This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json) Hash identifier: S6xIC7N3D/eaol+Xvdbo/CsoPQWvGdeFTLbM74wNk9c= Subject key identifier: 73:18:5E:C5:89:98:8A:8B:F2:7F:1D:D5:C2:1D:1C:03:55:E8:9F:45 Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456 Certificate serial: 019B34FB5FB570D7E94BB7DF33A1C68D35F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft Manifest number: 11DD Signing time: Fri 19 Dec 2025 05:00:47 +0000 Manifest this update: Fri 19 Dec 2025 05:00:47 +0000 Manifest next update: Sat 20 Dec 2025 05:00:47 +0000 Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: QrWzgSsE3Qv+AEMv8kst35YqNLRtguRc3C80Y+dTI5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5f:b5:70:d7:e9:4b:b7:df:33:a1:c6:8d:35:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456 Validity Not Before: Dec 19 05:00:47 2025 GMT Not After : Dec 20 05:00:47 2025 GMT Subject: CN=73185ec589988a8bf27f1dd5c21d1c0355e89f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:9a:70:15:31:f7:c0:ce:e4:40:21:b3:21: d9:7a:e7:4f:eb:66:70:42:2b:39:c4:3a:19:b5:f8: ed:eb:0f:1e:0d:64:a7:98:d5:87:e9:5e:fe:14:a3: 88:e5:7e:37:58:62:35:a4:36:ca:dc:6f:9c:dd:ad: 72:3e:8f:9d:36:d5:7c:ec:3d:17:3b:3e:78:36:cf: 45:df:6b:26:78:2a:73:68:8e:94:ca:7b:8b:8d:67: 9c:e8:a0:77:f8:f1:7e:66:81:5b:ac:2f:37:4a:79: 0b:86:f5:b9:60:7d:26:7c:dc:b6:e5:a8:b3:d2:05: a2:08:2a:28:4e:77:d8:0c:61:a6:32:f8:e0:3d:91: f9:fd:d4:ab:b5:cf:0c:47:0f:8a:8a:77:10:17:e3: 73:6e:f2:c6:e4:5f:ff:37:a9:c6:4f:36:27:d8:68: 3b:8f:f2:b7:a2:47:07:81:64:5a:d4:c1:31:19:be: 08:1a:bb:d2:aa:bb:cb:76:70:91:06:8e:b3:61:b8: c9:ef:ad:27:7e:aa:ad:8d:0d:8a:eb:b9:5e:44:13: 4c:06:41:1a:4a:71:ef:74:90:50:0b:f3:8b:ac:72: ee:bb:71:3b:6c:6b:fa:74:18:34:2d:ba:4f:ec:c4: 29:40:4d:62:4d:86:88:5a:bf:e8:dd:02:1c:90:e9: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:18:5E:C5:89:98:8A:8B:F2:7F:1D:D5:C2:1D:1C:03:55:E8:9F:45 X509v3 Authority Key Identifier: keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:f3:83:a1:16:77:40:ac:b6:f6:55:4f:d2:90:cb:ed:e4: d1:c5:24:7e:0f:99:6a:8e:39:e1:73:f5:b8:6e:fb:a4:05:6a: d2:80:42:e3:1e:54:eb:29:c9:20:70:23:61:38:a7:c9:1c:64: 76:6a:a4:6a:65:fa:55:28:84:f6:c9:6e:cd:7d:d3:4c:bf:ee: 80:7e:81:3b:a8:ce:af:b8:0d:3a:aa:0d:8d:e3:aa:85:cb:69: 6b:00:ed:0a:23:2d:fc:8e:b5:4f:8e:ad:3c:bf:f8:87:c1:6f: 8f:fb:2f:fc:b0:0c:cf:32:3a:5e:70:58:dc:ac:3c:1a:4a:4d: c6:64:4c:1c:c3:7c:d3:6d:88:28:27:f9:02:6f:2f:2b:0a:e2: d1:30:48:68:56:a5:c8:6f:71:2d:3d:20:83:02:6b:76:6e:04: 47:8c:2c:ac:2b:77:47:e6:08:5c:a7:1a:76:cb:c9:79:37:83: 4a:52:01:d9:60:e7:b1:d7:08:f6:96:e8:ee:b5:76:28:cc:59: 15:04:56:c1:3a:c1:0d:fb:c5:ae:6c:5a:12:e3:31:58:28:1d: 26:be:bf:1d:87:f5:09:e8:ca:72:28:e6:20:7f:03:51:15:2d: 36:c5:05:0f:fe:b3:c0:4f:02:5c:88:bd:10:2a:f0:93:4c:b3: 66:0e:93:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1+1cNfpS7ffM6HGjTX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWQzNTE4YmRlNTk2MmJmZmU3M2U3OTg4NDcxOGU2ZWQw ZmE0NTYwHhcNMjUxMjE5MDUwMDQ3WhcNMjUxMjIwMDUwMDQ3WjAzMTEwLwYDVQQD Eyg3MzE4NWVjNTg5OTg4YThiZjI3ZjFkZDVjMjFkMWMwMzU1ZTg5ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKyacBUx98DO5EAhsyHZeudP62Zw Qis5xDoZtfjt6w8eDWSnmNWH6V7+FKOI5X43WGI1pDbK3G+c3a1yPo+dNtV87D0X Oz54Ns9F32smeCpzaI6UynuLjWec6KB3+PF+ZoFbrC83SnkLhvW5YH0mfNy25aiz 0gWiCCooTnfYDGGmMvjgPZH5/dSrtc8MRw+KincQF+NzbvLG5F//N6nGTzYn2Gg7 j/K3okcHgWRa1MExGb4IGrvSqrvLdnCRBo6zYbjJ760nfqqtjQ2K67leRBNMBkEa SnHvdJBQC/OLrHLuu3E7bGv6dBg0LbpP7MQpQE1iTYaIWr/o3QIckOlMPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMYXsWJmIqL8n8d1cIdHANV6J9FMB8GA1UdIwQY MBaAFAUdNRi95ZYr/+c+eYhHGObtD6RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQt YzViZWIyZTI0NWZlLzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQtYzViZWIyZTI0NWZl LzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVefzg6EW d0CstvZVT9KQy+3k0cUkfg+Zao454XP1uG77pAVq0oBC4x5U6ynJIHAjYTinyRxk dmqkamX6VSiE9sluzX3TTL/ugH6BO6jOr7gNOqoNjeOqhctpawDtCiMt/I61T46t PL/4h8Fvj/sv/LAMzzI6XnBY3Kw8GkpNxmRMHMN8022IKCf5Am8vKwri0TBIaFal yG9xLT0ggwJrdm4ER4wsrCt3R+YIXKcadsvJeTeDSlIB2WDnsdcI9pbo7rV2KMxZ FQRWwTrBDfvFrmxaEuMxWCgdJr6/HYf1CejKcijmIH8DURUtNsUFD/6zwE8CXIi9 ECrwk0yzZg6TRA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:25 2025 by rpki-client