This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json) Hash identifier: TyejUu1r/y9vNfq1YnEqcXwWy1ShcJ8N6mI3zhTMp+E= Subject key identifier: E5:C0:7D:CA:82:96:52:76:64:57:15:3A:68:C8:8D:89:2E:C7:53:21 Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3 Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3 Certificate serial: 019B0E92F1844FA3D104BBD5B46D83CE8D34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 18:01:09 +0000 Manifest this update: Thu 11 Dec 2025 18:01:09 +0000 Manifest next update: Fri 12 Dec 2025 18:01:09 +0000 Files and hashes: 1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: 4nH+74MCPtiMaeq1Cp3bbinBuL8E19x9IyYWYl1IDgo=) 2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:f1:84:4f:a3:d1:04:bb:d5:b4:6d:83:ce:8d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3 Validity Not Before: Dec 11 18:01:09 2025 GMT Not After : Dec 12 18:01:09 2025 GMT Subject: CN=e5c07dca829652766457153a68c88d892ec75321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:9a:2c:23:27:9b:3d:dc:8b:1d:a3:ae:24: 2f:c9:ec:60:17:46:21:1d:e8:2f:b9:67:de:a6:2d: 05:94:d1:f5:1f:2e:e1:e3:7e:e1:c9:60:ee:30:aa: 2d:7b:ec:b4:a8:b1:73:8a:d8:a0:6f:df:68:ee:fb: 66:36:4a:bc:68:cd:61:58:1a:c7:b2:4c:0f:94:2e: b4:d1:ce:26:28:b3:50:33:fb:d5:58:30:69:b0:97: cd:24:d4:dd:e3:10:5b:85:17:a5:de:c3:87:db:32: a7:29:d2:24:21:96:69:45:8c:b3:ea:4c:c5:f9:63: a1:2e:13:8f:3a:40:f7:93:29:3f:c4:01:29:de:8d: 39:f0:b3:b4:1a:41:bb:c6:d0:61:85:30:73:20:87: 77:72:71:55:b4:32:13:ec:46:27:01:3c:98:7c:fe: 44:7c:3e:c8:c0:aa:b7:b1:49:46:54:16:dc:3c:2d: 99:e9:a2:c3:54:12:90:36:cc:43:ae:ff:3f:55:e8: a9:57:81:99:a5:d0:f1:14:db:0e:f8:16:71:fa:ec: 0f:0f:7a:5b:cf:dd:b2:19:b6:0a:34:4a:22:25:d9: 44:a8:84:d3:00:f6:3f:be:18:5d:8b:ec:af:51:9d: b0:89:e9:c8:46:eb:b2:f9:e0:f6:fc:43:0e:f1:96: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C0:7D:CA:82:96:52:76:64:57:15:3A:68:C8:8D:89:2E:C7:53:21 X509v3 Authority Key Identifier: keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:66:75:7b:47:d9:6f:b1:74:b1:05:9d:94:91:8e:4f:97: 77:11:56:5b:c7:29:22:1a:9c:63:14:12:fc:f5:e9:cc:2e:61: 86:17:48:04:42:fe:a2:9f:3b:22:76:6b:dd:c3:8b:96:dd:d5: 66:87:ff:70:71:9c:da:45:bd:2e:d7:f0:59:8c:87:da:47:e7: fb:66:79:56:24:07:dd:49:32:41:07:4a:f3:82:76:d9:0c:47: 4f:a6:34:a4:e8:84:17:3d:a7:31:d9:35:35:3b:98:d7:3a:98: fa:39:53:b0:7b:b5:e5:1b:35:e1:cc:bc:5c:f7:ae:97:e9:3c: c4:5b:5f:e1:47:f4:56:fa:ec:80:0e:07:dc:86:77:7e:44:d9: a6:b4:19:50:35:60:fa:e8:7e:0c:0e:5a:52:2d:02:c8:64:a6: e8:d9:e8:57:fa:96:b5:02:26:7a:2b:f3:d5:61:e2:f1:2e:b7: 37:67:08:db:73:56:50:41:5b:07:54:62:69:fc:da:22:3b:c9: ab:ec:d0:ca:fb:ea:c3:80:ed:47:b9:d6:b6:91:ba:96:58:f8: 2c:e1:28:1b:ec:3b:1c:d0:8c:cf:6f:f6:f7:be:34:c6:ff:08: 9c:08:4f:46:a3:86:34:6d:37:83:e5:a4:1a:8c:30:ac:33:ce: da:2c:4f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkvGET6PRBLvVtG2Dzo00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1 YjU1YTMwHhcNMjUxMjExMTgwMTA5WhcNMjUxMjEyMTgwMTA5WjAzMTEwLwYDVQQD EyhlNWMwN2RjYTgyOTY1Mjc2NjQ1NzE1M2E2OGM4OGQ4OTJlYzc1MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngaaLCMnmz3cix2jriQvyexgF0Yh HegvuWfepi0FlNH1Hy7h437hyWDuMKote+y0qLFzitigb99o7vtmNkq8aM1hWBrH skwPlC600c4mKLNQM/vVWDBpsJfNJNTd4xBbhRel3sOH2zKnKdIkIZZpRYyz6kzF +WOhLhOPOkD3kyk/xAEp3o058LO0GkG7xtBhhTBzIId3cnFVtDIT7EYnATyYfP5E fD7IwKq3sUlGVBbcPC2Z6aLDVBKQNsxDrv8/VeipV4GZpdDxFNsO+BZx+uwPD3pb z92yGbYKNEoiJdlEqITTAPY/vhhdi+yvUZ2wienIRuuy+eD2/EMO8Za2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXAfcqCllJ2ZFcVOmjIjYkux1MhMB8GA1UdIwQY MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIe5mdXtH 2W+xdLEFnZSRjk+XdxFWW8cpIhqcYxQS/PXpzC5hhhdIBEL+op87InZr3cOLlt3V Zof/cHGc2kW9LtfwWYyH2kfn+2Z5ViQH3UkyQQdK84J22QxHT6Y0pOiEFz2nMdk1 NTuY1zqY+jlTsHu15Rs14cy8XPeul+k8xFtf4Uf0VvrsgA4H3IZ3fkTZprQZUDVg +uh+DA5aUi0CyGSm6NnoV/qWtQImeivz1WHi8S63N2cI23NWUEFbB1RiafzaIjvJ q+zQyvvqw4DtR7nWtpG6llj4LOEoG+w7HNCMz2/29740xv8InAhPRqOGNG03g+Wk GowwrDPO2ixPJQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:12 2025 by rpki-client