This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json) Hash identifier: hEatXiAcLQlrERdbEOobwpltGUGR2JDD9hyQhkGsLsw= Subject key identifier: 67:1C:13:03:96:14:D7:07:12:80:3E:D0:B5:E8:24:B3:0E:13:F0:19 Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456 Certificate serial: 019AF164168F64654E408EC1DAE69806C895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft Manifest number: 11BA Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: BD+jSuv9WFp58kOLhv+eizMMJqIo4xeuR4/C4aqit/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:16:8f:64:65:4e:40:8e:c1:da:e6:98:06:c8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=671c13039614d70712803ed0b5e824b30e13f019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:74:bb:5c:cb:e8:b4:00:49:8b:a1:d8:0c: 73:cb:43:6a:a8:a8:d4:8a:ef:96:4f:71:08:65:41: 5f:33:0a:c0:d6:6b:f8:08:07:be:bc:ec:a2:e5:db: ab:f5:dc:79:d7:c9:28:7b:32:0c:f2:2a:23:ae:e4: d2:7a:4c:8c:70:31:25:87:cd:a4:06:2a:2e:45:5c: 7b:91:2e:db:e3:7b:36:93:2a:4f:e7:d0:e8:80:8d: 2b:49:d4:2b:f2:73:41:74:be:f3:54:95:4e:31:4d: 08:1c:5e:cc:20:da:5e:b7:db:40:96:c8:67:d1:1e: d0:83:86:0b:da:40:bf:6e:69:f0:ff:80:c9:a0:26: 9d:48:81:a8:46:35:53:b3:cf:90:94:e6:1a:da:dd: 7e:c5:cb:79:9a:60:f5:89:99:4a:7c:2a:9e:29:86: 3c:30:7b:69:77:be:f8:5e:28:24:68:07:1b:43:60: 64:a6:24:dd:ce:10:fb:aa:b2:fa:99:63:45:00:46: 4e:21:c8:09:e0:8f:fe:d3:23:d7:02:d8:c4:51:93: 1b:c0:8b:6d:bc:a5:18:7d:7d:63:57:f2:98:0a:05: 57:d1:a8:3c:91:9c:4c:30:e4:4a:a6:70:86:b7:f1: e8:aa:2b:2b:10:1f:d0:3d:46:a0:6e:60:3e:52:27: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1C:13:03:96:14:D7:07:12:80:3E:D0:B5:E8:24:B3:0E:13:F0:19 X509v3 Authority Key Identifier: keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e5:1a:cd:99:97:9e:d3:20:a0:3a:63:ee:8e:fc:02:2c:cb: 0c:6a:af:db:ae:f9:10:ce:fd:42:09:23:97:58:6b:25:ca:f7: 6e:e2:91:82:d7:66:bb:07:9b:14:7c:a1:b2:5b:a8:16:33:90: a9:f9:85:e3:3b:55:f0:c8:45:b9:3c:f4:fc:b6:ea:d4:74:b3: 15:ef:b8:dd:60:e2:1a:c8:4a:58:b1:7f:3a:ad:ce:22:51:78: 2a:9a:eb:b1:26:2c:48:34:93:8f:55:28:b3:53:17:a5:30:32: 1b:74:0a:17:60:3f:13:94:0a:76:0f:2f:83:79:a0:7e:d1:4c: 67:a1:57:f0:7a:6c:15:24:d3:6f:97:67:9f:2b:92:f5:c9:fc: a0:57:37:b6:27:c5:1a:db:65:f8:a9:d6:14:2b:ae:4e:17:27: 58:a5:1f:80:d4:63:97:d5:86:f1:ed:7d:0f:e0:6e:04:52:06: 80:91:9c:0f:11:54:df:7c:4f:df:55:84:f9:d6:4b:d7:98:9d: 2f:f8:09:83:a1:e5:e0:58:d3:05:c7:6f:ca:7b:63:e5:37:6d: 4d:37:57:24:f6:6d:34:54:55:50:f6:ba:93:d3:3e:10:52:3a: bf:75:44:f6:64:09:9f:12:cf:10:c1:34:3b:69:e5:04:df:e2: c0:ee:1f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBaPZGVOQI7B2uaYBsiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWQzNTE4YmRlNTk2MmJmZmU3M2U3OTg4NDcxOGU2ZWQw ZmE0NTYwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD Eyg2NzFjMTMwMzk2MTRkNzA3MTI4MDNlZDBiNWU4MjRiMzBlMTNmMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ud0u1zL6LQASYuh2Axzy0NqqKjU iu+WT3EIZUFfMwrA1mv4CAe+vOyi5dur9dx518koezIM8iojruTSekyMcDElh82k BiouRVx7kS7b43s2kypP59DogI0rSdQr8nNBdL7zVJVOMU0IHF7MINpet9tAlshn 0R7Qg4YL2kC/bmnw/4DJoCadSIGoRjVTs8+QlOYa2t1+xct5mmD1iZlKfCqeKYY8 MHtpd774XigkaAcbQ2BkpiTdzhD7qrL6mWNFAEZOIcgJ4I/+0yPXAtjEUZMbwItt vKUYfX1jV/KYCgVX0ag8kZxMMORKpnCGt/HoqisrEB/QPUagbmA+UicCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGccEwOWFNcHEoA+0LXoJLMOE/AZMB8GA1UdIwQY MBaAFAUdNRi95ZYr/+c+eYhHGObtD6RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQt YzViZWIyZTI0NWZlLzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQtYzViZWIyZTI0NWZl LzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuUazZmX ntMgoDpj7o78AizLDGqv2675EM79Qgkjl1hrJcr3buKRgtdmuwebFHyhsluoFjOQ qfmF4ztV8MhFuTz0/Lbq1HSzFe+43WDiGshKWLF/Oq3OIlF4KprrsSYsSDSTj1Uo s1MXpTAyG3QKF2A/E5QKdg8vg3mgftFMZ6FX8HpsFSTTb5dnnyuS9cn8oFc3tifF Gttl+KnWFCuuThcnWKUfgNRjl9WG8e19D+BuBFIGgJGcDxFU33xP31WE+dZL15id L/gJg6Hl4FjTBcdvyntj5TdtTTdXJPZtNFRVUPa6k9M+EFI6v3VE9mQJnxLPEME0 O2nlBN/iwO4faw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:51 2025 by rpki-client