This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json) Hash identifier: 6FDYQc4X3mXtpynxm3C9NpSRDZJrXWRPAq2xv10c/K4= Subject key identifier: F9:65:EA:51:50:77:5F:A0:72:C6:DC:15:61:5A:5A:FD:AC:FC:F6:53 Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Certificate serial: 019AABDE02A0AFC8C82D80DA955DCA783375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft Manifest number: 1752 Signing time: Sat 22 Nov 2025 14:00:44 +0000 Manifest this update: Sat 22 Nov 2025 14:00:44 +0000 Manifest next update: Sun 23 Nov 2025 14:00:44 +0000 Files and hashes: 1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=) 2: TtsJ_9irph6KMpr-0Unxq5mv0Pk.roa (hash: KdfI5XrAnT/kZVbthzfs9Tp5F0pVhQnXMy58T6F38qY=) 3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: RYU9QYb9jED91k2qTW9e1udqXCAYeebtCBPwlS2Suls=) 4: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (hash: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=) 5: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:de:02:a0:af:c8:c8:2d:80:da:95:5d:ca:78:33:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Validity Not Before: Nov 22 14:00:44 2025 GMT Not After : Nov 23 14:00:44 2025 GMT Subject: CN=f965ea5150775fa072c6dc15615a5afdacfcf653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:18:1a:f3:6b:f9:0b:bc:73:74:bc:58:7a: f7:85:83:dd:99:77:6d:cb:d9:4a:be:e9:66:be:9d: c6:20:40:4c:78:8d:af:e6:1c:a5:cc:05:23:c8:9f: 85:88:85:6f:f0:c0:bc:50:07:bf:b6:9e:85:e3:55: 27:19:da:6f:bd:4d:d7:94:fb:db:9f:5a:bf:99:59: d8:85:ba:1c:c4:8a:d9:c6:b0:79:45:b1:5b:79:e6: cb:93:2c:70:07:01:92:ef:ce:29:41:63:ed:b1:71: 94:c4:1b:e8:ff:de:43:ca:4d:2c:18:6a:97:1c:7d: b2:06:2c:94:d5:5d:e9:2a:9b:b6:b4:8b:10:87:68: ac:5f:ff:71:2d:37:37:02:77:cb:01:2b:2f:15:0a: 62:f0:a5:79:8f:1e:7a:8b:f2:8a:38:a0:c0:12:6a: 90:ac:df:32:4d:8c:b5:37:02:0e:5f:3d:26:cc:a6: 7b:f3:a5:f9:01:e6:b8:f8:75:aa:2f:d6:a7:ae:f8: 0d:89:8c:8c:f0:83:28:ba:14:f4:3e:b5:d6:2d:fe: 59:3f:8d:9b:12:d6:c5:a3:e8:e0:71:65:c0:1b:ab: 36:75:c9:be:7a:94:18:21:7e:c3:de:90:e6:1a:fb: 18:0f:9f:3d:b0:f5:ad:1a:94:83:36:7c:d7:80:7d: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:65:EA:51:50:77:5F:A0:72:C6:DC:15:61:5A:5A:FD:AC:FC:F6:53 X509v3 Authority Key Identifier: keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:02:4d:ff:b0:42:5e:6f:33:06:8e:80:0a:64:e9:26:e5:72: da:00:f6:71:8c:6e:e3:80:24:1d:3e:6e:ac:e3:39:6b:89:dd: 60:c0:d5:56:81:43:6b:ab:9e:b1:62:15:3d:cf:9f:9e:41:d6: 25:f7:dd:2c:ae:94:78:ba:ed:e8:4a:7f:4e:bf:9e:38:01:a6: 9a:cc:92:f3:87:bf:40:3d:b1:d8:46:94:54:8c:d8:bb:71:c1: 8b:f9:52:ba:41:9e:c8:b2:b4:ae:71:bb:a7:f5:f9:15:cc:14: b6:d0:cc:1b:25:2e:11:74:91:80:bc:00:66:0c:8c:17:21:1c: 15:2c:95:51:21:47:34:5d:6f:af:66:a5:6e:a4:aa:45:90:83: 67:52:aa:b2:2f:21:4d:85:0d:b1:81:90:db:b8:bd:bf:b5:8e: 5f:fd:37:02:bd:69:d2:8b:89:68:77:94:6c:c5:b9:fa:10:72: ca:4d:2e:05:d8:a8:cf:39:79:fb:65:f2:62:61:06:b8:cd:5c: ca:50:23:61:38:f5:03:05:70:ff:a9:a5:26:df:eb:b1:35:09: c2:71:44:ef:6d:a6:37:f1:65:b1:20:52:36:48:5a:b6:d1:64: 26:c3:ab:e9:ce:fb:47:c8:f4:83:e1:fd:72:d0:63:6b:bb:54: 27:68:23:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3gKgr8jILYDalV3KeDN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy ODJlMzAwHhcNMjUxMTIyMTQwMDQ0WhcNMjUxMTIzMTQwMDQ0WjAzMTEwLwYDVQQD EyhmOTY1ZWE1MTUwNzc1ZmEwNzJjNmRjMTU2MTVhNWFmZGFjZmNmNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU4YGvNr+Qu8c3S8WHr3hYPdmXdt y9lKvulmvp3GIEBMeI2v5hylzAUjyJ+FiIVv8MC8UAe/tp6F41UnGdpvvU3XlPvb n1q/mVnYhbocxIrZxrB5RbFbeebLkyxwBwGS784pQWPtsXGUxBvo/95Dyk0sGGqX HH2yBiyU1V3pKpu2tIsQh2isX/9xLTc3AnfLASsvFQpi8KV5jx56i/KKOKDAEmqQ rN8yTYy1NwIOXz0mzKZ786X5Aea4+HWqL9anrvgNiYyM8IMouhT0PrXWLf5ZP42b EtbFo+jgcWXAG6s2dcm+epQYIX7D3pDmGvsYD589sPWtGpSDNnzXgH092QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPll6lFQd1+gcsbcFWFaWv2s/PZTMB8GA1UdIwQY MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwJN/7BC Xm8zBo6ACmTpJuVy2gD2cYxu44AkHT5urOM5a4ndYMDVVoFDa6uesWIVPc+fnkHW JffdLK6UeLrt6Ep/Tr+eOAGmmsyS84e/QD2x2EaUVIzYu3HBi/lSukGeyLK0rnG7 p/X5FcwUttDMGyUuEXSRgLwAZgyMFyEcFSyVUSFHNF1vr2albqSqRZCDZ1Kqsi8h TYUNsYGQ27i9v7WOX/03Ar1p0ouJaHeUbMW5+hByyk0uBdiozzl5+2XyYmEGuM1c ylAjYTj1AwVw/6mlJt/rsTUJwnFE722mN/FlsSBSNkhattFkJsOr6c77R8j0g+H9 ctBja7tUJ2gjYw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:23 2025 by rpki-client