This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json) Hash identifier: dOQxTpwzdw7+V3flFVIyxJoy20XLpA4S0pf4XqlOLW0= Subject key identifier: 9C:E1:A0:95:1A:E8:2E:9F:71:01:AF:26:6A:EB:91:65:19:0A:DF:69 Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83 Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883 Certificate serial: 019AF653EA0C28B066EA0A24EF6C8E26280A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft Manifest number: 01D9 Signing time: Sun 07 Dec 2025 01:01:25 +0000 Manifest this update: Sun 07 Dec 2025 01:01:25 +0000 Manifest next update: Mon 08 Dec 2025 01:01:25 +0000 Files and hashes: 1: 6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa (hash: VmwTyVH3w9xwUHgrQoPTWP7hFDzEQmvR4R1wYGDo/XU=) 2: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: dYA6zeE920f8lxrv04yjFO8/gxrAbbk2Lfo5u2M0aAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:ea:0c:28:b0:66:ea:0a:24:ef:6c:8e:26:28:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883 Validity Not Before: Dec 7 01:01:25 2025 GMT Not After : Dec 8 01:01:25 2025 GMT Subject: CN=9ce1a0951ae82e9f7101af266aeb9165190adf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:b3:40:d0:28:3e:aa:8b:86:60:84:ac:ea: c0:c0:01:15:6b:42:50:93:1b:51:6b:fb:e6:d7:84: c8:20:08:2d:a5:8b:fe:ba:d9:33:61:a8:3b:17:cf: 9e:2f:db:07:97:ac:26:d6:2f:d6:1b:0d:bf:70:d2: 95:ba:a8:fd:95:1a:2b:ce:6e:54:fc:a9:09:5c:7f: c5:e0:e2:84:ae:6b:f7:44:48:89:1b:6a:ff:8a:e0: d0:83:80:51:bb:1d:04:15:96:06:a7:8d:8d:7e:38: cb:58:31:fb:34:76:55:18:83:b0:a0:72:c2:cc:2e: 6d:bc:c5:f8:0c:cb:05:2e:d3:e2:8d:73:0e:12:2d: 09:a1:b7:fc:ba:89:bd:3a:fa:1e:8f:ce:c9:84:59: 93:5f:5e:98:3e:fc:e4:34:30:9d:de:e7:d9:68:02: 7f:63:68:c0:f8:95:1b:b8:f2:b5:ac:4c:85:34:8f: 89:b2:a8:cb:f0:86:53:0a:50:a9:2c:22:1e:d8:1d: 59:f3:7f:8e:34:fd:bc:9e:43:35:21:cb:b2:c8:11: 6c:73:55:2f:ff:52:40:5e:64:bb:3b:20:01:85:69: a5:e4:aa:12:11:21:64:01:22:03:ca:f7:c0:bf:59: 8c:b7:28:b2:96:eb:2f:c6:57:c9:37:13:26:2e:22: e4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:A0:95:1A:E8:2E:9F:71:01:AF:26:6A:EB:91:65:19:0A:DF:69 X509v3 Authority Key Identifier: keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4f:d7:a8:40:05:5a:e0:10:b0:10:3b:4c:3d:a4:64:f1:69: 85:5a:7e:d5:c9:88:74:37:36:20:ce:38:7c:25:05:c6:e9:39: f8:2d:05:21:dd:fd:fc:d0:60:28:75:cf:e1:b1:11:b1:dd:72: cb:08:7b:c2:fc:ff:50:f6:d2:98:21:b0:8b:75:4c:ac:76:af: d9:21:d5:a2:89:ab:2b:74:24:c4:8e:1b:e4:38:81:c1:71:8f: 97:86:9c:37:bf:0d:ac:89:6d:3f:11:67:33:c2:1d:f7:15:e0: d6:df:59:12:5d:50:52:34:01:6b:58:a4:d7:03:4f:e0:bc:44: f5:8b:86:b8:6e:f0:5d:7d:05:c3:63:3f:69:fe:e1:93:85:fe: 54:b9:ee:07:c8:76:f1:79:11:7a:87:3a:d8:3b:71:7c:a5:5d: 10:19:40:96:b7:b2:8a:55:5a:68:6f:b0:91:87:da:ae:1d:56: 9b:68:25:c6:14:04:82:3c:69:2a:f1:fd:7e:ec:da:fc:db:39: 8f:29:95:05:b7:79:c5:68:05:92:5d:7f:ad:40:73:dd:5d:6c: 58:76:94:94:b1:91:c2:d3:48:88:5e:9a:58:b1:6c:f1:02:1d: dd:a4:3d:cb:8d:1e:91:92:1d:be:51:1a:90:3b:f6:e8:0a:7b: ab:3b:74:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U+oMKLBm6gok72yOJigKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzcwMjRhMTgyNDNlNDVmOGQwNGFhZGFlYmViYTkwYTU2 OWU4ODMwHhcNMjUxMjA3MDEwMTI1WhcNMjUxMjA4MDEwMTI1WjAzMTEwLwYDVQQD Eyg5Y2UxYTA5NTFhZTgyZTlmNzEwMWFmMjY2YWViOTE2NTE5MGFkZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5COzQNAoPqqLhmCErOrAwAEVa0JQ kxtRa/vm14TIIAgtpYv+utkzYag7F8+eL9sHl6wm1i/WGw2/cNKVuqj9lRorzm5U /KkJXH/F4OKErmv3REiJG2r/iuDQg4BRux0EFZYGp42NfjjLWDH7NHZVGIOwoHLC zC5tvMX4DMsFLtPijXMOEi0Jobf8uom9Ovoej87JhFmTX16YPvzkNDCd3ufZaAJ/ Y2jA+JUbuPK1rEyFNI+JsqjL8IZTClCpLCIe2B1Z83+ONP28nkM1IcuyyBFsc1Uv /1JAXmS7OyABhWml5KoSESFkASIDyvfAv1mMtyiylusvxlfJNxMmLiLkNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzhoJUa6C6fcQGvJmrrkWUZCt9pMB8GA1UdIwQY MBaAFAY3AkoYJD5F+NBKra6+upClaeiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmIt N2Q5NGE5NGUzMzEyLzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmItN2Q5NGE5NGUzMzEy LzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk/XqEAF WuAQsBA7TD2kZPFphVp+1cmIdDc2IM44fCUFxuk5+C0FId39/NBgKHXP4bERsd1y ywh7wvz/UPbSmCGwi3VMrHav2SHVoomrK3QkxI4b5DiBwXGPl4acN78NrIltPxFn M8Id9xXg1t9ZEl1QUjQBa1ik1wNP4LxE9YuGuG7wXX0Fw2M/af7hk4X+VLnuB8h2 8XkReoc62DtxfKVdEBlAlreyilVaaG+wkYfarh1Wm2glxhQEgjxpKvH9fuza/Ns5 jymVBbd5xWgFkl1/rUBz3V1sWHaUlLGRwtNIiF6aWLFs8QId3aQ9y40ekZIdvlEa kDv26Ap7qzt0Xw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:31:34 2025 by rpki-client