This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json) Hash identifier: N5A3Z5m3OeCxAQXbBelTVyC9R47kLbUP+wpNd8lY5gs= Subject key identifier: 50:5F:21:8B:0E:20:69:F2:EF:B4:11:53:D5:E4:7A:AB:28:0D:90:B6 Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9 Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9 Certificate serial: 019B3532C8A9456B288D665A0EEC88CBB7A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft Manifest number: 0455 Signing time: Fri 19 Dec 2025 06:01:19 +0000 Manifest this update: Fri 19 Dec 2025 06:01:19 +0000 Manifest next update: Sat 20 Dec 2025 06:01:19 +0000 Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: INkONmrYFi0zsb1GLcW/r/sK/mm7yOehjfNxlOUXKMY=) 2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:c8:a9:45:6b:28:8d:66:5a:0e:ec:88:cb:b7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9 Validity Not Before: Dec 19 06:01:19 2025 GMT Not After : Dec 20 06:01:19 2025 GMT Subject: CN=505f218b0e2069f2efb41153d5e47aab280d90b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:22:5c:ab:15:2f:99:17:c8:58:77:1a:d3: b3:25:17:34:8d:a8:c5:e5:3e:9f:8b:59:06:1d:b8: ee:6e:34:f1:b2:58:7d:ee:2f:05:3a:02:bb:a3:dd: 84:3c:26:b6:31:e2:3a:5b:74:b6:82:8e:5c:cb:a5: dc:ff:a3:ab:d4:3d:43:ef:af:07:ad:90:cb:09:47: 82:7a:86:f1:e9:dd:de:c0:57:9c:58:76:8c:c3:5c: 67:bb:d3:9b:c6:b4:e5:6b:43:06:f0:b7:45:42:b8: 75:3e:8d:29:24:db:90:fd:da:f0:f2:39:57:7a:07: c2:3b:f4:1f:c4:ca:d8:0a:ac:9b:2a:7e:3a:84:b7: 35:2b:d2:12:47:79:c6:6c:b3:c5:74:ba:c3:99:53: 3a:41:dd:d6:5b:ab:8c:f6:ae:35:75:97:ec:e8:87: 60:27:fd:ce:87:ca:42:13:a9:22:2b:4a:67:5e:26: bd:d5:e4:a5:07:58:da:c4:3a:92:11:e5:7d:b5:0f: e7:35:5f:b8:56:5e:46:c0:0a:9a:e2:14:e5:15:5b: 67:7c:e7:ae:4e:73:f8:64:68:fb:e0:9e:b0:85:9b: 4b:35:68:b0:00:26:15:3f:35:eb:d4:62:1d:5d:a8: dd:43:60:64:56:80:d3:1d:8e:3a:ed:c4:d3:1a:23: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:21:8B:0E:20:69:F2:EF:B4:11:53:D5:E4:7A:AB:28:0D:90:B6 X509v3 Authority Key Identifier: keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:aa:66:75:1b:f1:1a:32:72:1b:55:e1:b6:c4:b4:c7:29:5e: 18:f1:23:54:a2:0a:40:72:99:dd:ac:5d:c9:16:14:d7:25:4d: 60:6e:bc:80:23:7a:51:63:7e:f7:52:f5:dc:56:9c:d0:c5:64: ed:56:36:dd:af:81:31:05:7a:2b:ad:eb:b3:48:3b:ec:b6:f8: ef:cb:5f:9c:de:35:b7:c7:fd:2f:d9:f6:5f:e8:27:02:d3:c1: b2:b8:fc:ad:ae:25:73:1f:b7:1d:05:f4:35:f4:00:d5:c5:51: 4e:80:0f:db:76:3e:3d:ba:07:2f:1f:e9:0d:53:ac:9e:02:1c: 6c:01:3e:2c:86:7d:48:a6:ca:24:df:12:62:bb:69:ab:43:47: 9f:3d:71:ba:2d:bf:34:41:f4:8d:29:42:c4:f1:f6:c2:f1:04: 80:c4:4f:73:fb:b2:28:cc:6c:87:37:8e:ac:55:1c:a0:a5:3d: 7e:48:46:a7:49:ff:ea:22:fb:7b:37:33:2a:5f:c3:7d:ad:4b: 26:ab:bd:18:7a:32:5a:53:ec:df:61:3d:f1:28:b5:a2:dd:c6: 4d:1f:c6:ff:df:d2:96:6a:f1:01:f2:b4:0e:54:35:bb:ee:33: a3:e9:12:ab:5e:5c:93:a1:3a:83:29:be:38:85:b3:0e:cf:7a: e7:57:af:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MsipRWsojWZaDuyIy7ehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MTYwN2E4NjhkYWY0ODQ2MjQ1ZjNjOGJiZjllYmU3Njk4 MjlhZDkwHhcNMjUxMjE5MDYwMTE5WhcNMjUxMjIwMDYwMTE5WjAzMTEwLwYDVQQD Eyg1MDVmMjE4YjBlMjA2OWYyZWZiNDExNTNkNWU0N2FhYjI4MGQ5MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ikiXKsVL5kXyFh3GtOzJRc0jajF 5T6fi1kGHbjubjTxslh97i8FOgK7o92EPCa2MeI6W3S2go5cy6Xc/6Or1D1D768H rZDLCUeCeobx6d3ewFecWHaMw1xnu9ObxrTla0MG8LdFQrh1Po0pJNuQ/drw8jlX egfCO/QfxMrYCqybKn46hLc1K9ISR3nGbLPFdLrDmVM6Qd3WW6uM9q41dZfs6Idg J/3Oh8pCE6kiK0pnXia91eSlB1jaxDqSEeV9tQ/nNV+4Vl5GwAqa4hTlFVtnfOeu TnP4ZGj74J6whZtLNWiwACYVPzXr1GIdXajdQ2BkVoDTHY467cTTGiMR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBfIYsOIGny77QRU9XkeqsoDZC2MB8GA1UdIwQY MBaAFAUWB6ho2vSEYkXzyLv56+dpgprZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEt NzJjZmRhYTk1OWEyLzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEtNzJjZmRhYTk1OWEy LzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKpmdRvx GjJyG1XhtsS0xyleGPEjVKIKQHKZ3axdyRYU1yVNYG68gCN6UWN+91L13Fac0MVk 7VY23a+BMQV6K63rs0g77Lb478tfnN41t8f9L9n2X+gnAtPBsrj8ra4lcx+3HQX0 NfQA1cVRToAP23Y+PboHLx/pDVOsngIcbAE+LIZ9SKbKJN8SYrtpq0NHnz1xui2/ NEH0jSlCxPH2wvEEgMRPc/uyKMxshzeOrFUcoKU9fkhGp0n/6iL7ezczKl/Dfa1L Jqu9GHoyWlPs32E98Si1ot3GTR/G/9/SlmrxAfK0DlQ1u+4zo+kSq15ck6E6gym+ OIWzDs9651evLw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:34:35 2025 by rpki-client