This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json) Hash identifier: J2Kemkt2Gz8c61xfVhgW0NR4NBlG64NiUO6UA7NNqB0= Subject key identifier: 67:BA:61:4D:41:EA:C2:02:F4:04:EC:C6:7A:A4:F7:20:91:6F:84:33 Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019B3ED9FA7661E4A41EB6AFAD3BC25D1277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft Manifest number: 16C9 Signing time: Sun 21 Dec 2025 03:00:31 +0000 Manifest this update: Sun 21 Dec 2025 03:00:31 +0000 Manifest next update: Mon 22 Dec 2025 03:00:31 +0000 Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: G4NyP+r0B6Ap9HB7JFWayjxL8rl0o57SlWMHa5kJli8=) 2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=) 3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=) 4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:d9:fa:76:61:e4:a4:1e:b6:af:ad:3b:c2:5d:12:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Dec 21 03:00:31 2025 GMT Not After : Dec 22 03:00:31 2025 GMT Subject: CN=67ba614d41eac202f404ecc67aa4f720916f8433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:87:f1:62:b8:ee:fe:f6:f7:53:f2:63:e4:10: 1a:ce:c6:59:bc:54:49:3c:7f:da:bf:d0:53:d1:4a: a9:0a:96:cb:67:ca:a6:c9:27:29:9a:74:ec:be:e9: 12:e4:66:31:0f:2c:a2:b6:85:e4:d9:48:8a:2f:88: a4:91:55:f2:ed:ee:cb:75:d0:ea:c9:f2:90:af:26: bb:b6:ec:f7:6f:12:68:5f:72:29:1d:e4:f3:7f:e3: 5c:b9:c7:68:99:08:d8:71:7d:55:4c:a4:89:5f:0c: 92:93:09:04:97:cb:d3:07:89:09:e6:a5:76:dd:25: 02:2e:83:f1:8c:34:9d:0b:b6:2e:d0:79:69:d8:6d: c3:22:3c:6f:8e:fc:98:67:63:af:ff:f8:48:1b:d7: 58:a3:10:b5:b4:a4:27:43:bd:5f:a3:3f:e3:8e:a2: d4:18:63:55:4c:f0:88:59:5b:86:19:34:9d:7b:b8: 89:50:6d:ff:63:15:bd:c3:ac:dd:6c:93:15:39:e7: 7c:75:f2:38:e9:fd:c1:c9:1f:29:46:66:38:98:80: e0:88:f2:56:2f:75:45:b6:07:c9:fd:2d:70:73:2e: 65:ea:14:2e:8a:a0:7f:cd:60:b9:ac:99:3c:47:91: 68:d2:d3:cc:7c:83:37:59:ad:6e:6a:67:09:e0:50: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:61:4D:41:EA:C2:02:F4:04:EC:C6:7A:A4:F7:20:91:6F:84:33 X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:6b:a3:b4:e9:fd:10:22:37:f5:7b:f4:33:d4:67:d7:f3:7a: 77:ae:e3:08:05:e9:63:5c:e7:a2:80:25:08:a7:52:a7:49:89: 38:4c:62:47:13:6a:3d:b2:bc:26:98:3f:6f:d0:0e:78:2c:7f: d4:c0:48:b5:a4:6c:d4:46:24:13:46:c3:38:e5:04:d6:3e:a0: 27:56:ab:18:bd:88:4e:fc:74:56:7e:b6:43:36:59:93:2e:1b: 04:41:36:43:4d:65:d7:1a:e9:20:d4:1f:3a:f7:fb:86:81:97: 20:d1:f8:e5:9c:c9:79:2a:ab:37:db:92:95:bf:d1:26:a5:c5: 7f:ec:88:df:83:26:a0:8b:42:27:4d:53:d3:51:f3:00:9c:50: b8:37:9e:59:63:35:e0:35:5b:b3:4a:51:fa:bd:ea:02:c4:e9: 08:a2:f0:a3:f8:dc:7a:eb:ac:f6:d1:cd:ce:a7:ab:1d:e3:28: 92:b8:ac:42:fd:ad:d2:ae:ba:28:80:3d:85:73:15:06:e8:3e: 5f:e5:6f:1a:aa:fd:0c:42:f7:a4:2e:fe:e1:64:fd:6d:fb:ee: e0:01:a4:76:34:1d:be:2a:f8:69:95:0d:ce:3d:21:63:55:d3: a8:a0:d8:2a:19:83:71:5b:14:19:93:db:5a:0e:48:c8:f0:a5: da:35:1c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2fp2YeSkHravrTvCXRJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjUxMjIxMDMwMDMxWhcNMjUxMjIyMDMwMDMxWjAzMTEwLwYDVQQD Eyg2N2JhNjE0ZDQxZWFjMjAyZjQwNGVjYzY3YWE0ZjcyMDkxNmY4NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54fxYrju/vb3U/Jj5BAazsZZvFRJ PH/av9BT0UqpCpbLZ8qmyScpmnTsvukS5GYxDyyitoXk2UiKL4ikkVXy7e7LddDq yfKQrya7tuz3bxJoX3IpHeTzf+NcucdomQjYcX1VTKSJXwySkwkEl8vTB4kJ5qV2 3SUCLoPxjDSdC7Yu0Hlp2G3DIjxvjvyYZ2Ov//hIG9dYoxC1tKQnQ71foz/jjqLU GGNVTPCIWVuGGTSde7iJUG3/YxW9w6zdbJMVOed8dfI46f3ByR8pRmY4mIDgiPJW L3VFtgfJ/S1wcy5l6hQuiqB/zWC5rJk8R5Fo0tPMfIM3Wa1uamcJ4FDrmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe6YU1B6sIC9ATsxnqk9yCRb4QzMB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02ujtOn9 ECI39Xv0M9Rn1/N6d67jCAXpY1znooAlCKdSp0mJOExiRxNqPbK8Jpg/b9AOeCx/ 1MBItaRs1EYkE0bDOOUE1j6gJ1arGL2ITvx0Vn62QzZZky4bBEE2Q01l1xrpINQf Ovf7hoGXINH45ZzJeSqrN9uSlb/RJqXFf+yI34MmoItCJ01T01HzAJxQuDeeWWM1 4DVbs0pR+r3qAsTpCKLwo/jceuus9tHNzqerHeMokrisQv2t0q66KIA9hXMVBug+ X+VvGqr9DEL3pC7+4WT9bfvu4AGkdjQdvir4aZUNzj0hY1XTqKDYKhmDcVsUGZPb Wg5IyPCl2jUc1g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:32 2025 by rpki-client