This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json) Hash identifier: 0R3KIyUj+Y5XG3mVcNdIGLcEJxEctLSCjuvGjVSjvzg= Subject key identifier: A0:25:9E:B2:72:F4:3F:CF:EF:F1:E9:80:ED:E1:B9:F3:C4:61:72:8E Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Certificate serial: 019B3F48D2189E2C839B48C54CE58C37A93F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft Manifest number: 1468 Signing time: Sun 21 Dec 2025 05:01:35 +0000 Manifest this update: Sun 21 Dec 2025 05:01:35 +0000 Manifest next update: Mon 22 Dec 2025 05:01:35 +0000 Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: xoPizsMTI2bZd2u2V6X+nYVCz76YYi//DT4/MIqvrRg=) 2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:d2:18:9e:2c:83:9b:48:c5:4c:e5:8c:37:a9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Validity Not Before: Dec 21 05:01:35 2025 GMT Not After : Dec 22 05:01:35 2025 GMT Subject: CN=a0259eb272f43fcfeff1e980ede1b9f3c461728e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:6b:f2:a5:68:7c:f4:13:61:7c:48:3b:7b: 84:60:49:11:88:64:2d:84:ba:ed:32:e6:2c:c0:33: 9f:14:33:ab:5c:c1:0e:3e:03:8e:04:23:84:7f:30: 24:0a:3d:af:e0:dd:7c:0f:13:2c:9b:f2:05:74:93: 6d:0c:0c:12:e6:b1:63:09:5f:d6:35:2c:26:14:a2: fe:30:90:cc:87:36:d3:cd:f5:ed:c3:7d:e6:7e:f2: 96:ba:76:7d:11:d3:5f:89:79:f3:b6:c9:44:55:e3: f6:c0:1b:37:26:d0:b0:b6:ba:08:1f:58:38:a5:e0: 1a:ba:3d:c1:f7:10:fe:6d:44:3f:4d:e2:54:cf:b7: db:c0:ae:04:65:d4:9f:a9:f7:aa:81:45:57:de:5e: d2:2a:d8:36:9d:ad:b8:62:7e:67:9d:ab:aa:31:da: 35:35:f2:42:71:13:e9:b3:14:21:5a:44:05:ec:cf: 62:0f:39:fe:43:40:d6:b6:58:50:af:7e:b8:77:f1: 94:75:0b:f7:18:0a:e5:ca:0d:52:92:9b:07:aa:85: f3:37:24:b5:92:a5:ab:02:41:9e:a2:46:26:f0:cc: 69:70:ed:6a:9b:59:1e:b1:d3:7f:21:c6:0a:5b:62: f3:e1:80:f2:94:05:3e:9c:cd:55:05:4a:6e:6c:83: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:9E:B2:72:F4:3F:CF:EF:F1:E9:80:ED:E1:B9:F3:C4:61:72:8E X509v3 Authority Key Identifier: keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d7:ac:32:b9:6e:fc:3c:8f:ef:be:bc:90:89:3f:de:68:ea: 14:04:f1:52:27:e4:b0:af:17:34:ae:2e:4b:50:1c:68:48:ab: d0:9b:03:c3:f3:53:8e:52:40:50:b2:f8:3c:0e:52:f4:59:52: 6d:e0:4c:f8:cf:5f:81:20:e9:d3:a2:92:5f:2a:b1:d7:b6:b6: 26:85:f5:04:bf:74:ff:06:c1:83:f1:50:5f:b6:c1:37:69:d5: 4a:82:a4:f9:f4:1a:17:19:bb:53:5b:a8:01:5a:34:0b:14:76: 71:e5:de:21:31:40:3d:3b:c8:47:22:82:9d:46:55:cc:f8:c4: 0e:41:a6:a1:ab:d5:58:bd:98:65:bd:2e:84:98:4b:ef:4a:d2: 3e:cb:98:e8:7a:fb:1f:92:6b:d4:ac:b6:1f:87:f9:93:47:74: 02:94:c8:22:27:00:c1:44:4b:08:fb:d8:68:0a:29:17:38:8b: 3a:e0:0e:72:60:e4:25:f5:fc:90:67:cf:45:e3:a1:38:52:6e: 80:bd:c9:cf:2d:c9:0d:63:66:fd:6c:75:5b:1c:be:3b:2c:2f: bf:01:7a:ca:37:ad:3f:a5:65:f5:42:c4:ff:c1:ae:e2:92:25: 3d:0b:27:4f:d3:59:f7:f0:63:21:7e:78:18:94:73:f0:59:5f: 22:8f:8f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SNIYniyDm0jFTOWMN6k/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh MTY2MWMwHhcNMjUxMjIxMDUwMTM1WhcNMjUxMjIyMDUwMTM1WjAzMTEwLwYDVQQD EyhhMDI1OWViMjcyZjQzZmNmZWZmMWU5ODBlZGUxYjlmM2M0NjE3MjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF9r8qVofPQTYXxIO3uEYEkRiGQt hLrtMuYswDOfFDOrXMEOPgOOBCOEfzAkCj2v4N18DxMsm/IFdJNtDAwS5rFjCV/W NSwmFKL+MJDMhzbTzfXtw33mfvKWunZ9EdNfiXnztslEVeP2wBs3JtCwtroIH1g4 peAauj3B9xD+bUQ/TeJUz7fbwK4EZdSfqfeqgUVX3l7SKtg2na24Yn5nnauqMdo1 NfJCcRPpsxQhWkQF7M9iDzn+Q0DWtlhQr364d/GUdQv3GArlyg1SkpsHqoXzNyS1 kqWrAkGeokYm8MxpcO1qm1kesdN/IcYKW2Lz4YDylAU+nM1VBUpubIO4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAlnrJy9D/P7/HpgO3hufPEYXKOMB8GA1UdIwQY MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1 LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9esMrlu /DyP7768kIk/3mjqFATxUifksK8XNK4uS1AcaEir0JsDw/NTjlJAULL4PA5S9FlS beBM+M9fgSDp06KSXyqx17a2JoX1BL90/wbBg/FQX7bBN2nVSoKk+fQaFxm7U1uo AVo0CxR2ceXeITFAPTvIRyKCnUZVzPjEDkGmoavVWL2YZb0uhJhL70rSPsuY6Hr7 H5Jr1Ky2H4f5k0d0ApTIIicAwURLCPvYaAopFziLOuAOcmDkJfX8kGfPReOhOFJu gL3Jzy3JDWNm/Wx1Wxy+OywvvwF6yjetP6Vl9ULE/8Gu4pIlPQsnT9NZ9/BjIX54 GJRz8FlfIo+Pag== -----END CERTIFICATE-----Generated at Sun Dec 21 08:48:04 2025 by rpki-client