This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json) Hash identifier: SbVkbyP3G4E4rcJIDVzWcoSC2bLIdy9TMNE4LLeFvzA= Subject key identifier: FB:CD:5D:61:D6:41:C2:CE:09:3E:F8:92:D3:A9:26:C4:7B:43:C9:56 Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759 Certificate serial: 019B342024C00D29224C52BA99D011A8978D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft Manifest number: 16C9 Signing time: Fri 19 Dec 2025 01:01:20 +0000 Manifest this update: Fri 19 Dec 2025 01:01:20 +0000 Manifest next update: Sat 20 Dec 2025 01:01:20 +0000 Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: 33zI4E9lz1KfhnvoWMazqY70hNPUxtWJAAWKkz3YWRM=) 2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=) 3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:24:c0:0d:29:22:4c:52:ba:99:d0:11:a8:97:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049d4f66598668079353721c21935a00319f6759 Validity Not Before: Dec 19 01:01:20 2025 GMT Not After : Dec 20 01:01:20 2025 GMT Subject: CN=fbcd5d61d641c2ce093ef892d3a926c47b43c956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:e1:eb:39:70:1c:a0:fd:5e:35:a7:26:ab: 0e:12:ee:02:3c:c8:09:68:c0:4c:0b:da:32:24:c5: 00:0f:31:fe:e3:f6:bc:54:e9:6e:5f:02:f8:5d:21: 75:7f:63:6a:ec:b1:a8:4c:e5:cd:53:66:48:7f:19: c8:8b:4d:ba:61:ff:ff:cb:3f:f9:f5:cc:2e:83:f9: f3:e6:47:15:38:ce:96:b4:ec:b3:be:11:77:4a:0d: df:1b:84:89:7c:36:fa:6e:a7:bc:c5:ac:55:37:41: 3b:c2:65:20:64:f2:2e:f3:57:e4:8f:d2:08:a5:ff: e3:b6:1e:a1:95:3b:05:b8:e0:54:58:ec:b4:a1:96: 97:c1:77:05:39:fc:24:2e:ed:93:c4:33:f2:60:5b: 2f:f2:de:3e:ed:cc:ac:0f:3b:49:7b:3f:98:e2:04: 67:b1:dc:0c:81:71:3b:79:23:a8:f5:2e:5f:9f:64: 25:58:95:9c:a9:8d:bc:8b:36:bf:0b:dc:13:f7:0d: 07:e9:01:ef:5b:ba:f4:b1:a9:af:a4:ef:05:02:37: 59:c7:25:e4:f9:09:15:48:6d:44:63:5f:6d:2d:29: 98:c4:fa:75:74:48:8a:17:b4:ff:8d:a7:4c:4c:1f: 0f:a7:70:9e:41:c5:05:a4:21:9a:71:51:18:72:a2: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:5D:61:D6:41:C2:CE:09:3E:F8:92:D3:A9:26:C4:7B:43:C9:56 X509v3 Authority Key Identifier: keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:38:43:0d:0d:f1:6d:20:c7:c9:da:cb:bd:6e:4f:de:f6:03: c1:e9:7a:c7:58:af:a9:68:ad:f5:62:89:a5:39:42:06:ea:1e: ee:3b:ce:e7:3b:96:c2:97:60:8e:f3:b7:f4:61:64:4b:89:73: e5:7f:66:ce:95:e3:ce:23:3d:a5:91:23:3b:57:0b:36:29:ac: 54:4f:ab:7b:63:90:24:d1:43:74:b0:4c:98:cb:45:48:2e:24: ea:96:ae:c9:67:35:20:38:c1:f4:14:27:67:d5:64:4e:d0:9f: 40:66:37:ee:4b:51:f9:39:4b:7b:f6:02:5b:5f:23:92:c5:b3: 33:2f:48:78:15:ef:cc:fe:c0:71:be:15:d8:f9:79:1b:3f:b4: 91:58:9a:cd:a6:31:01:cd:ae:8b:17:be:fd:f9:56:91:1e:7d: 56:6a:16:a0:0d:4d:52:40:07:d4:29:dd:ef:da:e4:1c:2e:ae: 14:8f:ee:0e:dc:42:1a:d4:28:7c:c4:3d:8b:66:32:04:1f:cf: 90:c9:7f:b8:5c:e0:a6:5b:f6:4a:48:af:36:3d:e8:71:1f:d9: 9a:16:0d:2a:80:b7:36:42:c9:d8:19:18:90:3e:5f:1d:28:9b: ac:1f:be:26:5d:38:81:d8:7b:83:6c:d0:2a:60:75:d0:6c:35: 51:0a:64:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0ICTADSkiTFK6mdARqJeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OWQ0ZjY2NTk4NjY4MDc5MzUzNzIxYzIxOTM1YTAwMzE5 ZjY3NTkwHhcNMjUxMjE5MDEwMTIwWhcNMjUxMjIwMDEwMTIwWjAzMTEwLwYDVQQD EyhmYmNkNWQ2MWQ2NDFjMmNlMDkzZWY4OTJkM2E5MjZjNDdiNDNjOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaDh6zlwHKD9XjWnJqsOEu4CPMgJ aMBMC9oyJMUADzH+4/a8VOluXwL4XSF1f2Nq7LGoTOXNU2ZIfxnIi026Yf//yz/5 9cwug/nz5kcVOM6WtOyzvhF3Sg3fG4SJfDb6bqe8xaxVN0E7wmUgZPIu81fkj9II pf/jth6hlTsFuOBUWOy0oZaXwXcFOfwkLu2TxDPyYFsv8t4+7cysDztJez+Y4gRn sdwMgXE7eSOo9S5fn2QlWJWcqY28iza/C9wT9w0H6QHvW7r0samvpO8FAjdZxyXk +QkVSG1EY19tLSmYxPp1dEiKF7T/jadMTB8Pp3CeQcUFpCGacVEYcqK/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvNXWHWQcLOCT74ktOpJsR7Q8lWMB8GA1UdIwQY MBaAFASdT2ZZhmgHk1NyHCGTWgAxn2dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEt OTI3OTU0N2VjYTU1LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEtOTI3OTU0N2VjYTU1 LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACThDDQ3x bSDHydrLvW5P3vYDwel6x1ivqWit9WKJpTlCBuoe7jvO5zuWwpdgjvO39GFkS4lz 5X9mzpXjziM9pZEjO1cLNimsVE+re2OQJNFDdLBMmMtFSC4k6pauyWc1IDjB9BQn Z9VkTtCfQGY37ktR+TlLe/YCW18jksWzMy9IeBXvzP7Acb4V2Pl5Gz+0kViazaYx Ac2uixe+/flWkR59VmoWoA1NUkAH1Cnd79rkHC6uFI/uDtxCGtQofMQ9i2YyBB/P kMl/uFzgplv2SkivNj3ocR/ZmhYNKoC3NkLJ2BkYkD5fHSibrB++Jl04gdh7g2zQ KmB10Gw1UQpkZA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:57:02 2025 by rpki-client