This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json) Hash identifier: uDQvz4vGA0zCcVM17LPKr+4LO4siwFjmHV+lresDohE= Subject key identifier: CC:D7:BC:93:B5:58:FF:A7:1A:C4:5E:64:2F:8E:5C:64:B5:25:83:F6 Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Certificate serial: 019AF276B8459B12BDC784D1897474DACB75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft Manifest number: 05B4 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: TS64iCDRKyWaEwuvOMY4rsCHYvCX0/Cng3LjUGXnO+E=) 2: rz6RNvNT6rFMHWEHKtScJPlIWP0.roa (hash: 10DDyOgYR+xyUk2Wn7NL3jHpOF/gWWoZiYOlgVYeGzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b8:45:9b:12:bd:c7:84:d1:89:74:74:da:cb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=ccd7bc93b558ffa71ac45e642f8e5c64b52583f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:14:d8:74:34:af:8f:8c:37:3f:e2:fb:69:c8: 82:f8:9a:e0:8b:87:28:0d:45:be:d3:10:18:c9:b5: 19:e5:2c:03:df:04:ef:b1:c4:2c:2a:3d:74:54:99: 8a:d5:14:5f:8f:d9:65:d7:12:c7:94:df:67:b2:5f: b1:0c:ba:9b:8c:40:82:64:da:17:ef:05:45:94:66: 98:04:a5:81:3b:8a:ca:0f:e5:64:81:10:77:98:44: dd:13:fb:c0:ad:e1:3c:cd:9d:19:9f:31:f8:1b:62: 42:bb:b2:28:93:2a:d3:d7:ea:b0:79:d7:52:75:91: 61:a8:71:fd:76:73:e7:ae:24:ca:af:c8:3a:03:f0: 30:1b:c0:57:91:76:fe:67:8e:94:54:99:fe:b1:8f: 44:db:40:46:58:c6:e7:67:37:32:1a:a2:68:ce:08: 59:74:b7:8e:bc:23:73:d6:fd:a5:49:1b:f7:2e:15: 0c:e8:7d:04:ae:80:f3:4a:2f:fc:fa:02:bc:d9:76: b1:c3:6a:40:ec:10:cb:2a:2d:9b:c0:d3:8b:ec:c2: 6d:90:e3:38:28:58:44:2e:ee:86:c2:f3:33:bf:6c: 10:51:3a:15:97:5a:60:da:40:7c:ed:17:85:53:86: ed:9e:a2:be:8e:87:fc:fa:97:8c:b9:f4:c2:19:da: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D7:BC:93:B5:58:FF:A7:1A:C4:5E:64:2F:8E:5C:64:B5:25:83:F6 X509v3 Authority Key Identifier: keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:94:45:df:e8:39:3c:9e:2e:21:70:e1:a9:f9:ff:f9:0a:5e: 78:64:bf:b0:2d:86:94:3c:9c:e0:ec:40:c9:22:f9:24:b8:19: 60:89:cf:c1:88:52:f7:9e:da:13:7d:1f:c2:7b:84:ec:41:76: 11:ce:c4:f4:78:b5:42:7d:ae:17:0d:42:59:90:32:f3:5f:dc: 1a:7b:db:27:f0:a1:43:9d:33:e3:98:d9:9b:b8:ae:d4:47:76: 08:48:84:c2:1c:a8:a5:60:d1:1b:b3:bd:f6:d5:21:81:cd:2d: a8:d9:71:39:04:11:45:2b:bc:94:0f:c2:42:c1:25:3f:81:7a: 7a:b6:54:8a:f3:88:f3:3e:59:43:52:14:1a:bc:39:35:eb:58: a2:43:81:aa:b3:7a:70:08:19:9e:f3:46:e6:d7:bf:12:d9:6d: c4:98:3a:09:04:89:35:ea:07:18:32:10:9d:86:4d:a9:d8:88: aa:a6:06:7f:d3:eb:94:a6:19:78:d9:94:07:98:f1:81:61:e9: 6d:34:ca:4e:78:15:67:2e:9e:c6:b8:d6:73:68:95:5e:74:cd: 96:49:3c:c6:14:56:58:35:fd:e8:71:86:66:a7:bb:a1:84:09: 16:0e:b3:74:4a:31:15:c6:84:93:88:c9:50:21:dd:1b:32:f9: 10:0b:75:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrhFmxK9x4TRiXR02st1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5 MjYzNWUwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhjY2Q3YmM5M2I1NThmZmE3MWFjNDVlNjQyZjhlNWM2NGI1MjU4M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xTYdDSvj4w3P+L7aciC+Jrgi4co DUW+0xAYybUZ5SwD3wTvscQsKj10VJmK1RRfj9ll1xLHlN9nsl+xDLqbjECCZNoX 7wVFlGaYBKWBO4rKD+VkgRB3mETdE/vAreE8zZ0ZnzH4G2JCu7IokyrT1+qweddS dZFhqHH9dnPnriTKr8g6A/AwG8BXkXb+Z46UVJn+sY9E20BGWMbnZzcyGqJozghZ dLeOvCNz1v2lSRv3LhUM6H0EroDzSi/8+gK82Xaxw2pA7BDLKi2bwNOL7MJtkOM4 KFhELu6GwvMzv2wQUToVl1pg2kB87ReFU4btnqK+jof8+peMufTCGdqWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzXvJO1WP+nGsReZC+OXGS1JYP2MB8GA1UdIwQY MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4 LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZRF3+g5 PJ4uIXDhqfn/+QpeeGS/sC2GlDyc4OxAySL5JLgZYInPwYhS957aE30fwnuE7EF2 Ec7E9Hi1Qn2uFw1CWZAy81/cGnvbJ/ChQ50z45jZm7iu1Ed2CEiEwhyopWDRG7O9 9tUhgc0tqNlxOQQRRSu8lA/CQsElP4F6erZUivOI8z5ZQ1IUGrw5NetYokOBqrN6 cAgZnvNG5te/EtltxJg6CQSJNeoHGDIQnYZNqdiIqqYGf9PrlKYZeNmUB5jxgWHp bTTKTngVZy6exrjWc2iVXnTNlkk8xhRWWDX96HGGZqe7oYQJFg6zdEoxFcaEk4jJ UCHdGzL5EAt1nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:12 2025 by rpki-client