This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json) Hash identifier: Tuoy46f5t/4SYaWnZXJ3USC8XNhebiDCNp/IsHKJeLQ= Subject key identifier: 02:E0:F1:66:9D:28:D4:37:20:68:83:B2:32:F7:FA:D7:EE:F8:3C:EC Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Certificate serial: 019B262D96B2E908A7059593195FB0744A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft Manifest number: 15B5 Signing time: Tue 16 Dec 2025 08:01:20 +0000 Manifest this update: Tue 16 Dec 2025 08:01:20 +0000 Manifest next update: Wed 17 Dec 2025 08:01:20 +0000 Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: TCEvZlNOLbZBktRGAyoz/21aZcMtyGns8DCNK3sBUk4=) 2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:96:b2:e9:08:a7:05:95:93:19:5f:b0:74:4a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Validity Not Before: Dec 16 08:01:20 2025 GMT Not After : Dec 17 08:01:20 2025 GMT Subject: CN=02e0f1669d28d437206883b232f7fad7eef83cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:cf:aa:70:e5:53:24:47:f7:08:dc:63:ea: 62:06:fb:92:d4:5b:1a:6b:6e:51:70:a9:63:28:41: 31:c9:2a:84:3f:27:6c:68:1d:23:f8:b5:0a:a4:a3: 67:86:45:c8:1e:55:88:28:b9:38:12:7d:56:9f:47: 38:b8:23:90:a8:7a:1d:35:4f:04:e6:ac:e1:52:17: a3:17:1d:f4:29:81:e4:34:26:6f:99:7e:8a:11:1a: 3b:20:e5:66:44:ad:04:3d:30:0a:5f:40:ae:20:6f: 2c:d0:61:2b:eb:4f:62:53:ba:27:45:bc:f9:2d:8d: 87:7e:18:ad:0d:58:8e:21:c8:be:07:d3:de:97:c5: 35:f2:a2:48:3a:69:a7:ce:78:13:79:b9:a7:04:a5: ee:35:55:04:5d:a4:b1:0f:d1:9f:cd:a4:f2:c8:0c: 01:80:50:de:ce:87:6c:4b:fe:92:e8:af:26:59:75: 66:70:ac:b0:98:f1:73:4e:d3:06:c4:42:28:8a:43: 2d:1a:93:3e:78:97:88:75:8f:04:51:e7:2f:d1:1b: fc:46:61:ff:6f:d9:a7:66:3f:8c:00:99:0e:25:95: c1:29:e8:55:f3:1a:29:4d:dc:40:be:40:ad:d3:5d: 0a:24:65:30:2d:8e:f6:72:c5:da:13:0c:e4:3e:48: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:F1:66:9D:28:D4:37:20:68:83:B2:32:F7:FA:D7:EE:F8:3C:EC X509v3 Authority Key Identifier: keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ca:95:f8:75:21:ef:69:fb:37:05:6b:c0:b8:3d:89:f5:65: ad:48:93:74:d2:04:f7:f3:8e:80:de:5f:89:0a:d8:21:d2:34: 36:7b:33:c0:84:29:cf:73:10:f7:b1:74:b1:1e:04:38:42:d0: c2:8e:8a:b5:45:29:40:96:0b:63:91:2a:f8:f0:f7:de:44:98: b9:21:ef:37:e6:8f:ed:0d:46:6a:7b:93:9d:3d:98:71:19:22: 43:35:ee:32:ee:ce:3c:a6:89:ef:ae:d8:af:81:c1:b0:e6:d8: 1d:85:21:71:b1:a5:fd:ae:a9:38:15:ff:cc:9b:75:58:dc:81: a1:6a:7f:29:0d:56:af:b1:ef:0f:bc:7f:0f:12:03:5c:f2:34: 67:a5:c4:65:8a:a7:d1:03:e4:2c:cb:bf:1e:c5:05:a0:92:1c: 69:93:ef:4b:59:91:fc:11:b8:94:d3:41:f9:b6:52:7e:c7:55: 13:60:09:37:8f:2c:ac:a4:6b:2e:bb:bf:20:a0:30:57:e4:c8: 39:b5:78:39:f6:29:87:33:c4:27:85:43:2e:98:30:e2:bb:48: 7a:cd:0c:a5:dc:3f:ec:54:32:83:81:c9:e8:8b:44:49:16:ea: 71:12:67:2c:8e:79:95:83:3f:ae:69:fd:f3:cc:9f:c0:61:76: cc:8f:6a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLZay6QinBZWTGV+wdEoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2E5YzM1ZDllMWEyZjRkMzRhNzU0ZmEyNmQyMDM2NTc4 NDcyMTgwHhcNMjUxMjE2MDgwMTIwWhcNMjUxMjE3MDgwMTIwWjAzMTEwLwYDVQQD EygwMmUwZjE2NjlkMjhkNDM3MjA2ODgzYjIzMmY3ZmFkN2VlZjgzY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+fPqnDlUyRH9wjcY+piBvuS1Fsa a25RcKljKEExySqEPydsaB0j+LUKpKNnhkXIHlWIKLk4En1Wn0c4uCOQqHodNU8E 5qzhUhejFx30KYHkNCZvmX6KERo7IOVmRK0EPTAKX0CuIG8s0GEr609iU7onRbz5 LY2HfhitDViOIci+B9Pel8U18qJIOmmnzngTebmnBKXuNVUEXaSxD9GfzaTyyAwB gFDezodsS/6S6K8mWXVmcKywmPFzTtMGxEIoikMtGpM+eJeIdY8EUecv0Rv8RmH/ b9mnZj+MAJkOJZXBKehV8xopTdxAvkCt010KJGUwLY72csXaEwzkPkgxEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALg8WadKNQ3IGiDsjL3+tfu+DzsMB8GA1UdIwQY MBaAFAQ6nDXZ4aL000p1T6JtIDZXhHIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEt ODVjYmQyMDY4ZThmLzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEtODVjYmQyMDY4ZThm LzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8qV+HUh 72n7NwVrwLg9ifVlrUiTdNIE9/OOgN5fiQrYIdI0NnszwIQpz3MQ97F0sR4EOELQ wo6KtUUpQJYLY5Eq+PD33kSYuSHvN+aP7Q1GanuTnT2YcRkiQzXuMu7OPKaJ767Y r4HBsObYHYUhcbGl/a6pOBX/zJt1WNyBoWp/KQ1Wr7HvD7x/DxIDXPI0Z6XEZYqn 0QPkLMu/HsUFoJIcaZPvS1mR/BG4lNNB+bZSfsdVE2AJN48srKRrLru/IKAwV+TI ObV4OfYphzPEJ4VDLpgw4rtIes0Mpdw/7FQyg4HJ6ItESRbqcRJnLI55lYM/rmn9 88yfwGF2zI9quA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:43:47 2025 by rpki-client