This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json) Hash identifier: E9TBLMSq64gHyKdC42+VxHwoUu1tmlTuQdTgTnpuUF0= Subject key identifier: EC:23:0F:23:01:97:42:C4:25:0C:57:B2:42:8C:79:93:25:64:10:68 Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc Certificate serial: 019AF3891A1C714597BADB36B739BD9E54F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 9m5lUc5HpfWDLT7BKBfnJLGKiTMxA1ZDXQBPyrdhyS8=) 2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1a:1c:71:45:97:ba:db:36:b7:39:bd:9e:54:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=ec230f23019742c4250c57b2428c799325641068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:3d:aa:5f:5b:84:4a:e9:0b:0c:2c:41:44: c7:7e:20:4d:d0:62:52:b9:d8:bb:18:07:8d:bb:90: fa:c6:a9:bc:c4:83:df:4b:ca:e6:d4:76:f9:7b:36: 18:b4:18:0f:a5:96:76:5d:62:f3:b6:10:f0:d2:e3: 4b:8e:97:0c:4b:9c:e4:ec:35:65:ba:e5:c0:32:42: 8f:0e:cb:b6:f7:49:66:fe:71:01:c1:30:ef:fc:c7: b3:e8:1a:2a:7b:05:40:ad:df:ec:69:c8:5a:db:73: c3:ff:ca:d0:9b:7f:35:8f:00:3f:aa:36:fe:d5:69: 2e:23:85:ad:f8:56:0b:f3:29:3d:b2:9e:de:8a:35: 77:28:a3:35:c4:81:29:18:6e:a6:04:36:da:d7:77: e5:5f:ad:14:af:23:d0:e5:91:a7:2e:53:38:72:ca: a6:48:50:af:b4:a9:09:32:eb:b0:0f:3c:b9:a0:14: b7:e4:dd:53:65:a4:12:3f:c0:7c:05:27:55:68:d2: 4f:29:ab:fd:b3:75:ff:76:d7:c3:64:68:ea:95:8d: f0:66:7a:47:6c:ba:fc:4f:cb:4e:fa:89:4f:db:01: ae:24:6b:76:0e:fd:13:dc:39:3b:1d:e4:45:84:04: 49:f5:84:81:68:76:91:e2:7d:fe:a8:53:e5:19:85: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:23:0F:23:01:97:42:C4:25:0C:57:B2:42:8C:79:93:25:64:10:68 X509v3 Authority Key Identifier: keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:86:d4:f1:52:eb:f1:92:7d:ec:19:03:7a:16:cd:8b:bd:dd: a9:3a:19:e7:16:06:3e:30:b6:f2:73:5c:e8:a1:e7:50:20:1f: 98:0f:f4:ca:28:b9:b2:31:49:81:20:fb:6a:88:a5:47:c2:80: 19:2c:1c:6c:c3:ca:33:1f:1c:dc:75:fa:be:b5:fd:e0:32:4a: 63:ef:ac:59:91:61:24:a7:86:f9:36:bf:d9:37:44:d5:65:74: e2:07:a4:91:bf:87:ef:a1:b4:b2:b4:22:d7:5b:68:29:66:ad: d0:2c:ed:a9:76:87:de:98:8c:c9:74:b5:69:76:4f:45:82:44: 56:bc:7d:b2:e5:4b:1e:99:7c:9f:3d:c5:20:ec:82:ee:b6:df: 8c:77:22:f9:53:65:0d:69:6e:c5:e0:60:bd:f2:22:dd:3b:3d: 5a:a6:46:52:ca:b5:1f:b0:73:8f:a4:95:be:02:b3:e5:1d:a0: ff:49:da:49:d3:e0:00:eb:a0:1c:58:64:5d:ea:3b:d6:31:e5: 43:71:f2:c8:88:30:58:2a:a8:3e:fc:7f:74:70:c7:a9:f3:a6: 98:cc:c2:5e:d2:21:90:6f:70:ac:5d:86:f2:39:f8:13:f5:1e: 43:5c:90:0e:2c:b4:70:77:7b:9e:ad:39:cc:f7:5a:ef:3d:2b: d4:8a:be:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRoccUWXuts2tzm9nlT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTljZmYyNDk4MWQ3MjYzZDFiN2Q2Mzc3OWY1ZDY3M2Rl MmJkYmMwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD EyhlYzIzMGYyMzAxOTc0MmM0MjUwYzU3YjI0MjhjNzk5MzI1NjQxMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul49ql9bhErpCwwsQUTHfiBN0GJS udi7GAeNu5D6xqm8xIPfS8rm1Hb5ezYYtBgPpZZ2XWLzthDw0uNLjpcMS5zk7DVl uuXAMkKPDsu290lm/nEBwTDv/Mez6BoqewVArd/sacha23PD/8rQm381jwA/qjb+ 1WkuI4Wt+FYL8yk9sp7eijV3KKM1xIEpGG6mBDba13flX60UryPQ5ZGnLlM4csqm SFCvtKkJMuuwDzy5oBS35N1TZaQSP8B8BSdVaNJPKav9s3X/dtfDZGjqlY3wZnpH bLr8T8tO+olP2wGuJGt2Dv0T3Dk7HeRFhARJ9YSBaHaR4n3+qFPlGYV2TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwjDyMBl0LEJQxXskKMeZMlZBBoMB8GA1UdIwQY MBaAFASpz/JJgdcmPRt9Y3efXWc94r28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQt Y2QwZDllNTc0MmNiLzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQtY2QwZDllNTc0MmNi LzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIbU8VLr 8ZJ97BkDehbNi73dqToZ5xYGPjC28nNc6KHnUCAfmA/0yii5sjFJgSD7aoilR8KA GSwcbMPKMx8c3HX6vrX94DJKY++sWZFhJKeG+Ta/2TdE1WV04gekkb+H76G0srQi 11toKWat0CztqXaH3piMyXS1aXZPRYJEVrx9suVLHpl8nz3FIOyC7rbfjHci+VNl DWluxeBgvfIi3Ts9WqZGUsq1H7Bzj6SVvgKz5R2g/0naSdPgAOugHFhkXeo71jHl Q3HyyIgwWCqoPvx/dHDHqfOmmMzCXtIhkG9wrF2G8jn4E/UeQ1yQDiy0cHd7nq05 zPda7z0r1Iq+qA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:02 2025 by rpki-client