This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft File: Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json) Hash identifier: ETt60NjesyOanzJWp5v97a/usz03ZPkyoj/mmTLC7Z0= Subject key identifier: 14:8D:9D:F2:80:F8:CF:75:20:AA:3A:44:14:61:73:87:41:8E:E4:2C Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A Certificate issuer: /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Certificate serial: 019AFAD62224BA75027C5EFEB66CECD1752D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft Manifest number: 0458 Signing time: Sun 07 Dec 2025 22:02:08 +0000 Manifest this update: Sun 07 Dec 2025 22:02:08 +0000 Manifest next update: Mon 08 Dec 2025 22:02:08 +0000 Files and hashes: 1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: QJsYKIRI2NWg2fnCri5uNV/PYnaV2IWPa1jx07OX3Qw=) 2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d6:22:24:ba:75:02:7c:5e:fe:b6:6c:ec:d1:75:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Validity Not Before: Dec 7 22:02:08 2025 GMT Not After : Dec 8 22:02:08 2025 GMT Subject: CN=148d9df280f8cf7520aa3a4414617387418ee42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:70:cf:36:fb:c9:23:d0:6f:21:0f:38:01: 14:6e:cb:5a:5a:c7:53:85:66:b2:84:70:79:44:87: 75:13:0e:c5:a9:1d:7c:5a:6a:00:ef:3f:d6:7c:92: 93:f7:c7:e3:71:24:92:d2:18:7c:04:4a:5a:a5:a0: 52:d1:c3:cd:a9:ea:f7:20:eb:48:4c:08:3f:bf:d0: eb:15:70:fd:64:92:73:55:94:95:a6:04:3b:f2:b6: 5b:87:a7:73:4e:38:42:46:c0:e9:22:51:7b:62:8f: dc:d6:6d:b6:47:76:a0:44:7e:7c:64:7f:05:66:a9: 76:b8:db:73:de:46:16:0b:45:ed:23:c5:e1:b4:37: 63:37:17:16:8c:40:02:fd:f1:bc:e7:07:f4:81:79: 01:0c:f8:d9:5a:f2:3e:bf:d1:03:ac:c0:90:74:93: 76:97:88:50:56:11:99:5a:d3:bd:06:f9:44:86:9b: 12:8d:db:f5:75:3d:5d:22:fa:a4:f6:a4:e3:e4:5a: 84:7f:05:54:31:57:ec:7c:5a:30:0b:60:12:ac:52: 79:a2:02:bb:a9:09:6d:f9:42:6e:57:42:3e:70:97: 85:fd:50:9b:e2:33:e9:a7:db:f9:45:32:13:a9:60: 55:45:fc:37:8c:8b:1e:d8:b1:ae:65:d3:f3:09:ea: 9d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8D:9D:F2:80:F8:CF:75:20:AA:3A:44:14:61:73:87:41:8E:E4:2C X509v3 Authority Key Identifier: keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:15:95:59:b7:bd:d1:6f:6c:65:f0:ca:11:93:bd:c4:d2:04: aa:27:ef:b1:73:aa:39:f3:fd:6e:28:25:12:d1:d2:54:5e:9f: ad:d9:28:ae:e6:53:87:e0:c9:88:a7:28:c8:d2:9b:60:25:b1: 7a:2f:b5:6c:69:c4:57:e8:3f:f3:6f:54:2f:f6:4a:93:8a:79: 2c:30:cd:8e:f8:23:23:58:3a:66:60:64:6d:e2:e4:47:ea:30: 81:8c:ed:5f:e5:15:e5:92:61:af:d4:3c:11:e9:1e:74:ab:15: 03:a7:af:d6:b3:3c:a7:32:5a:47:63:4d:17:00:cf:1d:1d:0b: 7b:ce:14:44:aa:42:19:40:03:42:63:56:9b:57:32:b6:4c:d4: 44:b2:d5:db:8e:8d:91:8f:17:ed:d7:aa:67:29:a7:56:a4:ee: b1:a2:6d:70:2f:00:84:4a:5f:35:f3:5b:32:c9:08:50:a4:35: ce:0d:c8:5c:e5:aa:e6:c6:34:8b:31:1e:d2:bd:3c:b6:75:ef: fd:2a:d7:2a:25:b5:f6:7c:f7:31:86:c3:9b:ee:59:23:f7:59: 67:88:09:d6:53:87:b7:b9:f7:ac:16:f7:9e:d7:c0:6b:e7:40: 3c:d1:52:28:40:2c:76:92:7a:42:5e:aa:99:fc:03:56:f3:c0: 35:35:71:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61iIkunUCfF7+tmzs0XUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx NGE1NWEwHhcNMjUxMjA3MjIwMjA4WhcNMjUxMjA4MjIwMjA4WjAzMTEwLwYDVQQD EygxNDhkOWRmMjgwZjhjZjc1MjBhYTNhNDQxNDYxNzM4NzQxOGVlNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliNwzzb7ySPQbyEPOAEUbstaWsdT hWayhHB5RId1Ew7FqR18WmoA7z/WfJKT98fjcSSS0hh8BEpapaBS0cPNqer3IOtI TAg/v9DrFXD9ZJJzVZSVpgQ78rZbh6dzTjhCRsDpIlF7Yo/c1m22R3agRH58ZH8F Zql2uNtz3kYWC0XtI8XhtDdjNxcWjEAC/fG85wf0gXkBDPjZWvI+v9EDrMCQdJN2 l4hQVhGZWtO9BvlEhpsSjdv1dT1dIvqk9qTj5FqEfwVUMVfsfFowC2ASrFJ5ogK7 qQlt+UJuV0I+cJeF/VCb4jPpp9v5RTITqWBVRfw3jIse2LGuZdPzCeqdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSNnfKA+M91IKo6RBRhc4dBjuQsMB8GA1UdIwQY MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3 LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERWVWbe9 0W9sZfDKEZO9xNIEqifvsXOqOfP9biglEtHSVF6frdkoruZTh+DJiKcoyNKbYCWx ei+1bGnEV+g/829UL/ZKk4p5LDDNjvgjI1g6ZmBkbeLkR+owgYztX+UV5ZJhr9Q8 EekedKsVA6ev1rM8pzJaR2NNFwDPHR0Le84URKpCGUADQmNWm1cytkzURLLV246N kY8X7deqZymnVqTusaJtcC8AhEpfNfNbMskIUKQ1zg3IXOWq5sY0izEe0r08tnXv /SrXKiW19nz3MYbDm+5ZI/dZZ4gJ1lOHt7n3rBb3ntfAa+dAPNFSKEAsdpJ6Ql6q mfwDVvPANTVxOg== -----END CERTIFICATE-----Generated at Mon Dec 8 07:37:39 2025 by rpki-client