This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json) Hash identifier: V8uAJjGxL/Tt8OtIXW0zDgNBt0SWWc54o+CKhG57+kE= Subject key identifier: 48:C7:C2:52:2E:1B:54:89:0F:17:CF:E3:00:3C:62:A7:66:0A:BB:98 Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1 Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1 Certificate serial: 019B4F604A5F487ABCF989CB781CC7322190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft Manifest number: 0691 Signing time: Wed 24 Dec 2025 08:01:08 +0000 Manifest this update: Wed 24 Dec 2025 08:01:08 +0000 Manifest next update: Thu 25 Dec 2025 08:01:08 +0000 Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: Ha8BsgM/lT4Q0up2aUhFcoOBkZbyts7y+te9VEzkheM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:4a:5f:48:7a:bc:f9:89:cb:78:1c:c7:32:21:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1 Validity Not Before: Dec 24 08:01:08 2025 GMT Not After : Dec 25 08:01:08 2025 GMT Subject: CN=48c7c2522e1b54890f17cfe3003c62a7660abb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:f0:4d:85:d7:6a:e5:37:76:2c:c3:cc:40: 6b:41:d8:e3:68:db:33:54:aa:7e:8f:07:b5:ad:0d: 76:cd:c3:88:7d:ad:1d:8f:b7:02:83:37:b3:d4:5d: e0:53:82:78:c9:e2:e3:de:c7:63:0e:29:22:23:39: fb:06:b8:ac:8c:c7:6a:89:e7:24:62:14:e0:0b:dc: 04:e7:e2:26:f8:0e:49:86:ae:fb:41:a9:77:b1:e3: b4:85:fc:c2:cb:84:04:d9:0b:1b:af:62:55:c2:73: f9:94:ec:bc:0d:c4:56:ce:43:e1:bb:02:ab:54:c1: e6:30:92:8b:0e:47:dc:3e:a7:2f:05:54:55:a6:8a: bb:fc:73:cc:b2:7b:ff:7e:82:fd:3c:6d:c6:e8:47: ad:33:01:df:ee:55:96:0d:a2:a1:96:ce:27:a7:af: 82:f9:34:38:c7:bf:b7:9b:64:e6:95:08:1a:85:7c: a4:5a:2b:89:0b:dd:fc:5a:06:8d:50:88:8c:b1:a4: 0d:ae:0b:2d:ad:98:9d:d2:68:0c:9a:8e:f4:ef:7d: f5:b9:b1:5f:2d:d6:c7:f5:63:fc:8e:b4:0e:2e:13: 36:02:8b:2e:db:89:16:aa:db:af:4b:73:26:51:95: dd:fc:26:75:3c:b0:51:14:08:80:39:c4:c7:d3:43: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C7:C2:52:2E:1B:54:89:0F:17:CF:E3:00:3C:62:A7:66:0A:BB:98 X509v3 Authority Key Identifier: keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:50:2f:8e:2d:1c:7f:a0:9b:91:e9:fc:82:37:b7:f9:b3:50: cc:dc:ea:e9:4f:cf:7b:93:61:26:10:2f:09:c0:75:d4:e6:ca: 3a:42:e9:79:75:67:81:2b:f2:b3:c4:65:7d:84:b7:a1:d3:97: 45:8b:5b:3a:96:47:35:d0:a1:bb:cb:73:59:03:f1:dd:66:f1: e0:d3:b6:23:b7:83:43:48:77:4c:5f:b0:27:03:77:2d:a1:25: 94:81:a9:12:c0:b8:fc:2e:a4:cc:80:89:06:64:68:19:c4:53: 77:e8:8d:af:94:99:cc:f1:45:b1:a0:8b:8f:78:ac:43:64:fd: 53:fa:4c:cc:73:d6:79:8e:6a:95:fd:35:f2:2d:ca:3c:be:e0: b7:c5:da:02:1e:88:6e:aa:22:91:f7:a9:f9:64:3c:75:cc:f4: 32:13:0c:13:23:02:55:f1:86:8a:37:ff:f9:ca:1c:1f:ea:bd: dd:fb:1e:ca:fb:dc:a2:8d:ae:88:dd:06:d6:d8:db:00:f3:5b: 0a:6b:80:50:96:2b:19:53:42:22:23:8a:5e:14:74:38:8f:c5: a0:6f:bb:56:43:7b:a6:9e:06:19:8f:1c:5f:28:8d:d9:4d:03: 33:e8:c6:b5:cf:a5:78:a7:67:02:7c:f9:9a:a2:c5:a5:8d:b9: 0e:bf:45:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYEpfSHq8+YnLeBzHMiGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OTA0MzQ3YTIzNjFhY2VkN2MzNzBmNzQ0NmRlNzA4Mjc3 ZWU2ZDEwHhcNMjUxMjI0MDgwMTA4WhcNMjUxMjI1MDgwMTA4WjAzMTEwLwYDVQQD Eyg0OGM3YzI1MjJlMWI1NDg5MGYxN2NmZTMwMDNjNjJhNzY2MGFiYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3wTYXXauU3dizDzEBrQdjjaNsz VKp+jwe1rQ12zcOIfa0dj7cCgzez1F3gU4J4yeLj3sdjDikiIzn7BrisjMdqieck YhTgC9wE5+Im+A5Jhq77Qal3seO0hfzCy4QE2Qsbr2JVwnP5lOy8DcRWzkPhuwKr VMHmMJKLDkfcPqcvBVRVpoq7/HPMsnv/foL9PG3G6EetMwHf7lWWDaKhls4np6+C +TQ4x7+3m2TmlQgahXykWiuJC938WgaNUIiMsaQNrgstrZid0mgMmo707331ubFf LdbH9WP8jrQOLhM2Aosu24kWqtuvS3MmUZXd/CZ1PLBRFAiAOcTH00OgYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjHwlIuG1SJDxfP4wA8YqdmCruYMB8GA1UdIwQY MBaAFASQQ0eiNhrO18Nw90Rt5wgnfubRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgt NTY1ZmJhMTE3ODY4LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgtNTY1ZmJhMTE3ODY4 LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFAvji0c f6Cbken8gje3+bNQzNzq6U/Pe5NhJhAvCcB11ObKOkLpeXVngSvys8RlfYS3odOX RYtbOpZHNdChu8tzWQPx3Wbx4NO2I7eDQ0h3TF+wJwN3LaEllIGpEsC4/C6kzICJ BmRoGcRTd+iNr5SZzPFFsaCLj3isQ2T9U/pMzHPWeY5qlf018i3KPL7gt8XaAh6I bqoikfep+WQ8dcz0MhMMEyMCVfGGijf/+cocH+q93fseyvvcoo2uiN0G1tjbAPNb CmuAUJYrGVNCIiOKXhR0OI/FoG+7VkN7pp4GGY8cXyiN2U0DM+jGtc+leKdnAnz5 mqLFpY25Dr9FQA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:35 2025 by rpki-client