This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json) Hash identifier: hYmGg7dI1mZPzRKo66tcwiQb4AQzgsiDmHR4g374+E0= Subject key identifier: A2:F5:B4:ED:31:73:DE:86:DE:21:71:27:F7:39:B4:00:30:89:44:AB Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Certificate serial: 019AF3528348326BFB010509C46C06E6969E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=) 2: TtsJ_9irph6KMpr-0Unxq5mv0Pk.roa (hash: KdfI5XrAnT/kZVbthzfs9Tp5F0pVhQnXMy58T6F38qY=) 3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: gmnaM0edtQiSSnv0buQZM0u1jg8BScfWsp26C+GMauk=) 4: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (hash: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=) 5: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:83:48:32:6b:fb:01:05:09:c4:6c:06:e6:96:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=a2f5b4ed3173de86de217127f739b400308944ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5c:ad:42:02:91:48:fc:f9:a6:aa:92:a9:ca: 67:39:14:dd:59:aa:ae:05:ff:79:88:b6:e5:1e:37: 71:9d:6f:2c:50:47:d4:c8:55:b6:d0:57:1c:06:dd: 85:33:db:2c:a9:b0:13:c1:cf:ae:97:51:23:37:ac: 60:ea:42:46:2e:eb:7c:08:58:39:80:af:f1:ee:f5: 3e:e1:66:fa:d1:80:bd:ab:6c:1d:76:6d:9b:5b:9f: 4c:65:e6:59:c5:ff:a8:e4:21:63:57:a3:96:11:db: 34:0e:09:08:69:65:65:6b:85:ce:13:52:d4:0e:51: 23:19:c3:cd:48:4a:8f:3c:34:fd:79:9a:bc:16:76: 71:23:41:e1:36:a3:3b:45:a1:eb:93:0a:62:9e:98: 86:ba:d4:b9:cb:26:36:0e:b3:b4:a5:bd:0f:7e:75: 57:3b:ec:46:3c:0b:a8:35:45:1d:a5:d3:43:f1:31: 21:96:6e:7b:db:33:17:27:97:b1:3e:a7:81:06:7d: 1d:21:19:6f:dd:de:25:c4:7f:1a:8a:54:7c:09:3b: c8:fe:28:72:e7:04:fb:0a:35:a4:10:bc:6f:98:da: f7:fd:8f:8e:a9:8b:69:61:5e:39:cc:aa:aa:b7:54: f4:47:30:21:21:51:71:f7:37:0b:db:ae:80:e7:59: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F5:B4:ED:31:73:DE:86:DE:21:71:27:F7:39:B4:00:30:89:44:AB X509v3 Authority Key Identifier: keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:88:91:94:33:f1:60:dc:e6:aa:a3:ff:d6:9a:bf:42:7d:02: 73:74:c5:1e:67:13:2d:7b:ee:8b:fa:e7:00:42:a6:69:c2:b6: 17:7c:93:0c:99:fd:28:34:92:92:88:c5:35:70:92:b0:ea:36: 04:de:41:4e:0e:3d:3a:50:ad:8c:5c:08:02:5b:81:04:a3:a6: 48:e3:68:22:b1:c4:e5:88:fd:8f:3a:a2:e2:de:60:68:5e:3a: 8e:92:88:fe:8d:97:36:a3:68:fb:4e:79:3d:5e:62:ec:20:1a: 5e:30:8a:5b:41:9d:12:c0:fa:d6:3a:1d:e8:a9:0c:02:45:f5: 07:91:af:dd:bc:9d:e9:aa:81:ab:b4:52:87:4d:ea:68:41:23: 4a:9a:fb:ed:b3:05:c2:68:18:12:7e:29:17:9f:94:2b:5d:fd: d7:f4:9b:df:e6:5d:75:5b:90:4c:9d:b6:ce:b4:40:61:d4:82: b0:fd:fe:58:c9:a0:08:3f:48:d3:51:82:b3:36:7e:52:be:23: f0:d0:92:7d:18:9b:4f:43:90:86:92:ac:ff:f9:b4:89:6c:06: 76:f0:a7:5c:2b:01:75:2b:ad:33:a5:32:57:36:2f:68:69:89: 20:0b:89:47:33:ef:07:40:a7:00:45:52:3d:22:50:d9:62:c4: af:94:4b:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoNIMmv7AQUJxGwG5paeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy ODJlMzAwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD EyhhMmY1YjRlZDMxNzNkZTg2ZGUyMTcxMjdmNzM5YjQwMDMwODk0NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lytQgKRSPz5pqqSqcpnORTdWaqu Bf95iLblHjdxnW8sUEfUyFW20FccBt2FM9ssqbATwc+ul1EjN6xg6kJGLut8CFg5 gK/x7vU+4Wb60YC9q2wddm2bW59MZeZZxf+o5CFjV6OWEds0DgkIaWVla4XOE1LU DlEjGcPNSEqPPDT9eZq8FnZxI0HhNqM7RaHrkwpinpiGutS5yyY2DrO0pb0PfnVX O+xGPAuoNUUdpdND8TEhlm572zMXJ5exPqeBBn0dIRlv3d4lxH8ailR8CTvI/ihy 5wT7CjWkELxvmNr3/Y+OqYtpYV45zKqqt1T0RzAhIVFx9zcL266A51nTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL1tO0xc96G3iFxJ/c5tAAwiUSrMB8GA1UdIwQY MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoiRlDPx YNzmqqP/1pq/Qn0Cc3TFHmcTLXvui/rnAEKmacK2F3yTDJn9KDSSkojFNXCSsOo2 BN5BTg49OlCtjFwIAluBBKOmSONoIrHE5Yj9jzqi4t5gaF46jpKI/o2XNqNo+055 PV5i7CAaXjCKW0GdEsD61jod6KkMAkX1B5Gv3byd6aqBq7RSh03qaEEjSpr77bMF wmgYEn4pF5+UK1391/Sb3+ZddVuQTJ22zrRAYdSCsP3+WMmgCD9I01GCszZ+Ur4j 8NCSfRibT0OQhpKs//m0iWwGdvCnXCsBdSutM6UyVzYvaGmJIAuJRzPvB0CnAEVS PSJQ2WLEr5RLng== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:31 2025 by rpki-client