This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json) Hash identifier: uKJ6Om82o0QnvRhYsnI8BUKy+tMe/Zf+bk3iwTrYbBc= Subject key identifier: 9C:03:33:BF:7D:F1:0B:9A:AC:78:17:12:45:96:E0:F7:35:FB:FC:46 Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca Certificate serial: 019B47021F8F4754C4CA5F9DD2614D3ACD13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 17:01:20 +0000 Manifest this update: Mon 22 Dec 2025 17:01:20 +0000 Manifest next update: Tue 23 Dec 2025 17:01:20 +0000 Files and hashes: 1: 9s7Z0kbqXD8kMrOscbviyqc_bvg.roa (hash: 5KRTzHrVO9bh3V7iu0nkUKaInske11yP7Ccj66neaB8=) 2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: 5DxPVQosVJbICwikH+koQ4Mqztm5MkliHx5fH4zX6WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:1f:8f:47:54:c4:ca:5f:9d:d2:61:4d:3a:cd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca Validity Not Before: Dec 22 17:01:20 2025 GMT Not After : Dec 23 17:01:20 2025 GMT Subject: CN=9c0333bf7df10b9aac7817124596e0f735fbfc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:f9:59:d1:00:10:82:d1:6d:87:82:50:94: 57:40:94:5f:75:25:8c:5a:5b:b4:fc:36:b0:3c:4b: c1:36:c6:f5:e0:36:8b:5f:e2:eb:31:dd:a0:d3:8a: 4a:7b:c4:08:ac:db:15:95:1a:22:16:05:d4:c6:c5: d7:64:96:9c:69:cf:17:62:63:3b:d5:7c:d4:65:f4: a6:87:24:0d:a4:53:e9:a7:12:30:c5:a1:c3:c5:a0: df:2c:fa:68:12:a0:ac:51:69:81:b8:a1:e5:3d:11: e3:c0:65:b1:3e:48:96:04:09:59:78:9d:26:d4:70: 88:84:11:8e:4e:aa:18:06:36:d0:a5:a2:70:df:f7: 53:28:61:6a:26:8a:ed:c8:f2:91:99:be:51:35:a5: b4:72:42:de:a6:48:d9:8a:b5:39:94:bb:a1:aa:dc: 30:38:36:1d:70:83:7b:7b:05:d4:fd:7d:36:02:6c: ed:57:7f:63:95:86:06:cd:da:22:a9:97:0e:df:6b: b3:ed:45:f5:8e:8e:cd:cd:6b:a9:fe:df:f1:98:11: 7b:c7:4c:1d:51:c2:f9:b6:77:6b:a6:7f:d6:3b:1f: 17:a7:95:9f:38:f8:fc:80:0f:8a:6f:f1:7e:04:5c: f7:8a:bc:37:6c:24:68:9d:cb:c3:d9:37:7a:73:18: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:33:BF:7D:F1:0B:9A:AC:78:17:12:45:96:E0:F7:35:FB:FC:46 X509v3 Authority Key Identifier: keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ec:6c:89:80:55:e6:6f:da:86:c3:d7:00:84:8d:96:3d:69: 3e:42:2f:15:95:c5:c3:79:84:3b:0e:47:c2:cd:14:61:92:97: 5c:47:1e:15:53:d8:7f:a1:15:36:05:f5:fe:19:8f:9d:ef:a2: b1:6c:7a:7a:1b:72:d0:d0:b8:dd:6a:17:08:10:42:eb:c2:60: 3d:fc:7d:65:f8:d5:c0:83:c5:7b:d7:e9:c1:4e:16:11:24:50: bb:7d:16:f2:b3:9b:9f:90:3e:8c:96:ca:72:23:d7:8e:a6:a1: 9a:30:3f:42:31:5f:4f:dc:13:71:32:bf:3a:02:75:31:be:1b: ff:0c:d7:a7:b4:ee:ca:d9:ee:48:92:03:be:db:55:6c:23:8e: a2:9b:d0:91:ef:5a:fb:85:a9:f5:a3:ed:e7:97:bd:3d:4c:7e: 37:55:5d:cf:22:12:be:91:00:ff:12:bf:5f:5c:c1:34:75:d0: a9:af:3b:5f:c4:b3:5e:b0:15:b5:3e:1c:24:de:89:d2:6d:e1: 0f:f4:43:1a:56:41:f4:0d:90:57:aa:a9:12:b9:55:84:83:7f: 7b:a2:83:b8:6e:1d:a2:12:27:93:12:73:03:4c:cc:f5:29:b2: 7d:e6:0d:64:3a:de:5a:81:44:70:de:eb:e9:e6:7a:70:d9:dc: c1:86:dc:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAh+PR1TEyl+d0mFNOs0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh ZTdjY2EwHhcNMjUxMjIyMTcwMTIwWhcNMjUxMjIzMTcwMTIwWjAzMTEwLwYDVQQD Eyg5YzAzMzNiZjdkZjEwYjlhYWM3ODE3MTI0NTk2ZTBmNzM1ZmJmYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAL5WdEAEILRbYeCUJRXQJRfdSWM Wlu0/DawPEvBNsb14DaLX+LrMd2g04pKe8QIrNsVlRoiFgXUxsXXZJacac8XYmM7 1XzUZfSmhyQNpFPppxIwxaHDxaDfLPpoEqCsUWmBuKHlPRHjwGWxPkiWBAlZeJ0m 1HCIhBGOTqoYBjbQpaJw3/dTKGFqJortyPKRmb5RNaW0ckLepkjZirU5lLuhqtww ODYdcIN7ewXU/X02AmztV39jlYYGzdoiqZcO32uz7UX1jo7NzWup/t/xmBF7x0wd UcL5tndrpn/WOx8Xp5WfOPj8gA+Kb/F+BFz3irw3bCRoncvD2Td6cxiRQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwDM7998QuarHgXEkWW4Pc1+/xGMB8GA1UdIwQY MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt MzFiOTUwMjcwNTM2LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2 LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOxsiYBV 5m/ahsPXAISNlj1pPkIvFZXFw3mEOw5Hws0UYZKXXEceFVPYf6EVNgX1/hmPne+i sWx6ehty0NC43WoXCBBC68JgPfx9ZfjVwIPFe9fpwU4WESRQu30W8rObn5A+jJbK ciPXjqahmjA/QjFfT9wTcTK/OgJ1Mb4b/wzXp7TuytnuSJIDvttVbCOOopvQke9a +4Wp9aPt55e9PUx+N1VdzyISvpEA/xK/X1zBNHXQqa87X8SzXrAVtT4cJN6J0m3h D/RDGlZB9A2QV6qpErlVhIN/e6KDuG4dohInkxJzA0zM9SmyfeYNZDreWoFEcN7r 6eZ6cNncwYbceQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:45:52 2025 by rpki-client