This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json) Hash identifier: 7w82eXyhzKOPnjLUumE4YHZMQ52i/UKq+X4/zrX2b+I= Subject key identifier: C1:E0:4C:36:C2:9C:47:B8:E5:BA:6B:EB:03:48:8B:F4:29:49:BA:88 Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Certificate serial: 019B62792153B17F0D4024980BF7D0437855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft Manifest number: 05EF Signing time: Sun 28 Dec 2025 01:01:04 +0000 Manifest this update: Sun 28 Dec 2025 01:01:04 +0000 Manifest next update: Mon 29 Dec 2025 01:01:04 +0000 Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: bi4yiBRmrWeycNYKYJzYSwW9SjMxGc/9LgMVRavUeQM=) 2: no_wDGwfE_WbkKb8o3sJUNrOhEE.roa (hash: 6CvslUu97p8/apCEYmsvCbAOl3BSUmDUt8aWBZFz6sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:21:53:b1:7f:0d:40:24:98:0b:f7:d0:43:78:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Validity Not Before: Dec 28 01:01:04 2025 GMT Not After : Dec 29 01:01:04 2025 GMT Subject: CN=c1e04c36c29c47b8e5ba6beb03488bf42949ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:ac:4b:2b:2c:88:48:ba:1a:e4:3c:3a:e3: 6b:88:6b:ca:32:9c:ed:a6:d2:ee:3a:a8:1e:df:c3: a7:f6:71:ac:fc:ee:c8:3e:3c:43:b8:b9:2c:d7:b5: 20:cd:06:a9:b3:ae:f8:a3:5f:09:23:b7:57:b3:b8: f9:07:0c:0f:87:7b:e9:06:34:5f:5f:20:00:09:4b: e3:4f:92:f3:a5:59:40:89:e0:7f:f8:50:fc:12:87: b3:4e:3b:ce:0d:e6:32:b2:6e:e7:49:7d:9a:d8:ca: 62:9a:82:4b:70:4a:3c:f3:b2:7e:88:72:ac:e2:57: 81:5d:1e:0e:29:c5:ce:97:12:fe:e5:67:5a:1c:ef: 23:1e:69:5c:1d:77:66:aa:81:d7:a1:95:e3:b9:e8: 10:61:bc:8a:19:5d:89:35:6d:22:60:42:70:29:9a: cc:61:87:b7:a4:67:33:58:90:48:87:12:de:92:9b: 09:60:98:9a:c2:eb:13:59:a1:ca:2f:3f:60:35:c0: a5:52:4b:23:52:57:4c:04:14:df:a5:ab:ff:d5:38: 12:38:6d:50:0b:0b:39:35:ef:d2:c8:25:e9:0f:9e: 5a:f9:e9:d9:48:83:62:80:8a:e0:d2:05:26:dd:5d: c4:e9:8f:eb:e3:17:47:a5:9f:18:5e:e4:2e:be:f7: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E0:4C:36:C2:9C:47:B8:E5:BA:6B:EB:03:48:8B:F4:29:49:BA:88 X509v3 Authority Key Identifier: keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:68:37:d3:25:86:b0:7c:5f:5b:18:75:92:e9:93:93:14:5d: 97:2f:c8:a4:5d:a0:a3:56:9f:85:a2:fb:1a:c8:98:4c:bb:a5: 1c:76:70:4d:85:3a:64:2a:d2:68:31:a3:2a:a5:4d:b3:fe:ac: 1f:22:27:5c:d3:8a:91:25:0b:bc:91:8e:e4:c2:91:24:1f:81: bc:4a:62:6f:03:24:40:f0:d8:b5:5a:88:5f:ac:76:78:1f:0c: 07:26:83:ac:94:9e:f8:cc:7e:bb:f6:c9:04:71:fe:5d:40:90: 25:f0:cb:ec:20:67:83:53:33:70:ff:78:a8:ee:40:ce:d8:74: 30:98:9b:a2:a6:e5:34:df:db:0d:6b:bd:7e:c2:70:e7:3a:4f: 72:59:d3:dc:ef:a6:e1:75:20:4a:f0:8a:1f:a1:58:26:90:68: 28:45:44:96:e8:1e:dc:89:8d:99:b7:64:77:aa:38:11:3c:f4: be:2b:bf:32:b9:8c:01:6e:12:46:ef:4c:4d:0d:f6:1f:6f:88: ca:8e:6a:6e:27:43:ba:43:db:b0:9b:cc:db:84:38:a2:51:19: ff:98:e6:77:5d:41:de:59:73:eb:1b:a3:5a:d2:61:40:7a:93: b8:4f:8e:32:c6:49:ad:d6:57:cf:eb:03:c6:7e:fb:bb:1e:5e: e9:d2:e2:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieSFTsX8NQCSYC/fQQ3hVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5 MjYzNWUwHhcNMjUxMjI4MDEwMTA0WhcNMjUxMjI5MDEwMTA0WjAzMTEwLwYDVQQD EyhjMWUwNGMzNmMyOWM0N2I4ZTViYTZiZWIwMzQ4OGJmNDI5NDliYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAusSyssiEi6GuQ8OuNriGvKMpzt ptLuOqge38On9nGs/O7IPjxDuLks17UgzQaps674o18JI7dXs7j5BwwPh3vpBjRf XyAACUvjT5LzpVlAieB/+FD8EoezTjvODeYysm7nSX2a2MpimoJLcEo887J+iHKs 4leBXR4OKcXOlxL+5WdaHO8jHmlcHXdmqoHXoZXjuegQYbyKGV2JNW0iYEJwKZrM YYe3pGczWJBIhxLekpsJYJiawusTWaHKLz9gNcClUksjUldMBBTfpav/1TgSOG1Q Cws5Ne/SyCXpD55a+enZSINigIrg0gUm3V3E6Y/r4xdHpZ8YXuQuvvfa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHgTDbCnEe45bpr6wNIi/QpSbqIMB8GA1UdIwQY MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4 LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Wg30yWG sHxfWxh1kumTkxRdly/IpF2go1afhaL7GsiYTLulHHZwTYU6ZCrSaDGjKqVNs/6s HyInXNOKkSULvJGO5MKRJB+BvEpibwMkQPDYtVqIX6x2eB8MByaDrJSe+Mx+u/bJ BHH+XUCQJfDL7CBng1MzcP94qO5Azth0MJiboqblNN/bDWu9fsJw5zpPclnT3O+m 4XUgSvCKH6FYJpBoKEVEluge3ImNmbdkd6o4ETz0viu/MrmMAW4SRu9MTQ32H2+I yo5qbidDukPbsJvM24Q4olEZ/5jmd11B3llz6xujWtJhQHqTuE+OMsZJrdZXz+sD xn77ux5e6dLipQ== -----END CERTIFICATE-----Generated at Sun Dec 28 08:07:56 2025 by rpki-client