This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: KPcL0Rfq6CHpfpuPtafO43tporAhXw0fdM7Ikdz5diE= Subject key identifier: 7C:B5:0F:55:76:15:BF:58:A1:6F:F2:CE:E6:CB:8C:4C:50:63:76:D6 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B38D8628C2E4E1EBF377309D98732BEC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 14E8 Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 4: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 5: BHwETxfxAG-FlW-2gR2swtW8f54.roa (hash: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=) 6: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: I1fA53I+3Icb3UYvfUHEQ071RyEsQkni/BDOzP1IC14=) 7: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 8: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 9: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 10: I1g6JGBc_MuJczCMQ8_G_2Vo12E.roa (hash: yhGATvC9gpwxKIKN67R79qmS2M3ypkmjHOCyPAuC254=) 11: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 12: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 13: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (hash: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=) 14: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 15: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 16: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zbvJrdPshbotPQyPGnFnidcK6wA.roa (hash: 4V/PSIA+oGiJgsqfMgOIzGTlXqlzWiAeWsYU/BgGl/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:62:8c:2e:4e:1e:bf:37:73:09:d9:87:32:be:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=7cb50f557615bf58a16ff2cee6cb8c4c506376d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:5c:2b:91:c2:df:99:34:a7:ce:59:f8:ad: 9f:8d:81:35:af:c1:57:df:f5:df:e6:dd:49:80:12: 76:ec:5e:2f:7d:b5:06:d7:47:11:80:ec:16:fc:ad: a8:78:3b:39:e3:1d:8d:2c:30:da:5a:95:5f:c4:3c: a9:e4:b1:57:3d:b3:80:8b:d8:8a:a0:6b:67:e6:c7: d4:c0:45:d4:88:74:ba:9b:fd:89:e7:e5:9c:87:07: cb:50:0d:31:bd:e6:5a:ec:f0:f3:2e:56:3b:ae:a6: 8c:76:bf:bc:21:ab:ed:42:02:39:16:80:6e:e1:75: bd:be:2f:93:9d:67:e9:78:a6:28:3f:22:8b:ec:a8: 2f:1d:75:1d:b3:b9:24:e3:28:e3:b5:bc:7d:24:e9: 8f:37:dd:3a:a8:1a:09:3c:da:61:0d:16:71:92:c3: 87:01:5c:b2:02:54:b7:95:75:b1:61:67:19:40:cf: dd:e9:34:3a:9d:11:22:9c:8b:9c:88:1f:4e:20:c4: 92:99:ee:bd:82:fb:fd:fb:88:c1:ea:4c:7d:b9:06: 44:74:00:5d:bb:76:06:c6:a9:73:86:9c:69:2a:14: e8:eb:62:6b:cd:1c:ab:25:ff:cc:96:ce:e5:24:88: f9:f0:81:cc:db:a4:87:07:84:c6:f4:b6:3f:43:7c: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B5:0F:55:76:15:BF:58:A1:6F:F2:CE:E6:CB:8C:4C:50:63:76:D6 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9e:7f:f4:03:e3:cf:9f:9c:5b:16:5a:73:af:f8:07:c2:36: 5e:a5:f0:4c:4f:55:95:02:15:aa:f3:ff:0b:ec:8d:c0:21:74: d6:15:58:97:c8:7e:d3:08:55:5b:b2:c0:e8:ed:07:1e:01:5a: ef:8a:01:45:af:5f:14:1f:3f:6c:b2:08:7f:40:05:c5:9d:7c: f4:9b:1b:fc:b9:8e:26:55:57:65:48:21:ee:0c:f5:93:59:d6: 48:d0:6b:ae:33:85:f7:0e:fb:22:e2:25:6f:31:03:1f:03:a9: c5:72:f6:d8:f6:78:e3:7f:88:28:00:19:4b:a2:a6:87:77:a4: bc:ba:63:83:18:7f:5e:ac:73:f1:aa:15:ff:15:7f:e9:ac:cb: 3c:e5:96:48:cd:38:98:97:54:35:16:80:c5:54:9d:11:89:7e: 53:0d:e2:95:ed:2d:84:51:f5:0f:b2:28:8d:fc:3d:74:b0:14: b2:e0:75:3e:07:9d:fc:78:05:34:e4:1f:15:c5:2a:17:be:12: e1:2f:e6:61:1a:a5:43:a2:d1:f3:58:36:25:c4:d6:27:c5:eb: 56:22:78:24:e2:8a:61:1e:45:43:38:35:64:64:f7:c4:e0:d1: fe:7f:af:ac:cc:fb:dc:8a:db:9c:96:73:c6:94:e1:b1:0a:8e: 4b:3e:51:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GKMLk4evzdzCdmHMr7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD Eyg3Y2I1MGY1NTc2MTViZjU4YTE2ZmYyY2VlNmNiOGM0YzUwNjM3NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RBcK5HC35k0p85Z+K2fjYE1r8FX 3/Xf5t1JgBJ27F4vfbUG10cRgOwW/K2oeDs54x2NLDDaWpVfxDyp5LFXPbOAi9iK oGtn5sfUwEXUiHS6m/2J5+WchwfLUA0xveZa7PDzLlY7rqaMdr+8IavtQgI5FoBu 4XW9vi+TnWfpeKYoPyKL7KgvHXUds7kk4yjjtbx9JOmPN906qBoJPNphDRZxksOH AVyyAlS3lXWxYWcZQM/d6TQ6nREinIuciB9OIMSSme69gvv9+4jB6kx9uQZEdABd u3YGxqlzhpxpKhTo62JrzRyrJf/Mls7lJIj58IHM26SHB4TG9LY/Q3zBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy1D1V2Fb9YoW/yzubLjExQY3bWMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ5/9APj z5+cWxZac6/4B8I2XqXwTE9VlQIVqvP/C+yNwCF01hVYl8h+0whVW7LA6O0HHgFa 74oBRa9fFB8/bLIIf0AFxZ189Jsb/LmOJlVXZUgh7gz1k1nWSNBrrjOF9w77IuIl bzEDHwOpxXL22PZ443+IKAAZS6Kmh3ekvLpjgxh/Xqxz8aoV/xV/6azLPOWWSM04 mJdUNRaAxVSdEYl+Uw3ile0thFH1D7Iojfw9dLAUsuB1Pged/HgFNOQfFcUqF74S 4S/mYRqlQ6LR81g2JcTWJ8XrViJ4JOKKYR5FQzg1ZGT3xODR/n+vrMz73IrbnJZz xpThsQqOSz5RPg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:32 2025 by rpki-client