This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json) Hash identifier: gKvyPB82kc4ZFDig1E5hQoEh2mqZ1z/8ouxcI7pRd/k= Subject key identifier: 7A:01:19:B3:E1:06:FE:2D:B2:C3:B4:6E:DF:03:C9:CE:2B:70:00:F0 Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019AF578623E82733276EEA683F4F273A49B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft Manifest number: 16A3 Signing time: Sat 06 Dec 2025 21:01:38 +0000 Manifest this update: Sat 06 Dec 2025 21:01:38 +0000 Manifest next update: Sun 07 Dec 2025 21:01:38 +0000 Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: W55Iy+JnJad2Dfg25YSDm6Udu7Bz/w2kdtTBdaKXVGE=) 2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=) 3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=) 4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:62:3e:82:73:32:76:ee:a6:83:f4:f2:73:a4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Dec 6 21:01:38 2025 GMT Not After : Dec 7 21:01:38 2025 GMT Subject: CN=7a0119b3e106fe2db2c3b46edf03c9ce2b7000f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:3d:19:f3:32:cc:62:0f:62:ac:47:71:77: fb:ad:8b:ac:6e:23:37:85:a9:6f:f0:ad:bd:fc:b4: b3:69:d4:1f:12:06:ba:5e:46:46:d2:a4:a1:02:33: 64:50:9b:ae:5d:b4:8b:d8:bd:49:5b:97:aa:c8:07: c9:18:7a:91:12:af:87:4f:ec:31:f9:d3:8c:c3:ea: 4d:e4:46:4e:0a:cc:bf:ce:5e:ea:58:1a:dc:8a:26: 0a:0b:d0:c0:6f:d3:46:e7:74:d3:b4:95:c4:08:b2: 18:93:f3:7b:b6:a9:f8:10:e2:bc:f3:17:ad:41:39: 4a:0b:59:7b:d0:46:d9:b6:2e:09:9a:e0:9e:df:b6: ca:af:37:d4:78:64:ef:4b:ad:e0:9c:ec:c5:88:09: 48:eb:14:fe:0a:ef:4b:bf:42:0e:bd:fa:88:51:eb: 20:43:53:db:1d:f0:13:ae:41:f8:2e:90:8f:b2:fe: f9:8b:99:59:0a:a9:16:3f:fa:f0:c1:50:3b:59:a5: e0:54:98:74:7c:60:28:6b:67:0d:99:c4:f3:af:92: 1f:1d:e9:cc:1e:9b:00:0d:8a:87:55:87:ac:90:e9: 9e:94:b1:5d:b8:ec:88:ac:06:d0:6e:b5:b7:bb:a3: 2b:bc:3e:a2:b2:c8:a1:c7:5d:58:4b:ef:d7:43:17: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:01:19:B3:E1:06:FE:2D:B2:C3:B4:6E:DF:03:C9:CE:2B:70:00:F0 X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:05:ea:4e:b6:ac:26:fa:99:53:1e:12:48:dd:f7:74:4f: 10:31:85:a4:6e:74:98:db:41:c9:b6:e1:d1:98:c9:6a:27:f0: f2:d5:f2:f6:18:23:64:14:c2:43:6d:78:a1:24:38:8e:18:5a: cd:0d:c9:96:36:bc:c6:00:ca:c8:f1:6c:c5:1c:5d:e1:65:ce: f1:43:21:37:03:46:1c:7f:63:52:34:39:52:4b:2f:21:da:1b: 50:a4:6a:17:69:7b:4c:96:41:e7:be:b1:a1:40:43:95:c7:4f: 3d:c8:f7:25:f2:eb:25:c4:ad:f5:71:0a:d6:26:2f:87:1e:27: 0d:41:c4:ec:48:07:6b:8c:83:9c:f1:55:8d:71:ae:5b:83:85: c0:71:1e:43:7b:d8:80:fd:42:53:9a:54:c0:df:1f:24:53:2d: c3:a8:e7:dd:34:42:80:95:56:9e:93:7c:88:d3:ca:6d:cd:05: ac:1b:25:5d:aa:f7:f0:6b:8f:9d:f5:2f:ec:30:0e:09:30:e0: d8:4f:53:9b:36:69:ff:07:6d:3e:f8:60:ab:74:b8:63:38:fe: ff:33:6a:f4:fa:46:6e:fa:53:b3:d2:43:f9:c5:2a:b2:50:0d: 25:c3:df:74:12:01:15:e2:b7:c7:9e:db:72:76:27:f3:e9:58: 95:b5:fb:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGI+gnMydu6mg/Tyc6SbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjUxMjA2MjEwMTM4WhcNMjUxMjA3MjEwMTM4WjAzMTEwLwYDVQQD Eyg3YTAxMTliM2UxMDZmZTJkYjJjM2I0NmVkZjAzYzljZTJiNzAwMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m09GfMyzGIPYqxHcXf7rYusbiM3 halv8K29/LSzadQfEga6XkZG0qShAjNkUJuuXbSL2L1JW5eqyAfJGHqREq+HT+wx +dOMw+pN5EZOCsy/zl7qWBrciiYKC9DAb9NG53TTtJXECLIYk/N7tqn4EOK88xet QTlKC1l70EbZti4JmuCe37bKrzfUeGTvS63gnOzFiAlI6xT+Cu9Lv0IOvfqIUesg Q1PbHfATrkH4LpCPsv75i5lZCqkWP/rwwVA7WaXgVJh0fGAoa2cNmcTzr5IfHenM HpsADYqHVYeskOmelLFduOyIrAbQbrW3u6MrvD6issihx11YS+/XQxdHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoBGbPhBv4tssO0bt8Dyc4rcADwMB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWMF6k62 rCb6mVMeEkjd93RPEDGFpG50mNtBybbh0ZjJaifw8tXy9hgjZBTCQ214oSQ4jhha zQ3Jlja8xgDKyPFsxRxd4WXO8UMhNwNGHH9jUjQ5UksvIdobUKRqF2l7TJZB576x oUBDlcdPPcj3JfLrJcSt9XEK1iYvhx4nDUHE7EgHa4yDnPFVjXGuW4OFwHEeQ3vY gP1CU5pUwN8fJFMtw6jn3TRCgJVWnpN8iNPKbc0FrBslXar38GuPnfUv7DAOCTDg 2E9TmzZp/wdtPvhgq3S4Yzj+/zNq9PpGbvpTs9JD+cUqslANJcPfdBIBFeK3x57b cnYn8+lYlbX7eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:46 2025 by rpki-client