This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json) Hash identifier: diPdCw60p/tFkrDHXgsnVe6tz9LTLqExVMG1zb+uJic= Subject key identifier: EB:A0:FE:80:2B:C1:E9:9F:20:51:49:63:DC:20:09:57:D7:41:D2:A2 Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55 Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55 Certificate serial: 019AF31C1FD0CC54D6EB536A64A5AFE30DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft Manifest number: 0BA5 Signing time: Sat 06 Dec 2025 10:01:37 +0000 Manifest this update: Sat 06 Dec 2025 10:01:37 +0000 Manifest next update: Sun 07 Dec 2025 10:01:37 +0000 Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: D8bllQKXWhLFm4KJ/SLSgylmmNlXEh05kSGCAZN2JLk=) 2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:1f:d0:cc:54:d6:eb:53:6a:64:a5:af:e3:0d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55 Validity Not Before: Dec 6 10:01:37 2025 GMT Not After : Dec 7 10:01:37 2025 GMT Subject: CN=eba0fe802bc1e99f20514963dc200957d741d2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:bc:d8:cb:2d:1f:da:34:48:87:af:4b:41: 7e:5b:17:f7:44:62:7f:f8:b6:e6:e9:7c:60:37:3b: 35:9b:f4:22:64:b2:64:89:7f:63:e8:d4:43:fa:2c: 6a:72:08:76:29:ae:1b:f0:38:3e:0f:e1:8a:27:60: 54:6d:96:0b:90:77:c6:4c:40:58:b3:51:47:f3:3f: 33:1d:98:80:1a:01:19:b0:da:52:36:16:4e:f5:4c: ef:a8:59:ec:35:7f:93:80:36:47:3d:57:12:d5:68: 6c:24:05:95:4f:36:01:fd:e2:e4:c4:46:a0:85:79: 85:b9:c3:b9:b7:fe:41:48:95:a1:fd:a4:e3:a9:5d: 44:3e:74:90:8f:c9:4c:b8:6a:8b:97:8c:2f:be:d3: 6f:a9:e1:f8:29:64:2b:a3:e9:86:bd:96:d9:23:41: 91:2c:c6:94:d3:61:78:6e:74:d2:b7:09:cd:9d:09: 6f:68:5c:2f:e0:da:0d:23:44:1b:26:65:67:a7:27: 94:4f:ab:e4:31:e5:de:54:73:69:9f:2e:1b:ec:dd: 41:37:73:a0:8e:ac:d7:80:8b:23:31:eb:d0:49:70: 04:21:d1:ab:b0:b3:86:96:1e:7c:f7:ef:8d:f8:cf: c3:23:ae:ec:73:89:60:0e:74:e5:80:f2:6e:f9:73: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A0:FE:80:2B:C1:E9:9F:20:51:49:63:DC:20:09:57:D7:41:D2:A2 X509v3 Authority Key Identifier: keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:02:24:04:74:1a:eb:07:4c:1e:df:ce:99:af:a0:29:cc:74: bd:cf:e9:93:b3:22:f7:49:3c:9a:e4:d9:70:63:36:a1:4f:1c: ba:fe:d2:c9:0c:51:bf:25:9d:7f:28:39:52:10:ee:91:19:1d: 90:b9:25:9e:da:74:10:db:09:69:aa:74:ce:fe:6c:3e:8d:83: c6:16:f4:c2:3d:5b:95:f2:87:90:d7:97:c0:de:68:11:23:b7: 40:b7:cb:5a:af:94:14:1b:9b:2d:86:8c:22:d4:58:aa:8f:1c: f0:94:fc:a6:2a:c6:7b:f8:76:f0:47:e9:35:7e:f3:73:88:73: 72:ce:cc:b7:46:1a:3b:80:10:76:01:d1:87:89:7e:f8:b9:88: 71:b2:84:d6:d5:fb:a1:68:68:20:ce:19:0e:e6:d2:56:d0:8e: 5e:cd:29:82:d5:ca:83:8f:b3:e6:28:a2:39:ef:1d:7c:6f:45: 95:31:22:9e:60:9c:b8:a1:dc:c6:c9:31:d4:73:8f:e1:f0:fe: bb:14:26:c5:b3:7c:f8:2c:d4:16:cd:fe:8e:b9:ad:3f:66:7d: 8b:1f:44:ea:78:3b:17:fd:f8:1b:a1:e8:60:d9:ff:a6:c6:a4: 55:46:e8:4b:42:f0:2a:ba:cb:14:93:a1:58:1f:cc:20:d3:14: 13:a7:a9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHB/QzFTW61NqZKWv4w3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2 NzJlNTUwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD EyhlYmEwZmU4MDJiYzFlOTlmMjA1MTQ5NjNkYzIwMDk1N2Q3NDFkMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/O82MstH9o0SIevS0F+Wxf3RGJ/ +Lbm6XxgNzs1m/QiZLJkiX9j6NRD+ixqcgh2Ka4b8Dg+D+GKJ2BUbZYLkHfGTEBY s1FH8z8zHZiAGgEZsNpSNhZO9UzvqFnsNX+TgDZHPVcS1WhsJAWVTzYB/eLkxEag hXmFucO5t/5BSJWh/aTjqV1EPnSQj8lMuGqLl4wvvtNvqeH4KWQro+mGvZbZI0GR LMaU02F4bnTStwnNnQlvaFwv4NoNI0QbJmVnpyeUT6vkMeXeVHNpny4b7N1BN3Og jqzXgIsjMevQSXAEIdGrsLOGlh589++N+M/DI67sc4lgDnTlgPJu+XMs5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOug/oArwemfIFFJY9wgCVfXQdKiMB8GA1UdIwQY MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt ZDdjNmZmOTMzYzIzLzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgIkBHQa 6wdMHt/Oma+gKcx0vc/pk7Mi90k8muTZcGM2oU8cuv7SyQxRvyWdfyg5UhDukRkd kLklntp0ENsJaap0zv5sPo2Dxhb0wj1blfKHkNeXwN5oESO3QLfLWq+UFBubLYaM ItRYqo8c8JT8pirGe/h28EfpNX7zc4hzcs7Mt0YaO4AQdgHRh4l++LmIcbKE1tX7 oWhoIM4ZDubSVtCOXs0pgtXKg4+z5iiiOe8dfG9FlTEinmCcuKHcxskx1HOP4fD+ uxQmxbN8+CzUFs3+jrmtP2Z9ix9E6ng7F/34G6HoYNn/psakVUboS0LwKrrLFJOh WB/MINMUE6eppw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:08 2025 by rpki-client