This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json) Hash identifier: 5qQ2trOiyxMjeIE8bka1nwwA9ePrhbXEIYma6ggMo7Q= Subject key identifier: A2:E1:A4:B9:7E:FB:11:3C:87:C7:70:65:25:EF:EA:88:87:17:C3:63 Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Certificate serial: 019B3F7ED3AB2D262BB5DA7B51AE1A22212C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft Manifest number: 10BD Signing time: Sun 21 Dec 2025 06:00:34 +0000 Manifest this update: Sun 21 Dec 2025 06:00:34 +0000 Manifest next update: Mon 22 Dec 2025 06:00:34 +0000 Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=) 2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: NXfi+8wT9rasdhUI2GisNrWWgS923XUHSbX3XzPPqY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d3:ab:2d:26:2b:b5:da:7b:51:ae:1a:22:21:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Validity Not Before: Dec 21 06:00:34 2025 GMT Not After : Dec 22 06:00:34 2025 GMT Subject: CN=a2e1a4b97efb113c87c7706525efea888717c363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:22:20:e2:f8:40:95:a0:10:f7:87:af:74: 02:12:30:1c:0a:31:b4:d9:13:83:0c:f4:3d:3f:22: 0d:a3:e7:94:4e:d8:5c:62:28:8a:ac:4e:7b:58:e8: 8e:f8:fd:62:2f:61:13:31:38:5c:da:4a:5f:34:44: 13:6e:82:57:20:d2:23:27:84:1b:22:60:a9:b6:2e: 93:ae:fd:5e:de:e5:32:90:a7:8f:a1:9a:2b:df:5c: 28:cc:4e:47:d2:13:89:63:52:fc:97:7b:6c:de:76: 40:ca:dc:c9:bd:13:17:34:1e:ef:60:79:a3:16:43: 34:d8:ce:e6:45:a3:c8:d6:bb:42:e8:f1:1f:62:51: 19:38:55:e2:ad:36:b5:b9:d3:75:99:20:8c:7f:2d: 3c:21:7d:fd:3d:9a:8e:b4:7c:eb:1e:3a:ea:bb:c7: a1:eb:ca:58:d2:46:3c:99:f7:bb:a8:a4:65:0a:a7: 7d:6d:2e:fd:d2:70:df:a7:21:31:2b:d7:40:11:af: 25:96:71:0c:b8:df:35:99:e6:06:fe:75:0e:b4:05: de:d4:53:90:62:c4:c5:f8:1c:bd:f3:3c:d4:98:99: 63:da:f7:20:2f:7e:5d:59:40:60:ba:ad:2e:00:c4: 8b:0c:8f:53:5f:24:bc:2f:b3:7d:81:e5:1a:7c:dc: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:A4:B9:7E:FB:11:3C:87:C7:70:65:25:EF:EA:88:87:17:C3:63 X509v3 Authority Key Identifier: keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:23:4f:20:55:0c:4a:e3:fa:60:db:ab:f3:65:0e:3b:cc:73: 95:9f:ee:75:70:1b:23:aa:53:a6:06:83:79:70:54:f5:8c:d4: ce:8d:2e:c4:c3:43:5c:c9:dd:a8:a4:aa:46:64:a6:4c:ea:f2: e7:71:93:1e:ee:e9:c3:85:92:d9:03:de:7d:0f:8c:0c:5d:56: 66:09:e9:42:c8:77:07:9f:9b:c9:75:b5:95:24:d0:17:d3:35: d7:8e:57:bb:98:87:d0:fb:af:4a:67:73:76:6e:8f:e5:7c:0d: 82:ba:ae:70:91:d9:e4:2d:70:59:a3:6d:d7:50:c5:1a:a0:09: 52:5d:05:a6:a6:b6:32:90:71:c0:da:88:a2:09:ea:05:bf:03: c7:87:65:e4:53:5d:fd:8d:ac:e1:60:93:5d:3e:6f:47:f5:87: ac:23:fb:fa:ab:2a:85:9b:8b:e7:26:39:69:6f:a6:46:f1:46: bc:d0:af:be:c9:b0:f9:3e:8c:0b:d7:8e:82:c2:79:94:55:7e: c9:56:c1:4d:5a:69:49:17:b0:a4:43:6c:95:3f:b7:a9:f9:2b: a7:58:4c:93:2f:7b:73:e8:0b:c9:27:43:86:1d:13:eb:5e:20: 2c:57:44:3e:e2:98:d3:11:fa:55:83:e5:5c:66:cf:0d:a3:c2: a6:dc:31:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftOrLSYrtdp7Ua4aIiEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm YzRhNjgwHhcNMjUxMjIxMDYwMDM0WhcNMjUxMjIyMDYwMDM0WjAzMTEwLwYDVQQD EyhhMmUxYTRiOTdlZmIxMTNjODdjNzcwNjUyNWVmZWE4ODg3MTdjMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmsiIOL4QJWgEPeHr3QCEjAcCjG0 2RODDPQ9PyINo+eUTthcYiiKrE57WOiO+P1iL2ETMThc2kpfNEQTboJXINIjJ4Qb ImCpti6Trv1e3uUykKePoZor31wozE5H0hOJY1L8l3ts3nZAytzJvRMXNB7vYHmj FkM02M7mRaPI1rtC6PEfYlEZOFXirTa1udN1mSCMfy08IX39PZqOtHzrHjrqu8eh 68pY0kY8mfe7qKRlCqd9bS790nDfpyExK9dAEa8llnEMuN81meYG/nUOtAXe1FOQ YsTF+By98zzUmJlj2vcgL35dWUBguq0uAMSLDI9TXyS8L7N9geUafNwt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLhpLl++xE8h8dwZSXv6oiHF8NjMB8GA1UdIwQY MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct ZDVhMGIwOThkZjM0LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0 LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCNPIFUM SuP6YNur82UOO8xzlZ/udXAbI6pTpgaDeXBU9YzUzo0uxMNDXMndqKSqRmSmTOry 53GTHu7pw4WS2QPefQ+MDF1WZgnpQsh3B5+byXW1lSTQF9M1145Xu5iH0PuvSmdz dm6P5XwNgrqucJHZ5C1wWaNt11DFGqAJUl0Fpqa2MpBxwNqIognqBb8Dx4dl5FNd /Y2s4WCTXT5vR/WHrCP7+qsqhZuL5yY5aW+mRvFGvNCvvsmw+T6MC9eOgsJ5lFV+ yVbBTVppSRewpENslT+3qfkrp1hMky97c+gLySdDhh0T614gLFdEPuKY0xH6VYPl XGbPDaPCptwxWg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:22 2025 by rpki-client