This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json) Hash identifier: /5PBeDQwDJRBvh7d/zvWReK2InN/0aJrAAFTcdvQhDQ= Subject key identifier: 4B:D7:05:8C:5B:65:D3:CE:2C:CB:FB:5D:D7:8E:3E:4B:83:CB:C0:31 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019AF352312E72DAD4CCA4F370D2B80F7BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft Manifest number: 025C Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: VfTIgcpB0z3UW+Kk3gsVmIX19w+yXfOePiRXefcXOB0=) 2: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=) 3: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=) 4: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (hash: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=) 5: lf7VZmq2rsBXJedCujxEgR3JSRw.roa (hash: i4ihoqVdnAGdUVkmGd9SoSzj6rV5e9gZRKeKMlY+OMU=) 6: nUED803VQA3FQMxxixbYPvvT1fY.roa (hash: 94UVai/ELIeCASHwbPKqhrh8AQ5arAyWotHfhfl12OU=) 7: ru7w0W3lQckov7VLXi2IdFlGxc8.roa (hash: vKg9HC/GY7EtcTEA0K5g2y1Kwk8jYnfJyEo6IYPl+Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:31:2e:72:da:d4:cc:a4:f3:70:d2:b8:0f:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=4bd7058c5b65d3ce2ccbfb5dd78e3e4b83cbc031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:84:86:76:f2:a6:ec:2d:9f:3d:42:e7:6a: 33:2f:fe:32:f3:c9:3f:9f:98:83:a8:80:16:1b:a7: 5c:a1:33:46:c3:d0:7d:5a:88:96:e2:e2:f4:2e:74: 69:4b:8a:18:db:50:b6:d6:87:8a:84:59:31:84:04: 76:cb:c6:f3:00:ca:91:41:b4:89:6b:19:7e:73:6b: b2:ec:bb:21:0a:8f:f9:b1:65:03:19:f6:85:f6:91: 1e:2c:68:40:fd:17:2e:a8:28:b5:77:36:88:89:2c: 84:89:c3:95:e4:80:62:7d:15:a3:e9:6c:0a:5c:93: 47:2c:e4:cf:5c:6f:f8:f8:d8:37:28:bd:d0:6b:2f: d1:24:ea:e0:cb:19:f7:47:fa:92:c8:3c:e9:ec:e7: 4c:34:4d:4a:e9:7f:15:66:9f:3a:f0:8f:02:ba:fe: f0:87:c1:ad:d3:85:0c:fa:b0:ac:50:34:00:f1:1d: 4e:ad:b9:bd:f7:d3:79:73:0a:88:dd:e4:b7:ca:ee: 80:31:cb:ca:66:d3:4c:1f:59:04:25:33:9f:68:65: 78:01:48:01:db:0e:e8:0b:4c:42:80:0f:e5:47:37: 03:71:de:3e:6e:8b:0e:58:06:de:ef:35:94:77:9b: 23:e9:a2:87:22:b9:12:db:6e:37:4d:a7:29:11:e5: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:05:8C:5B:65:D3:CE:2C:CB:FB:5D:D7:8E:3E:4B:83:CB:C0:31 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0f:18:88:bd:1d:83:68:30:60:22:bc:c8:01:12:21:13:85: 38:15:64:78:c2:ca:48:e8:0b:5f:dd:71:9d:1a:4e:f4:12:dc: 23:c6:9c:54:40:38:23:d5:53:b9:d0:0f:24:ef:a1:af:43:ff: 6a:c5:36:00:f7:8c:a0:28:97:18:b6:95:07:1d:85:22:b2:09: c1:5e:fd:d4:ac:36:a1:38:c1:6b:9d:f2:58:1d:88:35:5e:03: b0:a6:37:2e:ab:3c:11:91:f0:be:e8:97:bd:6b:cf:55:9e:a6: d8:69:78:40:2f:8b:91:00:0e:8c:67:39:8d:59:75:38:45:b8: 12:a9:84:50:29:ba:ef:ba:3d:12:b8:fa:39:0c:79:aa:91:22: 9b:cf:b3:ce:de:76:d5:6f:bd:4e:a9:fe:bf:c5:b8:26:b3:bf: 92:c6:af:94:44:01:6b:08:bc:8c:c6:bd:5a:e6:32:7a:21:55: 24:f0:d2:bd:f0:89:fb:dc:86:75:89:73:a9:43:5b:9a:c0:3f: 0b:41:d7:ab:3f:6e:50:ce:83:82:f5:6c:f7:17:e9:ef:42:b9: e5:7e:ff:e2:f2:13:15:b5:1f:1a:ea:d9:04:a6:26:50:06:1b: 35:1e:71:97:7a:50:50:b5:8f:c3:56:dd:23:1c:98:27:c2:49: bc:ce:f7:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjEuctrUzKTzcNK4D3vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD Eyg0YmQ3MDU4YzViNjVkM2NlMmNjYmZiNWRkNzhlM2U0YjgzY2JjMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSEhnbypuwtnz1C52ozL/4y88k/ n5iDqIAWG6dcoTNGw9B9WoiW4uL0LnRpS4oY21C21oeKhFkxhAR2y8bzAMqRQbSJ axl+c2uy7LshCo/5sWUDGfaF9pEeLGhA/RcuqCi1dzaIiSyEicOV5IBifRWj6WwK XJNHLOTPXG/4+Ng3KL3Qay/RJOrgyxn3R/qSyDzp7OdMNE1K6X8VZp868I8Cuv7w h8Gt04UM+rCsUDQA8R1Orbm999N5cwqI3eS3yu6AMcvKZtNMH1kEJTOfaGV4AUgB 2w7oC0xCgA/lRzcDcd4+bosOWAbe7zWUd5sj6aKHIrkS2243TacpEeXDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvXBYxbZdPOLMv7XdeOPkuDy8AxMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA8YiL0d g2gwYCK8yAESIROFOBVkeMLKSOgLX91xnRpO9BLcI8acVEA4I9VTudAPJO+hr0P/ asU2APeMoCiXGLaVBx2FIrIJwV791Kw2oTjBa53yWB2INV4DsKY3Lqs8EZHwvuiX vWvPVZ6m2Gl4QC+LkQAOjGc5jVl1OEW4EqmEUCm677o9Erj6OQx5qpEim8+zzt52 1W+9Tqn+v8W4JrO/ksavlEQBawi8jMa9WuYyeiFVJPDSvfCJ+9yGdYlzqUNbmsA/ C0HXqz9uUM6DgvVs9xfp70K55X7/4vITFbUfGurZBKYmUAYbNR5xl3pQULWPw1bd IxyYJ8JJvM73kA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:46 2025 by rpki-client