This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json) Hash identifier: FYzUfaJTmPpsZwvPOPy5ky60nD8SJqKLl9RxCA5nZGA= Subject key identifier: 52:AB:D3:10:8F:C2:24:05:B1:94:E8:2E:16:5B:8B:CF:21:41:C7:F2 Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188 Certificate serial: 019AF3F7A6B1FCE7E8D80DB9C0580290CD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft Manifest number: 0696 Signing time: Sat 06 Dec 2025 14:01:24 +0000 Manifest this update: Sat 06 Dec 2025 14:01:24 +0000 Manifest next update: Sun 07 Dec 2025 14:01:24 +0000 Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=) 2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: g5JkpA4kGsIfu7cUD9shDq/iODEC6IHvdCvS+r3R/Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a6:b1:fc:e7:e8:d8:0d:b9:c0:58:02:90:cd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188 Validity Not Before: Dec 6 14:01:24 2025 GMT Not After : Dec 7 14:01:24 2025 GMT Subject: CN=52abd3108fc22405b194e82e165b8bcf2141c7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:90:49:0f:82:ce:6a:88:d1:8f:4b:5c:76: 72:a7:ab:ef:58:92:38:94:a8:5a:24:cf:41:c4:62: fc:56:23:8b:84:76:e9:c1:d6:81:bd:7d:a7:15:df: d5:c6:ad:c3:c2:65:1d:6c:6c:c8:a0:b8:e8:45:a3: ef:19:f4:6f:d0:90:50:0e:ce:91:fb:35:d5:0d:b8: ec:fa:ae:b2:bb:0e:98:e7:ea:a3:3c:63:e2:f1:20: c6:14:71:7d:13:bc:7b:c3:17:a9:a3:cc:88:06:4a: 7b:e8:8c:9c:ac:b8:ac:ca:c6:f0:3d:20:d0:1f:27: fc:3c:95:f6:d5:6c:ca:b4:61:5c:dd:56:d8:5e:dd: 23:5b:6c:2c:b9:47:0a:d4:04:e2:a3:e0:bb:9c:f2: 51:b2:82:c0:ff:de:ac:5e:2a:ab:62:9d:f2:ee:88: a9:d1:da:88:07:c2:3c:74:54:dd:ce:80:b3:53:d6: 43:47:61:69:f5:57:06:fb:b7:f6:91:5c:09:ee:16: 00:ef:02:8d:e2:e6:40:e5:ae:3d:84:4f:32:88:e2: 72:c9:25:b2:98:be:bf:e9:a6:99:4c:58:be:da:bc: d5:e5:eb:3a:8f:7b:26:76:d8:5c:3d:40:63:04:e7: ef:9b:95:0d:7b:07:4f:73:6c:f5:20:da:8a:3a:3a: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:D3:10:8F:C2:24:05:B1:94:E8:2E:16:5B:8B:CF:21:41:C7:F2 X509v3 Authority Key Identifier: keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:6d:c9:e4:70:a9:b1:10:ad:70:58:ef:c2:79:c2:ff:2e: 1c:64:a0:17:76:08:ff:52:89:e4:bb:10:84:91:7f:e1:68:3f: 15:15:c8:47:c4:d0:da:07:dc:f8:9c:7c:d5:1c:44:82:59:58: 5a:ab:6e:0f:9e:21:cb:ea:fc:1e:7c:19:ba:7a:32:60:5c:e3: 6d:3c:12:e4:51:53:db:af:b1:eb:80:89:44:59:e3:04:d4:77: 3e:19:6d:b2:6f:a7:0f:45:be:cb:cb:bc:9c:4f:45:48:ce:7f: e1:ec:ea:66:60:9e:27:b5:e2:39:e4:f2:2d:07:fc:0a:de:de: 7b:75:ba:e4:c6:7f:cc:0f:9b:5f:93:cb:0c:df:3f:d1:40:26: 0c:6f:30:39:fe:b2:64:8a:58:79:5e:02:b2:1e:6a:80:85:ef: 51:ba:8b:7e:d9:bc:ec:16:4f:c3:0a:ae:a8:08:5e:59:a2:5d: 74:df:52:fc:6c:2c:8f:86:4f:6e:4d:be:45:15:b6:bd:a8:78: 97:59:5e:c8:5f:94:bf:14:fd:31:38:a2:27:c8:4a:3d:28:93: 17:cc:4d:25:81:42:ab:fa:27:77:06:00:92:43:e6:ef:06:db: 5b:1e:f6:9a:8e:92:51:97:23:cd:6a:c4:d0:54:77:92:55:e0: 86:89:05:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96ax/Ofo2A25wFgCkM1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzQ1Yjc2MzhkZTlkMmQyOTY2NTI3Y2IzNjNlMzdjMzFk NGExODgwHhcNMjUxMjA2MTQwMTI0WhcNMjUxMjA3MTQwMTI0WjAzMTEwLwYDVQQD Eyg1MmFiZDMxMDhmYzIyNDA1YjE5NGU4MmUxNjViOGJjZjIxNDFjN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qQSQ+CzmqI0Y9LXHZyp6vvWJI4 lKhaJM9BxGL8ViOLhHbpwdaBvX2nFd/Vxq3DwmUdbGzIoLjoRaPvGfRv0JBQDs6R +zXVDbjs+q6yuw6Y5+qjPGPi8SDGFHF9E7x7wxepo8yIBkp76IycrLisysbwPSDQ Hyf8PJX21WzKtGFc3VbYXt0jW2wsuUcK1ATio+C7nPJRsoLA/96sXiqrYp3y7oip 0dqIB8I8dFTdzoCzU9ZDR2Fp9VcG+7f2kVwJ7hYA7wKN4uZA5a49hE8yiOJyySWy mL6/6aaZTFi+2rzV5es6j3smdthcPUBjBOfvm5UNewdPc2z1INqKOjoPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKr0xCPwiQFsZToLhZbi88hQcfyMB8GA1UdIwQY MBaAFAQ0W3Y43p0tKWZSfLNj43wx1KGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUt MjJhN2QyZTc0NTNjLzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUtMjJhN2QyZTc0NTNj LzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUhtyeRw qbEQrXBY78J5wv8uHGSgF3YI/1KJ5LsQhJF/4Wg/FRXIR8TQ2gfc+Jx81RxEgllY WqtuD54hy+r8HnwZunoyYFzjbTwS5FFT26+x64CJRFnjBNR3Phltsm+nD0W+y8u8 nE9FSM5/4ezqZmCeJ7XiOeTyLQf8Ct7ee3W65MZ/zA+bX5PLDN8/0UAmDG8wOf6y ZIpYeV4Csh5qgIXvUbqLftm87BZPwwquqAheWaJddN9S/Gwsj4ZPbk2+RRW2vah4 l1leyF+UvxT9MTiiJ8hKPSiTF8xNJYFCq/ondwYAkkPm7wbbWx72mo6SUZcjzWrE 0FR3klXghokFtw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:45 2025 by rpki-client