This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json) Hash identifier: 405CvIKJ7JoVaFSYxIe2ch4INSEv17n0k9lLcX/jfLo= Subject key identifier: 4E:14:4B:EA:B6:3C:65:3B:F7:14:E5:E4:BE:6C:2A:57:DA:AE:3E:01 Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9 Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9 Certificate serial: 019B503C63C6BAFFC9BE4ECB343DBB44135F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft Manifest number: 0463 Signing time: Wed 24 Dec 2025 12:01:33 +0000 Manifest this update: Wed 24 Dec 2025 12:01:33 +0000 Manifest next update: Thu 25 Dec 2025 12:01:33 +0000 Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: YzEc4idXEEzGlerXFNf1/7HMO0kc3JBrl1X4Loabx/M=) 2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:63:c6:ba:ff:c9:be:4e:cb:34:3d:bb:44:13:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9 Validity Not Before: Dec 24 12:01:33 2025 GMT Not After : Dec 25 12:01:33 2025 GMT Subject: CN=4e144beab63c653bf714e5e4be6c2a57daae3e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:12:13:23:5f:c4:29:34:50:f5:66:36:d0: 35:f2:60:76:08:7f:fc:62:97:f2:3a:69:7d:77:75: d1:5e:e6:7d:66:03:59:68:f9:6a:dd:4c:b5:14:53: ab:3a:37:20:47:b6:5e:88:de:73:58:d7:f5:5e:fd: 8f:5d:46:a3:9d:4d:40:b3:a8:e7:00:76:3c:a6:9a: 7b:42:d1:6a:79:6f:5e:c9:07:45:df:64:d0:63:42: c8:d9:47:dd:a1:76:db:75:2f:f8:e5:ce:2b:74:9b: 3b:83:af:da:6c:04:5b:7c:cb:4c:e2:19:54:77:ba: 5c:9e:32:6c:86:d8:04:80:4b:38:5c:2c:2e:0e:db: 16:49:af:09:00:da:5a:f8:00:48:85:57:cb:66:d3: 3e:df:cd:e8:bd:76:97:04:2d:a0:9d:e9:db:b0:9b: d8:8d:b8:5b:c0:96:95:4a:71:b6:af:71:75:aa:d7: 9b:2c:e8:5c:65:9d:a7:ab:1a:c2:15:1e:49:80:1c: 6b:ed:1a:75:56:d4:3f:39:b7:64:c0:04:d4:7a:a1: 16:4c:c5:f0:4f:5f:48:01:53:b8:fc:8b:a0:db:95: e9:54:83:af:ad:82:5b:d7:45:3b:16:3f:6c:83:49: 45:ac:45:7f:2e:eb:fb:fc:fc:34:04:69:d0:77:c3: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:4B:EA:B6:3C:65:3B:F7:14:E5:E4:BE:6C:2A:57:DA:AE:3E:01 X509v3 Authority Key Identifier: keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:de:b4:51:50:2a:81:d3:9e:03:4f:ca:fe:ce:65:b7:87: f5:68:e2:10:8d:86:90:24:dd:03:c8:c6:46:fc:45:72:35:47: ab:4c:4d:f6:a1:23:5d:76:19:5f:cf:46:72:12:5f:87:6e:aa: 55:cd:9a:7e:68:76:f3:9b:e4:0a:fc:91:ff:e9:96:6b:34:43: ed:0c:09:3d:a0:f9:0c:a5:e8:b8:bb:71:09:67:ff:d0:3e:dd: 77:f0:10:0e:5f:67:e1:76:b6:8a:60:2e:d2:db:b4:46:d9:74: f5:30:7a:af:01:6e:3f:ce:ab:0f:bc:82:c2:6f:46:c5:12:40: d2:76:02:3f:5b:89:6d:4a:d6:17:bc:8f:5a:2f:9d:b9:fe:95: 2a:8b:bb:95:7d:c7:b9:70:3a:55:72:c3:75:d7:bb:c0:3d:70: c3:18:f0:72:d7:f1:fe:af:69:d6:2b:66:ac:80:79:73:0b:6e: 83:a4:90:e2:86:9d:b1:c9:b1:26:03:0b:44:8c:43:40:ca:53: 3a:3b:7f:04:ba:a5:d3:58:f6:fc:c5:a4:41:01:f1:f2:40:87: ec:9e:e7:53:77:86:53:bf:05:2d:34:7d:d2:01:57:d4:c7:71: 3b:52:d0:c2:df:9c:83:cd:87:05:95:f0:d8:ad:ff:eb:5b:0f: 7f:5c:7c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPGPGuv/Jvk7LND27RBNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MTYwN2E4NjhkYWY0ODQ2MjQ1ZjNjOGJiZjllYmU3Njk4 MjlhZDkwHhcNMjUxMjI0MTIwMTMzWhcNMjUxMjI1MTIwMTMzWjAzMTEwLwYDVQQD Eyg0ZTE0NGJlYWI2M2M2NTNiZjcxNGU1ZTRiZTZjMmE1N2RhYWUzZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrISEyNfxCk0UPVmNtA18mB2CH/8 YpfyOml9d3XRXuZ9ZgNZaPlq3Uy1FFOrOjcgR7ZeiN5zWNf1Xv2PXUajnU1As6jn AHY8ppp7QtFqeW9eyQdF32TQY0LI2UfdoXbbdS/45c4rdJs7g6/abARbfMtM4hlU d7pcnjJshtgEgEs4XCwuDtsWSa8JANpa+ABIhVfLZtM+383ovXaXBC2gnenbsJvY jbhbwJaVSnG2r3F1qtebLOhcZZ2nqxrCFR5JgBxr7Rp1VtQ/ObdkwATUeqEWTMXw T19IAVO4/Iug25XpVIOvrYJb10U7Fj9sg0lFrEV/Luv7/Pw0BGnQd8MHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4US+q2PGU79xTl5L5sKlfarj4BMB8GA1UdIwQY MBaAFAUWB6ho2vSEYkXzyLv56+dpgprZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEt NzJjZmRhYTk1OWEyLzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEtNzJjZmRhYTk1OWEy LzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED/etFFQ KoHTngNPyv7OZbeH9WjiEI2GkCTdA8jGRvxFcjVHq0xN9qEjXXYZX89GchJfh26q Vc2afmh285vkCvyR/+mWazRD7QwJPaD5DKXouLtxCWf/0D7dd/AQDl9n4Xa2imAu 0tu0Rtl09TB6rwFuP86rD7yCwm9GxRJA0nYCP1uJbUrWF7yPWi+duf6VKou7lX3H uXA6VXLDdde7wD1wwxjwctfx/q9p1itmrIB5cwtug6SQ4oadscmxJgMLRIxDQMpT Ojt/BLql01j2/MWkQQHx8kCH7J7nU3eGU78FLTR90gFX1MdxO1LQwt+cg82HBZXw 2K3/61sPf1x8Ng== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:07 2025 by rpki-client