This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json) Hash identifier: sH+2XljfzlIru1kzlfQnXOOgyotZpDVxCzLztadmqsg= Subject key identifier: E2:00:B1:DC:EF:EB:14:EF:AB:12:47:9C:DC:FD:AE:C6:B1:5C:4E:FB Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc Certificate serial: 019B3A2192785FB8B590199C16389E3384CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft Manifest number: 16AC Signing time: Sat 20 Dec 2025 05:00:37 +0000 Manifest this update: Sat 20 Dec 2025 05:00:37 +0000 Manifest next update: Sun 21 Dec 2025 05:00:37 +0000 Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: ifHtuBi+5gTOhXLA3dkAgSywrXz3lzxhs51vAK0EgKg=) 2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=) 3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:92:78:5f:b8:b5:90:19:9c:16:38:9e:33:84:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc Validity Not Before: Dec 20 05:00:37 2025 GMT Not After : Dec 21 05:00:37 2025 GMT Subject: CN=e200b1dcefeb14efab12479cdcfdaec6b15c4efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:da:59:c5:f4:ce:13:1b:f8:d7:01:d7:df: 1f:9b:c6:e1:a0:9c:88:78:aa:9c:e5:b0:15:bc:d3: 9d:73:ba:39:8f:af:69:51:9f:b0:2f:1b:73:2f:65: 50:ee:8c:0a:68:a3:46:3c:e5:e0:a7:a5:d5:0b:f4: b6:63:64:cc:89:aa:95:21:52:9f:ab:7d:66:cc:5d: 4e:e8:08:87:d4:d1:d9:5d:6e:ea:61:0f:24:8a:e5: 36:b1:58:3d:d2:cb:f4:cf:ad:2f:7a:c3:47:97:4a: 57:35:32:b1:b6:bb:9e:57:98:d2:cf:5c:01:e2:33: 2d:c0:01:63:3f:bc:28:05:2e:de:9a:18:98:d4:be: da:f7:df:7e:ca:27:c2:95:dd:38:93:d1:7b:f1:3b: 6e:07:76:da:40:04:4f:cd:98:77:21:27:b4:cc:6f: 41:4f:48:28:3f:ad:7b:95:72:a3:d2:a7:02:5f:18: 56:67:48:a0:f1:e2:92:11:d8:0a:d2:34:fa:da:7e: a6:c6:48:21:70:2f:5a:50:0a:ab:aa:d9:94:10:f7: 54:11:a3:57:04:9a:2d:14:aa:87:82:52:ae:08:cd: f9:c1:4c:b7:07:4b:e4:81:2f:81:b4:4b:81:cf:ec: 95:0e:69:65:1b:05:24:cf:d8:b1:39:f6:db:87:3c: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:B1:DC:EF:EB:14:EF:AB:12:47:9C:DC:FD:AE:C6:B1:5C:4E:FB X509v3 Authority Key Identifier: keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3a:c1:37:ae:5a:d7:ae:1e:f8:12:fa:eb:a5:98:a6:fa:d2: 3d:39:3c:6f:d8:e0:e0:7c:4f:e0:a3:b9:8b:f7:28:d2:12:36: ed:15:8a:06:03:ee:31:01:87:bf:f7:90:49:c5:6a:8c:35:88: dd:16:38:b1:4b:c3:9b:fa:a6:ed:20:a3:e4:15:fc:3d:1e:ec: 5a:29:da:d1:00:3f:3a:fc:ed:57:10:e4:1b:a2:b7:53:ca:a4: 59:aa:96:bd:b2:3f:01:c4:cb:e5:e7:fc:04:c6:ad:84:45:96: 4a:c4:76:77:91:a3:a5:44:d8:70:37:5f:bd:db:fa:e4:84:4c: 6f:98:e8:f7:c1:86:0f:58:1e:5e:38:99:de:4e:c4:50:1e:e2: c2:08:cc:f1:88:0d:c5:85:d4:84:67:95:1d:04:51:16:f5:3e: a0:b7:8e:23:e8:41:b4:33:49:e7:97:ec:00:31:d4:d8:fa:ed: 95:0f:dc:a6:f3:a2:06:07:a9:26:6e:3d:cb:2d:8a:ff:78:7d: 6a:2a:91:7d:3a:83:f2:ab:01:6a:bf:13:77:3b:b4:90:44:55: 8e:6f:2a:5f:93:28:32:d0:b2:a4:9e:5d:ad:4c:fa:46:7f:3a: 97:9f:7c:b5:54:a7:70:b6:58:4c:e0:a5:00:91:f9:11:39:c8: ba:20:38:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZJ4X7i1kBmcFjieM4TPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix NTUxZGMwHhcNMjUxMjIwMDUwMDM3WhcNMjUxMjIxMDUwMDM3WjAzMTEwLwYDVQQD EyhlMjAwYjFkY2VmZWIxNGVmYWIxMjQ3OWNkY2ZkYWVjNmIxNWM0ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzDaWcX0zhMb+NcB198fm8bhoJyI eKqc5bAVvNOdc7o5j69pUZ+wLxtzL2VQ7owKaKNGPOXgp6XVC/S2Y2TMiaqVIVKf q31mzF1O6AiH1NHZXW7qYQ8kiuU2sVg90sv0z60vesNHl0pXNTKxtrueV5jSz1wB 4jMtwAFjP7woBS7emhiY1L7a999+yifCld04k9F78TtuB3baQARPzZh3ISe0zG9B T0goP617lXKj0qcCXxhWZ0ig8eKSEdgK0jT62n6mxkghcC9aUAqrqtmUEPdUEaNX BJotFKqHglKuCM35wUy3B0vkgS+BtEuBz+yVDmllGwUkz9ixOfbbhzzRbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIAsdzv6xTvqxJHnNz9rsaxXE77MB8GA1UdIwQY MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt MzRhOWU5OGE1Zjg2LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2 LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjrBN65a 164e+BL666WYpvrSPTk8b9jg4HxP4KO5i/co0hI27RWKBgPuMQGHv/eQScVqjDWI 3RY4sUvDm/qm7SCj5BX8PR7sWina0QA/OvztVxDkG6K3U8qkWaqWvbI/AcTL5ef8 BMathEWWSsR2d5GjpUTYcDdfvdv65IRMb5jo98GGD1geXjiZ3k7EUB7iwgjM8YgN xYXUhGeVHQRRFvU+oLeOI+hBtDNJ55fsADHU2PrtlQ/cpvOiBgepJm49yy2K/3h9 aiqRfTqD8qsBar8Tdzu0kERVjm8qX5MoMtCypJ5drUz6Rn86l598tVSncLZYTOCl AJH5ETnIuiA4Qg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:00 2025 by rpki-client