This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json) Hash identifier: avt71vdDJVlgpCmVvoChfUSCHH0z2tTaN82sN53j9lc= Subject key identifier: C0:B6:A0:CB:D7:7E:2C:6F:D2:CB:48:D9:17:E9:80:1D:1D:0C:89:CD Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Certificate serial: 019AF2ADAFB42C0EFE6F97837731E5CA0F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft Manifest number: 0971 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: /9AqrEDnGAx3ZB3JCee2/y3sWInJ9+CWUq1uSRYAc9g=) 2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=) 3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=) 4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:af:b4:2c:0e:fe:6f:97:83:77:31:e5:ca:0f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=c0b6a0cbd77e2c6fd2cb48d917e9801d1d0c89cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:37:46:4f:ea:c0:e9:0b:68:f2:c5:ea:12: d5:23:be:ae:9f:73:1a:94:f2:f2:eb:a8:35:2a:54: 2f:53:5a:f0:2e:6d:08:86:44:60:81:12:81:df:60: 90:e3:b5:0c:2c:85:d5:eb:23:1f:7f:26:66:ba:70: 56:6b:0b:69:b8:58:c6:c5:3a:91:51:91:6c:c7:26: 94:f3:47:ad:c9:82:41:b3:de:b9:4b:1a:85:20:eb: 5d:8c:05:b4:df:16:88:90:89:60:a4:c4:36:2d:04: 18:f9:91:88:80:0f:41:1c:40:dd:c3:2f:84:09:1e: 9c:14:80:59:f8:64:72:78:1c:fa:83:c4:f8:7b:22: 84:54:dd:03:ff:82:94:1c:f5:a6:ce:cd:1e:ac:6e: 4c:cf:86:e2:65:6c:fc:83:f4:6f:a0:a3:19:b7:9f: 70:00:e2:ab:ca:1f:7f:8b:fa:fe:94:24:64:60:0b: 36:61:7e:e4:b3:5e:c3:ad:9d:ea:0d:43:6f:b5:25: d1:9e:a0:bc:97:5b:bf:9e:59:5e:e7:65:07:d7:b4: c9:91:67:23:87:4c:11:bb:11:f4:4e:e8:fb:f8:23: cf:71:d8:3a:9e:e0:9a:96:bf:6b:33:f0:71:fc:7c: 41:96:2f:da:85:ac:e3:ce:ef:21:0b:52:67:10:2f: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:A0:CB:D7:7E:2C:6F:D2:CB:48:D9:17:E9:80:1D:1D:0C:89:CD X509v3 Authority Key Identifier: keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:36:cd:37:e9:c4:e0:bb:8b:b7:71:7d:ef:72:64:2e:f4: d9:ca:0b:f0:f8:90:67:b7:8c:1e:01:b8:fa:e4:8b:e5:bc:ff: 08:6f:ea:4b:ff:cb:ca:aa:7f:2c:0f:f7:b5:8e:c4:e2:94:74: 3a:2b:b0:af:69:ca:c6:cc:9d:58:51:03:8a:b8:75:4b:fc:07: c2:15:3e:48:a8:5a:cd:5f:ef:4e:57:88:87:2f:b0:59:ae:76: 17:67:d3:a2:08:9a:ab:f4:a7:cc:c2:de:83:a7:d5:7e:92:12: 45:65:86:18:27:06:09:18:62:56:16:6a:02:8b:8a:d7:f0:a8: 1f:57:b3:0e:34:6d:49:25:3f:5e:4d:81:01:05:37:b3:09:94: 64:ec:cf:32:e6:52:07:78:d0:d9:f5:2e:00:47:0a:79:da:f8: 15:66:9b:9b:f6:6c:e0:8e:e0:c9:07:a5:d4:01:ad:b5:dd:1c: 92:f0:2f:ae:cc:3d:f7:28:30:72:56:0d:bd:a6:fa:e4:44:fa: 97:36:1e:3e:ec:93:2d:eb:1e:20:59:18:32:04:2d:fa:e0:22: da:bb:cf:cb:aa:5b:dd:3e:a5:92:47:60:5e:dd:05:9c:59:4c: e3:03:6a:11:f0:16:99:46:4b:af:80:6c:99:39:4f:ed:94:dd: b2:3f:17:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra+0LA7+b5eDdzHlyg8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx Nzg3ZTEwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EyhjMGI2YTBjYmQ3N2UyYzZmZDJjYjQ4ZDkxN2U5ODAxZDFkMGM4OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI43Rk/qwOkLaPLF6hLVI76un3Ma lPLy66g1KlQvU1rwLm0IhkRggRKB32CQ47UMLIXV6yMffyZmunBWawtpuFjGxTqR UZFsxyaU80etyYJBs965SxqFIOtdjAW03xaIkIlgpMQ2LQQY+ZGIgA9BHEDdwy+E CR6cFIBZ+GRyeBz6g8T4eyKEVN0D/4KUHPWmzs0erG5Mz4biZWz8g/RvoKMZt59w AOKryh9/i/r+lCRkYAs2YX7ks17DrZ3qDUNvtSXRnqC8l1u/nlle52UH17TJkWcj h0wRuxH0Tuj7+CPPcdg6nuCalr9rM/Bx/HxBli/ahazjzu8hC1JnEC+ARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMC2oMvXfixv0stI2RfpgB0dDInNMB8GA1UdIwQY MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2 LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMY2zTfp xOC7i7dxfe9yZC702coL8PiQZ7eMHgG4+uSL5bz/CG/qS//Lyqp/LA/3tY7E4pR0 Oiuwr2nKxsydWFEDirh1S/wHwhU+SKhazV/vTleIhy+wWa52F2fTogiaq/SnzMLe g6fVfpISRWWGGCcGCRhiVhZqAouK1/CoH1ezDjRtSSU/Xk2BAQU3swmUZOzPMuZS B3jQ2fUuAEcKedr4FWabm/Zs4I7gyQel1AGttd0ckvAvrsw99ygwclYNvab65ET6 lzYePuyTLeseIFkYMgQt+uAi2rvPy6pb3T6lkkdgXt0FnFlM4wNqEfAWmUZLr4Bs mTlP7ZTdsj8Xew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:36 2025 by rpki-client