This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json) Hash identifier: U+3dLTZlbs9KG/KK8Zr5ByM5AkOH4D6xSwAZVW9ARjM= Subject key identifier: FF:6C:2E:45:B8:03:F1:FA:7C:2F:9E:F4:28:99:0F:69:75:CC:F7:C1 Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Certificate serial: 019AF352A08E5375B35E1FD6A72544F67A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft Manifest number: 143C Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: zjJH/oN2zXBT75S+iYA5rZhkXj7c1YxHNXkYtw71KhE=) 2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a0:8e:53:75:b3:5e:1f:d6:a7:25:44:f6:7a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=ff6c2e45b803f1fa7c2f9ef428990f6975ccf7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:77:fd:4b:a4:25:dc:10:1b:5c:be:ff:81: 1f:d5:b4:5a:1a:34:d3:36:be:b0:c7:8d:c3:8a:03: db:37:0d:66:31:61:42:bf:bc:9a:68:e8:1e:2a:c1: 86:1c:a6:04:96:a4:c8:0a:96:67:72:42:5f:80:15: c2:b6:8f:4a:86:06:96:f2:06:ca:7c:29:cc:5e:91: 6f:33:12:83:6e:08:a1:d1:96:59:d1:d2:94:cc:26: ee:d5:80:24:28:f6:b1:aa:d5:bf:7d:65:bd:13:1a: 22:73:11:54:7d:38:40:60:00:2b:fd:b5:f7:96:03: 48:03:cf:2d:60:d3:4d:0f:59:7c:8d:5c:ac:42:6e: 91:a4:91:44:c3:a7:33:9b:a8:60:a7:80:96:86:3e: 16:97:21:3c:31:12:09:61:7c:9d:0e:f8:80:67:1d: fb:a8:ea:5e:9d:08:b0:99:dc:cd:9e:fa:2b:46:f4: 79:c8:2d:71:ff:5a:81:56:51:95:99:d7:11:35:50: a1:1f:23:b1:f3:10:3c:1c:45:15:0b:36:39:81:6f: ba:a9:66:08:85:48:64:90:3c:22:15:f6:46:e5:b1: a0:af:91:60:5a:aa:08:74:c6:01:63:c3:13:cc:27: b0:22:b3:a0:77:53:e3:e5:00:3c:29:06:5b:cf:28: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6C:2E:45:B8:03:F1:FA:7C:2F:9E:F4:28:99:0F:69:75:CC:F7:C1 X509v3 Authority Key Identifier: keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:29:8b:3d:4b:24:75:c4:67:5a:01:e3:5f:7c:f4:10:a1:a0: 01:c0:f9:d1:0e:aa:09:97:6f:ba:bd:e7:c9:c0:b6:a7:8e:8b: 91:cf:1d:b4:37:3a:72:f2:72:a9:c6:da:e4:69:75:00:d9:80: f7:50:6e:9e:26:9e:b7:1b:3d:50:ba:51:49:06:99:1a:3f:a7: 42:c7:a2:48:5e:75:5d:ca:5e:e4:f4:56:4e:36:b9:a8:6d:36: 32:70:4a:18:65:f7:30:21:8b:89:f9:45:9a:ec:4d:ee:9c:8f: c3:ce:b0:7e:ea:03:8d:92:da:ed:5e:db:e3:ea:68:de:37:44: c5:1f:a0:84:34:04:88:a8:b6:61:56:2b:c9:ca:d2:23:08:65: 3c:7a:12:99:e1:ec:8f:69:97:4f:93:63:60:f7:b7:16:5e:8a: 21:66:fc:14:4b:25:ba:3f:ac:38:6d:ab:e2:de:31:d7:08:ae: aa:f8:47:a3:57:62:56:5b:89:2b:3e:b7:9f:a8:5a:71:3b:d1: 76:9c:62:7c:a1:ba:db:06:76:91:18:b8:bf:ac:da:ba:63:db: 4a:d3:2d:e7:5b:83:c4:7d:2e:83:b7:48:e7:c8:81:de:71:b5: 1d:f6:ad:ed:5e:8f:fd:20:16:20:a4:03:5d:c3:1a:5f:7f:f4: c2:8d:98:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqCOU3WzXh/WpyVE9nozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl NzRjNzMwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD EyhmZjZjMmU0NWI4MDNmMWZhN2MyZjllZjQyODk5MGY2OTc1Y2NmN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSN3/UukJdwQG1y+/4Ef1bRaGjTT Nr6wx43DigPbNw1mMWFCv7yaaOgeKsGGHKYElqTICpZnckJfgBXCto9KhgaW8gbK fCnMXpFvMxKDbgih0ZZZ0dKUzCbu1YAkKPaxqtW/fWW9ExoicxFUfThAYAAr/bX3 lgNIA88tYNNND1l8jVysQm6RpJFEw6czm6hgp4CWhj4WlyE8MRIJYXydDviAZx37 qOpenQiwmdzNnvorRvR5yC1x/1qBVlGVmdcRNVChHyOx8xA8HEUVCzY5gW+6qWYI hUhkkDwiFfZG5bGgr5FgWqoIdMYBY8MTzCewIrOgd1Pj5QA8KQZbzyiU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9sLkW4A/H6fC+e9CiZD2l1zPfBMB8GA1UdIwQY MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt YzNmNGQxMTI3NGQ0LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0 LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeimLPUsk dcRnWgHjX3z0EKGgAcD50Q6qCZdvur3nycC2p46Lkc8dtDc6cvJyqcba5Gl1ANmA 91Buniaetxs9ULpRSQaZGj+nQseiSF51Xcpe5PRWTja5qG02MnBKGGX3MCGLiflF muxN7pyPw86wfuoDjZLa7V7b4+po3jdExR+ghDQEiKi2YVYrycrSIwhlPHoSmeHs j2mXT5NjYPe3Fl6KIWb8FEsluj+sOG2r4t4x1wiuqvhHo1diVluJKz63n6hacTvR dpxifKG62wZ2kRi4v6zaumPbStMt51uDxH0ug7dI58iB3nG1Hfat7V6P/SAWIKQD XcMaX3/0wo2YMw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:41 2025 by rpki-client