This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json) Hash identifier: wf4mI093E2kUUtR+nFuFcqlvEUNgrBAzvTxQen1Hg1M= Subject key identifier: 29:5E:9B:EA:F9:B7:71:79:A0:66:5B:B4:55:93:53:68:C6:7C:61:48 Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Certificate serial: 019B243E7C6F65C1D45DB9B8013C15421A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft Manifest number: 15B4 Signing time: Mon 15 Dec 2025 23:00:33 +0000 Manifest this update: Mon 15 Dec 2025 23:00:33 +0000 Manifest next update: Tue 16 Dec 2025 23:00:33 +0000 Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: EPIjt9cRUHzJNJMI16hjpkt3vrYhxWaKl75ij3Zp4TQ=) 2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:7c:6f:65:c1:d4:5d:b9:b8:01:3c:15:42:1a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Validity Not Before: Dec 15 23:00:33 2025 GMT Not After : Dec 16 23:00:33 2025 GMT Subject: CN=295e9beaf9b77179a0665bb455935368c67c6148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:cc:5a:cd:de:1d:ae:05:fa:91:f0:39:3a: 79:63:83:9c:64:d1:b5:1a:0e:fb:b3:68:5e:cb:1b: 68:8a:5c:29:42:c7:04:8e:72:fb:10:d6:5f:61:fe: 0d:bc:a8:1b:4f:fb:07:91:49:28:57:77:7e:75:4d: ba:48:16:91:8f:97:57:e8:fa:da:09:05:d8:69:49: 44:40:55:d9:b5:b5:f2:40:eb:94:39:fb:02:b1:03: 9f:8d:c2:65:2e:a4:4f:c3:46:77:f3:98:c5:db:41: 5b:2c:b5:99:6d:a5:b0:ca:c7:34:42:34:34:86:d6: b1:42:83:94:d6:c7:ed:15:cc:fd:12:db:77:74:5b: 6d:12:37:51:6d:4d:33:b4:3a:fc:cd:f5:e9:fa:6a: 37:f8:f9:4e:81:39:dc:73:7e:06:4e:44:8c:84:51: 98:77:13:f7:48:a8:b6:03:3d:e7:3f:37:33:49:57: a9:52:6f:b9:f4:85:9d:8d:ab:32:ce:98:c5:62:9e: 6a:60:88:93:80:26:6e:05:67:b1:4e:73:0a:58:71: 05:bd:a8:03:ac:39:57:a7:d3:67:e4:5e:3c:9f:65: bf:55:8b:4c:71:96:65:97:36:3d:40:ba:e5:86:81: 7b:09:03:a0:7b:9c:a4:d4:79:d6:eb:e3:83:04:aa: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:9B:EA:F9:B7:71:79:A0:66:5B:B4:55:93:53:68:C6:7C:61:48 X509v3 Authority Key Identifier: keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:89:69:73:9d:64:92:d1:ea:8f:1c:57:ee:f6:96:87:aa:08: 80:71:b7:db:59:25:cf:84:7b:10:ee:7d:ea:5d:56:fe:f5:2b: 92:d1:45:0c:5c:53:a5:bc:b3:81:e6:a0:af:50:75:2c:ab:2d: 8f:ce:59:b2:e5:1b:b3:90:1b:00:66:29:cf:45:a1:6e:0b:e9: cb:9c:7a:27:2d:cb:c6:6d:27:b8:11:8f:42:94:9f:a9:18:ee: 3b:ec:5c:05:9d:e4:d8:21:cc:1f:a6:30:c1:fd:32:15:27:cc: bd:ee:79:36:46:78:52:ad:e7:d9:33:5f:e6:1c:6e:a3:08:44: 5d:c1:bf:5e:f9:ce:fd:88:cc:f3:21:07:35:2a:93:20:fc:22: ac:c3:cf:86:5d:34:3b:93:06:19:95:9b:73:f9:84:d5:65:62: 9a:d5:f8:c5:d0:3f:95:c0:ea:27:52:8c:1c:99:66:a3:78:5c: 80:90:26:44:75:55:41:0c:66:7f:a5:69:3a:8d:16:4e:0b:ce: ab:74:29:d8:57:ba:df:73:d8:72:49:64:9d:54:4e:98:35:5b: 8f:4a:26:ce:96:24:51:0f:61:d9:04:ad:f5:06:3e:56:e4:11: 10:7e:b3:c3:d1:a4:bc:ef:88:2e:69:0f:ce:de:5e:dd:cb:c1: 31:13:67:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPnxvZcHUXbm4ATwVQhonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2E5YzM1ZDllMWEyZjRkMzRhNzU0ZmEyNmQyMDM2NTc4 NDcyMTgwHhcNMjUxMjE1MjMwMDMzWhcNMjUxMjE2MjMwMDMzWjAzMTEwLwYDVQQD EygyOTVlOWJlYWY5Yjc3MTc5YTA2NjViYjQ1NTkzNTM2OGM2N2M2MTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXMWs3eHa4F+pHwOTp5Y4OcZNG1 Gg77s2heyxtoilwpQscEjnL7ENZfYf4NvKgbT/sHkUkoV3d+dU26SBaRj5dX6Pra CQXYaUlEQFXZtbXyQOuUOfsCsQOfjcJlLqRPw0Z385jF20FbLLWZbaWwysc0QjQ0 htaxQoOU1sftFcz9Ett3dFttEjdRbU0ztDr8zfXp+mo3+PlOgTncc34GTkSMhFGY dxP3SKi2Az3nPzczSVepUm+59IWdjasyzpjFYp5qYIiTgCZuBWexTnMKWHEFvagD rDlXp9Nn5F48n2W/VYtMcZZllzY9QLrlhoF7CQOge5yk1HnW6+ODBKo/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClem+r5t3F5oGZbtFWTU2jGfGFIMB8GA1UdIwQY MBaAFAQ6nDXZ4aL000p1T6JtIDZXhHIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEt ODVjYmQyMDY4ZThmLzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEtODVjYmQyMDY4ZThm LzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIlpc51k ktHqjxxX7vaWh6oIgHG321klz4R7EO596l1W/vUrktFFDFxTpbyzgeagr1B1LKst j85ZsuUbs5AbAGYpz0Whbgvpy5x6Jy3Lxm0nuBGPQpSfqRjuO+xcBZ3k2CHMH6Yw wf0yFSfMve55NkZ4Uq3n2TNf5hxuowhEXcG/XvnO/YjM8yEHNSqTIPwirMPPhl00 O5MGGZWbc/mE1WVimtX4xdA/lcDqJ1KMHJlmo3hcgJAmRHVVQQxmf6VpOo0WTgvO q3Qp2Fe633PYcklknVROmDVbj0omzpYkUQ9h2QSt9QY+VuQREH6zw9GkvO+ILmkP zt5e3cvBMRNnmA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:43:30 2025 by rpki-client