This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json) Hash identifier: Y25j3el+2CNmpL4CNuH1y8A8f+Vw7jIAIxRbs4MLBcM= Subject key identifier: 15:81:36:D5:1E:4A:2D:F6:36:4D:05:CA:2D:26:6F:15:53:DE:52:04 Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d Certificate serial: 019B31FAFC06E40711689E8D3A0FB43213E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 15:01:30 +0000 Manifest this update: Thu 18 Dec 2025 15:01:30 +0000 Manifest next update: Fri 19 Dec 2025 15:01:30 +0000 Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: PP1ozSPgU5qyG3xosxYUoPOJEFS9qQTXSdSTkuaVCtQ=) 2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:fc:06:e4:07:11:68:9e:8d:3a:0f:b4:32:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d Validity Not Before: Dec 18 15:01:30 2025 GMT Not After : Dec 19 15:01:30 2025 GMT Subject: CN=158136d51e4a2df6364d05ca2d266f1553de5204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:3a:e6:9b:df:7e:12:21:64:35:8a:1d:3e: 84:f3:ba:91:86:07:44:8d:d2:34:2a:da:e3:8c:09: 51:6b:25:bc:eb:38:3b:7b:9b:1c:8c:17:8d:38:9d: af:36:48:80:a4:d1:11:7f:66:60:9d:5a:1e:6c:f5: de:a6:1c:71:9a:eb:11:0b:76:7d:ec:a9:fd:35:3e: a9:9d:46:a4:03:8e:66:b9:67:2f:7c:8f:40:1a:bd: aa:26:85:2b:ad:4e:59:d3:87:f5:e9:82:03:57:53: 13:76:8e:36:58:ef:98:56:50:bc:7f:14:61:c1:2e: ed:1d:ba:0e:3d:b0:7e:f5:2f:99:a0:09:79:5b:cd: 47:7d:0b:e5:99:95:52:2c:d8:04:ef:47:3c:9d:34: 33:84:7c:74:32:a8:c2:23:c2:d5:09:c8:88:11:f3: 11:c6:e8:cf:80:af:28:54:40:9d:30:17:1b:cd:76: 2b:3e:3d:fc:cd:03:b0:d2:2a:29:8b:10:6d:4d:ed: 91:e8:80:12:18:de:eb:8f:cf:44:6a:c9:e9:50:ba: a9:37:6a:38:78:c0:a7:27:64:6c:88:28:e3:ba:a0: 81:75:38:d1:c0:b8:93:5e:9b:ab:80:5e:72:ac:d5: ee:13:b7:8b:cd:db:7c:29:50:08:cf:62:bf:c3:e3: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:36:D5:1E:4A:2D:F6:36:4D:05:CA:2D:26:6F:15:53:DE:52:04 X509v3 Authority Key Identifier: keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:18:89:aa:25:ed:28:4a:1e:61:95:26:36:31:06:8e:f7:19: 04:96:75:cb:71:54:69:ca:93:e0:69:f8:ae:bb:46:fa:1d:e7: a0:13:d7:1c:89:85:d3:3f:c9:5a:14:3b:f5:4b:c8:56:c7:2b: 69:af:24:98:61:07:e2:01:ab:40:fd:91:92:22:6d:2d:fe:0a: 2c:19:92:11:e4:16:47:64:48:b1:9d:39:16:a0:d0:6e:e2:11: 65:af:83:2c:28:e0:e6:82:dc:21:1e:4d:30:85:71:33:af:38: b9:41:52:b8:19:b4:ea:47:ba:c8:6b:ff:99:f5:6f:c3:67:a6: 86:86:c0:8d:ac:68:36:64:af:64:08:e2:87:9e:6b:b2:db:e2: 39:88:ca:49:31:4e:29:c7:b2:bb:75:79:30:cb:dc:c3:f9:72: d6:7b:15:a4:da:59:50:f5:c7:9d:ec:ae:35:76:43:a4:4d:d6: ad:3a:60:10:5b:ff:a0:5f:c6:4d:83:ba:69:a9:78:c5:e0:b7: 13:29:f8:43:43:0e:91:9e:ba:21:a7:d7:c2:f7:76:e8:fb:de: f9:6f:6a:42:df:bc:ec:fb:33:aa:21:42:8c:01:71:33:97:4a: 6b:18:5d:0c:2e:8f:b5:7b:5b:ec:63:fe:a3:8c:35:07:1d:fb: e1:3e:8e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+vwG5AcRaJ6NOg+0MhPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi MTc2OGQwHhcNMjUxMjE4MTUwMTMwWhcNMjUxMjE5MTUwMTMwWjAzMTEwLwYDVQQD EygxNTgxMzZkNTFlNGEyZGY2MzY0ZDA1Y2EyZDI2NmYxNTUzZGU1MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmA65pvffhIhZDWKHT6E87qRhgdE jdI0KtrjjAlRayW86zg7e5scjBeNOJ2vNkiApNERf2ZgnVoebPXephxxmusRC3Z9 7Kn9NT6pnUakA45muWcvfI9AGr2qJoUrrU5Z04f16YIDV1MTdo42WO+YVlC8fxRh wS7tHboOPbB+9S+ZoAl5W81HfQvlmZVSLNgE70c8nTQzhHx0MqjCI8LVCciIEfMR xujPgK8oVECdMBcbzXYrPj38zQOw0iopixBtTe2R6IASGN7rj89EasnpULqpN2o4 eMCnJ2RsiCjjuqCBdTjRwLiTXpurgF5yrNXuE7eLzdt8KVAIz2K/w+MV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWBNtUeSi32Nk0Fyi0mbxVT3lIEMB8GA1UdIwQY MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0 LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBiJqiXt KEoeYZUmNjEGjvcZBJZ1y3FUacqT4Gn4rrtG+h3noBPXHImF0z/JWhQ79UvIVscr aa8kmGEH4gGrQP2RkiJtLf4KLBmSEeQWR2RIsZ05FqDQbuIRZa+DLCjg5oLcIR5N MIVxM684uUFSuBm06ke6yGv/mfVvw2emhobAjaxoNmSvZAjih55rstviOYjKSTFO Kceyu3V5MMvcw/ly1nsVpNpZUPXHneyuNXZDpE3WrTpgEFv/oF/GTYO6aal4xeC3 Eyn4Q0MOkZ66IafXwvd26Pve+W9qQt+87PszqiFCjAFxM5dKaxhdDC6PtXtb7GP+ o4w1Bx374T6Ohw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:02:33 2025 by rpki-client