This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json) Hash identifier: 01E8vFV+jq/sDZMH5QQ/XIDkO87G9GCeKhD8WSKRnGM= Subject key identifier: BC:7F:E6:08:A4:09:24:6C:A5:68:DB:73:DE:34:0E:A1:D9:0C:EF:51 Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4 Certificate serial: 019AF0BEF8268819E06357E3D1037BAA5CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: UXGYF4bqTKSSWSDw4fB7Mga+RIG8I2RPwO6PG1RstAA=) 2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f8:26:88:19:e0:63:57:e3:d1:03:7b:aa:5c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4 Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=bc7fe608a409246ca568db73de340ea1d90cef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:75:2d:85:8f:69:27:8c:2e:98:01:4b:41: c9:91:f8:70:d8:bd:56:d7:96:4e:af:a3:5f:5e:99: a2:a2:0b:98:c6:15:c6:9f:25:5c:59:ec:56:77:ad: 76:63:ce:1c:c7:c6:09:09:d2:45:c8:40:1d:22:e3: c1:d1:16:f6:21:ad:91:42:d2:62:56:69:77:a9:a8: 4c:87:d3:10:a4:66:45:ce:0f:1f:0e:ac:eb:04:4b: de:41:f8:c8:78:15:d5:5e:91:28:99:00:af:1b:73: 3f:61:be:cd:82:80:c5:b1:ca:4b:32:4d:3c:64:09: c6:4d:ac:fc:54:b5:94:1b:6b:6e:50:25:b3:2d:1d: 21:62:3e:96:d0:6f:6a:87:1b:63:61:50:93:98:9a: 5f:ae:ec:67:ac:db:96:b5:ee:bc:d8:12:8d:5e:09: 54:f3:5b:99:f5:7f:a5:be:09:33:da:56:ae:2c:e9: 97:88:99:b8:3f:76:f3:27:c7:a3:18:44:6e:e8:8f: 64:7c:9a:14:86:de:3b:f4:ad:46:67:a4:4e:ec:0e: 09:e2:83:be:bd:6f:b9:c3:ef:75:cf:c2:4f:38:26: 85:5d:7d:14:82:dd:b5:c5:54:ee:f8:65:14:68:1b: 2f:b3:c7:10:43:d8:c1:a5:a2:7b:f6:8c:fc:29:8b: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:E6:08:A4:09:24:6C:A5:68:DB:73:DE:34:0E:A1:D9:0C:EF:51 X509v3 Authority Key Identifier: keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ce:99:cc:8f:62:ad:40:83:c0:a5:88:73:f2:b0:ff:b2:75: 45:c6:8b:c7:24:82:3e:c6:b9:cc:59:16:d1:3d:f9:4f:c4:f4: 62:14:6b:ba:fe:f9:a4:4b:e8:e9:8b:51:2b:a4:2b:0b:9d:87: 82:c2:2b:b9:e3:fa:8a:d7:eb:b2:1c:4b:cc:be:60:ce:0f:23: cf:b9:30:6e:df:ef:8f:03:4c:35:95:d7:76:7c:30:89:5b:4d: 88:78:df:fb:30:a2:a5:3f:b2:65:b8:bc:a4:f0:18:65:b3:3b: 0f:bd:1f:c4:8e:4f:65:1b:5b:0a:de:49:9b:17:fd:2f:21:4a: c7:ef:a3:d3:2f:c5:90:4e:94:6b:58:37:5e:46:92:08:e9:46: 29:b8:3c:be:5f:73:de:90:5e:f7:c2:e1:9e:5b:ad:0a:cf:91: c4:0c:97:a3:c9:41:1b:ba:ac:22:30:77:98:1e:45:75:36:14: a8:03:eb:74:66:e5:94:ef:8c:8d:74:6a:ca:77:c0:9c:9f:d8: a4:ee:6b:9c:52:cb:0f:6e:16:51:41:0c:7c:6d:da:24:61:ea: 76:7a:bc:f3:22:bd:3e:29:75:22:27:60:d7:c0:65:1f:c8:c6: 21:94:ab:ad:23:5b:c6:41:1f:a7:88:c7:c5:f8:78:43:69:12: ac:a0:96:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvgmiBngY1fj0QN7qlz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5 MGVjZjQwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD EyhiYzdmZTYwOGE0MDkyNDZjYTU2OGRiNzNkZTM0MGVhMWQ5MGNlZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcl1LYWPaSeMLpgBS0HJkfhw2L1W 15ZOr6NfXpmioguYxhXGnyVcWexWd612Y84cx8YJCdJFyEAdIuPB0Rb2Ia2RQtJi Vml3qahMh9MQpGZFzg8fDqzrBEveQfjIeBXVXpEomQCvG3M/Yb7NgoDFscpLMk08 ZAnGTaz8VLWUG2tuUCWzLR0hYj6W0G9qhxtjYVCTmJpfruxnrNuWte682BKNXglU 81uZ9X+lvgkz2lauLOmXiJm4P3bzJ8ejGERu6I9kfJoUht479K1GZ6RO7A4J4oO+ vW+5w+91z8JPOCaFXX0Ugt21xVTu+GUUaBsvs8cQQ9jBpaJ79oz8KYs6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx/5gikCSRspWjbc940DqHZDO9RMB8GA1UdIwQY MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3 LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc6ZzI9i rUCDwKWIc/Kw/7J1RcaLxySCPsa5zFkW0T35T8T0YhRruv75pEvo6YtRK6QrC52H gsIrueP6itfrshxLzL5gzg8jz7kwbt/vjwNMNZXXdnwwiVtNiHjf+zCipT+yZbi8 pPAYZbM7D70fxI5PZRtbCt5Jmxf9LyFKx++j0y/FkE6Ua1g3XkaSCOlGKbg8vl9z 3pBe98LhnlutCs+RxAyXo8lBG7qsIjB3mB5FdTYUqAPrdGbllO+MjXRqynfAnJ/Y pO5rnFLLD24WUUEMfG3aJGHqdnq88yK9Pil1Iidg18BlH8jGIZSrrSNbxkEfp4jH xfh4Q2kSrKCWcA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:20 2025 by rpki-client