This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: ERuAqZzNksuelaeT5elkzB+3V41ocNbh53AOyzD++bg= Subject key identifier: 3A:2F:0D:DE:65:51:21:D6:61:13:9A:1D:9D:B4:2B:64:D1:4F:28:5A Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019AF540F26CBD060F004961CDDF010CD886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 14C5 Signing time: Sat 06 Dec 2025 20:01:05 +0000 Manifest this update: Sat 06 Dec 2025 20:01:05 +0000 Manifest next update: Sun 07 Dec 2025 20:01:05 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 4: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 5: BHwETxfxAG-FlW-2gR2swtW8f54.roa (hash: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=) 6: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: 3595Lfr7pNKYlWSUGeCYAO9TmVt8ZK9Rac/0M7kskXQ=) 7: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 8: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 9: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 10: I1g6JGBc_MuJczCMQ8_G_2Vo12E.roa (hash: yhGATvC9gpwxKIKN67R79qmS2M3ypkmjHOCyPAuC254=) 11: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 12: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 13: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (hash: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=) 14: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 15: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 16: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zbvJrdPshbotPQyPGnFnidcK6wA.roa (hash: 4V/PSIA+oGiJgsqfMgOIzGTlXqlzWiAeWsYU/BgGl/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f2:6c:bd:06:0f:00:49:61:cd:df:01:0c:d8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Dec 6 20:01:05 2025 GMT Not After : Dec 7 20:01:05 2025 GMT Subject: CN=3a2f0dde655121d661139a1d9db42b64d14f285a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:ff:3b:fb:eb:69:bd:e5:9d:a9:80:d9:87: 38:a5:bb:c8:e8:2d:e0:2d:7c:24:d4:6f:c4:61:20: 89:0b:d6:b1:51:f7:6d:66:8f:3f:bf:89:4c:f8:22: 2c:db:a2:f4:fa:5a:9e:e8:9b:03:a4:a2:e7:f2:15: 6b:b7:19:7e:d7:be:5a:8d:ec:f4:39:71:6b:04:03: 2e:a4:01:b0:21:d9:8c:a8:4c:82:be:e6:93:d0:29: a9:b0:88:2b:9e:34:ca:ba:b0:0e:81:bc:b2:0c:c4: 70:bd:c0:0a:7d:8b:a1:75:cc:a5:89:7a:4e:6d:20: f8:df:b7:85:52:fa:bf:f6:6f:36:b8:fe:7c:3d:7d: 16:26:05:44:ee:65:1b:aa:f2:99:2e:2b:b2:7b:50: 22:26:7e:f6:30:d3:de:d2:0d:75:f7:99:06:fa:2d: 1a:ce:07:71:3b:fe:5d:48:fc:b2:f0:48:bf:4c:d4: 03:84:37:98:f3:20:78:e9:eb:12:70:1e:42:e8:cc: 31:9b:32:e8:33:b3:55:f3:44:28:c7:65:59:b0:ff: 7b:47:93:2c:6c:51:66:75:35:ff:63:0e:6b:dc:3c: a5:aa:d4:9c:7b:e6:da:96:9a:6f:ab:35:ed:d1:79: e9:63:37:d5:6f:e4:f5:ca:48:26:d0:c7:55:58:54: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:0D:DE:65:51:21:D6:61:13:9A:1D:9D:B4:2B:64:D1:4F:28:5A X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3a:4d:ac:4f:e7:9b:72:e1:b2:f8:55:6f:48:66:e1:7d:c3: d1:55:ef:28:bb:49:fb:6a:10:05:f9:e8:71:5b:40:3b:f4:0a: 6c:69:b5:5f:60:28:7d:6d:12:b9:ef:3a:7d:9c:32:8a:fa:d5: cd:f1:af:e3:6b:7e:7a:66:c3:f3:8e:ae:15:1d:27:25:9e:1e: fd:38:66:3a:88:1c:66:70:7a:23:0e:3d:17:31:13:ab:ac:68: d7:c9:da:e4:22:4b:bf:8f:8c:0b:a8:0b:91:eb:1e:9c:22:9a: 54:66:43:26:10:92:c3:17:c9:ba:31:38:d1:0f:29:01:6f:87: 08:c9:67:65:f4:65:05:6b:31:56:47:7c:f4:1b:74:7d:ea:74: 81:a3:bd:00:e1:81:ed:b3:9a:31:6c:94:7b:9e:d3:7c:3a:30: 78:43:6d:7d:c5:93:0e:15:c7:35:ab:d9:bf:17:1c:4e:b3:db: 75:5f:1c:85:4a:51:c5:54:f4:a8:57:7f:63:ed:5f:10:a8:2a: a8:a9:c5:72:49:d3:d4:00:60:73:81:e1:ff:ff:a6:c6:7a:b3: 24:29:16:41:b4:68:09:0a:d0:45:cb:a3:80:90:b7:83:96:e8: 30:0b:a4:93:cb:e4:7c:1b:38:40:2a:2c:d6:94:a4:3a:b5:a9: 26:70:58:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPJsvQYPAElhzd8BDNiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUxMjA2MjAwMTA1WhcNMjUxMjA3MjAwMTA1WjAzMTEwLwYDVQQD EygzYTJmMGRkZTY1NTEyMWQ2NjExMzlhMWQ5ZGI0MmI2NGQxNGYyODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB//O/vrab3lnamA2Yc4pbvI6C3g LXwk1G/EYSCJC9axUfdtZo8/v4lM+CIs26L0+lqe6JsDpKLn8hVrtxl+175ajez0 OXFrBAMupAGwIdmMqEyCvuaT0CmpsIgrnjTKurAOgbyyDMRwvcAKfYuhdcyliXpO bSD437eFUvq/9m82uP58PX0WJgVE7mUbqvKZLiuye1AiJn72MNPe0g1195kG+i0a zgdxO/5dSPyy8Ei/TNQDhDeY8yB46esScB5C6MwxmzLoM7NV80Qox2VZsP97R5Ms bFFmdTX/Yw5r3DylqtSce+balppvqzXt0XnpYzfVb+T1ykgm0MdVWFThqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDovDd5lUSHWYROaHZ20K2TRTyhaMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTpNrE/n m3LhsvhVb0hm4X3D0VXvKLtJ+2oQBfnocVtAO/QKbGm1X2AofW0Sue86fZwyivrV zfGv42t+embD846uFR0nJZ4e/ThmOogcZnB6Iw49FzETq6xo18na5CJLv4+MC6gL kesenCKaVGZDJhCSwxfJujE40Q8pAW+HCMlnZfRlBWsxVkd89Bt0fep0gaO9AOGB 7bOaMWyUe57TfDoweENtfcWTDhXHNavZvxccTrPbdV8chUpRxVT0qFd/Y+1fEKgq qKnFcknT1ABgc4Hh//+mxnqzJCkWQbRoCQrQRcujgJC3g5boMAukk8vkfBs4QCos 1pSkOrWpJnBYoQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:13 2025 by rpki-client