This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json) Hash identifier: GnAsmchXO95gySpc4s9oAeSm2clskv80Cxr58kegV7M= Subject key identifier: 18:CA:87:71:B3:ED:F7:DB:0D:BB:11:C2:5F:C7:01:A9:26:AB:EE:CE Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Certificate serial: 019AAD2788087B015773EADA7352EFA5B116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft Manifest number: 094D Signing time: Sat 22 Nov 2025 20:00:40 +0000 Manifest this update: Sat 22 Nov 2025 20:00:40 +0000 Manifest next update: Sun 23 Nov 2025 20:00:40 +0000 Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: 9dQS6EdTiNQNgoVAv5+j+0UY0uKVEmfqMq5sPjoggeQ=) 2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=) 3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=) 4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:88:08:7b:01:57:73:ea:da:73:52:ef:a5:b1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Validity Not Before: Nov 22 20:00:40 2025 GMT Not After : Nov 23 20:00:40 2025 GMT Subject: CN=18ca8771b3edf7db0dbb11c25fc701a926abeece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:bd:1e:17:8e:98:b2:bf:fd:74:60:c4:ac: 96:91:49:51:2e:ba:02:ca:70:6d:f7:c6:64:35:4a: ad:f6:2e:82:1f:81:d6:a4:e5:f2:b9:c5:69:80:52: 04:59:22:77:23:6f:ae:85:1c:5f:d7:42:18:6f:2d: 6d:4d:e9:d9:aa:da:f2:80:7b:1b:fb:42:cb:80:05: be:7e:15:30:7d:0b:4a:74:7e:9b:71:5d:f6:2a:84: bc:b4:f6:5f:7c:6e:63:1b:a1:53:87:d5:6d:4b:51: f6:f9:b3:40:6f:d0:24:d9:b1:50:09:c2:1a:24:23: 0f:47:b3:2a:73:7c:ce:29:a7:1f:60:32:c4:3c:28: 06:46:f2:8d:55:f8:c0:ae:91:d9:9d:ba:7e:0d:af: b3:42:15:e9:a7:7c:9a:a6:fc:7a:c9:3e:ce:91:d1: f3:ac:85:2e:cf:28:d5:ca:67:e3:a2:13:d9:aa:9e: 59:50:df:f4:73:3e:85:7b:25:21:e4:c8:3a:fa:20: ba:0e:e1:fe:ef:e7:31:ee:75:83:3d:c3:dc:82:ed: c9:29:b8:3e:65:10:55:87:d7:4f:8b:c7:de:31:c0: b5:e3:94:76:11:a8:4c:92:87:d0:e6:46:46:8d:e3: 27:78:95:92:ac:b4:b9:e4:a5:67:fb:aa:56:b0:c9: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CA:87:71:B3:ED:F7:DB:0D:BB:11:C2:5F:C7:01:A9:26:AB:EE:CE X509v3 Authority Key Identifier: keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ef:44:32:e0:78:3c:0d:bb:a1:86:31:ee:99:10:37:84:6f: 18:be:5f:1d:2e:2e:27:89:4a:e6:57:8a:d6:3a:ff:29:85:83: 55:ca:cc:83:7e:86:e9:54:9a:04:b7:4a:fa:97:26:e3:38:83: 72:40:f6:a9:1d:ac:aa:64:68:c9:c4:00:79:90:c6:b0:7a:76: 4e:f3:15:af:a4:97:78:ec:0e:a0:39:a7:ef:3e:2c:65:9f:94: fd:bc:0d:3c:cc:e4:2f:48:6c:2e:26:1d:2c:9a:dc:98:fe:80: 59:1e:6b:9c:7e:c9:67:da:01:4c:65:b7:54:36:62:32:2e:10: a0:2c:47:02:03:4e:49:26:8c:db:d6:6d:3a:e2:c2:51:ce:37: 4b:68:4d:25:ee:ac:be:af:53:85:6d:88:73:32:78:67:06:5e: 47:dd:45:00:1a:5e:bf:52:15:d0:43:74:23:1f:49:0d:99:10: 4e:2b:a3:ca:a8:ce:28:67:e7:90:c6:a3:45:4b:ca:4b:77:ef: 59:e8:dd:6c:f0:ed:da:70:5b:02:39:87:91:45:03:c6:61:7c: a3:8b:15:bf:3b:9d:e5:98:94:ab:ca:5e:b2:13:89:75:87:a7: a3:4e:ed:32:74:fc:10:20:dd:6b:76:45:e6:0f:49:33:06:31: f3:9e:99:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ4gIewFXc+rac1LvpbEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx Nzg3ZTEwHhcNMjUxMTIyMjAwMDQwWhcNMjUxMTIzMjAwMDQwWjAzMTEwLwYDVQQD EygxOGNhODc3MWIzZWRmN2RiMGRiYjExYzI1ZmM3MDFhOTI2YWJlZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gO9HheOmLK//XRgxKyWkUlRLroC ynBt98ZkNUqt9i6CH4HWpOXyucVpgFIEWSJ3I2+uhRxf10IYby1tTenZqtrygHsb +0LLgAW+fhUwfQtKdH6bcV32KoS8tPZffG5jG6FTh9VtS1H2+bNAb9Ak2bFQCcIa JCMPR7Mqc3zOKacfYDLEPCgGRvKNVfjArpHZnbp+Da+zQhXpp3yapvx6yT7OkdHz rIUuzyjVymfjohPZqp5ZUN/0cz6FeyUh5Mg6+iC6DuH+7+cx7nWDPcPcgu3JKbg+ ZRBVh9dPi8feMcC145R2EahMkofQ5kZGjeMneJWSrLS55KVn+6pWsMk89wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjKh3Gz7ffbDbsRwl/HAakmq+7OMB8GA1UdIwQY MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2 LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu9EMuB4 PA27oYYx7pkQN4RvGL5fHS4uJ4lK5leK1jr/KYWDVcrMg36G6VSaBLdK+pcm4ziD ckD2qR2sqmRoycQAeZDGsHp2TvMVr6SXeOwOoDmn7z4sZZ+U/bwNPMzkL0hsLiYd LJrcmP6AWR5rnH7JZ9oBTGW3VDZiMi4QoCxHAgNOSSaM29ZtOuLCUc43S2hNJe6s vq9ThW2IczJ4ZwZeR91FABpev1IV0EN0Ix9JDZkQTiujyqjOKGfnkMajRUvKS3fv WejdbPDt2nBbAjmHkUUDxmF8o4sVvzud5ZiUq8peshOJdYeno07tMnT8ECDda3ZF 5g9JMwYx856ZCg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:35 2025 by rpki-client