This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json) Hash identifier: yytMS8xTvuYcnTDbbBR1RU9NtlzOoLtqkP2w72DkWys= Subject key identifier: F6:E1:75:E3:F1:04:40:4B:6F:5A:A5:B8:2E:B9:08:6E:E2:D3:2D:27 Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049 Certificate serial: 019B2C9CFCC0E319F7A9C79000B9875AAFB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft Manifest number: 0C44 Signing time: Wed 17 Dec 2025 14:00:44 +0000 Manifest this update: Wed 17 Dec 2025 14:00:44 +0000 Manifest next update: Thu 18 Dec 2025 14:00:44 +0000 Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: rv9DFeM3rUic4rfx4sD5K6dqUKqD1RYlpXn5R2RfdgY=) 2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=) 3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9c:fc:c0:e3:19:f7:a9:c7:90:00:b9:87:5a:af:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049 Validity Not Before: Dec 17 14:00:44 2025 GMT Not After : Dec 18 14:00:44 2025 GMT Subject: CN=f6e175e3f104404b6f5aa5b82eb9086ee2d32d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:2d:d7:81:14:8d:48:08:4b:f4:3a:4f:9d: bf:36:54:48:0e:9b:c4:15:0c:58:53:06:5c:b9:a9: bb:b8:72:81:b7:09:51:0e:4d:85:99:23:b0:38:b6: 9b:dd:00:f9:5d:31:95:c1:19:33:d2:4a:dd:2a:9d: c1:b0:72:4d:6a:f9:84:09:5c:f6:f2:d7:ef:f2:d8: ca:45:ca:69:bd:90:b6:bc:36:1b:7b:2e:65:fb:ab: 7a:82:e6:55:c9:43:90:45:1c:7e:09:6d:3c:7b:21: f9:d5:fa:26:6d:d7:5a:56:55:1a:44:f3:9c:6d:42: 60:c3:45:8a:07:4f:27:b1:1c:68:57:e5:df:ee:9c: ed:0f:b1:1f:6d:55:97:e8:2a:ed:e8:76:79:7b:83: 52:f7:f8:1d:ab:28:f2:d2:2c:c8:ff:3d:4e:51:9d: 0d:cd:89:5a:eb:d0:5d:0b:dc:f4:09:e4:0a:a1:41: 48:e5:4e:6b:1d:d3:01:b9:f5:6a:3d:2f:1e:69:48: ee:f3:6d:9b:d7:ff:b3:ae:14:96:55:b1:27:61:cb: 23:83:60:16:d6:af:a0:86:45:82:1d:5d:81:a2:c0: 94:25:05:a9:67:f7:41:f5:b7:24:91:c2:bf:d0:61: 01:93:c2:f4:79:3e:be:4e:04:c8:54:9e:22:ba:43: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:75:E3:F1:04:40:4B:6F:5A:A5:B8:2E:B9:08:6E:E2:D3:2D:27 X509v3 Authority Key Identifier: keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:69:56:c7:06:ff:3e:08:57:b2:da:85:0f:31:be:95:49:16: 04:48:d0:af:b0:ee:30:ce:8c:4f:2b:3c:ea:a0:55:cc:d0:03: 37:7d:c7:4b:47:f2:2a:62:2c:12:89:a3:4e:96:de:e2:36:b9: 77:20:31:e5:db:55:1b:de:a8:75:b9:75:57:5c:80:a2:57:e5: 95:41:65:74:4a:cb:81:a3:15:5c:db:aa:44:8b:5c:e4:d2:36: 39:b6:3f:bc:de:b5:7b:c3:86:44:67:de:dd:82:0f:b7:2f:b3: a1:3b:8a:37:bc:8b:11:7b:82:a9:0e:63:57:d5:6a:f8:2f:8f: 58:bb:a5:16:c3:54:bf:45:a1:3f:34:05:91:47:35:da:e0:17: 68:73:b0:98:e9:95:2f:96:02:09:4d:bc:0c:77:7f:7f:03:02: 35:d4:df:dc:65:52:a5:26:4e:fc:f6:ae:f1:da:dd:d5:3a:80: 25:64:f9:84:05:b4:75:17:27:65:18:5c:6d:54:a0:52:e3:ff: 2f:87:3c:b9:e6:c1:70:89:14:71:ec:3c:09:37:ba:37:5e:4f: 78:26:03:36:c4:af:5c:2b:59:29:8d:94:a3:d9:3d:d8:cc:d1: d0:9a:c1:4a:3f:5f:9d:6f:74:76:8e:62:cd:55:8d:cc:26:1c: 06:21:6f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnPzA4xn3qceQALmHWq+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw ZjgwNDkwHhcNMjUxMjE3MTQwMDQ0WhcNMjUxMjE4MTQwMDQ0WjAzMTEwLwYDVQQD EyhmNmUxNzVlM2YxMDQ0MDRiNmY1YWE1YjgyZWI5MDg2ZWUyZDMyZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEEt14EUjUgIS/Q6T52/NlRIDpvE FQxYUwZcuam7uHKBtwlRDk2FmSOwOLab3QD5XTGVwRkz0krdKp3BsHJNavmECVz2 8tfv8tjKRcppvZC2vDYbey5l+6t6guZVyUOQRRx+CW08eyH51fombddaVlUaRPOc bUJgw0WKB08nsRxoV+Xf7pztD7EfbVWX6Crt6HZ5e4NS9/gdqyjy0izI/z1OUZ0N zYla69BdC9z0CeQKoUFI5U5rHdMBufVqPS8eaUju822b1/+zrhSWVbEnYcsjg2AW 1q+ghkWCHV2BosCUJQWpZ/dB9bckkcK/0GEBk8L0eT6+TgTIVJ4iukMMjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbhdePxBEBLb1qluC65CG7i0y0nMB8GA1UdIwQY MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWlWxwb/ PghXstqFDzG+lUkWBEjQr7DuMM6MTys86qBVzNADN33HS0fyKmIsEomjTpbe4ja5 dyAx5dtVG96odbl1V1yAolfllUFldErLgaMVXNuqRItc5NI2ObY/vN61e8OGRGfe 3YIPty+zoTuKN7yLEXuCqQ5jV9Vq+C+PWLulFsNUv0WhPzQFkUc12uAXaHOwmOmV L5YCCU28DHd/fwMCNdTf3GVSpSZO/Pau8drd1TqAJWT5hAW0dRcnZRhcbVSgUuP/ L4c8uebBcIkUcew8CTe6N15PeCYDNsSvXCtZKY2Uo9k92MzR0JrBSj9fnW90do5i zVWNzCYcBiFvsw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:21:36 2025 by rpki-client