This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json) Hash identifier: W5yFeMI9auqc76unqhPuV6wBU5qJ1lrAPnIH7hE19G4= Subject key identifier: 9F:B7:92:2C:5B:BA:CC:C2:02:76:C7:1A:54:83:1D:87:E0:75:C6:E5 Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f Certificate serial: 019AF653657DF931F353FA27FFF7819B45B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 01:00:51 +0000 Manifest this update: Sun 07 Dec 2025 01:00:51 +0000 Manifest next update: Mon 08 Dec 2025 01:00:51 +0000 Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: VwCViFxpaQQtqEmvERSgwUVQrsza+P50Xx0oxQPC0jM=) 2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=) 3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:65:7d:f9:31:f3:53:fa:27:ff:f7:81:9b:45:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f Validity Not Before: Dec 7 01:00:51 2025 GMT Not After : Dec 8 01:00:51 2025 GMT Subject: CN=9fb7922c5bbaccc20276c71a54831d87e075c6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:a3:09:52:1b:74:c3:ad:a9:f3:5c:51:65: 25:07:1d:f8:37:7a:4f:65:9f:eb:26:1e:c5:5a:d4: 1f:6f:18:eb:ad:76:94:ed:07:2a:c8:ba:f9:03:63: 50:9b:19:00:93:ca:b0:03:bc:7a:15:bc:b4:6f:e4: 17:ce:1d:1e:78:dc:3d:74:a7:19:96:a0:2a:e9:7c: 75:20:0b:da:14:3c:3e:3e:c2:9d:ea:84:87:2d:08: 79:e7:bc:ab:2c:f4:f6:11:42:dd:79:9d:3a:c1:ed: 5b:26:41:ae:f2:8b:16:cd:3e:42:f1:00:07:82:7e: 07:59:ec:ff:59:13:95:72:d2:5b:a5:89:b0:f9:9f: a5:b4:6b:be:ab:b8:cd:b8:cc:df:4b:a8:87:1c:88: ba:7d:5b:65:69:a0:d4:4f:c6:be:1d:c8:59:d4:8c: 9c:32:6f:79:25:39:1f:7e:be:67:92:bb:87:4d:98: f5:0e:c2:4b:0f:1b:88:96:20:29:a9:0a:08:22:14: 8f:79:b7:8e:4f:6c:91:ab:0c:d0:ac:67:3d:cf:15: 9f:1a:f1:f1:1c:7e:f4:b7:7a:2d:7f:97:8c:b2:76: 30:ba:d4:00:53:01:c4:1d:b1:ee:bc:93:a4:37:9f: 25:62:3a:71:1f:79:f0:2a:00:b1:da:32:89:ac:6d: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:92:2C:5B:BA:CC:C2:02:76:C7:1A:54:83:1D:87:E0:75:C6:E5 X509v3 Authority Key Identifier: keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:42:2f:ee:c5:97:4d:ac:e7:c1:c7:16:9e:97:39:83:c3:23: 32:25:92:f4:1f:c9:1f:00:97:0e:c1:99:fe:01:d2:61:ca:3b: 44:b3:f6:bb:3c:11:59:4c:57:fd:2d:f5:25:fd:95:48:73:52: 8b:59:69:e6:7d:73:e1:15:cd:95:5f:14:1a:40:a8:3b:38:12: 69:c3:ea:7e:3a:94:95:bb:e2:e4:18:ee:f3:f6:0f:74:8d:13: d7:84:5d:d0:d1:7d:dc:55:44:f2:67:eb:e2:a4:4b:16:24:75: af:83:9b:d0:c1:2f:28:25:cd:fc:13:50:50:a2:98:c7:53:ae: 72:42:d7:c8:41:fb:93:23:69:9c:a8:11:09:16:a1:96:4d:6d: 3a:16:97:32:ba:1f:7b:11:a0:88:2d:18:95:13:47:f4:0d:0c: d4:bc:5c:f6:fb:ce:89:78:c1:d9:dd:3a:a6:18:05:27:c6:3f: b2:ea:32:2d:6c:27:e7:f3:74:d0:d2:81:06:f5:3b:4f:53:e6: 53:49:b3:38:49:83:fc:82:0d:fc:7c:1a:92:40:ac:9d:7c:2f: d8:70:40:11:08:10:e3:3f:57:a2:54:64:16:fd:3c:97:17:25: bf:02:a5:84:25:bb:64:4c:f6:57:49:f8:42:fd:95:a8:a0:ee: 4a:36:27:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2V9+THzU/on//eBm0W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi ZDFjMmYwHhcNMjUxMjA3MDEwMDUxWhcNMjUxMjA4MDEwMDUxWjAzMTEwLwYDVQQD Eyg5ZmI3OTIyYzViYmFjY2MyMDI3NmM3MWE1NDgzMWQ4N2UwNzVjNmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN+jCVIbdMOtqfNcUWUlBx34N3pP ZZ/rJh7FWtQfbxjrrXaU7QcqyLr5A2NQmxkAk8qwA7x6Fby0b+QXzh0eeNw9dKcZ lqAq6Xx1IAvaFDw+PsKd6oSHLQh557yrLPT2EULdeZ06we1bJkGu8osWzT5C8QAH gn4HWez/WROVctJbpYmw+Z+ltGu+q7jNuMzfS6iHHIi6fVtlaaDUT8a+HchZ1Iyc Mm95JTkffr5nkruHTZj1DsJLDxuIliApqQoIIhSPebeOT2yRqwzQrGc9zxWfGvHx HH70t3otf5eMsnYwutQAUwHEHbHuvJOkN58lYjpxH3nwKgCx2jKJrG1j4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+3kixbuszCAnbHGlSDHYfgdcblMB8GA1UdIwQY MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4 LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEIv7sWX TaznwccWnpc5g8MjMiWS9B/JHwCXDsGZ/gHSYco7RLP2uzwRWUxX/S31Jf2VSHNS i1lp5n1z4RXNlV8UGkCoOzgSacPqfjqUlbvi5Bju8/YPdI0T14Rd0NF93FVE8mfr 4qRLFiR1r4Ob0MEvKCXN/BNQUKKYx1OuckLXyEH7kyNpnKgRCRahlk1tOhaXMrof exGgiC0YlRNH9A0M1Lxc9vvOiXjB2d06phgFJ8Y/suoyLWwn5/N00NKBBvU7T1Pm U0mzOEmD/IIN/HwakkCsnXwv2HBAEQgQ4z9XolRkFv08lxclvwKlhCW7ZEz2V0n4 Qv2VqKDuSjYnDQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:26 2025 by rpki-client