This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json) Hash identifier: lm8gHk1gWqnUeNV/IVtNKnNquJJJ/VwVm1y0BaRZfko= Subject key identifier: 16:7D:69:23:7B:89:72:2A:67:4E:4D:E7:71:B2:E8:76:35:7D:65:8A Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019AF38966053487E9D3FBE6274D3B5C0C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft Manifest number: 16A2 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: IoAQhAexV1FeIOTp90Y7fwZzBECsBH8lPYttkVN4FT8=) 2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=) 3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=) 4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:66:05:34:87:e9:d3:fb:e6:27:4d:3b:5c:0c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=167d69237b89722a674e4de771b2e876357d658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:23:93:85:0a:ee:4e:91:3a:19:9b:39:02: b0:af:f9:3b:62:d3:97:86:5c:af:e0:4c:04:21:a5: e2:38:4f:8f:8c:36:67:1d:87:f8:97:f1:35:39:76: c5:bf:fd:35:ff:38:8e:a6:ed:80:4e:7a:d6:7d:38: e5:bd:07:47:0e:a3:8b:a4:0b:52:d5:5a:93:99:d1: 24:9d:11:83:1c:80:d0:9e:3f:90:fb:80:fd:92:b9: 11:91:6f:2d:b2:c2:9f:79:23:57:c5:47:c1:c5:22: f8:da:aa:c5:f2:bb:85:46:ae:2c:13:5d:aa:13:79: b3:ee:5b:4a:69:cd:d5:53:0f:81:36:ab:5c:c4:bb: a5:cc:52:e8:4f:79:9e:48:28:5d:64:ca:9c:2b:1e: 2e:e5:4c:2c:c0:fa:64:50:a9:a6:8e:16:93:99:e1: 63:20:fd:af:ac:c4:f6:0d:43:92:5c:b8:09:c2:dc: 1c:73:0b:d5:f6:3b:47:12:ac:a2:bb:23:f9:0a:b9: fc:87:96:46:d8:30:67:6a:50:46:64:24:a4:75:f9: 8e:35:6c:01:f6:7b:81:db:9b:bd:6c:08:73:a2:98: 5a:21:c9:26:20:7a:6f:d3:fc:25:d6:1c:9d:37:e8: 62:54:d7:0a:1c:5d:18:c3:fd:07:e1:c2:fd:d3:6f: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7D:69:23:7B:89:72:2A:67:4E:4D:E7:71:B2:E8:76:35:7D:65:8A X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c8:0a:e4:cb:1e:9f:6f:26:d9:fe:c4:b5:5e:8d:52:d6:01: 39:da:d6:a8:ca:35:c6:68:29:a8:74:bb:69:97:bd:83:28:e8: 77:70:ff:de:ab:37:f4:af:ea:6c:a1:7b:7e:c7:11:09:1f:d4: 7b:ce:97:f7:cf:ca:23:65:19:0a:1f:f8:14:c4:88:c9:f0:e5: 90:6c:50:e2:f9:dc:c3:bf:cd:0b:40:49:46:67:f3:52:33:06: 24:78:80:5d:6b:d9:39:aa:69:4c:9d:0f:62:20:63:6d:01:5b: 66:6f:c9:0a:de:9a:35:af:77:37:d0:c1:be:cc:e7:0a:8e:be: b5:82:53:e9:4b:94:77:2a:75:53:22:d8:6b:65:9f:64:44:55: b0:e9:e0:9a:e6:b1:66:a6:4e:e5:d2:80:37:af:7e:33:8d:9b: 1c:29:3d:2c:52:5b:c9:41:2b:38:ea:e6:a5:0a:a6:8f:ec:01: ad:ea:f5:e3:99:08:a4:5b:5d:b4:81:3a:82:2e:8f:02:d3:a3: c7:eb:c0:21:b8:21:4b:90:ac:d2:08:41:90:7a:30:18:32:3b: c4:68:8f:63:c9:a3:70:0d:45:0b:af:d5:d2:c8:23:8f:96:9d: a0:7a:33:12:b7:29:57:91:13:b6:8e:eb:50:92:e4:e3:d8:1f: fc:12:55:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWYFNIfp0/vmJ007XAyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD EygxNjdkNjkyMzdiODk3MjJhNjc0ZTRkZTc3MWIyZTg3NjM1N2Q2NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3sjk4UK7k6ROhmbOQKwr/k7YtOX hlyv4EwEIaXiOE+PjDZnHYf4l/E1OXbFv/01/ziOpu2ATnrWfTjlvQdHDqOLpAtS 1VqTmdEknRGDHIDQnj+Q+4D9krkRkW8tssKfeSNXxUfBxSL42qrF8ruFRq4sE12q E3mz7ltKac3VUw+BNqtcxLulzFLoT3meSChdZMqcKx4u5UwswPpkUKmmjhaTmeFj IP2vrMT2DUOSXLgJwtwccwvV9jtHEqyiuyP5Crn8h5ZG2DBnalBGZCSkdfmONWwB 9nuB25u9bAhzophaIckmIHpv0/wl1hydN+hiVNcKHF0Yw/0H4cL9028bYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ9aSN7iXIqZ05N53Gy6HY1fWWKMB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMgK5Mse n28m2f7EtV6NUtYBOdrWqMo1xmgpqHS7aZe9gyjod3D/3qs39K/qbKF7fscRCR/U e86X98/KI2UZCh/4FMSIyfDlkGxQ4vncw7/NC0BJRmfzUjMGJHiAXWvZOappTJ0P YiBjbQFbZm/JCt6aNa93N9DBvsznCo6+tYJT6UuUdyp1UyLYa2WfZERVsOngmuax ZqZO5dKAN69+M42bHCk9LFJbyUErOOrmpQqmj+wBrer145kIpFtdtIE6gi6PAtOj x+vAIbghS5Cs0ghBkHowGDI7xGiPY8mjcA1FC6/V0sgjj5adoHozErcpV5ETto7r UJLk49gf/BJVow== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:40 2025 by rpki-client