This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft File: _BirNMWiEorErlXBr23vZTSzgR0.mft (raw, json) Hash identifier: pTAgpDo18SU0gXZpG7FmIV45u83SZWENC/xm9Ov9qcw= Subject key identifier: 85:E2:48:91:4C:4C:41:F8:14:5A:5D:55:4C:32:96:14:BA:98:9A:91 Authority key identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D Certificate issuer: /CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d Certificate serial: 019B5A88E0AE409638617E7A3E6F8F46DC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft Manifest number: 0B Signing time: Fri 26 Dec 2025 12:01:18 +0000 Manifest this update: Fri 26 Dec 2025 12:01:18 +0000 Manifest next update: Sat 27 Dec 2025 12:01:18 +0000 Files and hashes: 1: _BirNMWiEorErlXBr23vZTSzgR0.crl (hash: fnbtguE+TsYJq6/bWUWl123ycQ89jOxZ9EDOYhtmtNo=) 2: uPE6gLHMqb3nKE7DzMWRnUhenUA.roa (hash: mtPIGYUxBY+70GNIt71oIf/x09iHAh2hPcdu0/0I5Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:e0:ae:40:96:38:61:7e:7a:3e:6f:8f:46:dc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d Validity Not Before: Dec 26 12:01:18 2025 GMT Not After : Dec 27 12:01:18 2025 GMT Subject: CN=85e248914c4c41f8145a5d554c329614ba989a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:d3:0b:1e:41:bf:32:76:1b:69:b1:6e:5d: 5d:0f:bc:e0:a3:8f:d7:80:8f:f5:97:db:a7:ef:89: 6b:26:19:98:f3:99:4d:0d:6c:9e:e5:94:b5:f3:42: a6:3b:80:9e:9d:e9:ad:2f:4d:7c:bb:db:6e:42:69: 58:12:9d:02:a4:f4:36:02:fd:a2:1f:d4:c4:e2:66: 72:39:0d:c3:50:0e:6f:5b:c8:00:6b:82:58:7f:20: a4:85:8f:4a:94:84:9b:18:90:c8:75:cf:be:d1:5f: 1d:9d:ed:33:a2:66:43:6b:5f:d0:42:1a:37:54:1b: 54:e2:9b:c2:1b:01:56:68:4e:4e:4d:aa:8e:bd:77: a3:7d:c5:d7:6d:56:90:d2:c8:5b:a3:0f:db:f9:27: 58:0a:a2:dc:db:00:be:f5:7e:92:29:40:12:19:41: e9:da:5f:4f:75:fa:38:c7:3a:17:0f:6d:e6:e7:d0: d5:44:0c:90:31:95:cd:b0:f8:b3:86:08:82:27:81: 27:4d:7d:e5:90:00:ec:9e:4c:29:43:91:f7:fa:9a: a6:1a:7b:43:9a:af:80:74:cc:38:bf:d5:43:75:22: b5:ec:5e:59:bb:ec:13:f4:9f:3f:9c:7b:a7:b6:1a: 63:dd:b5:6a:10:d4:84:91:3b:42:17:4a:37:68:cf: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:48:91:4C:4C:41:F8:14:5A:5D:55:4C:32:96:14:BA:98:9A:91 X509v3 Authority Key Identifier: keyid:FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:e2:2d:49:19:7b:af:9b:93:a4:5b:a1:14:bb:d4:d1:b0:0a: 3f:96:93:ba:af:9d:ce:21:ae:9a:17:2f:8c:b3:70:28:ff:f4: 16:d8:ee:95:de:28:f4:60:56:c4:e1:6f:f2:18:e1:6d:88:ff: 46:cd:90:f2:61:f0:cd:13:6d:91:f7:38:54:d3:62:5d:44:b3: 7f:26:66:a3:79:9e:fb:7c:24:4f:da:90:af:64:f2:33:02:f1: 84:c7:99:b8:c3:ea:c8:dd:f5:5c:59:e8:c3:47:59:1d:a0:74: 25:36:f1:0b:a4:2d:f7:cd:c3:e3:69:79:4f:d1:3f:a4:b0:7f: f3:6c:ce:92:52:9e:db:e6:79:43:f4:7e:d7:ca:2c:58:38:ae: a6:23:41:0f:e9:f7:2d:f2:d4:c5:26:04:55:70:fe:2c:21:92: 8a:e0:53:f5:ae:f4:14:ca:ad:0d:ce:8f:31:dd:63:d1:3b:54: fe:6f:7f:cb:0f:74:0c:f6:19:71:dc:25:8a:d9:05:25:d0:4e: 17:96:dd:af:cb:f4:38:f2:b6:d9:2c:4b:8d:fc:0e:5f:58:77: ca:85:96:ac:88:1b:9e:ba:b4:32:a9:05:1b:dd:de:aa:d8:32: 2c:25:76:f8:ad:e3:bd:85:74:73:71:a5:e6:10:82:e5:89:db: 6d:69:27:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOCuQJY4YX56Pm+PRtyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMThhYjM0YzVhMjEyOGFjNGFlNTVjMWFmNmRlZjY1MzRi MzgxMWQwHhcNMjUxMjI2MTIwMTE4WhcNMjUxMjI3MTIwMTE4WjAzMTEwLwYDVQQD Eyg4NWUyNDg5MTRjNGM0MWY4MTQ1YTVkNTU0YzMyOTYxNGJhOTg5YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rTCx5BvzJ2G2mxbl1dD7zgo4/X gI/1l9un74lrJhmY85lNDWye5ZS180KmO4CenemtL018u9tuQmlYEp0CpPQ2Av2i H9TE4mZyOQ3DUA5vW8gAa4JYfyCkhY9KlISbGJDIdc++0V8dne0zomZDa1/QQho3 VBtU4pvCGwFWaE5OTaqOvXejfcXXbVaQ0shbow/b+SdYCqLc2wC+9X6SKUASGUHp 2l9Pdfo4xzoXD23m59DVRAyQMZXNsPizhgiCJ4EnTX3lkADsnkwpQ5H3+pqmGntD mq+AdMw4v9VDdSK17F5Zu+wT9J8/nHunthpj3bVqENSEkTtCF0o3aM+8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXiSJFMTEH4FFpdVUwylhS6mJqRMB8GA1UdIwQY MBaAFPwYqzTFohKKxK5Vwa9t72U0s4EdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjY3YmUtOTY3MC00NzAxLTk5ZjAt YTc4MTRmYzQ2ZTY1LzEvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjY3YmUtOTY3MC00NzAxLTk5ZjAtYTc4MTRmYzQ2ZTY1 LzEvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuItSRl7 r5uTpFuhFLvU0bAKP5aTuq+dziGumhcvjLNwKP/0Ftjuld4o9GBWxOFv8hjhbYj/ Rs2Q8mHwzRNtkfc4VNNiXUSzfyZmo3me+3wkT9qQr2TyMwLxhMeZuMPqyN31XFno w0dZHaB0JTbxC6Qt983D42l5T9E/pLB/82zOklKe2+Z5Q/R+18osWDiupiNBD+n3 LfLUxSYEVXD+LCGSiuBT9a70FMqtDc6PMd1j0TtU/m9/yw90DPYZcdwlitkFJdBO F5bdr8v0OPK22SxLjfwOX1h3yoWWrIgbnrq0MqkFG93eqtgyLCV2+K3jvYV0c3Gl 5hCC5YnbbWkn+g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client