This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json) Hash identifier: +kMn729f6wn+sYnp1bR+8fRava5bdgswdGjS1EdypxQ= Subject key identifier: 7D:ED:01:AA:64:7C:7F:DC:5F:8E:E9:6C:A4:BC:24:9C:DC:4B:30:BB Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019B225109AA21DA5B41555009F4D3E83D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft Manifest number: 1710 Signing time: Mon 15 Dec 2025 14:01:34 +0000 Manifest this update: Mon 15 Dec 2025 14:01:34 +0000 Manifest next update: Tue 16 Dec 2025 14:01:34 +0000 Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: 6Ojvz3ergXW0nwgdCYFqzu2fzEffbTFvjM+DLjkrZDs=) 2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:09:aa:21:da:5b:41:55:50:09:f4:d3:e8:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Dec 15 14:01:34 2025 GMT Not After : Dec 16 14:01:34 2025 GMT Subject: CN=7ded01aa647c7fdc5f8ee96ca4bc249cdc4b30bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:3d:69:20:73:9e:93:18:2c:a3:90:24:4d: 92:cf:22:b9:3d:c5:39:0c:46:0d:d3:77:66:9a:08: 37:be:0e:fa:ae:50:cd:4f:fe:fa:f5:2d:e3:6d:21: c0:b9:4f:d6:06:a0:9f:b2:e3:fd:aa:43:e1:df:bf: f3:8a:cc:e4:93:fc:ce:92:26:82:c6:79:23:be:e2: 18:b3:45:9a:8f:d8:5b:4e:78:48:e7:a8:23:f6:ab: b0:9f:dd:8b:c5:73:af:d9:9c:cb:70:48:50:2b:91: 25:60:66:fd:b1:59:e2:b6:bc:58:dc:12:38:21:b9: 42:0b:57:49:26:4a:cc:92:4d:7a:07:ae:75:06:b1: 3b:02:0c:8d:94:3d:1a:ee:11:72:4a:6c:a1:f1:23: 27:2a:6f:3f:c0:94:b0:6e:22:e9:12:bc:05:84:0b: a8:6b:0f:5d:68:d1:ac:11:67:e6:b0:6d:be:72:b6: ce:82:3e:90:51:a4:8e:dc:74:c4:87:d3:76:b5:44: 0b:aa:ac:4e:be:72:16:1a:06:2b:60:a5:35:c7:ae: 79:5c:fe:28:e0:96:77:3c:bc:8e:37:b9:18:a4:c8: 0b:97:fe:78:59:86:30:36:9f:a9:73:a3:62:c5:86: 46:4b:01:aa:1f:21:d9:fd:17:7a:a8:71:c6:45:be: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:ED:01:AA:64:7C:7F:DC:5F:8E:E9:6C:A4:BC:24:9C:DC:4B:30:BB X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:09:10:f0:93:68:30:7c:cc:12:e8:59:99:88:a1:04:c6:5f: 53:e3:f7:4a:14:d1:59:69:68:d8:22:d2:61:d7:ae:8f:f6:86: 76:7a:86:aa:06:9b:d7:ad:a2:97:18:d0:f8:56:a9:7d:8f:55: 7e:1d:a1:03:b6:3f:de:cf:4f:58:e1:33:d7:dd:90:62:85:d4: 6e:8b:54:90:af:13:7b:e8:4e:5b:72:a9:a2:ab:86:d5:48:29: 9a:c8:a1:5a:03:d8:83:95:50:02:33:a5:31:52:af:49:6d:9a: 09:45:92:7a:cd:2b:53:4b:a0:e4:51:94:22:50:f7:86:10:c9: 22:97:80:4e:a6:dc:c8:32:b5:59:1d:51:79:23:3f:11:9f:72: 2e:93:d1:40:67:f0:d4:64:c0:88:0c:60:c4:4d:e2:d7:5d:3e: 07:42:79:92:c9:2b:60:2f:4c:de:a6:fd:3f:fe:84:f3:0f:15: 9d:ae:75:28:67:ef:a9:84:85:d1:ad:13:0c:3a:bd:54:38:89: 03:47:11:b5:4c:5e:14:fb:f0:e8:21:fb:3f:eb:50:a6:95:41: a8:b9:c8:a0:18:48:21:d6:c2:0a:41:7a:d9:a8:c6:87:2e:e4: 9d:75:65:02:05:b8:3d:13:c6:02:83:84:b1:d5:f8:ce:42:ef: 8e:15:38:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUQmqIdpbQVVQCfTT6D0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjUxMjE1MTQwMTM0WhcNMjUxMjE2MTQwMTM0WjAzMTEwLwYDVQQD Eyg3ZGVkMDFhYTY0N2M3ZmRjNWY4ZWU5NmNhNGJjMjQ5Y2RjNGIzMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL49aSBznpMYLKOQJE2SzyK5PcU5 DEYN03dmmgg3vg76rlDNT/769S3jbSHAuU/WBqCfsuP9qkPh37/ziszkk/zOkiaC xnkjvuIYs0Waj9hbTnhI56gj9quwn92LxXOv2ZzLcEhQK5ElYGb9sVnitrxY3BI4 IblCC1dJJkrMkk16B651BrE7AgyNlD0a7hFySmyh8SMnKm8/wJSwbiLpErwFhAuo aw9daNGsEWfmsG2+crbOgj6QUaSO3HTEh9N2tUQLqqxOvnIWGgYrYKU1x655XP4o 4JZ3PLyON7kYpMgLl/54WYYwNp+pc6NixYZGSwGqHyHZ/Rd6qHHGRb7I4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3tAapkfH/cX47pbKS8JJzcSzC7MB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxwkQ8JNo MHzMEuhZmYihBMZfU+P3ShTRWWlo2CLSYdeuj/aGdnqGqgab162ilxjQ+FapfY9V fh2hA7Y/3s9PWOEz192QYoXUbotUkK8Te+hOW3KpoquG1UgpmsihWgPYg5VQAjOl MVKvSW2aCUWSes0rU0ug5FGUIlD3hhDJIpeATqbcyDK1WR1ReSM/EZ9yLpPRQGfw 1GTAiAxgxE3i110+B0J5kskrYC9M3qb9P/6E8w8Vna51KGfvqYSF0a0TDDq9VDiJ A0cRtUxeFPvw6CH7P+tQppVBqLnIoBhIIdbCCkF62ajGhy7knXVlAgW4PRPGAoOE sdX4zkLvjhU4bQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:32:01 2025 by rpki-client