This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json) Hash identifier: j2QbtrMce1CgFpkYAuozP191xION4QPbcC7T4eb8yWs= Subject key identifier: F6:EB:F4:C8:34:9C:3B:27:A3:CD:A5:D3:22:27:80:FE:E5:19:5D:1C Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c Certificate serial: 019AF08882FA2B7D2BAD663166006DAD2EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft Manifest number: 0BAF Signing time: Fri 05 Dec 2025 22:01:09 +0000 Manifest this update: Fri 05 Dec 2025 22:01:09 +0000 Manifest next update: Sat 06 Dec 2025 22:01:09 +0000 Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: W3i7uiVWZf5M1K5L0e4rXrNR7YatUBWLuOV9Sb4XQBg=) 2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:82:fa:2b:7d:2b:ad:66:31:66:00:6d:ad:2e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c Validity Not Before: Dec 5 22:01:09 2025 GMT Not After : Dec 6 22:01:09 2025 GMT Subject: CN=f6ebf4c8349c3b27a3cda5d3222780fee5195d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:f3:99:71:9b:a1:aa:8b:92:6e:26:3e:ad: 7f:4a:07:2b:8b:cb:12:11:bf:87:02:7e:bc:ed:bf: 39:1f:6f:eb:bf:1f:51:d6:59:15:11:31:a3:77:2b: af:aa:00:b9:7c:51:6a:97:a1:d6:fd:b9:a9:f8:4c: 82:99:0b:e0:75:5f:19:a7:c5:d3:8a:de:c2:44:42: 47:61:1d:e3:af:d2:b3:ba:d8:a3:c7:41:aa:2d:40: f6:93:5d:9a:cb:b9:8c:b7:6d:22:46:3d:9f:81:e1: 5d:2e:80:54:52:7d:e4:9e:2a:1e:63:0b:8a:53:87: 79:2d:a6:3a:4e:36:de:bc:04:70:4a:3f:5b:38:b5: ac:af:bf:da:ef:a1:5d:cd:2a:25:5d:c6:f1:52:14: 42:21:ce:3c:ec:dc:7c:89:69:12:c0:3b:05:e8:53: 22:42:bd:c9:0e:95:40:fc:11:42:65:56:cb:79:bc: e8:04:80:fc:5e:62:8f:54:c4:2b:23:00:c2:9c:92: bf:6c:47:c9:3d:3d:d5:98:6d:aa:01:76:62:49:8a: ab:1c:6d:ca:d9:43:af:d9:08:be:7d:4f:32:f8:a9: fb:f9:19:89:40:ae:3f:e3:c5:96:a4:41:88:a8:f9: 28:3f:ae:82:34:39:ec:98:f5:1f:07:af:64:d0:6f: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EB:F4:C8:34:9C:3B:27:A3:CD:A5:D3:22:27:80:FE:E5:19:5D:1C X509v3 Authority Key Identifier: keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c1:4e:9c:70:91:e6:d7:1f:2a:7f:d8:b4:44:be:53:95:76: 2f:00:54:a3:cd:ab:51:07:62:04:b0:8f:2a:79:be:a3:36:9a: 77:82:4a:2b:95:b3:41:9b:a2:dc:b8:25:52:ac:a4:10:ac:19: 30:b2:2a:2a:41:2e:5b:53:d1:83:1d:97:15:ca:05:ae:f6:93: f9:1b:77:74:f2:1b:c3:39:5a:ea:90:67:b5:a6:60:f5:ee:d7: 27:af:ef:1c:65:fd:2c:b5:b0:f6:4a:67:42:2f:e4:0b:d6:ca: d2:53:88:b6:31:7b:6a:97:a6:4c:06:0c:41:20:b4:5f:56:a8: 25:43:39:68:51:78:fc:52:cc:df:94:13:a3:ad:89:51:6a:37: e6:78:64:7f:ad:2e:17:be:bf:16:8f:6f:8b:91:c0:21:7a:9a: ed:e7:1f:5d:9f:de:49:29:c4:79:07:bb:2f:e5:cc:1d:8f:32: 00:0f:34:97:68:b1:74:58:29:6f:3f:ab:3b:58:72:6d:28:bf: c5:00:38:7e:34:28:8c:61:d7:f2:42:b1:60:92:67:cf:0c:10: 97:84:79:b7:d7:87:3d:60:18:ca:79:d6:5e:92:54:ae:56:b3: fb:32:cb:3a:e2:1d:89:f2:64:18:67:67:e6:5c:36:ca:79:88: d9:8e:9d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIL6K30rrWYxZgBtrS76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDA4OWE3MTQ4YjI2MWEwNTllNjY2ZmViYTU5ZjkyYTI2 OGMxNmMwHhcNMjUxMjA1MjIwMTA5WhcNMjUxMjA2MjIwMTA5WjAzMTEwLwYDVQQD EyhmNmViZjRjODM0OWMzYjI3YTNjZGE1ZDMyMjI3ODBmZWU1MTk1ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgfzmXGboaqLkm4mPq1/Sgcri8sS Eb+HAn687b85H2/rvx9R1lkVETGjdyuvqgC5fFFql6HW/bmp+EyCmQvgdV8Zp8XT it7CREJHYR3jr9Kzutijx0GqLUD2k12ay7mMt20iRj2fgeFdLoBUUn3knioeYwuK U4d5LaY6TjbevARwSj9bOLWsr7/a76FdzSolXcbxUhRCIc487Nx8iWkSwDsF6FMi Qr3JDpVA/BFCZVbLebzoBID8XmKPVMQrIwDCnJK/bEfJPT3VmG2qAXZiSYqrHG3K 2UOv2Qi+fU8y+Kn7+RmJQK4/48WWpEGIqPkoP66CNDnsmPUfB69k0G9yqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbr9Mg0nDsno82l0yIngP7lGV0cMB8GA1UdIwQY MBaAFAXQiacUiyYaBZ5mb+uln5KiaMFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEt MWVhYTNmMjJkZjUyLzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEtMWVhYTNmMjJkZjUy LzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMFOnHCR 5tcfKn/YtES+U5V2LwBUo82rUQdiBLCPKnm+ozaad4JKK5WzQZui3LglUqykEKwZ MLIqKkEuW1PRgx2XFcoFrvaT+Rt3dPIbwzla6pBntaZg9e7XJ6/vHGX9LLWw9kpn Qi/kC9bK0lOItjF7apemTAYMQSC0X1aoJUM5aFF4/FLM35QTo62JUWo35nhkf60u F76/Fo9vi5HAIXqa7ecfXZ/eSSnEeQe7L+XMHY8yAA80l2ixdFgpbz+rO1hybSi/ xQA4fjQojGHX8kKxYJJnzwwQl4R5t9eHPWAYynnWXpJUrlaz+zLLOuIdifJkGGdn 5lw2ynmI2Y6d1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:18 2025 by rpki-client