This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json) Hash identifier: i/fFCnJ0jpOHIPaKMI7IAWicdon62pD0bpQA6HHNi3k= Subject key identifier: D2:18:DB:54:27:D7:C7:12:2C:55:B9:B6:F1:6F:84:7A:9A:34:17:F1 Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Certificate serial: 019B341F6E2F2FEF628FBEFCC35493E8A753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft Manifest number: 0144 Signing time: Fri 19 Dec 2025 01:00:33 +0000 Manifest this update: Fri 19 Dec 2025 01:00:33 +0000 Manifest next update: Sat 20 Dec 2025 01:00:33 +0000 Files and hashes: 1: 08RxR8iO2FhU9rvJfFlhqb7t6ko.roa (hash: DIbHPZQ18xH9+/A7UUVj8MnmxfSRwJbz7oSJVK8sMZg=) 2: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: yqBvK8Vl3+zfjQgOyj/m0E4i9Cksnz0obiUVgFEGXjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:6e:2f:2f:ef:62:8f:be:fc:c3:54:93:e8:a7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Validity Not Before: Dec 19 01:00:33 2025 GMT Not After : Dec 20 01:00:33 2025 GMT Subject: CN=d218db5427d7c7122c55b9b6f16f847a9a3417f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:2e:0c:00:f9:2c:da:33:a4:6d:4c:4a:c4: 10:b6:9c:f9:b7:e7:00:14:96:67:0a:31:ab:68:68: 7d:1d:8d:c9:08:e0:2b:27:75:fe:3f:ed:7f:45:c8: 83:20:ce:b1:b9:40:db:89:ba:27:60:7c:0e:87:0c: 00:e2:e1:d4:05:ae:83:e3:bc:4c:08:5f:f4:d3:27: c4:55:b8:d5:55:4e:9e:18:45:24:16:24:0f:01:3d: e0:7b:19:74:97:ec:a5:e9:65:ed:61:26:5a:f8:e6: 55:06:f6:55:f6:f6:46:5b:1c:92:4f:55:15:da:0e: 44:e9:72:27:3e:fc:64:68:08:05:87:2f:26:ae:73: b8:09:5f:56:0e:d6:ea:72:50:34:d9:40:2c:b6:ef: e5:40:b7:60:c4:b1:03:6a:f4:ff:ce:f1:05:22:13: e1:65:02:f8:ae:f8:6b:0c:fc:0e:48:aa:49:f0:e0: fa:7d:dc:ad:a8:b2:a9:49:00:91:6f:5e:ab:d7:c5: a2:78:01:50:08:48:0c:83:8b:ea:60:ab:bf:07:9b: 27:c6:40:73:ab:c4:d1:ae:8f:a1:68:7c:77:cb:3e: 06:32:0d:e7:e6:06:15:b1:8c:18:04:16:dc:21:ef: 19:f6:89:a2:99:8c:84:45:9c:06:3a:24:74:af:c9: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:DB:54:27:D7:C7:12:2C:55:B9:B6:F1:6F:84:7A:9A:34:17:F1 X509v3 Authority Key Identifier: keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:01:9e:03:2c:56:a7:32:29:5e:40:a3:93:96:8c:10:7a: 4d:97:45:60:4f:55:d6:63:75:08:40:f5:30:fa:48:3a:9c:6e: 30:23:f8:d2:12:1e:37:2f:91:73:e6:62:44:74:f4:51:07:ac: 67:ef:fa:90:07:ae:26:d0:2b:b2:70:c7:66:7d:5d:b3:cf:13: 3d:05:8c:53:8a:77:d0:73:58:37:99:94:1a:d5:e0:73:2a:50: d6:9a:72:3b:cf:27:6d:74:16:b2:6f:75:95:99:76:26:94:b8: eb:da:72:0f:ac:c1:c8:17:a0:86:b4:b6:6c:9f:cf:f9:ff:16: 06:44:9d:3a:72:d1:d5:bb:1b:8b:f9:90:bc:d9:be:b9:c4:75: dc:2b:9a:b4:3b:f8:0a:c3:23:75:7e:b6:60:c4:7c:02:ab:c2: 13:51:10:22:e8:e4:7f:3f:ba:8c:c0:a3:30:9d:5a:08:7f:38: 21:7e:7a:12:d0:c3:4d:6f:04:e5:57:a6:ea:1a:76:53:cd:3e: 5d:ef:22:68:57:87:ab:0c:53:ff:7d:1d:01:f4:4d:7b:1c:0f: b0:40:8b:8e:2a:ce:75:45:c2:2e:c8:06:67:f3:98:66:d0:5d: 68:46:b5:4a:1d:4b:7f:0f:9b:b5:d3:2f:4d:ba:93:94:7a:30: cf:28:20:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H24vL+9ij778w1ST6KdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2QyYzhkYTgzZjVjM2M5NGFlOTQwYTBlZmQyYTc3MTRm ZjkwZTIwHhcNMjUxMjE5MDEwMDMzWhcNMjUxMjIwMDEwMDMzWjAzMTEwLwYDVQQD EyhkMjE4ZGI1NDI3ZDdjNzEyMmM1NWI5YjZmMTZmODQ3YTlhMzQxN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LUuDAD5LNozpG1MSsQQtpz5t+cA FJZnCjGraGh9HY3JCOArJ3X+P+1/RciDIM6xuUDbibonYHwOhwwA4uHUBa6D47xM CF/00yfEVbjVVU6eGEUkFiQPAT3gexl0l+yl6WXtYSZa+OZVBvZV9vZGWxyST1UV 2g5E6XInPvxkaAgFhy8mrnO4CV9WDtbqclA02UAstu/lQLdgxLEDavT/zvEFIhPh ZQL4rvhrDPwOSKpJ8OD6fdytqLKpSQCRb16r18WieAFQCEgMg4vqYKu/B5snxkBz q8TRro+haHx3yz4GMg3n5gYVsYwYBBbcIe8Z9omimYyERZwGOiR0r8kOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIY21Qn18cSLFW5tvFvhHqaNBfxMB8GA1UdIwQY MBaAFAQ9LI2oP1w8lK6UCg79KncU/5DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUt M2JiYzY2MWI0Y2M1LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUtM2JiYzY2MWI0Y2M1 LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrABngMs VqcyKV5Ao5OWjBB6TZdFYE9V1mN1CED1MPpIOpxuMCP40hIeNy+Rc+ZiRHT0UQes Z+/6kAeuJtArsnDHZn1ds88TPQWMU4p30HNYN5mUGtXgcypQ1ppyO88nbXQWsm91 lZl2JpS469pyD6zByBeghrS2bJ/P+f8WBkSdOnLR1bsbi/mQvNm+ucR13CuatDv4 CsMjdX62YMR8AqvCE1EQIujkfz+6jMCjMJ1aCH84IX56EtDDTW8E5Vem6hp2U80+ Xe8iaFeHqwxT/30dAfRNexwPsECLjirOdUXCLsgGZ/OYZtBdaEa1Sh1Lfw+btdMv TbqTlHowzygg9w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:03:52 2025 by rpki-client