6b:70:f1:ba:cb:3e:57:6e:4d:ed:f8:ca:1f:4c:49:b0: 41:2c:9a:8c:5a:43:cc:a2:51:42:36:9a:df:8a:34:6f:93:f1: d5:57:fc:8e:07:f9:ae:2e:f8:ba:6f:47:e1:8c:92:db:c7:33: 46:4b:05:e5:96:74:1d:98:e0:4f:ab:21:8e:f9:77:c7:2b:e4: 39:4c:6d:ca:a8:5b:d7:49:b3:a5:ef:09:f6:71:9f:09:45:70: 17:17:f2:a6:b0:05:00:a7:56:01:1e:93:f0:ac:95:d1:0c:e4: d7:d0:79:93:ae:7d:9f:08:10:d8:94:a6:f3:09:df:f4:33:0a: a3:c9:9c:30:2b:cb:c1:0e:c9:e0:d3:85:be:f0:04:06:25:9d: 63:34:1e:2d:65:29:7c:74:bc:22:00:be:60:57:36:dd:27:df: b7:6b:0f:7c:89:ef:f9:5b:1a:e1:bb:da:13:1e:e7:10:b7:ed: fe:3c:a8:1e:a7:5b:d2:fa:28:6e:82:12:60:d2:1a:e7:6a:92: 66:63:2f:cd:3e:6c:21:1f:eb:71:c7:23:d9:6b:f8:86:6f:e6: c7:5c:f7:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreYJQrQCB4jlYgGRI/vnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Zjc2NmYxZGUxM2FlYzdmYjA1MDE5M2Y4MzI5YTY2MDll MDA5NWQwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD EyhiMTJjNDIzOWY4YzI3NzBlYmI5NDgxZGY2NjMyNmYyNWRkNmY4ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Cq40c9SxAqR4DwVBgvRmpVNufi b/NtOQXq6YNHLMktJ/+DrQE/KZrBjdTNzsWiejtaSQacghbKqHZhexSD7G53J749 QMG9XDx2VkzkzxHTQ5cUpaMT6ryAVP4iv7pGB8K+nQgu9miTE0HI2ARD6OR8IIkJ jsrK/7fWv5m1oDlzRyKopXp6EnGghkziSoo50534Y+y3VzN2i/vlQD063RuWKjBE HokWOnH56P6qLtZKUPzivS4QJopK03HiAb9dVkyQZQLv9CKHL5gAjJpWy84ZcXDF mtKmC9KI9E/fZ/3rzoUhR0v6OauDJU72gOQmuMcXrQ9UGFWHC6m175al7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEsQjn4wncOu5SB32YybyXdb42BMB8GA1UdIwQY MBaAFAb3ZvHeE67H+wUBk/gymmYJ4AldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQt ZWQxNDA4ZTcxYzFmLzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQtZWQxNDA4ZTcxYzFm LzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvm6MX0H Vf61R5RqtPVC1EtrI3EQifPw8hXqGtZYJaMNpEjYjWVrcPG6yz5Xbk3t+MofTEmw QSyajFpDzKJRQjaa34o0b5Px1Vf8jgf5ri74um9H4YyS28czRksF5ZZ0HZjgT6sh jvl3xyvkOUxtyqhb10mzpe8J9nGfCUVwFxfyprAFAKdWAR6T8KyV0Qzk19B5k659 nwgQ2JSm8wnf9DMKo8mcMCvLwQ7J4NOFvvAEBiWdYzQeLWUpfHS8IgC+YFc23Sff t2sPfInv+Vsa4bvaEx7nELft/jyoHqdb0vooboISYNIa52qSZmMvzT5sIR/rcccj 2Wv4hm/mx1z3jA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:22 2025 by rpki-client