This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json) Hash identifier: +lDoSEIjoczuknmWv5stnL0nlpvliUeaA22cKzDPj/U= Subject key identifier: B9:59:9A:E0:07:C5:88:3F:11:00:A9:EF:C0:CE:F0:23:9C:2C:D4:9E Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca Certificate serial: 019AF1648DA3B0C0A93FF4B5844FEA2F3829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: 5QhRVyXyzcxDOjfYnL7JvCsS5dpM3LbOFgoJ/h401kk=) 2: H9du-Jn6MCQXm1t_8iJu9f0WTBU.roa (hash: LU8c8guDjsQyLHDNAitm6LJgUmtfwruCob1ccYNDcss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8d:a3:b0:c0:a9:3f:f4:b5:84:4f:ea:2f:38:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=b9599ae007c5883f1100a9efc0cef0239c2cd49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:b5:10:ba:a9:6d:d9:e5:a9:22:a8:2f:06: ba:a3:f4:b6:2a:02:a3:e8:52:56:f7:70:38:76:bb: 38:82:90:63:0a:bc:ad:25:89:3f:68:fd:e3:3a:43: 02:d6:19:ba:b4:c4:30:15:e2:04:c1:1d:70:47:73: 16:25:29:b5:8a:d1:09:2a:e6:03:4c:40:2d:30:c3: ed:62:ba:a6:da:13:bd:ef:be:89:75:8c:9a:f5:7b: eb:ae:b7:7b:04:2f:7b:1e:3e:e8:3b:b3:d5:8d:2a: c2:bb:2e:56:31:5d:4e:1e:a3:45:e5:c3:37:60:e8: eb:29:8b:a7:42:b9:b8:5a:11:0d:0e:34:ef:94:f7: 83:a4:17:46:6e:70:17:0a:80:64:ad:e5:ab:a3:65: c7:44:65:2c:8a:90:3e:cd:23:d2:91:7e:a2:45:77: 79:96:fa:30:d4:d3:ba:f2:30:2f:3f:61:c4:59:af: 28:00:f8:df:86:5a:53:33:41:6f:9f:1f:b4:c8:6a: fe:59:b3:c9:e0:c8:f2:1c:0e:6e:f8:1e:d5:ba:55: f0:c6:a2:82:1e:08:d8:74:98:bd:0f:77:b7:e9:5c: e4:b2:57:e8:45:ce:f6:21:8b:2f:8d:a7:d6:8e:37: 6b:4e:53:3a:43:2c:46:b2:eb:c8:7a:cf:43:3b:90: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:9A:E0:07:C5:88:3F:11:00:A9:EF:C0:CE:F0:23:9C:2C:D4:9E X509v3 Authority Key Identifier: keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:aa:8a:70:d7:f2:7d:4e:b7:9c:27:78:53:f0:2c:c1:cc:9e: 70:67:bb:5a:78:6e:1a:c7:55:47:88:32:f3:2d:49:c0:86:fc: 54:cb:e2:b7:3f:3a:a3:f7:61:d4:f7:64:55:f0:fc:7a:07:ad: 3c:d9:41:96:81:dd:d6:f6:9f:77:58:ea:f7:40:df:84:42:71: ea:8d:9f:76:72:d6:3f:a5:af:52:dd:ff:d0:85:49:a8:db:f7: 6b:33:07:19:5d:d7:66:42:93:a2:55:b4:e7:92:be:ea:25:8c: 9e:b9:8e:72:66:7b:10:a3:59:45:d1:8e:7f:c6:08:01:7b:a8: 46:c3:44:02:ff:1b:89:71:08:c7:73:a8:d0:0a:c3:fa:54:b4: b3:bd:e8:4c:6c:5a:8d:21:5f:ea:9a:92:1d:94:fe:d5:3d:97: 03:98:5e:e5:d0:2e:1d:8f:4e:1a:16:50:4b:3e:f7:3c:13:db: c7:f9:8c:23:12:e8:93:5a:0b:f4:f0:31:64:79:d8:04:9e:62: dd:72:c5:f3:a9:97:ff:1e:4b:0c:f7:01:cc:1e:4c:90:4a:16: 5f:03:fb:52:65:38:75:84:a8:76:46:0e:6e:3f:0c:ee:ff:5c: 35:a8:f7:d9:f1:7a:25:bc:59:78:16:2f:cc:26:39:f9:2e:a3: 97:79:9e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI2jsMCpP/S1hE/qLzgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh ZTdjY2EwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD EyhiOTU5OWFlMDA3YzU4ODNmMTEwMGE5ZWZjMGNlZjAyMzljMmNkNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupO1ELqpbdnlqSKoLwa6o/S2KgKj 6FJW93A4drs4gpBjCrytJYk/aP3jOkMC1hm6tMQwFeIEwR1wR3MWJSm1itEJKuYD TEAtMMPtYrqm2hO9776JdYya9Xvrrrd7BC97Hj7oO7PVjSrCuy5WMV1OHqNF5cM3 YOjrKYunQrm4WhENDjTvlPeDpBdGbnAXCoBkreWro2XHRGUsipA+zSPSkX6iRXd5 lvow1NO68jAvP2HEWa8oAPjfhlpTM0Fvnx+0yGr+WbPJ4MjyHA5u+B7VulXwxqKC HgjYdJi9D3e36VzkslfoRc72IYsvjafWjjdrTlM6QyxGsuvIes9DO5BJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlZmuAHxYg/EQCp78DO8COcLNSeMB8GA1UdIwQY MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt MzFiOTUwMjcwNTM2LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2 LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKqKcNfy fU63nCd4U/AswcyecGe7WnhuGsdVR4gy8y1JwIb8VMvitz86o/dh1PdkVfD8eget PNlBloHd1vafd1jq90DfhEJx6o2fdnLWP6WvUt3/0IVJqNv3azMHGV3XZkKTolW0 55K+6iWMnrmOcmZ7EKNZRdGOf8YIAXuoRsNEAv8biXEIx3Oo0ArD+lS0s73oTGxa jSFf6pqSHZT+1T2XA5he5dAuHY9OGhZQSz73PBPbx/mMIxLok1oL9PAxZHnYBJ5i 3XLF86mX/x5LDPcBzB5MkEoWXwP7UmU4dYSodkYObj8M7v9cNaj32fF6JbxZeBYv zCY5+S6jl3menw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:50:52 2025 by rpki-client