This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json) Hash identifier: 8rnxUMNnxH7IpGBppHXralCN7uezHTjdCy95UJCcxZ0= Subject key identifier: 36:3C:5D:B3:8B:56:C8:83:74:FF:05:7B:17:93:8D:09:A8:98:5B:B7 Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86 Certificate serial: 019AF2770F13C2DDEF4F7BE1FB3134EEF634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft Manifest number: 1198 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: cIKujKEslfHPfr1NSBcOzYI1EcUmfc5YMZKVAuaG6Wg=) 2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0f:13:c2:dd:ef:4f:7b:e1:fb:31:34:ee:f6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0632542221caef6448cc545214e000071bd56b86 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=363c5db38b56c88374ff057b17938d09a8985bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:24:bc:2e:28:59:83:66:d6:e1:7b:b5:5e: b6:d1:46:d1:49:c1:93:21:c1:56:bf:0d:ab:8b:a8: ab:9f:98:53:d2:08:8c:45:f9:e9:0d:0f:7c:ba:b2: 3a:4e:fb:40:89:5b:64:18:d5:33:e3:6b:eb:a0:09: c5:92:6d:13:d3:38:40:a1:a8:13:19:0b:90:d4:eb: 41:c1:56:d5:bd:df:7e:70:0c:ac:76:32:08:e2:e0: f8:0a:68:3e:0c:4f:8f:31:62:9f:ff:04:57:f5:d8: fb:93:c0:85:a7:1c:7c:50:6e:d0:a6:ae:06:90:95: 66:de:ae:3e:84:e2:4c:7d:7e:79:a6:cf:31:61:ce: 30:6b:b5:f0:ca:79:56:f6:b5:5c:12:9f:5f:11:2f: 57:71:be:49:47:a3:50:39:21:09:84:eb:0a:c2:43: dd:68:f9:a6:b3:4e:42:6b:30:73:bd:1d:d4:1c:83: ce:f3:65:49:82:07:f0:34:49:2b:01:4c:de:23:e3: 87:e6:ed:55:75:56:68:65:c2:8c:be:68:43:7f:24: 13:59:5a:d3:a1:03:2a:98:37:77:c6:49:80:01:70: bf:30:c0:15:eb:31:fb:df:0c:3b:97:4d:18:db:6e: 18:74:af:4a:91:9b:50:24:59:2f:3a:1c:9d:84:b8: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:5D:B3:8B:56:C8:83:74:FF:05:7B:17:93:8D:09:A8:98:5B:B7 X509v3 Authority Key Identifier: keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:44:31:6e:e6:96:16:8e:75:6c:24:66:94:4b:e1:35:4b:60: 5e:39:20:c2:d3:e5:ca:f8:63:e9:d0:af:8d:46:98:49:bc:bd: dc:f6:86:e4:d9:a4:7a:c5:0e:93:5e:15:82:fe:c4:84:03:94: f8:37:9b:ee:ac:19:64:19:cc:82:ec:a0:f5:68:0b:d1:f3:1d: 90:80:c7:31:0f:5f:77:a6:21:0a:7c:b2:f7:84:9e:82:18:37: e2:44:81:30:91:61:6e:76:b2:ad:b8:ea:4e:72:3f:2a:96:79: 06:45:a1:d3:06:6f:76:a0:c8:f0:6b:34:f2:90:f6:a8:d5:6e: 50:1f:45:94:13:f5:13:a9:1f:70:34:aa:26:9b:f2:0f:f4:92: 9e:4c:2f:f4:06:05:ac:d3:b5:28:00:ef:84:97:11:2a:19:01: fe:1e:9d:35:05:f7:0b:b3:13:ba:f3:d2:c9:bf:1e:41:f2:af: 0a:53:2a:df:ee:39:5d:3d:60:31:c1:52:fe:aa:73:91:f9:e4: 71:bc:94:e9:01:bc:18:80:14:cb:c0:c7:b6:6d:e9:28:1e:51: 9f:c0:5d:5a:97:52:52:8b:76:a9:f5:56:09:9a:db:ed:67:bd: e1:13:7c:6c:99:57:19:86:b5:57:cd:3f:fc:ae:7a:47:d0:4c: 78:6c:a2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydw8Twt3vT3vh+zE07vY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk NTZiODYwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EygzNjNjNWRiMzhiNTZjODgzNzRmZjA1N2IxNzkzOGQwOWE4OTg1YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2MkvC4oWYNm1uF7tV620UbRScGT IcFWvw2ri6irn5hT0giMRfnpDQ98urI6TvtAiVtkGNUz42vroAnFkm0T0zhAoagT GQuQ1OtBwVbVvd9+cAysdjII4uD4Cmg+DE+PMWKf/wRX9dj7k8CFpxx8UG7Qpq4G kJVm3q4+hOJMfX55ps8xYc4wa7XwynlW9rVcEp9fES9Xcb5JR6NQOSEJhOsKwkPd aPmms05CazBzvR3UHIPO82VJggfwNEkrAUzeI+OH5u1VdVZoZcKMvmhDfyQTWVrT oQMqmDd3xkmAAXC/MMAV6zH73ww7l00Y224YdK9KkZtQJFkvOhydhLhyrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY8XbOLVsiDdP8FexeTjQmomFu3MB8GA1UdIwQY MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkQxbuaW Fo51bCRmlEvhNUtgXjkgwtPlyvhj6dCvjUaYSby93PaG5NmkesUOk14Vgv7EhAOU +Deb7qwZZBnMguyg9WgL0fMdkIDHMQ9fd6YhCnyy94Seghg34kSBMJFhbnayrbjq TnI/KpZ5BkWh0wZvdqDI8Gs08pD2qNVuUB9FlBP1E6kfcDSqJpvyD/SSnkwv9AYF rNO1KADvhJcRKhkB/h6dNQX3C7MTuvPSyb8eQfKvClMq3+45XT1gMcFS/qpzkfnk cbyU6QG8GIAUy8DHtm3pKB5Rn8BdWpdSUot2qfVWCZrb7We94RN8bJlXGYa1V80/ /K56R9BMeGyiJA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:36 2025 by rpki-client