This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json) Hash identifier: JgEofn/WQWAzqQTAcC4e+QwhVpJethjbXavhC2XXct8= Subject key identifier: FA:00:59:C5:0E:67:33:41:D0:02:3A:64:44:A3:58:9C:CB:C8:4E:18 Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019AF23F915210F818D7D3896EFA5CB942E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft Manifest number: 0644 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=) 2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: VOI50pCx2WRESDcXRofdnrbNyJ8K20UdyWpJuaTTOb4=) 3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=) 4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=) 5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=) 6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=) 7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:52:10:f8:18:d7:d3:89:6e:fa:5c:b9:42:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=fa0059c50e673341d0023a6444a3589ccbc84e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:8b:5b:ef:fc:e4:5e:86:7d:1e:23:a5:22: b6:c0:58:07:ce:24:da:80:6b:f5:d0:03:91:11:3f: 48:3f:c0:6b:2f:ed:f9:65:eb:03:a5:9f:ab:47:3b: cf:48:cb:75:3d:a7:e2:ab:6a:0a:d7:f8:ef:2e:10: 61:f3:ac:6c:11:c3:f9:5e:84:2a:90:9f:2e:73:95: 6b:36:be:0b:14:78:e9:af:ea:99:59:91:18:85:4c: 41:45:ba:ec:6e:4d:b4:87:e7:a2:ed:d5:c4:74:13: 61:b3:b8:ac:5d:75:fd:85:7f:97:98:4d:12:cd:b8: f0:7a:a1:08:6b:f8:5d:4e:03:93:c1:62:4f:43:70: 73:a8:55:d0:88:77:cb:df:ce:e9:12:d5:05:92:ba: 6f:56:d5:06:60:c4:be:b6:a8:a7:cd:55:67:e9:2e: 54:f9:4c:15:8a:3c:96:ad:1e:f1:b1:06:c4:28:99: 98:d6:c3:57:ae:08:41:18:10:6d:30:5b:ef:cc:dd: 28:0c:ab:18:bc:2a:66:f2:03:f4:38:7f:a7:7c:e6: 13:9d:53:95:fa:fd:56:11:d6:b1:a4:bd:ff:b8:21: ce:ed:72:91:77:5a:9c:a8:fe:f7:be:0a:87:5a:bb: f0:b0:40:f7:4e:6a:45:7c:06:a3:77:3e:62:14:43: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:00:59:C5:0E:67:33:41:D0:02:3A:64:44:A3:58:9C:CB:C8:4E:18 X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c2:5e:47:ad:99:94:81:4b:28:66:ee:e4:e2:c7:cb:e0:dc: 5a:c5:38:8c:cb:d6:91:32:df:d7:02:72:cc:74:56:21:ed:bd: 5c:13:33:cf:90:53:60:34:cc:93:87:67:59:2b:a3:59:cf:81: 47:b7:b6:3a:4e:d5:9f:b0:5c:9c:5f:0c:0f:7a:cd:6b:2f:9f: 7a:d2:5b:4b:08:12:cd:2d:3c:ae:05:32:e9:d7:b2:b0:45:6e: d5:41:2f:1f:f2:4a:bb:9a:3f:0c:16:a4:33:95:34:d6:14:2c: 80:b4:03:27:35:38:0a:a8:64:f3:4e:a4:b6:14:03:3b:fd:1d: e6:8a:43:92:cc:3e:77:59:92:e9:02:00:15:38:7a:f2:56:43: 2d:54:30:4a:5b:dc:ac:74:2c:73:c0:6e:f1:ff:c8:01:16:4c: 4b:ac:c1:69:4d:ae:4f:ea:a7:81:fa:c7:f1:1a:6d:3e:7a:8e: db:b8:cb:09:99:e5:ab:ef:ac:6b:7a:15:74:66:79:ca:f6:d2: 67:0a:8f:0f:34:51:6e:fa:34:1d:d3:47:f4:ff:b4:e3:7c:c2: e2:a8:fd:8f:af:01:54:b3:19:14:46:7a:34:86:4d:22:00:e8: 4e:54:a9:39:f2:3c:88:27:46:d2:6b:1e:64:43:c3:ec:2c:d7: 00:f0:17:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5FSEPgY19OJbvpcuULkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhmYTAwNTljNTBlNjczMzQxZDAwMjNhNjQ0NGEzNTg5Y2NiYzg0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d+LW+/85F6GfR4jpSK2wFgHziTa gGv10AORET9IP8BrL+35ZesDpZ+rRzvPSMt1Pafiq2oK1/jvLhBh86xsEcP5XoQq kJ8uc5VrNr4LFHjpr+qZWZEYhUxBRbrsbk20h+ei7dXEdBNhs7isXXX9hX+XmE0S zbjweqEIa/hdTgOTwWJPQ3BzqFXQiHfL387pEtUFkrpvVtUGYMS+tqinzVVn6S5U +UwVijyWrR7xsQbEKJmY1sNXrghBGBBtMFvvzN0oDKsYvCpm8gP0OH+nfOYTnVOV +v1WEdaxpL3/uCHO7XKRd1qcqP73vgqHWrvwsED3TmpFfAajdz5iFEMxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoAWcUOZzNB0AI6ZESjWJzLyE4YMB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8JeR62Z lIFLKGbu5OLHy+DcWsU4jMvWkTLf1wJyzHRWIe29XBMzz5BTYDTMk4dnWSujWc+B R7e2Ok7Vn7BcnF8MD3rNay+fetJbSwgSzS08rgUy6deysEVu1UEvH/JKu5o/DBak M5U01hQsgLQDJzU4Cqhk806kthQDO/0d5opDksw+d1mS6QIAFTh68lZDLVQwSlvc rHQsc8Bu8f/IARZMS6zBaU2uT+qngfrH8RptPnqO27jLCZnlq++sa3oVdGZ5yvbS ZwqPDzRRbvo0HdNH9P+043zC4qj9j68BVLMZFEZ6NIZNIgDoTlSpOfI8iCdG0mse ZEPD7CzXAPAX7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:02 2025 by rpki-client