This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json) Hash identifier: XYAymvNNf+AsS2NbN4xzPPSw9y5cFJ3rSfx8tZBDA/8= Subject key identifier: 20:96:A8:26:AF:74:C2:BB:8D:73:6B:47:38:60:55:51:3F:B0:E7:59 Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0 Certificate serial: 019B5AF6A851C1D674FB355644CDB2BEB117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft Manifest number: 0EBF Signing time: Fri 26 Dec 2025 14:01:12 +0000 Manifest this update: Fri 26 Dec 2025 14:01:12 +0000 Manifest next update: Sat 27 Dec 2025 14:01:12 +0000 Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=) 2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: 1eSyZ8CaXdhYz1pnW7VQM8Zp3/ZKh/4TaJ4Rk8v+tw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:a8:51:c1:d6:74:fb:35:56:44:cd:b2:be:b1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0 Validity Not Before: Dec 26 14:01:12 2025 GMT Not After : Dec 27 14:01:12 2025 GMT Subject: CN=2096a826af74c2bb8d736b47386055513fb0e759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a8:9c:d8:3f:f7:2f:80:4b:5f:d3:c2:a5:55: d4:1c:9e:7a:f9:b9:db:1e:a3:b0:e9:fe:0f:3d:32: 9d:23:6f:06:3f:bd:3b:6f:92:16:63:e0:87:cd:85: 80:28:68:bc:f1:f3:83:a6:9c:e1:6f:68:6e:22:dc: 6e:c8:5f:76:a2:f7:92:83:35:7a:6f:f4:76:a8:17: 53:aa:c5:23:34:c4:ea:ac:aa:64:cd:bc:ee:b8:aa: 95:0a:53:e3:e2:9c:a6:ac:6f:98:09:b0:fc:ad:19: a6:0f:95:9f:67:1c:27:07:73:89:9f:85:70:d8:ba: 5b:63:41:95:22:7c:82:bf:a1:7e:1d:0b:e9:de:66: 8e:fa:0e:59:ba:0f:35:7d:dd:53:6b:b9:2c:df:b4: 69:42:cd:bb:5b:70:cd:c6:23:7e:8e:8d:7e:fa:c3: 04:d1:d2:c7:82:b6:5e:90:6b:d1:ef:d2:7f:7a:47: e6:c2:64:71:af:8e:68:e5:66:b4:96:06:89:92:2b: ec:b9:aa:b5:28:e6:dc:89:b1:9b:47:02:97:0a:77: 70:4a:ba:96:da:19:d8:8f:0b:88:e3:0a:f3:7c:98: 52:2e:1c:eb:5c:bd:e9:3c:2d:ec:ac:1e:45:87:60: a9:8a:ef:f5:c4:05:ef:6e:ab:66:9d:e7:e1:20:a0: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:A8:26:AF:74:C2:BB:8D:73:6B:47:38:60:55:51:3F:B0:E7:59 X509v3 Authority Key Identifier: keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:37:42:e5:bf:82:5a:b8:49:2a:36:65:74:2e:dc:a8:44: 04:b1:b2:82:b4:eb:cc:66:da:dd:ef:d0:0c:74:aa:e8:aa:ee: 5a:87:32:1e:e6:fe:ea:ec:e5:3c:f1:10:27:b3:cf:27:78:b9: 2e:cf:35:98:7c:f4:f0:72:ab:83:93:74:37:2c:3d:41:f1:48: eb:77:e9:93:9f:2e:c5:ee:9c:38:1d:08:09:15:ec:e3:fa:3a: 37:46:ce:cf:df:64:21:49:df:9f:42:fe:5e:8d:9a:f1:1a:9e: e0:63:b0:1d:2d:03:44:65:40:1d:1e:69:64:23:fe:0f:1e:b1: 14:f4:4c:ef:4b:4a:95:d3:ae:6e:6f:ef:ba:43:61:ed:da:bc: 90:5a:c2:f4:cc:d3:1f:eb:af:f8:2b:a3:15:c0:b9:7a:c6:d2: 42:7a:78:8f:15:0e:2d:ce:d5:e9:3f:0f:88:e0:76:e5:ce:ed: 8d:e0:10:62:23:f9:64:9f:a4:45:46:cf:a9:7b:9b:ec:3e:e2: bf:5f:cf:33:84:91:42:a1:8a:53:0a:6c:8f:9b:00:77:3b:d2: a9:69:89:a6:88:ed:2c:32:ad:13:8d:1c:69:3f:1a:30:d9:c9: aa:9a:44:39:e4:43:5d:10:7e:ce:ac:8d:b9:dc:4d:41:09:0b: 67:8d:8f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qhRwdZ0+zVWRM2yvrEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk OWE5YTAwHhcNMjUxMjI2MTQwMTEyWhcNMjUxMjI3MTQwMTEyWjAzMTEwLwYDVQQD EygyMDk2YTgyNmFmNzRjMmJiOGQ3MzZiNDczODYwNTU1MTNmYjBlNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6ic2D/3L4BLX9PCpVXUHJ56+bnb HqOw6f4PPTKdI28GP707b5IWY+CHzYWAKGi88fODppzhb2huItxuyF92oveSgzV6 b/R2qBdTqsUjNMTqrKpkzbzuuKqVClPj4pymrG+YCbD8rRmmD5WfZxwnB3OJn4Vw 2LpbY0GVInyCv6F+HQvp3maO+g5Zug81fd1Ta7ks37RpQs27W3DNxiN+jo1++sME 0dLHgrZekGvR79J/ekfmwmRxr45o5Wa0lgaJkivsuaq1KObcibGbRwKXCndwSrqW 2hnYjwuI4wrzfJhSLhzrXL3pPC3srB5Fh2Cpiu/1xAXvbqtmnefhIKAgewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCWqCavdMK7jXNrRzhgVVE/sOdZMB8GA1UdIwQY MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnus3QuW/ glq4SSo2ZXQu3KhEBLGygrTrzGba3e/QDHSq6KruWocyHub+6uzlPPEQJ7PPJ3i5 Ls81mHz08HKrg5N0Nyw9QfFI63fpk58uxe6cOB0ICRXs4/o6N0bOz99kIUnfn0L+ Xo2a8Rqe4GOwHS0DRGVAHR5pZCP+Dx6xFPRM70tKldOubm/vukNh7dq8kFrC9MzT H+uv+CujFcC5esbSQnp4jxUOLc7V6T8PiOB25c7tjeAQYiP5ZJ+kRUbPqXub7D7i v1/PM4SRQqGKUwpsj5sAdzvSqWmJpojtLDKtE40caT8aMNnJqppEOeRDXRB+zqyN udxNQQkLZ42P7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:24 2025 by rpki-client