This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json) Hash identifier: jReUcb+Lr+QFIW2v4QlVMVVBx6DgiyhdtNv9F/8irR4= Subject key identifier: 51:21:A1:2D:F6:BA:D4:0A:A6:03:C1:59:02:45:92:D3:24:B2:9A:A8 Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0 Certificate serial: 019AF68A88987DEDCFBB8D5188400C97427C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft Manifest number: 0E8B Signing time: Sun 07 Dec 2025 02:01:05 +0000 Manifest this update: Sun 07 Dec 2025 02:01:05 +0000 Manifest next update: Mon 08 Dec 2025 02:01:05 +0000 Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=) 2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: u8p3XAKgCZmBxK7WKv/QApzHodGKV4ZKo38HQlITv88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:88:98:7d:ed:cf:bb:8d:51:88:40:0c:97:42:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0 Validity Not Before: Dec 7 02:01:05 2025 GMT Not After : Dec 8 02:01:05 2025 GMT Subject: CN=5121a12df6bad40aa603c159024592d324b29aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:3f:99:7a:a7:73:77:29:ea:46:b2:0b:c4: 0a:c5:d1:48:32:8d:2f:26:b6:4f:34:c4:99:f4:f5: 46:fb:fc:0e:55:f9:16:fe:05:ea:c0:12:20:52:1d: 47:b6:fb:23:f4:57:33:f5:bd:3e:49:fb:27:2c:16: ae:35:6d:9f:8d:a4:48:7f:f2:76:1a:87:c8:07:88: 51:72:ec:67:d9:2c:99:da:37:ad:46:97:b6:5e:3c: 17:77:66:aa:b1:0b:c4:58:74:ff:57:92:11:f7:7a: 8f:33:23:a6:a1:6b:c6:ac:c0:0e:e8:ed:6d:9a:85: a5:00:d4:5b:c6:36:88:c9:0b:b7:c2:6e:55:63:25: 39:97:cc:18:e5:d0:4d:65:4b:cb:d2:b3:a1:fa:64: 2e:a5:52:86:5d:3c:21:6d:7d:3c:a5:a1:f6:ab:01: a9:a6:e6:2f:9d:59:e5:4e:68:5c:c8:9b:78:8b:12: d7:cb:f3:a6:61:55:ed:06:04:d2:bf:a3:03:2a:a0: 89:5e:f8:6d:ae:ad:62:5e:4a:65:18:2d:1a:01:ba: 68:2c:46:40:49:5d:8f:fe:ed:07:07:37:56:06:31: f2:16:5c:51:06:4e:de:4f:c8:ae:5f:54:2a:59:7d: 2a:74:af:7b:7e:c5:9d:ef:1a:81:57:1b:bb:f1:ca: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:A1:2D:F6:BA:D4:0A:A6:03:C1:59:02:45:92:D3:24:B2:9A:A8 X509v3 Authority Key Identifier: keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:11:a2:e2:0f:f2:0d:1b:d4:b2:1c:eb:77:d8:3e:6d:19:70: 9b:42:9b:77:43:7f:e4:58:36:75:a6:e3:9f:be:71:80:49:ad: 92:8f:8c:68:3c:9e:b7:e1:f4:24:17:86:8c:a4:85:5f:87:b2: 14:05:f4:0e:52:01:a2:fe:37:23:cd:c8:fb:a4:ed:e1:ce:0b: bf:31:a8:fa:e9:ad:6a:fc:99:06:e7:1d:32:b1:70:c6:19:53: d5:b9:d2:c1:1c:ad:fe:da:02:d9:b6:18:d4:a1:41:2f:6f:1d: e8:45:4e:f3:a5:a6:21:a0:9d:99:38:02:1d:73:ea:fb:f5:01: 71:82:6f:9d:39:ba:83:1e:d7:fd:ee:35:73:d8:9f:a0:25:17: 2a:23:ef:58:ec:e5:3e:c2:59:61:09:78:9c:9e:ce:38:8d:96: ae:10:dd:a3:2b:ad:04:a8:61:8b:99:52:29:a4:45:c0:8b:3f: 2c:73:7d:75:66:23:26:f2:69:88:74:4d:44:4c:09:f1:ba:c8: c2:a3:3c:97:7c:fd:3b:ec:a0:89:b5:ce:d1:47:86:96:a6:97: 3a:ba:f0:28:6c:7b:54:08:e2:75:3d:c5:d3:35:d9:7f:c7:ec: da:75:d0:e7:9d:e3:f9:61:e9:9b:fe:34:c1:c4:11:83:99:1d: b0:8f:b1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ioiYfe3Pu41RiEAMl0J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk OWE5YTAwHhcNMjUxMjA3MDIwMTA1WhcNMjUxMjA4MDIwMTA1WjAzMTEwLwYDVQQD Eyg1MTIxYTEyZGY2YmFkNDBhYTYwM2MxNTkwMjQ1OTJkMzI0YjI5YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPU/mXqnc3cp6kayC8QKxdFIMo0v JrZPNMSZ9PVG+/wOVfkW/gXqwBIgUh1Htvsj9Fcz9b0+SfsnLBauNW2fjaRIf/J2 GofIB4hRcuxn2SyZ2jetRpe2XjwXd2aqsQvEWHT/V5IR93qPMyOmoWvGrMAO6O1t moWlANRbxjaIyQu3wm5VYyU5l8wY5dBNZUvL0rOh+mQupVKGXTwhbX08paH2qwGp puYvnVnlTmhcyJt4ixLXy/OmYVXtBgTSv6MDKqCJXvhtrq1iXkplGC0aAbpoLEZA SV2P/u0HBzdWBjHyFlxRBk7eT8iuX1QqWX0qdK97fsWd7xqBVxu78cpqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEhoS32utQKpgPBWQJFktMkspqoMB8GA1UdIwQY MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRGi4g/y DRvUshzrd9g+bRlwm0Kbd0N/5Fg2dabjn75xgEmtko+MaDyet+H0JBeGjKSFX4ey FAX0DlIBov43I83I+6Tt4c4LvzGo+umtavyZBucdMrFwxhlT1bnSwRyt/toC2bYY 1KFBL28d6EVO86WmIaCdmTgCHXPq+/UBcYJvnTm6gx7X/e41c9ifoCUXKiPvWOzl PsJZYQl4nJ7OOI2WrhDdoyutBKhhi5lSKaRFwIs/LHN9dWYjJvJpiHRNREwJ8brI wqM8l3z9O+ygibXO0UeGlqaXOrrwKGx7VAjidT3F0zXZf8fs2nXQ553j+WHpm/40 wcQRg5kdsI+xAw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:42 2025 by rpki-client