This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: lm8gHk1gWqnUeNV/IVtNKnNquJJJ/VwVm1y0BaRZfko=
Subject key identifier: 16:7D:69:23:7B:89:72:2A:67:4E:4D:E7:71:B2:E8:76:35:7D:65:8A
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019AF38966053487E9D3FBE6274D3B5C0C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 16A2
Signing time: Sat 06 Dec 2025 12:00:59 +0000
Manifest this update: Sat 06 Dec 2025 12:00:59 +0000
Manifest next update: Sun 07 Dec 2025 12:00:59 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: IoAQhAexV1FeIOTp90Y7fwZzBECsBH8lPYttkVN4FT8=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:66:05:34:87:e9:d3:fb:e6:27:4d:3b:5c:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Dec 6 12:00:59 2025 GMT
Not After : Dec 7 12:00:59 2025 GMT
Subject: CN=167d69237b89722a674e4de771b2e876357d658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:23:93:85:0a:ee:4e:91:3a:19:9b:39:02:
b0:af:f9:3b:62:d3:97:86:5c:af:e0:4c:04:21:a5:
e2:38:4f:8f:8c:36:67:1d:87:f8:97:f1:35:39:76:
c5:bf:fd:35:ff:38:8e:a6:ed:80:4e:7a:d6:7d:38:
e5:bd:07:47:0e:a3:8b:a4:0b:52:d5:5a:93:99:d1:
24:9d:11:83:1c:80:d0:9e:3f:90:fb:80:fd:92:b9:
11:91:6f:2d:b2:c2:9f:79:23:57:c5:47:c1:c5:22:
f8:da:aa:c5:f2:bb:85:46:ae:2c:13:5d:aa:13:79:
b3:ee:5b:4a:69:cd:d5:53:0f:81:36:ab:5c:c4:bb:
a5:cc:52:e8:4f:79:9e:48:28:5d:64:ca:9c:2b:1e:
2e:e5:4c:2c:c0:fa:64:50:a9:a6:8e:16:93:99:e1:
63:20:fd:af:ac:c4:f6:0d:43:92:5c:b8:09:c2:dc:
1c:73:0b:d5:f6:3b:47:12:ac:a2:bb:23:f9:0a:b9:
fc:87:96:46:d8:30:67:6a:50:46:64:24:a4:75:f9:
8e:35:6c:01:f6:7b:81:db:9b:bd:6c:08:73:a2:98:
5a:21:c9:26:20:7a:6f:d3:fc:25:d6:1c:9d:37:e8:
62:54:d7:0a:1c:5d:18:c3:fd:07:e1:c2:fd:d3:6f:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:69:23:7B:89:72:2A:67:4E:4D:E7:71:B2:E8:76:35:7D:65:8A
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:0a:e4:cb:1e:9f:6f:26:d9:fe:c4:b5:5e:8d:52:d6:01:
39:da:d6:a8:ca:35:c6:68:29:a8:74:bb:69:97:bd:83:28:e8:
77:70:ff:de:ab:37:f4:af:ea:6c:a1:7b:7e:c7:11:09:1f:d4:
7b:ce:97:f7:cf:ca:23:65:19:0a:1f:f8:14:c4:88:c9:f0:e5:
90:6c:50:e2:f9:dc:c3:bf:cd:0b:40:49:46:67:f3:52:33:06:
24:78:80:5d:6b:d9:39:aa:69:4c:9d:0f:62:20:63:6d:01:5b:
66:6f:c9:0a:de:9a:35:af:77:37:d0:c1:be:cc:e7:0a:8e:be:
b5:82:53:e9:4b:94:77:2a:75:53:22:d8:6b:65:9f:64:44:55:
b0:e9:e0:9a:e6:b1:66:a6:4e:e5:d2:80:37:af:7e:33:8d:9b:
1c:29:3d:2c:52:5b:c9:41:2b:38:ea:e6:a5:0a:a6:8f:ec:01:
ad:ea:f5:e3:99:08:a4:5b:5d:b4:81:3a:82:2e:8f:02:d3:a3:
c7:eb:c0:21:b8:21:4b:90:ac:d2:08:41:90:7a:30:18:32:3b:
c4:68:8f:63:c9:a3:70:0d:45:0b:af:d5:d2:c8:23:8f:96:9d:
a0:7a:33:12:b7:29:57:91:13:b6:8e:eb:50:92:e4:e3:d8:1f:
fc:12:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:40 2025 by rpki-client