This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json) Hash identifier: R0vCspY/VzGGpDqA+Vikbg6AH3o6efKf+ESxi0N1bJc= Subject key identifier: 16:05:CA:81:E3:1B:A3:C0:61:75:75:AC:2E:67:04:58:27:90:33:FC Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4 Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4 Certificate serial: 019B4437FD6800ABAC63B0703A9A302B81CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft Manifest number: 145D Signing time: Mon 22 Dec 2025 04:01:18 +0000 Manifest this update: Mon 22 Dec 2025 04:01:18 +0000 Manifest next update: Tue 23 Dec 2025 04:01:18 +0000 Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: fTnHw5jyLxkg9eveGy0q6EpfTr1k6QErLCtYTHvD3qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:fd:68:00:ab:ac:63:b0:70:3a:9a:30:2b:81:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4 Validity Not Before: Dec 22 04:01:18 2025 GMT Not After : Dec 23 04:01:18 2025 GMT Subject: CN=1605ca81e31ba3c0617575ac2e670458279033fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:a7:b2:6e:53:18:bc:c3:17:48:84:9a:2b: 54:fb:2c:17:ba:88:16:b9:86:c5:75:33:fb:a1:67: 5f:cf:57:07:dd:1d:d9:d4:05:43:28:9a:28:e4:9f: 2e:59:e6:2d:2b:2c:25:ea:fe:be:b2:8b:4a:df:67: 1d:67:49:5e:f5:31:e6:15:56:39:94:09:17:63:75: e4:ee:a8:a7:af:73:1b:a8:b7:45:af:49:91:71:25: f0:f4:81:be:03:a8:1a:f3:dd:b9:d5:f4:0a:b6:06: ec:4b:78:c4:50:44:51:98:ea:5b:87:26:73:77:0f: 01:2f:66:17:69:e1:86:89:0a:7f:2c:36:ad:b8:08: 1f:21:b1:08:fd:d4:2d:c3:2f:c5:35:4f:45:c9:57: 1c:f1:97:ce:ff:34:68:6c:9f:8c:eb:3c:14:24:df: 83:d0:b2:7a:32:40:d8:5c:ed:70:bc:b8:ad:29:0d: 50:a5:79:13:0d:a1:d4:49:d8:d8:a5:3b:b4:26:0c: e5:9b:11:3d:87:f1:10:7b:06:b8:45:a7:ff:11:53: 32:22:79:f1:0f:05:a6:42:18:a6:f4:e1:84:8c:bd: 90:5a:5f:20:f8:9a:36:7e:97:8b:0a:69:12:9f:d2: e4:a8:c5:3b:c3:e9:6a:94:1e:81:f8:28:ac:0d:60: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:CA:81:E3:1B:A3:C0:61:75:75:AC:2E:67:04:58:27:90:33:FC X509v3 Authority Key Identifier: keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:86:1e:aa:50:b9:07:4e:fc:62:68:24:a5:66:83:9e:a1:ed: 39:f7:f7:51:f5:18:f2:4c:9b:85:78:1a:c2:db:2b:5f:83:03: 49:a7:c0:65:2e:53:1a:c9:f1:35:c8:d6:3f:e4:c3:cf:ba:b6: aa:43:f8:46:70:8a:19:33:c8:3f:ba:39:40:89:a2:cb:05:7a: e5:e0:53:43:52:bf:57:8c:90:15:ce:29:92:c8:ff:e6:84:da: d6:b6:a4:15:9c:c2:d0:e1:b4:86:ae:d5:1a:2c:e5:1a:43:f9: ae:a3:1f:1a:ad:30:81:48:b1:4c:14:89:1f:db:9f:6f:25:c5: c0:e0:71:72:f3:52:7b:43:6a:5d:9b:da:b1:77:ee:87:c2:15: 81:57:25:4f:09:db:9d:14:3c:ac:2f:45:e9:32:0d:89:8d:9d: a8:74:da:a5:fe:68:4c:8e:e8:0b:15:93:23:34:35:81:1d:18: 8e:f7:dd:35:22:80:05:cc:30:cd:93:52:78:01:92:0b:5a:51: 33:46:ef:00:a3:ea:89:e1:d0:30:cb:98:08:9f:d8:9e:d8:5d: ce:8a:cf:47:90:9c:77:2b:88:6f:04:ab:e7:92:2b:f8:f1:f9: d8:2e:d4:dd:c3:c2:e3:5c:0f:73:59:b7:ae:9d:5e:cd:16:dc: 18:ab:7f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/1oAKusY7BwOpowK4HMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NmJhMjA5YzUwYzAyYTg1OGI1NDMwOGM4MmFlNWJmMzAy ZWZhYTQwHhcNMjUxMjIyMDQwMTE4WhcNMjUxMjIzMDQwMTE4WjAzMTEwLwYDVQQD EygxNjA1Y2E4MWUzMWJhM2MwNjE3NTc1YWMyZTY3MDQ1ODI3OTAzM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB+nsm5TGLzDF0iEmitU+ywXuogW uYbFdTP7oWdfz1cH3R3Z1AVDKJoo5J8uWeYtKywl6v6+sotK32cdZ0le9THmFVY5 lAkXY3Xk7qinr3MbqLdFr0mRcSXw9IG+A6ga89251fQKtgbsS3jEUERRmOpbhyZz dw8BL2YXaeGGiQp/LDatuAgfIbEI/dQtwy/FNU9FyVcc8ZfO/zRobJ+M6zwUJN+D 0LJ6MkDYXO1wvLitKQ1QpXkTDaHUSdjYpTu0JgzlmxE9h/EQewa4Raf/EVMyInnx DwWmQhim9OGEjL2QWl8g+Jo2fpeLCmkSn9LkqMU7w+lqlB6B+CisDWAtXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYFyoHjG6PAYXV1rC5nBFgnkDP8MB8GA1UdIwQY MBaAFAZrognFDAKoWLVDCMgq5b8wLvqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYt OTNmZmVjNWMzYzgxLzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYtOTNmZmVjNWMzYzgx LzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYYeqlC5 B078YmgkpWaDnqHtOff3UfUY8kybhXgawtsrX4MDSafAZS5TGsnxNcjWP+TDz7q2 qkP4RnCKGTPIP7o5QImiywV65eBTQ1K/V4yQFc4pksj/5oTa1rakFZzC0OG0hq7V GizlGkP5rqMfGq0wgUixTBSJH9ufbyXFwOBxcvNSe0NqXZvasXfuh8IVgVclTwnb nRQ8rC9F6TINiY2dqHTapf5oTI7oCxWTIzQ1gR0YjvfdNSKABcwwzZNSeAGSC1pR M0bvAKPqieHQMMuYCJ/YnthdzorPR5CcdyuIbwSr55Ir+PH52C7U3cPC41wPc1m3 rp1ezRbcGKt/dQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:20 2025 by rpki-client