This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json) Hash identifier: RdqNff7gu8Z8GxB6jlBntTQwsMRDnB87ngXa4Y3/Dho= Subject key identifier: 64:2C:9F:22:19:FA:25:2C:A3:A8:CA:3F:84:89:D7:5B:33:D9:96:24 Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049 Certificate serial: 019AEED11CE697F6E201CC49A1C6832FAA2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft Manifest number: 0C24 Signing time: Fri 05 Dec 2025 14:01:13 +0000 Manifest this update: Fri 05 Dec 2025 14:01:13 +0000 Manifest next update: Sat 06 Dec 2025 14:01:13 +0000 Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: yh8Iz9ObNTWbJD0EFKcoy6adspmJ4Da5PZOvXBQZi0M=) 2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=) 3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:1c:e6:97:f6:e2:01:cc:49:a1:c6:83:2f:aa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049 Validity Not Before: Dec 5 14:01:13 2025 GMT Not After : Dec 6 14:01:13 2025 GMT Subject: CN=642c9f2219fa252ca3a8ca3f8489d75b33d99624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:d3:0a:23:a5:23:6e:ab:cf:f6:0f:d6:8e: 11:63:7e:19:6d:c0:71:08:53:21:b6:57:03:cf:f4: 53:30:b5:a8:d8:ca:27:47:c8:60:b7:04:7f:62:b1: f8:e2:55:01:b6:b5:bb:d7:53:8d:fd:d7:1b:1f:37: a1:28:d1:ef:d6:00:9f:c6:08:30:1e:e3:38:bc:81: 7a:90:85:93:fe:97:95:58:6c:0a:73:75:f3:6f:02: a6:9f:68:1b:3b:44:db:93:e1:0b:c0:07:19:6c:8f: 50:cb:ec:62:d3:d0:32:a1:08:54:82:9b:fa:16:ca: 49:5c:24:30:b1:9f:74:18:66:91:2d:77:9f:f0:ad: bc:03:9e:0e:c4:5e:fb:e5:55:0f:9e:07:67:7f:da: 12:bf:61:d1:20:12:64:c9:a6:d8:18:66:e2:3a:67: 8e:18:17:23:30:74:c1:ff:49:fb:4c:51:2a:94:70: a9:77:6c:65:e3:71:a5:f2:04:33:cc:b2:b6:28:7f: 62:53:5f:2d:85:6f:7e:e7:a3:9d:ca:b0:51:ba:48: c0:c9:bf:5d:e6:c3:f8:7c:8f:34:a4:c1:60:c0:31: 71:81:7d:56:7e:93:7e:ed:99:ce:bc:ba:7d:20:ac: d8:72:b8:ea:02:3c:0e:26:ca:8b:28:6d:a4:64:25: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:9F:22:19:FA:25:2C:A3:A8:CA:3F:84:89:D7:5B:33:D9:96:24 X509v3 Authority Key Identifier: keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7e:51:cb:28:2a:40:1d:1d:f2:ff:d5:de:f9:ec:c6:19:54: 76:68:c8:07:9d:31:87:01:18:02:e9:de:fe:52:be:ff:ab:9d: c4:bc:e4:d7:df:5e:9d:7a:f0:9c:96:70:61:c5:df:19:0c:be: 09:50:9a:1d:b1:50:9a:bc:db:38:61:c3:67:7f:47:2c:5c:1a: e0:a6:f3:79:f9:34:5e:7b:f9:71:9f:94:20:cf:1b:1a:17:34: 70:56:c7:3d:0f:51:2e:65:98:39:ab:e7:d9:bb:aa:a4:6a:4a: 4a:bf:30:33:8f:00:43:22:78:d7:e0:64:ab:75:84:b7:a1:78: 94:b5:69:5c:97:6d:9a:99:c9:ae:1e:77:ee:35:c8:48:dd:cb: 89:83:27:d6:c4:21:ff:87:c2:dc:47:b7:d2:bd:1a:5e:92:17: 0b:64:d4:60:8d:7a:f0:16:95:90:46:22:6e:7e:a6:d6:a4:7b: d3:bc:c9:51:b5:c4:6d:bc:22:b0:c3:da:dc:bd:57:fb:67:88: 65:b6:6c:5e:cd:9d:9c:e7:ac:e1:0d:4b:1b:b0:ca:e3:14:88: 6a:f8:f0:a4:79:3f:24:99:4b:15:7d:07:0a:7f:6f:39:f5:f7: 8f:4e:0a:1f:b4:13:59:cc:b0:da:8a:fd:1d:b7:17:9c:e2:0e: dd:cd:c0:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0Rzml/biAcxJocaDL6orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw ZjgwNDkwHhcNMjUxMjA1MTQwMTEzWhcNMjUxMjA2MTQwMTEzWjAzMTEwLwYDVQQD Eyg2NDJjOWYyMjE5ZmEyNTJjYTNhOGNhM2Y4NDg5ZDc1YjMzZDk5NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGPTCiOlI26rz/YP1o4RY34ZbcBx CFMhtlcDz/RTMLWo2MonR8hgtwR/YrH44lUBtrW711ON/dcbHzehKNHv1gCfxggw HuM4vIF6kIWT/peVWGwKc3XzbwKmn2gbO0Tbk+ELwAcZbI9Qy+xi09AyoQhUgpv6 FspJXCQwsZ90GGaRLXef8K28A54OxF775VUPngdnf9oSv2HRIBJkyabYGGbiOmeO GBcjMHTB/0n7TFEqlHCpd2xl43Gl8gQzzLK2KH9iU18thW9+56OdyrBRukjAyb9d 5sP4fI80pMFgwDFxgX1WfpN+7ZnOvLp9IKzYcrjqAjwOJsqLKG2kZCUibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQsnyIZ+iUso6jKP4SJ11sz2ZYkMB8GA1UdIwQY MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH5Ryygq QB0d8v/V3vnsxhlUdmjIB50xhwEYAune/lK+/6udxLzk199enXrwnJZwYcXfGQy+ CVCaHbFQmrzbOGHDZ39HLFwa4Kbzefk0Xnv5cZ+UIM8bGhc0cFbHPQ9RLmWYOavn 2buqpGpKSr8wM48AQyJ41+Bkq3WEt6F4lLVpXJdtmpnJrh537jXISN3LiYMn1sQh /4fC3Ee30r0aXpIXC2TUYI168BaVkEYibn6m1qR707zJUbXEbbwisMPa3L1X+2eI ZbZsXs2dnOes4Q1LG7DK4xSIavjwpHk/JJlLFX0HCn9vOfX3j04KH7QTWcyw2or9 HbcXnOIO3c3Apg== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:57 2025 by rpki-client