This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json) Hash identifier: HMGuhUal4w61n7Er0pTGQO+lOYyFe2RBjduODY7L6L4= Subject key identifier: 96:B4:9B:60:C1:9E:21:83:A7:BF:AC:E7:3F:0D:76:4E:C0:98:8F:5B Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Certificate serial: 019B22F50361D0208CA2AA275056BA358E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft Manifest number: 098A Signing time: Mon 15 Dec 2025 17:00:41 +0000 Manifest this update: Mon 15 Dec 2025 17:00:41 +0000 Manifest next update: Tue 16 Dec 2025 17:00:41 +0000 Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: FDuQDv7Z91bx4t6xc5yErSKzuROVb8E8Qp1cCnY4tB4=) 2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=) 3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=) 4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:03:61:d0:20:8c:a2:aa:27:50:56:ba:35:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Validity Not Before: Dec 15 17:00:41 2025 GMT Not After : Dec 16 17:00:41 2025 GMT Subject: CN=96b49b60c19e2183a7bface73f0d764ec0988f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:b5:1a:23:2d:c9:51:fb:7b:e2:4b:a4:2a: af:ad:49:8d:c2:9f:a5:bd:18:b3:24:60:66:05:e7: 7b:e4:41:7b:fe:f1:86:ae:e0:18:fb:87:06:b6:81: 95:1a:6b:3b:3d:c5:32:38:9b:61:93:b7:ec:02:85: 06:b8:6c:e5:11:6a:fe:cc:64:79:c1:f6:7c:8d:8f: 61:3f:1a:4b:57:8d:be:52:1d:a2:95:cf:81:db:a0: c7:a2:f7:87:35:c5:57:e8:2b:01:6b:02:f6:55:8e: e2:54:dd:79:d5:9b:52:b2:26:1d:b2:f5:74:19:bf: 25:1c:46:4f:d2:7a:82:d4:5b:9d:79:27:62:58:bd: ca:3b:f7:98:0e:0c:11:32:3b:79:a0:65:cf:90:61: 36:72:92:65:0d:82:2b:0e:88:3a:f7:24:85:cf:50: d3:9d:35:26:4c:df:3c:b9:dd:3f:38:69:c8:62:85: 79:3b:67:62:c7:4a:4c:37:eb:ec:b8:70:57:63:bc: 0f:6d:c5:fe:0f:3d:4d:ff:c8:45:3b:c2:38:e0:f5: 9d:7e:f6:14:dd:52:65:ee:88:55:f4:10:83:be:76: 82:59:fe:b0:b6:61:dd:9b:6d:89:54:54:5c:c0:6c: 0c:17:0e:62:d6:81:17:52:3f:eb:23:cb:4b:ef:b7: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:9B:60:C1:9E:21:83:A7:BF:AC:E7:3F:0D:76:4E:C0:98:8F:5B X509v3 Authority Key Identifier: keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:7e:71:90:fc:05:d7:10:57:1d:c6:6e:c2:71:ba:56:82: d6:8d:39:7f:75:bf:56:74:c5:3e:cf:48:02:12:0b:7f:45:85: 93:bb:fa:13:16:e4:83:1d:b7:8e:af:c8:5c:52:dc:60:f8:69: c1:35:8a:a7:5b:36:79:ea:90:99:16:de:31:f9:a0:5f:4b:14: f8:a8:48:cc:4e:4b:8d:cd:c8:7f:d4:9b:32:9a:de:a9:12:d9: 84:c2:fd:17:93:e4:fc:9d:f5:d7:6a:ee:1b:c3:73:d8:53:64: d1:36:71:2c:37:ac:dc:d3:54:c5:ed:25:1f:f4:88:ae:ba:19: ae:88:83:f9:2a:de:63:d0:d7:93:13:ec:21:f9:a3:13:37:d1: 3c:d9:bb:47:5e:02:98:4e:52:ef:cb:34:b1:76:be:57:59:a1: 67:f7:09:b4:be:18:8b:06:24:0d:26:6f:af:e5:5e:c0:1e:aa: da:b6:c0:01:99:99:9c:d2:60:86:80:4a:b7:ab:ec:bd:d1:86: 35:e6:69:b7:63:0a:1d:36:37:9b:24:68:7c:c1:fc:77:11:a6: a8:58:f8:ff:67:53:c8:91:95:dc:b3:1c:3e:23:a9:91:16:11: 55:5f:ca:f4:b0:6c:63:df:87:af:8e:91:a9:be:59:39:dd:98: 06:a4:76:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9QNh0CCMoqonUFa6NY5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx Nzg3ZTEwHhcNMjUxMjE1MTcwMDQxWhcNMjUxMjE2MTcwMDQxWjAzMTEwLwYDVQQD Eyg5NmI0OWI2MGMxOWUyMTgzYTdiZmFjZTczZjBkNzY0ZWMwOTg4ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ka1GiMtyVH7e+JLpCqvrUmNwp+l vRizJGBmBed75EF7/vGGruAY+4cGtoGVGms7PcUyOJthk7fsAoUGuGzlEWr+zGR5 wfZ8jY9hPxpLV42+Uh2ilc+B26DHoveHNcVX6CsBawL2VY7iVN151ZtSsiYdsvV0 Gb8lHEZP0nqC1FudeSdiWL3KO/eYDgwRMjt5oGXPkGE2cpJlDYIrDog69ySFz1DT nTUmTN88ud0/OGnIYoV5O2dix0pMN+vsuHBXY7wPbcX+Dz1N/8hFO8I44PWdfvYU 3VJl7ohV9BCDvnaCWf6wtmHdm22JVFRcwGwMFw5i1oEXUj/rI8tL77fNoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa0m2DBniGDp7+s5z8Ndk7AmI9bMB8GA1UdIwQY MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2 LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/9+cZD8 BdcQVx3GbsJxulaC1o05f3W/VnTFPs9IAhILf0WFk7v6Exbkgx23jq/IXFLcYPhp wTWKp1s2eeqQmRbeMfmgX0sU+KhIzE5Ljc3If9SbMpreqRLZhML9F5Pk/J3112ru G8Nz2FNk0TZxLDes3NNUxe0lH/SIrroZroiD+SreY9DXkxPsIfmjEzfRPNm7R14C mE5S78s0sXa+V1mhZ/cJtL4YiwYkDSZvr+VewB6q2rbAAZmZnNJghoBKt6vsvdGG NeZpt2MKHTY3myRofMH8dxGmqFj4/2dTyJGV3LMcPiOpkRYRVV/K9LBsY9+Hr46R qb5ZOd2YBqR2Bg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:28:56 2025 by rpki-client