This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: OIeRkRBkszQ4VsVxEOWgVT3cY4RBO83t+JGXaP0cdPQ= Subject key identifier: 98:CD:5B:0F:99:8E:EB:27:FC:F7:E7:BB:AB:3A:8D:1D:F0:89:74:FE Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B4A39F35A9C8775B9B9CECB03FFB2C0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 14F1 Signing time: Tue 23 Dec 2025 08:01:10 +0000 Manifest this update: Tue 23 Dec 2025 08:01:10 +0000 Manifest next update: Wed 24 Dec 2025 08:01:10 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 4: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 5: BHwETxfxAG-FlW-2gR2swtW8f54.roa (hash: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=) 6: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: FTW3oTtbDh8p2a14uqO/NajmTFQT+LVR79kwE8fUpTY=) 7: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 8: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 9: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 10: I1g6JGBc_MuJczCMQ8_G_2Vo12E.roa (hash: yhGATvC9gpwxKIKN67R79qmS2M3ypkmjHOCyPAuC254=) 11: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 12: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 13: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (hash: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=) 14: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 15: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 16: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zbvJrdPshbotPQyPGnFnidcK6wA.roa (hash: 4V/PSIA+oGiJgsqfMgOIzGTlXqlzWiAeWsYU/BgGl/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:f3:5a:9c:87:75:b9:b9:ce:cb:03:ff:b2:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Dec 23 08:01:10 2025 GMT Not After : Dec 24 08:01:10 2025 GMT Subject: CN=98cd5b0f998eeb27fcf7e7bbab3a8d1df08974fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:93:3d:0e:e0:a0:35:5e:d3:35:ab:46:90: 45:26:6e:d7:c3:37:7d:8b:7c:c5:4c:83:98:96:ca: 45:2d:af:4e:8c:11:af:d3:25:f6:05:62:29:e9:33: ac:31:f5:c9:61:f8:95:3d:e3:43:8f:2f:49:e3:8b: 41:64:fa:23:9b:18:72:e8:b7:ad:38:d5:86:1e:7e: 36:5b:83:b1:77:79:fb:35:eb:17:32:7a:d9:ff:49: 66:c2:9e:ed:b7:c3:0d:3f:88:b2:b9:14:da:7d:ae: 5d:d9:87:ba:64:b9:61:a4:ab:cb:ac:1c:b0:40:f1: f8:75:1e:57:4c:f0:d2:e9:16:59:a8:34:98:ff:18: 5d:6b:51:6b:42:a2:55:55:94:d4:14:39:fc:64:81: 80:41:37:a1:4a:78:9e:2b:1e:e2:6b:f2:da:34:f7: 9b:61:bc:3d:94:57:4a:70:57:55:d3:01:20:cc:9c: 39:cc:ee:2a:b2:3a:83:ab:a0:05:fb:f3:91:bb:b8: 87:5a:1b:b3:6c:f8:6d:9c:2e:99:88:bc:fb:c7:a1: a6:d5:58:55:61:25:54:3a:9e:14:89:a4:4b:cb:a1: ad:60:67:04:32:6e:03:0a:41:1c:f0:88:83:fb:e6: 85:5a:96:fe:46:47:98:69:c3:0d:c2:15:e1:f0:a2: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:5B:0F:99:8E:EB:27:FC:F7:E7:BB:AB:3A:8D:1D:F0:89:74:FE X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0e:40:a4:53:e4:85:24:0d:33:92:23:28:40:80:71:c7:67: 54:7c:3f:f3:7a:0c:f9:26:b8:a1:f8:04:02:7a:84:21:7d:63: d3:5a:c5:15:1a:7e:38:2c:d6:8d:82:d2:dd:d3:02:ee:bd:cd: 2f:55:36:81:f7:63:69:1f:99:dd:73:63:49:16:18:87:46:74: 31:7e:0e:01:e6:be:e7:56:1f:30:7c:56:58:b7:f1:02:e0:ae: 0e:13:91:a6:0b:05:8c:a6:d2:80:94:bd:95:d2:d9:d2:2f:8d: 2a:25:4f:da:bb:8f:13:73:be:b8:54:0d:05:40:6d:18:23:4e: de:56:aa:a8:0f:be:89:9e:15:d8:56:10:2d:df:7c:8c:59:95: a9:d9:ff:87:22:8f:b2:f2:25:0d:0b:a6:b8:07:df:bb:bc:b4: 73:a5:e6:76:d3:9c:b6:38:82:37:9e:98:c7:db:46:fe:2b:fe: 17:73:ae:d6:a4:59:fa:70:f7:8c:09:54:54:68:7e:db:55:83: e6:ae:df:7b:00:9e:2b:e7:8e:d0:a3:8b:34:09:1e:f3:f9:ec: 3a:ff:d4:05:8c:66:a6:08:c0:05:86:1c:8f:75:9b:0a:1d:74: 10:4a:ad:78:8e:7a:fa:3e:ee:29:a7:ce:c0:71:51:fc:6c:df: a4:61:fd:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOfNanId1ubnOywP/ssDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUxMjIzMDgwMTEwWhcNMjUxMjI0MDgwMTEwWjAzMTEwLwYDVQQD Eyg5OGNkNWIwZjk5OGVlYjI3ZmNmN2U3YmJhYjNhOGQxZGYwODk3NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaKTPQ7goDVe0zWrRpBFJm7Xwzd9 i3zFTIOYlspFLa9OjBGv0yX2BWIp6TOsMfXJYfiVPeNDjy9J44tBZPojmxhy6Let ONWGHn42W4Oxd3n7NesXMnrZ/0lmwp7tt8MNP4iyuRTafa5d2Ye6ZLlhpKvLrByw QPH4dR5XTPDS6RZZqDSY/xhda1FrQqJVVZTUFDn8ZIGAQTehSnieKx7ia/LaNPeb Ybw9lFdKcFdV0wEgzJw5zO4qsjqDq6AF+/ORu7iHWhuzbPhtnC6ZiLz7x6Gm1VhV YSVUOp4UiaRLy6GtYGcEMm4DCkEc8IiD++aFWpb+RkeYacMNwhXh8KJrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjNWw+Zjusn/Pfnu6s6jR3wiXT+MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA5ApFPk hSQNM5IjKECAccdnVHw/83oM+Sa4ofgEAnqEIX1j01rFFRp+OCzWjYLS3dMC7r3N L1U2gfdjaR+Z3XNjSRYYh0Z0MX4OAea+51YfMHxWWLfxAuCuDhORpgsFjKbSgJS9 ldLZ0i+NKiVP2ruPE3O+uFQNBUBtGCNO3laqqA++iZ4V2FYQLd98jFmVqdn/hyKP svIlDQumuAffu7y0c6XmdtOctjiCN56Yx9tG/iv+F3Ou1qRZ+nD3jAlUVGh+21WD 5q7fewCeK+eO0KOLNAke8/nsOv/UBYxmpgjABYYcj3WbCh10EEqteI56+j7uKafO wHFR/GzfpGH9gQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:17:51 2025 by rpki-client