This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json) Hash identifier: Rp+QjCCTHWzs/n6o1Dd1Ze1vd4KocLMKyJFrk6Hrnw8= Subject key identifier: 1A:44:43:D0:DA:4D:82:5D:44:C6:94:46:87:34:EF:A1:24:C5:67:9E Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019B495E33910DDB914E5D31A6FE7AE82A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft Manifest number: 1720 Signing time: Tue 23 Dec 2025 04:01:08 +0000 Manifest this update: Tue 23 Dec 2025 04:01:08 +0000 Manifest next update: Wed 24 Dec 2025 04:01:08 +0000 Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: CeFVhFcS74OXNQ/BNFLE1nMssTtOQNW5xD7aECLK33k=) 2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:33:91:0d:db:91:4e:5d:31:a6:fe:7a:e8:2a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Dec 23 04:01:08 2025 GMT Not After : Dec 24 04:01:08 2025 GMT Subject: CN=1a4443d0da4d825d44c694468734efa124c5679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:e3:6e:bf:c7:af:2d:06:fd:e5:61:96:90: 9e:3c:f7:03:a8:6d:ab:d7:ab:3c:dc:40:32:3d:05: 96:18:0b:1d:0a:ca:48:94:67:f4:dd:8a:b2:67:49: a5:4e:34:02:29:26:ac:1f:fa:b1:a9:4f:8d:9f:f2: 7b:03:66:aa:71:06:02:b6:3f:29:a3:11:9c:3d:21: 36:c9:c0:ef:8e:f5:7a:0b:5a:48:f3:5d:f4:79:21: b3:31:51:dd:e5:84:38:56:49:25:05:0f:41:0c:b9: 98:70:17:ff:6a:fe:07:7e:df:50:3a:53:c8:ab:1c: 2e:55:7f:23:56:08:d8:c2:a0:d1:05:b2:47:99:f9: c3:8e:eb:48:4f:56:87:04:02:34:dc:f9:be:6d:b4: 87:98:f4:f7:6a:98:29:07:9b:80:83:6e:48:d5:11: 64:c1:6c:f4:63:a0:11:9d:df:6d:56:49:c8:55:a9: a5:df:2e:51:33:7a:9b:33:3b:46:5c:33:d5:ea:b2: fe:7b:dd:44:be:23:d8:d6:8f:f1:a4:86:b2:42:07: 07:35:e6:fe:f6:e3:41:49:ce:0a:0d:72:74:0c:3f: 0d:e1:5f:cc:17:24:07:f7:5a:03:01:50:8d:ae:1d: 5c:61:a1:cc:d7:52:b5:d4:59:de:19:5c:b5:ec:24: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:43:D0:DA:4D:82:5D:44:C6:94:46:87:34:EF:A1:24:C5:67:9E X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:1b:37:bc:66:5d:59:16:a2:7a:03:20:0c:27:00:0d:8c: a7:b1:c8:6b:41:94:19:a7:f4:8e:44:b0:3f:19:00:c1:6a:79: 1b:f7:dc:4e:30:9a:b8:29:6b:bb:46:2d:50:c7:e8:fc:b2:26: ed:5b:bf:93:cf:ab:2d:89:85:fe:8d:ee:19:6a:88:b6:1a:e9: a5:ef:c5:24:be:74:de:28:11:16:20:3e:25:18:5e:1e:8d:b0: 78:09:a6:8b:6a:08:55:82:5b:c0:59:e0:fc:0f:69:cd:14:d2: b0:0a:be:cc:62:f5:92:b6:5f:a8:d3:c9:5b:44:4b:f0:74:dc: a8:85:34:a9:6f:f9:5a:1b:8f:ec:4b:e3:42:3d:ce:18:0d:96: b2:09:3d:93:38:9d:c1:ab:49:c9:b2:1b:2d:5e:94:2b:4b:04: 32:f4:91:7a:8f:ec:17:a8:a1:23:b6:3a:8e:d7:4b:4e:c9:6d: 22:b3:d5:36:47:74:e5:38:f5:20:25:a1:be:84:f3:8f:20:2d: ff:58:82:1b:e5:1f:d2:9d:99:a4:26:94:73:43:1d:59:26:a4: 04:c2:66:a9:5b:ed:cc:bf:31:11:fe:99:65:66:c3:a9:dd:22: b0:56:d7:24:21:1b:75:2a:39:c7:56:22:8b:64:11:78:d4:cf: 95:c1:55:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXjORDduRTl0xpv566CpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjUxMjIzMDQwMTA4WhcNMjUxMjI0MDQwMTA4WjAzMTEwLwYDVQQD EygxYTQ0NDNkMGRhNGQ4MjVkNDRjNjk0NDY4NzM0ZWZhMTI0YzU2NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYjjbr/Hry0G/eVhlpCePPcDqG2r 16s83EAyPQWWGAsdCspIlGf03YqyZ0mlTjQCKSasH/qxqU+Nn/J7A2aqcQYCtj8p oxGcPSE2ycDvjvV6C1pI8130eSGzMVHd5YQ4VkklBQ9BDLmYcBf/av4Hft9QOlPI qxwuVX8jVgjYwqDRBbJHmfnDjutIT1aHBAI03Pm+bbSHmPT3apgpB5uAg25I1RFk wWz0Y6ARnd9tVknIVaml3y5RM3qbMztGXDPV6rL+e91EviPY1o/xpIayQgcHNeb+ 9uNBSc4KDXJ0DD8N4V/MFyQH91oDAVCNrh1cYaHM11K11FneGVy17CR5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpEQ9DaTYJdRMaURoc076EkxWeeMB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD0bN7xm XVkWonoDIAwnAA2Mp7HIa0GUGaf0jkSwPxkAwWp5G/fcTjCauClru0YtUMfo/LIm 7Vu/k8+rLYmF/o3uGWqIthrppe/FJL503igRFiA+JRheHo2weAmmi2oIVYJbwFng /A9pzRTSsAq+zGL1krZfqNPJW0RL8HTcqIU0qW/5WhuP7EvjQj3OGA2Wsgk9kzid watJybIbLV6UK0sEMvSReo/sF6ihI7Y6jtdLTsltIrPVNkd05Tj1ICWhvoTzjyAt /1iCG+Uf0p2ZpCaUc0MdWSakBMJmqVvtzL8xEf6ZZWbDqd0isFbXJCEbdSo5x1Yi i2QReNTPlcFVuQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:04 2025 by rpki-client