This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json) Hash identifier: RF7N/xgQfc+RXviFZKonY8k6W2wKViGwPK88XTd9814= Subject key identifier: B1:98:E8:EA:6F:DE:3A:6C:48:55:6D:4A:6C:CE:BA:9E:EA:E4:9F:51 Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d Certificate serial: 019B405C35E25B34184BD63F2782A6721DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 10:02:23 +0000 Manifest this update: Sun 21 Dec 2025 10:02:23 +0000 Manifest next update: Mon 22 Dec 2025 10:02:23 +0000 Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: wMJNwXPq1oC3+VV76Kb25wm7Ury30ehDhCqci8BAfNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:35:e2:5b:34:18:4b:d6:3f:27:82:a6:72:1d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d Validity Not Before: Dec 21 10:02:23 2025 GMT Not After : Dec 22 10:02:23 2025 GMT Subject: CN=b198e8ea6fde3a6c48556d4a6cceba9eeae49f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:7c:e8:f7:2d:24:71:06:ce:7f:0d:a2:25: bf:85:72:cd:02:72:54:d5:6e:6f:fd:e7:a8:39:14: 84:58:99:9c:1b:be:a7:b5:15:f1:ba:d6:07:84:2f: 78:39:f2:7b:55:12:6b:d9:58:96:1a:6f:cb:39:b1: 8c:cd:b3:ce:69:43:b0:05:9c:7c:87:a6:6f:f6:14: e4:2d:32:8e:17:12:1b:c3:d2:0b:27:13:ae:eb:bb: c1:d1:95:02:ea:55:85:5f:96:92:e1:e6:ac:fa:4b: cf:bd:14:f7:09:65:1b:ad:41:07:72:be:93:21:49: d0:1c:40:26:f3:d2:b4:6e:37:ce:24:ff:c6:af:55: 26:9d:28:d4:05:2e:ac:64:3a:09:10:b1:01:0c:ad: 60:a9:8d:3e:b6:6d:b6:26:c3:77:b7:2b:ae:85:e8: 50:00:f5:f2:79:62:37:c5:93:b5:ed:fe:6a:68:2c: 35:f0:7e:3c:09:c1:e0:ac:01:28:61:79:ec:86:1c: bc:2a:91:9a:30:9f:f7:37:13:bc:5b:b0:52:6c:3e: d8:bf:2a:3f:1a:1e:43:29:df:84:b0:94:95:be:3a: bc:d0:d6:8b:92:c2:ec:f9:be:c3:db:70:9c:87:89: be:29:ae:22:88:f4:dc:c0:85:3a:0d:d7:7c:96:b9: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:98:E8:EA:6F:DE:3A:6C:48:55:6D:4A:6C:CE:BA:9E:EA:E4:9F:51 X509v3 Authority Key Identifier: keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8e:d7:e1:1c:11:32:3b:b7:02:1b:f4:e1:94:91:65:e6:6f: 01:49:13:51:eb:25:7d:ee:77:bf:74:31:0d:09:94:e6:26:68: a1:44:49:0f:a5:93:db:8a:27:9a:ab:8e:4c:0e:33:20:24:ea: 7e:89:9a:ab:b2:7c:d2:3c:75:73:9c:3a:09:57:ed:df:29:2c: 88:9e:df:28:dc:d9:58:7b:bd:7e:22:e0:34:87:3a:ed:cd:2f: 71:8d:c3:12:53:25:38:c1:fb:eb:f8:04:c1:d0:7a:67:c1:c7: e4:7e:34:2b:13:b3:7b:6b:bc:57:12:6e:33:05:b3:e7:2f:4a: 99:dd:2d:b8:0b:8f:7e:3a:e1:6e:c0:ec:51:20:a2:71:0f:c7: c7:80:a0:b4:db:3f:3b:5d:4b:31:8b:a0:f2:b3:07:de:8a:08: 58:20:58:a6:8e:59:c2:39:9b:a6:d9:3f:d9:d5:d9:8d:27:18: 18:60:7c:73:9b:af:6f:28:4a:de:fb:4f:e4:cd:4f:fc:37:69: a7:84:3b:b3:32:0d:9d:38:ef:bd:48:4c:8a:cf:3f:ac:a7:3b: 31:b8:65:75:e4:c1:20:53:24:8f:de:b2:5b:69:15:88:a9:91: 06:c6:32:73:cd:f9:ea:b6:ce:40:24:5f:fc:da:47:00:1a:a8: 14:b1:31:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXDXiWzQYS9Y/J4Kmch3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTQxZWJlMTI3MmEyMWNhZTBlYTFiMzVkYzA4M2ZhZDY4 YTVkN2QwHhcNMjUxMjIxMTAwMjIzWhcNMjUxMjIyMTAwMjIzWjAzMTEwLwYDVQQD EyhiMTk4ZThlYTZmZGUzYTZjNDg1NTZkNGE2Y2NlYmE5ZWVhZTQ5ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHR86PctJHEGzn8NoiW/hXLNAnJU 1W5v/eeoORSEWJmcG76ntRXxutYHhC94OfJ7VRJr2ViWGm/LObGMzbPOaUOwBZx8 h6Zv9hTkLTKOFxIbw9ILJxOu67vB0ZUC6lWFX5aS4eas+kvPvRT3CWUbrUEHcr6T IUnQHEAm89K0bjfOJP/Gr1UmnSjUBS6sZDoJELEBDK1gqY0+tm22JsN3tyuuhehQ APXyeWI3xZO17f5qaCw18H48CcHgrAEoYXnshhy8KpGaMJ/3NxO8W7BSbD7Yvyo/ Gh5DKd+EsJSVvjq80NaLksLs+b7D23Cch4m+Ka4iiPTcwIU6Ddd8lrn/CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGY6Opv3jpsSFVtSmzOup7q5J9RMB8GA1UdIwQY MBaAFAWkHr4ScqIcrg6hs13Ag/rWil19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAt MTY3ODMxNjEzMTQ1LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAtMTY3ODMxNjEzMTQ1 LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk47X4RwR Mju3Ahv04ZSRZeZvAUkTUeslfe53v3QxDQmU5iZooURJD6WT24onmquOTA4zICTq fomaq7J80jx1c5w6CVft3yksiJ7fKNzZWHu9fiLgNIc67c0vcY3DElMlOMH76/gE wdB6Z8HH5H40KxOze2u8VxJuMwWz5y9Kmd0tuAuPfjrhbsDsUSCicQ/Hx4CgtNs/ O11LMYug8rMH3ooIWCBYpo5Zwjmbptk/2dXZjScYGGB8c5uvbyhK3vtP5M1P/Ddp p4Q7szINnTjvvUhMis8/rKc7MbhldeTBIFMkj96yW2kViKmRBsYyc8356rbOQCRf /NpHABqoFLExnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:50:23 2025 by rpki-client