This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json) Hash identifier: gkRXb/mgI/YFVX8gfru+zips0wYRI/JrZkFX3ol8QhA= Subject key identifier: 8D:A1:DE:1D:67:3F:38:B8:51:B9:FE:B3:87:8D:B6:49:66:EF:75:89 Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc Certificate serial: 019B2E8B9AEF077213A9218D357202E6FE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft Manifest number: 16A6 Signing time: Wed 17 Dec 2025 23:00:59 +0000 Manifest this update: Wed 17 Dec 2025 23:00:59 +0000 Manifest next update: Thu 18 Dec 2025 23:00:59 +0000 Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: qKHk9RJ4m8re0jHzSGQn9NFGjWhkq8m2YCVFCrnuC/s=) 2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=) 3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:9a:ef:07:72:13:a9:21:8d:35:72:02:e6:fe:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc Validity Not Before: Dec 17 23:00:59 2025 GMT Not After : Dec 18 23:00:59 2025 GMT Subject: CN=8da1de1d673f38b851b9feb3878db64966ef7589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:08:7f:a1:b2:ab:d2:9d:18:95:6c:a8:7c: 28:12:f6:07:0e:4d:60:a9:3e:99:a4:39:f5:7a:f9: 2a:d6:7e:5b:14:8e:64:ee:d3:33:48:fb:6d:fc:55: 65:79:03:49:69:98:68:3e:c4:bf:e5:28:f3:71:93: 6f:75:0a:0d:46:df:13:16:2a:c0:4c:71:0f:c9:26: ca:07:53:6f:01:df:7f:36:25:e6:2c:2d:95:a8:ac: e1:d0:74:b9:29:90:ab:58:14:6e:aa:8c:82:64:55: 60:a2:33:38:28:d3:47:b7:a3:92:48:df:5d:26:1e: a9:65:8e:94:f8:c5:e3:b7:48:f9:2b:c4:64:38:5b: 0b:00:5e:79:ac:6d:34:a6:4b:d4:e1:e7:6a:f9:38: fa:04:4a:ab:89:e3:ab:6b:40:29:bd:37:d1:03:8a: f6:e2:a6:0a:9c:7d:92:77:45:dd:ff:15:00:3d:a2: 15:b3:51:97:1e:e0:65:64:b5:17:60:23:79:5e:9f: ac:8e:72:6e:8d:b8:b5:67:57:22:b0:a1:29:26:39: 12:5d:4a:99:be:e0:bb:40:7f:c3:f9:7f:66:6b:74: 6e:62:3e:49:2a:54:ca:81:78:ac:9c:ef:2a:36:d1: d2:7f:a5:9f:2b:16:50:63:c6:c9:44:1e:66:36:57: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A1:DE:1D:67:3F:38:B8:51:B9:FE:B3:87:8D:B6:49:66:EF:75:89 X509v3 Authority Key Identifier: keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:13:e1:49:f8:9b:1d:a9:5d:82:73:3a:81:e5:74:6e:fe:47: 46:cd:f0:94:e1:14:35:7e:6d:ab:2e:90:05:f8:e7:93:fd:79: 51:3e:7a:35:bd:99:76:ba:43:ba:93:2a:e2:9f:d4:3c:93:0a: a8:c5:c0:84:5d:5a:8b:69:6e:0f:db:36:93:49:2b:d7:69:7a: f6:5b:3e:8a:0c:52:26:df:fe:2a:a0:ce:60:a3:84:a0:42:3a: ae:d3:1b:e9:b7:78:52:84:36:b2:68:75:e4:58:02:e6:b8:23: 8b:82:4f:b8:02:97:d9:3b:5b:7d:8d:78:23:c6:53:d5:05:d4: c8:67:39:99:43:bd:f6:62:84:1c:84:78:2e:68:21:91:d3:7a: 8d:1b:85:46:2f:5d:38:28:40:34:b0:50:f6:7f:9f:c7:64:c0: 0b:ee:6f:5c:25:29:35:f3:a8:3b:fa:ce:78:55:5f:79:30:a6: 5f:9c:de:d6:ab:cd:b7:9f:1a:9d:19:53:8e:ca:63:c0:70:46: 6f:11:a9:28:fb:e4:43:4d:d4:51:36:c5:76:ba:e7:7c:a2:50: 96:be:d2:54:09:7e:d0:8d:8f:b9:ab:35:4d:bf:86:c6:ba:8a: d4:20:f7:7f:1b:1c:27:e5:fc:ac:4a:e0:86:3f:ca:0a:ac:22: e2:d5:25:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui5rvB3ITqSGNNXIC5v5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix NTUxZGMwHhcNMjUxMjE3MjMwMDU5WhcNMjUxMjE4MjMwMDU5WjAzMTEwLwYDVQQD Eyg4ZGExZGUxZDY3M2YzOGI4NTFiOWZlYjM4NzhkYjY0OTY2ZWY3NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmcIf6Gyq9KdGJVsqHwoEvYHDk1g qT6ZpDn1evkq1n5bFI5k7tMzSPtt/FVleQNJaZhoPsS/5SjzcZNvdQoNRt8TFirA THEPySbKB1NvAd9/NiXmLC2VqKzh0HS5KZCrWBRuqoyCZFVgojM4KNNHt6OSSN9d Jh6pZY6U+MXjt0j5K8RkOFsLAF55rG00pkvU4edq+Tj6BEqrieOra0ApvTfRA4r2 4qYKnH2Sd0Xd/xUAPaIVs1GXHuBlZLUXYCN5Xp+sjnJujbi1Z1cisKEpJjkSXUqZ vuC7QH/D+X9ma3RuYj5JKlTKgXisnO8qNtHSf6WfKxZQY8bJRB5mNlcUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2h3h1nPzi4Ubn+s4eNtklm73WJMB8GA1UdIwQY MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt MzRhOWU5OGE1Zjg2LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2 LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBPhSfib HaldgnM6geV0bv5HRs3wlOEUNX5tqy6QBfjnk/15UT56Nb2ZdrpDupMq4p/UPJMK qMXAhF1ai2luD9s2k0kr12l69ls+igxSJt/+KqDOYKOEoEI6rtMb6bd4UoQ2smh1 5FgC5rgji4JPuAKX2TtbfY14I8ZT1QXUyGc5mUO99mKEHIR4LmghkdN6jRuFRi9d OChANLBQ9n+fx2TAC+5vXCUpNfOoO/rOeFVfeTCmX5ze1qvNt58anRlTjspjwHBG bxGpKPvkQ03UUTbFdrrnfKJQlr7SVAl+0I2Puas1Tb+GxrqK1CD3fxscJ+X8rErg hj/KCqwi4tUlTA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:21:36 2025 by rpki-client