This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json) Hash identifier: CF9DzwMFn/gmtPmhTklWSI8qgCgqL9CFAzx0SXFRHw4= Subject key identifier: FF:79:3E:54:B3:03:93:67:A4:13:13:B4:C3:30:69:1B:F6:78:54:D0 Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Certificate serial: 019AF388FCE78C878C1E47459AAB6AFC4DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:32 +0000 Manifest this update: Sat 06 Dec 2025 12:00:32 +0000 Manifest next update: Sun 07 Dec 2025 12:00:32 +0000 Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: 8T0eqX1E4kd7xnve+N+cXKCwZFcpEiqopi8gTNgBaZQ=) 2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:fc:e7:8c:87:8c:1e:47:45:9a:ab:6a:fc:4d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Validity Not Before: Dec 6 12:00:32 2025 GMT Not After : Dec 7 12:00:32 2025 GMT Subject: CN=ff793e54b3039367a41313b4c330691bf67854d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:3d:c2:bb:6f:d0:85:86:c7:e7:c9:9a:30: 40:b2:e9:20:05:75:b3:e9:d9:25:a8:bd:bf:4d:b3: ca:99:db:93:e3:65:72:3f:fa:21:d0:f2:3e:c0:db: 96:dd:f0:7a:10:0c:31:41:7b:de:6a:00:29:8c:5e: ee:b4:30:f2:d0:1e:93:82:a2:7f:0e:ab:e5:c4:a9: e8:99:d1:fd:16:c3:a1:f4:79:31:9c:ca:3a:75:4e: 09:34:c1:d1:f9:f2:b0:2d:ee:97:0a:2a:53:19:4e: 57:f1:2a:2c:31:62:dc:8f:8b:b9:1d:71:69:15:1d: c1:b5:00:7c:27:70:42:e1:92:ed:95:73:30:a3:d6: f4:68:65:5c:72:29:99:03:17:53:05:2c:7f:d5:37: 15:5e:b5:14:6c:99:97:30:5f:91:76:83:8f:a4:d2: 14:e2:e7:f0:b7:ce:c0:40:5c:88:fb:8a:66:e6:97: d4:b7:40:13:7c:d0:1d:4c:2a:db:34:22:95:f7:0b: 04:d3:79:00:87:87:b0:b0:61:c9:9b:88:b0:3a:81: ca:59:d1:03:20:9b:ca:72:6e:2e:1c:bd:92:0d:e0: 7b:57:ce:57:b0:7d:84:cd:9b:60:ba:29:8f:9a:e0: 34:87:72:8e:01:2e:d3:84:b7:ba:8a:e9:1d:a3:d1: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:3E:54:B3:03:93:67:A4:13:13:B4:C3:30:69:1B:F6:78:54:D0 X509v3 Authority Key Identifier: keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:af:44:37:7d:f1:04:b2:66:96:2f:2d:fc:4e:19:98:18:49: 7a:48:3d:2c:40:8d:69:ae:3b:ca:df:dc:94:1f:b9:ab:b3:5c: 7c:09:9c:d0:57:03:b8:6c:eb:b8:05:a0:ff:25:15:0f:aa:bf: 41:bd:ab:05:55:59:34:de:70:37:62:92:e5:1b:a9:85:13:62: 1f:0e:68:f7:37:2d:ff:c7:33:0b:ec:cd:2e:0f:b3:66:f6:02: 1c:26:4d:58:b6:ba:5d:a3:87:f8:e8:cb:af:97:4c:ed:ec:af: f4:39:24:2f:7f:43:c0:b7:ad:11:24:59:c0:36:77:99:4b:ea: 2f:c6:f6:20:96:ed:2d:dc:d9:bb:60:62:50:6b:da:3f:71:7f: 85:41:64:85:33:2c:fe:d1:b9:49:70:3f:6e:99:a4:e1:32:cc: cc:51:0b:a9:04:7f:14:f7:81:1f:b5:38:81:ee:4b:ae:e3:c7: 2c:8b:be:7a:bb:20:b1:d8:61:90:e8:64:dc:dc:2f:1b:2a:9a: 7a:f8:e7:ad:2e:a5:e5:fa:77:d7:b3:40:24:13:3b:f6:87:2a: 2e:63:43:49:2d:d0:73:5b:b7:c0:40:14:e2:39:e1:37:a8:16: 45:50:d1:63:5e:d0:cf:60:de:66:0c:50:74:f1:7a:7c:09:23: 28:89:67:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPznjIeMHkdFmqtq/E34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZmVhZWZlYTgyYjYxMDNkYzJiODk3MWU5YmRkYTAxNjY5 YTEzNTcwHhcNMjUxMjA2MTIwMDMyWhcNMjUxMjA3MTIwMDMyWjAzMTEwLwYDVQQD EyhmZjc5M2U1NGIzMDM5MzY3YTQxMzEzYjRjMzMwNjkxYmY2Nzg1NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLM9wrtv0IWGx+fJmjBAsukgBXWz 6dklqL2/TbPKmduT42VyP/oh0PI+wNuW3fB6EAwxQXveagApjF7utDDy0B6TgqJ/ DqvlxKnomdH9FsOh9HkxnMo6dU4JNMHR+fKwLe6XCipTGU5X8SosMWLcj4u5HXFp FR3BtQB8J3BC4ZLtlXMwo9b0aGVccimZAxdTBSx/1TcVXrUUbJmXMF+RdoOPpNIU 4ufwt87AQFyI+4pm5pfUt0ATfNAdTCrbNCKV9wsE03kAh4ewsGHJm4iwOoHKWdED IJvKcm4uHL2SDeB7V85XsH2EzZtguimPmuA0h3KOAS7ThLe6iukdo9H/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP95PlSzA5NnpBMTtMMwaRv2eFTQMB8GA1UdIwQY MBaAFAT+rv6oK2ED3CuJcem92gFmmhNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQt OGVlYjA4OWI1Y2FmLzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQtOGVlYjA4OWI1Y2Fm LzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsa9EN33x BLJmli8t/E4ZmBhJekg9LECNaa47yt/clB+5q7NcfAmc0FcDuGzruAWg/yUVD6q/ Qb2rBVVZNN5wN2KS5RuphRNiHw5o9zct/8czC+zNLg+zZvYCHCZNWLa6XaOH+OjL r5dM7eyv9DkkL39DwLetESRZwDZ3mUvqL8b2IJbtLdzZu2BiUGvaP3F/hUFkhTMs /tG5SXA/bpmk4TLMzFELqQR/FPeBH7U4ge5LruPHLIu+ersgsdhhkOhk3NwvGyqa evjnrS6l5fp317NAJBM79ocqLmNDSS3Qc1u3wEAU4jnhN6gWRVDRY17Qz2DeZgxQ dPF6fAkjKIlnog== -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:45 2025 by rpki-client