This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json) Hash identifier: 9gJS/zdNvUfCk5/+kwrG4jaxAQZqwyKBQwkph2cG9Zo= Subject key identifier: 6E:66:54:3C:CC:57:CE:D9:E6:33:3E:95:E6:83:14:42:23:22:45:1C Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Certificate serial: 019AF5E65900DA2441BF39A7DBF416F9C838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft Manifest number: 1442 Signing time: Sat 06 Dec 2025 23:01:45 +0000 Manifest this update: Sat 06 Dec 2025 23:01:45 +0000 Manifest next update: Sun 07 Dec 2025 23:01:45 +0000 Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: pHw2ROuCu3Ur7eQLjiR+ymJ+HhwDGUXQBz7GADSQyrM=) 2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:59:00:da:24:41:bf:39:a7:db:f4:16:f9:c8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Validity Not Before: Dec 6 23:01:45 2025 GMT Not After : Dec 7 23:01:45 2025 GMT Subject: CN=6e66543ccc57ced9e6333e95e68314422322451c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:b2:6d:f9:3c:15:8e:45:69:33:1b:0c:b1: 75:32:f3:fd:6b:44:6c:a8:e8:4d:9c:88:e4:6f:ca: cf:87:ac:e0:8a:e7:8a:18:48:71:0a:7e:98:b4:a5: be:f8:8f:23:35:1d:22:7a:15:fd:ff:ad:bd:71:b3: 6b:39:4a:05:61:c5:00:22:75:88:15:84:a2:8a:2c: 37:41:65:09:a9:bd:81:fe:f1:34:8d:81:c5:db:f4: 4a:46:f8:7a:0b:ea:21:c1:cb:ea:3b:64:60:9f:ab: 04:1c:51:84:e7:3c:1e:b4:a8:ed:7a:d0:c6:bc:88: 59:75:a9:3c:ed:67:cc:72:97:23:a9:d6:cb:f2:7d: 64:96:28:34:40:30:ed:3c:82:10:13:3a:6a:a8:b6: 54:b8:60:b6:bc:ef:73:00:35:a4:a2:89:e6:3e:bf: 9f:b9:f7:3f:69:b6:41:ac:1b:42:37:77:18:2f:68: 1d:07:36:b0:b0:40:35:43:60:9f:3b:d2:81:62:46: 96:96:c1:e9:aa:dd:17:4d:b1:57:57:c0:ae:af:d0: 66:5c:82:1c:53:00:96:4a:9a:cb:6e:be:6f:63:a6: 9b:77:c7:0d:20:f0:76:64:3c:b9:be:8b:55:40:03: 2e:96:08:07:51:4c:98:c1:ed:3c:0c:c0:76:0b:0c: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:54:3C:CC:57:CE:D9:E6:33:3E:95:E6:83:14:42:23:22:45:1C X509v3 Authority Key Identifier: keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f5:ff:6c:31:17:b7:1a:fd:3b:86:7b:bf:17:8f:00:ab:63: 79:54:9c:50:29:62:2f:e9:a1:52:35:47:d4:20:d9:a9:71:2b: 8e:ac:0e:c4:50:8f:15:2c:d7:6d:98:e5:41:6d:93:d4:9a:12: 39:45:8c:41:eb:04:d3:aa:8a:4c:16:93:5c:a1:67:17:e9:c8: 85:80:41:8f:26:f8:ef:4d:84:49:bd:40:d2:b0:a6:4a:8b:22: 82:c4:c0:8c:f6:53:29:db:b4:ea:68:dd:64:ba:38:71:0f:90: f8:21:12:9d:45:e2:e0:6a:1a:2c:51:d0:5d:c5:70:32:b6:b4: 3c:81:22:d9:35:c0:7d:9c:a7:dc:5a:4c:dd:1e:1a:ea:82:18: 9a:b5:3a:47:04:fa:85:a5:d9:9b:6e:97:c3:30:46:c5:d6:75: b7:49:29:d6:a3:7f:d2:01:f5:6f:95:b3:4b:40:f9:d0:16:99: 86:4b:b9:dd:90:86:ab:14:0d:ed:98:f3:f9:89:f4:f2:85:cc: 5e:4f:d7:d2:a7:03:2b:bf:76:69:ba:0a:4e:e2:c0:f6:84:5c: 05:92:64:85:f0:a7:e3:ca:58:0e:ac:1a:0e:a4:c1:3b:e3:08: 3e:43:91:14:9c:3f:0c:71:4e:0e:7e:0f:92:0e:b5:73:86:fa: 7e:52:d5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lkA2iRBvzmn2/QW+cg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh MTY2MWMwHhcNMjUxMjA2MjMwMTQ1WhcNMjUxMjA3MjMwMTQ1WjAzMTEwLwYDVQQD Eyg2ZTY2NTQzY2NjNTdjZWQ5ZTYzMzNlOTVlNjgzMTQ0MjIzMjI0NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVSybfk8FY5FaTMbDLF1MvP9a0Rs qOhNnIjkb8rPh6zgiueKGEhxCn6YtKW++I8jNR0iehX9/629cbNrOUoFYcUAInWI FYSiiiw3QWUJqb2B/vE0jYHF2/RKRvh6C+ohwcvqO2Rgn6sEHFGE5zwetKjtetDG vIhZdak87WfMcpcjqdbL8n1klig0QDDtPIIQEzpqqLZUuGC2vO9zADWkoonmPr+f ufc/abZBrBtCN3cYL2gdBzawsEA1Q2CfO9KBYkaWlsHpqt0XTbFXV8Cur9BmXIIc UwCWSprLbr5vY6abd8cNIPB2ZDy5votVQAMulggHUUyYwe08DMB2CwxW9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5mVDzMV87Z5jM+leaDFEIjIkUcMB8GA1UdIwQY MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1 LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPX/bDEX txr9O4Z7vxePAKtjeVScUCliL+mhUjVH1CDZqXErjqwOxFCPFSzXbZjlQW2T1JoS OUWMQesE06qKTBaTXKFnF+nIhYBBjyb4702ESb1A0rCmSosigsTAjPZTKdu06mjd ZLo4cQ+Q+CESnUXi4GoaLFHQXcVwMra0PIEi2TXAfZyn3FpM3R4a6oIYmrU6RwT6 haXZm26XwzBGxdZ1t0kp1qN/0gH1b5WzS0D50BaZhku53ZCGqxQN7Zjz+Yn08oXM Xk/X0qcDK792aboKTuLA9oRcBZJkhfCn48pYDqwaDqTBO+MIPkORFJw/DHFODn4P kg61c4b6flLVVg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:01 2025 by rpki-client