This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft File: Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json) Hash identifier: qrKoaNrhLQZQ4yphuM+on4mkfGWqb19ZPsLzsGTXihc= Subject key identifier: A1:CD:FD:F9:00:0B:A3:3D:11:94:C0:2A:49:3C:B2:1E:91:0C:65:72 Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A Certificate issuer: /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Certificate serial: 019B5975B18043C80D5076FF67D62A15954E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft Manifest number: 0489 Signing time: Fri 26 Dec 2025 07:00:43 +0000 Manifest this update: Fri 26 Dec 2025 07:00:43 +0000 Manifest next update: Sat 27 Dec 2025 07:00:43 +0000 Files and hashes: 1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: P4+0YYj3fbwkPezFBXjXIHmbvtSF2D117qcjv1zIjNI=) 2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b1:80:43:c8:0d:50:76:ff:67:d6:2a:15:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Validity Not Before: Dec 26 07:00:43 2025 GMT Not After : Dec 27 07:00:43 2025 GMT Subject: CN=a1cdfdf9000ba33d1194c02a493cb21e910c6572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:f7:c9:ae:9d:b0:73:37:f4:35:39:b6:81: ad:1e:66:cb:a0:96:2e:88:71:b8:f6:2f:34:f3:a0: bf:d6:9f:73:30:ca:85:8f:be:7c:11:91:a3:79:12: e8:62:8c:8c:86:51:48:a8:83:ac:4f:9a:4d:c4:f7: 71:67:d9:c4:fb:00:22:44:00:2c:09:49:fa:d5:ed: dd:98:01:71:2d:b1:f2:fd:f2:5d:60:48:6c:61:24: da:30:f5:7a:20:1a:a3:ea:09:dc:0e:43:ab:ae:23: 94:1e:9e:ec:de:f4:17:65:44:e1:67:0a:13:83:fd: 7b:6c:2e:50:14:36:35:7e:f0:74:e9:58:e7:56:a3: 15:b3:07:f7:a8:22:ac:28:57:12:92:51:67:d3:d2: 79:16:79:57:e6:3d:76:ba:4c:f3:fc:03:88:8a:ee: 98:09:e1:75:51:03:b6:4b:2b:69:4c:08:3e:2f:89: a3:1c:34:24:e1:5d:dd:20:46:d8:c0:fb:2a:24:c1: 90:7c:13:81:5e:42:0e:da:f8:11:25:07:56:f2:7b: d6:98:ef:5f:ec:f5:fa:1e:ae:3c:39:bc:94:0d:36: 6b:64:3a:ab:79:8b:00:6f:d0:2c:ab:c8:45:dc:78: 0a:f9:7b:ed:d4:97:8f:28:b8:21:4e:50:fc:cf:db: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:FD:F9:00:0B:A3:3D:11:94:C0:2A:49:3C:B2:1E:91:0C:65:72 X509v3 Authority Key Identifier: keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7e:cb:b5:6d:80:1e:22:eb:f9:7e:97:59:3e:0f:2e:0f:0a: c4:e1:9b:a7:d5:39:6c:cd:6c:7f:50:41:a5:ce:52:d8:69:aa: 38:80:90:2a:fe:25:80:26:4d:f5:00:b0:ff:ed:31:be:d7:df: 62:15:8c:39:7c:5f:37:a3:55:bd:7f:2b:48:5f:80:5f:ed:8d: ad:0d:0e:41:a0:c3:c3:51:fd:4e:9f:e2:38:de:75:56:b3:6d: 8a:e0:d2:46:d9:9c:ce:e9:b5:9f:aa:60:ab:e5:65:ca:00:69: 12:8a:ff:3b:81:84:c3:42:bc:8b:c1:3c:b2:cf:71:84:64:a0: 25:14:db:9c:78:aa:08:06:e8:31:a7:72:63:fd:f3:a7:84:2f: f9:aa:b1:95:a4:9e:d7:31:f4:1f:69:1a:f9:21:ee:c7:e6:ea: 2e:b3:92:8a:83:ae:af:0d:f7:f4:f8:37:bd:c8:45:75:5c:cf: c9:99:fa:83:96:b9:9d:cb:b4:e1:a1:f3:b9:78:91:0f:d4:1a: f6:f4:69:e4:44:cd:d6:fc:fe:9f:f3:ac:03:cb:0c:4f:44:b6: 12:76:6d:a6:e4:3e:c6:79:0e:17:93:20:c5:5d:10:50:9c:d5: a8:69:fd:78:49:94:cd:c1:bc:7f:8c:16:23:1a:58:d0:2f:6a: 8c:a3:3f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbGAQ8gNUHb/Z9YqFZVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx NGE1NWEwHhcNMjUxMjI2MDcwMDQzWhcNMjUxMjI3MDcwMDQzWjAzMTEwLwYDVQQD EyhhMWNkZmRmOTAwMGJhMzNkMTE5NGMwMmE0OTNjYjIxZTkxMGM2NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsz3ya6dsHM39DU5toGtHmbLoJYu iHG49i8086C/1p9zMMqFj758EZGjeRLoYoyMhlFIqIOsT5pNxPdxZ9nE+wAiRAAs CUn61e3dmAFxLbHy/fJdYEhsYSTaMPV6IBqj6gncDkOrriOUHp7s3vQXZUThZwoT g/17bC5QFDY1fvB06VjnVqMVswf3qCKsKFcSklFn09J5FnlX5j12ukzz/AOIiu6Y CeF1UQO2SytpTAg+L4mjHDQk4V3dIEbYwPsqJMGQfBOBXkIO2vgRJQdW8nvWmO9f 7PX6Hq48ObyUDTZrZDqreYsAb9Asq8hF3HgK+Xvt1JePKLghTlD8z9vmhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHN/fkAC6M9EZTAKkk8sh6RDGVyMB8GA1UdIwQY MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3 LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX37LtW2A HiLr+X6XWT4PLg8KxOGbp9U5bM1sf1BBpc5S2GmqOICQKv4lgCZN9QCw/+0xvtff YhWMOXxfN6NVvX8rSF+AX+2NrQ0OQaDDw1H9Tp/iON51VrNtiuDSRtmczum1n6pg q+VlygBpEor/O4GEw0K8i8E8ss9xhGSgJRTbnHiqCAboMadyY/3zp4Qv+aqxlaSe 1zH0H2ka+SHux+bqLrOSioOurw339Pg3vchFdVzPyZn6g5a5ncu04aHzuXiRD9Qa 9vRp5ETN1vz+n/OsA8sMT0S2EnZtpuQ+xnkOF5MgxV0QUJzVqGn9eEmUzcG8f4wW IxpY0C9qjKM/mQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:57 2025 by rpki-client