This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json) Hash identifier: ZWYG29fw7duEIxyVlMkJ7iPUMH/lj0VIceP56s5DOsI= Subject key identifier: 32:C4:B9:8A:31:94:CA:4F:9F:34:F7:D5:43:CE:8E:76:34:D6:7F:76 Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049 Certificate serial: 019B07EB7EB7320DE8FBFD9982D5F60FB86C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft Manifest number: 0C31 Signing time: Wed 10 Dec 2025 11:00:32 +0000 Manifest this update: Wed 10 Dec 2025 11:00:32 +0000 Manifest next update: Thu 11 Dec 2025 11:00:32 +0000 Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: 8QFkEe1BD4hQ4W3i2K6Wdnl+74osy/FwSbAS8mtc6+I=) 2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=) 3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:7e:b7:32:0d:e8:fb:fd:99:82:d5:f6:0f:b8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049 Validity Not Before: Dec 10 11:00:32 2025 GMT Not After : Dec 11 11:00:32 2025 GMT Subject: CN=32c4b98a3194ca4f9f34f7d543ce8e7634d67f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:28:6b:43:ee:7a:c0:5f:9d:50:7a:b1:ca: e3:3b:2b:6c:2b:f0:e2:3e:4c:23:92:f7:9e:78:e3: a4:65:da:c4:f5:5e:a6:6f:51:83:4c:56:eb:fa:35: 3a:59:3d:98:7d:f3:5e:bd:52:d0:a5:27:e0:48:3b: dd:07:86:9b:50:6e:d4:19:ae:10:ee:13:b8:61:58: ac:b4:33:bb:7d:2c:fc:66:00:69:58:f2:93:dd:89: 4d:62:bc:01:ce:f1:52:b5:dd:88:f7:f4:37:aa:76: 39:7f:ce:93:95:00:b9:4b:78:91:19:56:fa:1b:eb: b4:cc:07:3c:92:8b:07:57:f3:04:2a:34:59:63:cc: 0a:c1:d7:40:94:21:43:b1:fe:b8:33:4b:99:2f:56: 0b:77:17:fc:b2:7e:2d:9e:cd:7d:30:a4:53:31:50: b5:ce:32:b4:35:f9:40:1c:28:86:96:ca:e6:09:1b: 9c:31:55:33:bb:0b:c4:c7:17:7d:8d:4e:db:df:20: 0e:e1:6a:b9:26:2a:74:0e:8b:60:a2:de:ea:e2:1b: ec:9f:8d:ed:ae:d6:9b:c2:85:8a:33:ab:6b:15:e7: 95:87:53:5b:04:25:d3:de:09:2e:c7:d5:7a:b6:53: a5:a7:3a:a0:df:40:23:ed:60:d0:23:83:b9:31:3d: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:B9:8A:31:94:CA:4F:9F:34:F7:D5:43:CE:8E:76:34:D6:7F:76 X509v3 Authority Key Identifier: keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d6:d8:36:fe:41:57:41:e0:1d:b7:23:c4:35:08:d2:3f:88: 2e:09:58:33:4b:ba:85:13:0d:b2:09:c5:90:b2:77:96:da:7b: 5a:a9:4c:3d:78:b6:f3:72:a3:26:93:a2:eb:3d:2c:88:aa:51: 04:8b:65:b6:49:35:02:91:3f:56:6a:7e:2a:4c:fa:af:c6:ae: a5:44:46:55:65:0a:fe:10:5f:f8:1c:e4:7f:42:5e:0d:38:ea: 3b:de:96:af:02:d5:1a:f2:9e:da:c9:83:cf:00:b2:d3:fe:16: 0e:97:5b:44:0e:37:c0:7c:3e:75:40:00:c6:da:3d:b1:fb:d4: 4e:dd:43:93:63:e0:09:af:bd:9c:10:04:e9:14:fd:44:63:d8: 09:b1:37:6a:9b:47:39:2b:de:95:11:50:20:bc:5d:25:87:00: 78:6f:bd:eb:5e:c6:2c:37:d8:9c:85:8c:a7:bb:f6:bc:ac:22: 5b:34:63:57:2d:31:2f:73:2a:fd:5f:56:ce:d6:16:8b:87:75: 8f:44:0a:89:3f:66:21:34:3d:ba:f9:e2:33:4c:3d:02:04:f1: 22:1b:d1:a2:b0:98:92:f3:18:81:54:d6:0b:42:f2:ab:8c:df: ff:40:47:1e:e3:b6:b1:45:d7:aa:c1:47:4c:65:a4:a3:22:85: 1c:bd:cd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH6363Mg3o+/2ZgtX2D7hsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw ZjgwNDkwHhcNMjUxMjEwMTEwMDMyWhcNMjUxMjExMTEwMDMyWjAzMTEwLwYDVQQD EygzMmM0Yjk4YTMxOTRjYTRmOWYzNGY3ZDU0M2NlOGU3NjM0ZDY3Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAUoa0PuesBfnVB6scrjOytsK/Di PkwjkveeeOOkZdrE9V6mb1GDTFbr+jU6WT2YffNevVLQpSfgSDvdB4abUG7UGa4Q 7hO4YVistDO7fSz8ZgBpWPKT3YlNYrwBzvFStd2I9/Q3qnY5f86TlQC5S3iRGVb6 G+u0zAc8kosHV/MEKjRZY8wKwddAlCFDsf64M0uZL1YLdxf8sn4tns19MKRTMVC1 zjK0NflAHCiGlsrmCRucMVUzuwvExxd9jU7b3yAO4Wq5Jip0Dotgot7q4hvsn43t rtabwoWKM6trFeeVh1NbBCXT3gkux9V6tlOlpzqg30Aj7WDQI4O5MT22vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLEuYoxlMpPnzT31UPOjnY01n92MB8GA1UdIwQY MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNbYNv5B V0HgHbcjxDUI0j+ILglYM0u6hRMNsgnFkLJ3ltp7WqlMPXi283KjJpOi6z0siKpR BItltkk1ApE/Vmp+Kkz6r8aupURGVWUK/hBf+Bzkf0JeDTjqO96WrwLVGvKe2smD zwCy0/4WDpdbRA43wHw+dUAAxto9sfvUTt1Dk2PgCa+9nBAE6RT9RGPYCbE3aptH OSvelRFQILxdJYcAeG+9617GLDfYnIWMp7v2vKwiWzRjVy0xL3Mq/V9WztYWi4d1 j0QKiT9mITQ9uvniM0w9AgTxIhvRorCYkvMYgVTWC0Lyq4zf/0BHHuO2sUXXqsFH TGWkoyKFHL3NtA== -----END CERTIFICATE-----Generated at Wed Dec 10 13:58:06 2025 by rpki-client