This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json) Hash identifier: qa3Kl5P+OGmFwGXCv5vrzRxkb0ORk6+dW/TSBEeGhs0= Subject key identifier: 29:4C:93:23:EE:17:B8:5A:E8:28:78:FC:BD:80:E6:5D:ED:D7:11:9B Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90 Certificate serial: 019AF7D3D92AC9E5FFA191DB40BCAE709D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 08:00:47 +0000 Manifest this update: Sun 07 Dec 2025 08:00:47 +0000 Manifest next update: Mon 08 Dec 2025 08:00:47 +0000 Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: 9G+OMihHSzDEGL1JTlTndTZHeVlfpuLjqh439ef4OKc=) 2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d3:d9:2a:c9:e5:ff:a1:91:db:40:bc:ae:70:9d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90 Validity Not Before: Dec 7 08:00:47 2025 GMT Not After : Dec 8 08:00:47 2025 GMT Subject: CN=294c9323ee17b85ae82878fcbd80e65dedd7119b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:1c:7b:6b:7f:b7:d4:dc:9b:79:00:4e:2d: 80:70:30:99:5c:2e:49:9c:e3:b6:fe:de:27:f6:44: b8:b0:8c:51:80:d2:24:40:18:05:13:db:f0:8b:38: 6f:b2:47:c3:fb:1d:fb:b3:3a:05:85:d2:45:76:32: 97:a5:f4:5e:18:75:e5:ef:1f:88:ea:00:bf:19:27: f6:44:ab:81:c0:c2:58:fc:b1:99:c2:ec:af:98:ff: e0:11:ea:fa:a8:31:86:83:d2:19:18:15:8f:74:e9: 04:71:49:35:9e:fe:fe:fb:40:26:56:45:43:05:3c: 27:8a:e4:e8:bb:7b:7b:30:26:9c:ed:58:ee:70:9d: 19:d6:60:e3:64:70:c1:9d:d4:22:05:bd:09:a1:7f: 2c:a9:47:85:a5:c1:60:e3:ea:c8:46:7d:10:cd:7c: 65:a4:23:89:b6:a9:f2:1b:54:5b:40:69:df:55:ef: 50:a7:63:0a:07:23:9d:20:8f:e7:6d:d1:82:a3:d4: 18:41:b1:fb:60:d6:17:78:50:2a:3d:1d:67:81:a6: 90:48:92:7c:68:eb:cd:4d:23:cd:00:67:dc:7a:d3: 88:d8:8d:75:25:f3:fa:9a:0f:c4:ec:70:c5:cd:4d: d7:89:ff:54:a4:d6:b0:f4:c1:12:23:66:04:b3:97: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:93:23:EE:17:B8:5A:E8:28:78:FC:BD:80:E6:5D:ED:D7:11:9B X509v3 Authority Key Identifier: keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b3:28:6b:25:2a:82:ad:1b:24:b1:a8:e0:a3:5f:3c:5f:78: 13:ae:ea:bc:a2:0d:66:b1:29:22:39:d3:eb:6c:17:0e:06:cc: 64:62:bb:fb:eb:2b:50:d7:ce:15:e9:3a:98:80:ff:d4:72:87: 6f:35:0c:e6:d9:5c:34:dc:74:fd:06:c4:21:8a:c9:01:2b:dd: d5:21:fe:c8:e2:6d:4d:90:42:db:e8:76:e3:58:0d:6e:83:59: 63:8a:08:05:76:a0:f5:cf:13:bb:3e:36:e4:a8:08:46:06:b2: 86:3d:34:c0:ce:10:81:91:cb:c9:5a:45:ad:ed:ea:10:9c:6b: c5:3c:3d:16:15:b0:1d:08:df:f9:6b:99:69:45:6b:0f:51:e9: 48:87:59:6c:86:d1:cf:b4:ea:27:d7:15:04:1f:0e:b9:6a:8d: 8c:9d:63:13:ce:fd:60:18:0a:8e:7f:d5:39:26:10:fa:66:58: 44:4e:ac:dd:ce:f4:25:f1:a4:e4:86:b4:80:f4:fc:67:8c:7c: 81:7b:35:78:8e:de:82:3d:05:0f:c8:31:bd:10:99:f4:8f:73: 2a:ae:85:54:94:c3:d3:f6:04:d7:86:7b:a1:4a:d8:d5:23:24: 22:de:d8:3e:6f:b7:f4:07:af:da:fb:b3:4f:a7:4d:5f:8a:45: cb:b1:f6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr309kqyeX/oZHbQLyucJ1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2 ZTZjOTAwHhcNMjUxMjA3MDgwMDQ3WhcNMjUxMjA4MDgwMDQ3WjAzMTEwLwYDVQQD EygyOTRjOTMyM2VlMTdiODVhZTgyODc4ZmNiZDgwZTY1ZGVkZDcxMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Yce2t/t9Tcm3kATi2AcDCZXC5J nOO2/t4n9kS4sIxRgNIkQBgFE9vwizhvskfD+x37szoFhdJFdjKXpfReGHXl7x+I 6gC/GSf2RKuBwMJY/LGZwuyvmP/gEer6qDGGg9IZGBWPdOkEcUk1nv7++0AmVkVD BTwniuTou3t7MCac7VjucJ0Z1mDjZHDBndQiBb0JoX8sqUeFpcFg4+rIRn0QzXxl pCOJtqnyG1RbQGnfVe9Qp2MKByOdII/nbdGCo9QYQbH7YNYXeFAqPR1ngaaQSJJ8 aOvNTSPNAGfcetOI2I11JfP6mg/E7HDFzU3Xif9UpNaw9MESI2YEs5f9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClMkyPuF7ha6Ch4/L2A5l3t1xGbMB8GA1UdIwQY MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobMoayUq gq0bJLGo4KNfPF94E67qvKINZrEpIjnT62wXDgbMZGK7++srUNfOFek6mID/1HKH bzUM5tlcNNx0/QbEIYrJASvd1SH+yOJtTZBC2+h241gNboNZY4oIBXag9c8Tuz42 5KgIRgayhj00wM4QgZHLyVpFre3qEJxrxTw9FhWwHQjf+WuZaUVrD1HpSIdZbIbR z7TqJ9cVBB8OuWqNjJ1jE879YBgKjn/VOSYQ+mZYRE6s3c70JfGk5Ia0gPT8Z4x8 gXs1eI7egj0FD8gxvRCZ9I9zKq6FVJTD0/YE14Z7oUrY1SMkIt7YPm+39Aev2vuz T6dNX4pFy7H2kg== -----END CERTIFICATE-----Generated at Sun Dec 7 14:30:29 2025 by rpki-client