This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json) Hash identifier: 6fJcnD5WzkYpGGOf4OF0TmlyIWoo4kJ+KNacYxKcxLg= Subject key identifier: 5F:43:B4:C1:60:DB:32:64:FB:6B:A5:8D:39:EC:35:39:A0:12:EE:2C Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188 Certificate serial: 019B548660228205FCDAD3F5DD0E9D1531FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft Manifest number: 06C8 Signing time: Thu 25 Dec 2025 08:00:51 +0000 Manifest this update: Thu 25 Dec 2025 08:00:51 +0000 Manifest next update: Fri 26 Dec 2025 08:00:51 +0000 Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=) 2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: BjoAGvz1z0KGjFEH0cUy3T+U3vyb+BBOeD8pnDbFqF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:60:22:82:05:fc:da:d3:f5:dd:0e:9d:15:31:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188 Validity Not Before: Dec 25 08:00:51 2025 GMT Not After : Dec 26 08:00:51 2025 GMT Subject: CN=5f43b4c160db3264fb6ba58d39ec3539a012ee2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:ab:85:2a:ec:57:39:30:1d:5f:f3:61:b5: ef:1b:31:09:a5:b1:97:7f:4d:18:5d:fa:1e:33:0e: a9:1c:c8:69:fb:12:ab:d1:9d:89:78:e1:ac:3f:b7: 0c:8a:41:0e:47:4d:ae:01:9d:71:f4:71:9f:75:0e: c4:d4:5d:f1:59:9a:ec:7d:71:3d:d3:f8:5e:8e:10: 42:2a:25:c4:55:37:72:17:e6:56:9a:3c:b8:60:c5: 15:87:c6:a3:6b:57:90:e1:d4:8d:52:0a:ce:e5:dc: fc:87:28:99:62:ae:a0:f6:07:74:c8:d9:4b:a9:92: 0b:d5:49:a9:ae:a2:8b:07:be:3b:c2:12:18:f4:1a: 86:c0:d5:0c:5f:32:bc:da:1e:bb:91:8e:14:a7:3a: a2:7a:ba:7c:e8:c9:a5:fa:fe:a2:50:12:b1:08:44: 8b:10:7f:2b:49:a4:9c:94:e1:c0:2d:f4:5b:c0:c7: c7:18:9c:a5:ed:64:5d:b7:51:c6:f0:7d:da:d9:b7: 6a:ac:91:69:a4:12:f6:41:24:04:e5:7a:8e:f5:43: 66:94:80:a5:ba:ee:df:f4:31:dc:82:f3:9a:df:70: a2:2b:81:c1:c5:0c:cd:03:fb:18:9d:64:cd:4e:c2: 07:c9:05:b7:c7:de:c6:a8:8e:7b:9b:87:98:33:0f: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:B4:C1:60:DB:32:64:FB:6B:A5:8D:39:EC:35:39:A0:12:EE:2C X509v3 Authority Key Identifier: keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b0:f7:46:19:10:0e:d1:15:ba:20:77:d7:e9:55:c6:f3:db: 76:08:b7:20:02:1a:26:0c:62:af:71:01:ab:e5:e1:c7:7c:fb: c9:84:14:a0:57:c8:68:e4:6f:75:fd:76:a8:00:56:ed:13:da: f3:e2:be:3e:2e:d5:b5:d3:e3:4e:8e:6a:d2:58:ba:8a:a8:9d: 0d:7b:b4:69:90:25:74:b1:c1:e8:3a:f3:0c:00:45:70:a8:96: 62:54:3d:34:d7:4e:f8:ac:fa:34:9e:ed:8c:4e:2d:91:05:21: 70:a0:f7:f7:b8:83:44:61:8a:9a:04:8c:73:b2:1c:c7:32:37: 80:77:ec:97:6b:da:47:5e:7a:12:95:0c:89:4c:85:8e:d1:79: ed:77:23:81:95:87:65:96:91:1c:9f:cd:79:6a:26:b0:77:dd: 86:96:63:6d:f0:56:c4:80:54:17:86:3d:14:cc:68:b0:c7:0e: 99:e1:a8:8b:c3:cb:4c:bf:86:2d:03:44:71:0b:8f:3f:3b:3e: 9e:81:64:63:8a:44:0c:bf:29:c7:8b:e8:bc:94:4b:49:d2:a1: a9:56:e0:60:51:89:44:d7:89:12:0c:81:8b:83:9f:ee:4e:9b: eb:d5:e8:d4:78:2f:1e:64:81:2a:8a:15:e6:10:d9:39:22:23: 6c:e6:d6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhmAiggX82tP13Q6dFTH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzQ1Yjc2MzhkZTlkMmQyOTY2NTI3Y2IzNjNlMzdjMzFk NGExODgwHhcNMjUxMjI1MDgwMDUxWhcNMjUxMjI2MDgwMDUxWjAzMTEwLwYDVQQD Eyg1ZjQzYjRjMTYwZGIzMjY0ZmI2YmE1OGQzOWVjMzUzOWEwMTJlZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj6rhSrsVzkwHV/zYbXvGzEJpbGX f00YXfoeMw6pHMhp+xKr0Z2JeOGsP7cMikEOR02uAZ1x9HGfdQ7E1F3xWZrsfXE9 0/hejhBCKiXEVTdyF+ZWmjy4YMUVh8aja1eQ4dSNUgrO5dz8hyiZYq6g9gd0yNlL qZIL1UmprqKLB747whIY9BqGwNUMXzK82h67kY4Upzqierp86Mml+v6iUBKxCESL EH8rSaSclOHALfRbwMfHGJyl7WRdt1HG8H3a2bdqrJFppBL2QSQE5XqO9UNmlICl uu7f9DHcgvOa33CiK4HBxQzNA/sYnWTNTsIHyQW3x97GqI57m4eYMw9NkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9DtMFg2zJk+2uljTnsNTmgEu4sMB8GA1UdIwQY MBaAFAQ0W3Y43p0tKWZSfLNj43wx1KGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUt MjJhN2QyZTc0NTNjLzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUtMjJhN2QyZTc0NTNj LzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7D3RhkQ DtEVuiB31+lVxvPbdgi3IAIaJgxir3EBq+Xhx3z7yYQUoFfIaORvdf12qABW7RPa 8+K+Pi7VtdPjTo5q0li6iqidDXu0aZAldLHB6DrzDABFcKiWYlQ9NNdO+Kz6NJ7t jE4tkQUhcKD397iDRGGKmgSMc7IcxzI3gHfsl2vaR156EpUMiUyFjtF57XcjgZWH ZZaRHJ/NeWomsHfdhpZjbfBWxIBUF4Y9FMxosMcOmeGoi8PLTL+GLQNEcQuPPzs+ noFkY4pEDL8px4vovJRLSdKhqVbgYFGJRNeJEgyBi4Of7k6b69Xo1HgvHmSBKooV 5hDZOSIjbObWbg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:41 2025 by rpki-client