This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft File: BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json) Hash identifier: sq+gXQEFChrS+UL4MhrPioq9tgNswG4qOrsjwHgwITg= Subject key identifier: 0D:09:67:B8:02:F0:B9:AC:C7:7B:EF:02:2B:1B:3E:DF:10:6B:F4:70 Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654 Certificate serial: 019B5D1BB27361779D143252AA2001B25EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft Manifest number: 17A0 Signing time: Sat 27 Dec 2025 00:00:54 +0000 Manifest this update: Sat 27 Dec 2025 00:00:54 +0000 Manifest next update: Sun 28 Dec 2025 00:00:54 +0000 Files and hashes: 1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=) 2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=) 3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: 2MGYP8msnJxUDogfsDUrmyDUL9l8Sw9OgiEKbs3+Iys=) 4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=) 5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:b2:73:61:77:9d:14:32:52:aa:20:01:b2:5e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Validity Not Before: Dec 27 00:00:54 2025 GMT Not After : Dec 28 00:00:54 2025 GMT Subject: CN=0d0967b802f0b9acc77bef022b1b3edf106bf470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:43:f0:43:3a:99:f3:4d:ff:db:94:69:5f: 61:9e:f3:55:67:43:88:f3:3a:eb:dc:04:e6:9d:dc: 5d:f0:57:58:e5:a6:aa:17:13:27:e2:91:35:5b:48: 31:c6:36:aa:76:cf:d1:13:ae:af:ff:e2:b1:a4:fa: 27:dc:e9:5a:d5:79:f6:2e:30:98:2b:00:e7:19:0b: 27:aa:02:b8:e4:aa:4d:e4:16:e0:92:57:1b:92:de: 27:40:54:e2:b2:f4:a5:41:d0:06:94:90:56:36:00: e8:56:03:97:73:92:10:d9:1d:ae:26:43:9b:0f:bf: 98:4f:05:eb:b2:11:06:bc:ec:3f:c8:cb:75:ff:c1: 33:da:7d:94:a2:4d:50:8a:88:7b:66:d3:fd:69:23: f3:39:4b:25:f3:12:23:a1:b9:06:98:ff:e7:5c:38: 31:20:ed:bb:5a:6a:08:fd:a0:3d:68:38:09:57:5a: 06:b5:48:45:09:1c:ed:26:4c:85:4a:b1:78:bc:a5: 18:f2:c7:e1:fe:4b:4b:93:50:7f:f5:27:cb:28:9e: 7c:89:2a:72:94:11:6d:bb:2b:16:7d:06:60:84:b8: 91:a5:b3:0f:8e:6f:f3:dc:05:8d:22:61:a0:81:90: ff:e6:7f:71:c2:61:cb:18:b2:36:af:db:74:05:ba: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:67:B8:02:F0:B9:AC:C7:7B:EF:02:2B:1B:3E:DF:10:6B:F4:70 X509v3 Authority Key Identifier: keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8d:81:55:6e:be:57:7c:f4:d0:08:22:6a:79:2b:6f:a8:86: f9:0a:0a:51:e5:bd:e7:55:4f:b5:0d:fb:7b:18:40:70:2f:f6: cc:71:08:db:60:0e:0d:cd:50:9b:34:d0:9b:62:9d:9c:ef:16: 9b:d1:2d:fc:e3:7e:ce:69:8d:22:6e:45:42:2f:45:12:25:4a: c8:79:ab:37:06:1b:fa:cf:c7:6d:bc:f3:96:ba:f8:49:15:3a: 72:68:d8:1f:91:ef:0f:8d:cf:8f:8f:7f:87:20:30:1e:bf:20: 92:b4:06:a9:89:17:45:04:2a:29:6d:a2:34:91:10:96:18:55: ab:5c:3f:eb:d2:80:c8:96:a0:8e:8c:4b:ae:af:8b:f9:6e:e9: 8a:8d:06:b4:87:e4:61:36:22:8d:65:43:4b:46:73:4b:92:0f: 71:7d:ce:8b:86:07:2b:66:34:1b:f1:65:d4:db:1f:fd:7b:1b: 96:50:2a:b9:82:22:0f:88:0a:44:63:af:ca:0a:f2:c4:17:5a: cd:52:7d:48:ce:91:2d:77:87:ba:eb:6f:68:2a:25:13:1a:c8: 74:5f:14:1a:cc:3b:22:db:ea:bf:4c:7e:86:90:97:c6:0c:89: 1d:0a:f1:a3:06:52:98:91:b0:6d:fc:f3:f9:d5:b9:a2:f4:79: 7a:9b:dc:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG7JzYXedFDJSqiABsl7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2 MjE2NTQwHhcNMjUxMjI3MDAwMDU0WhcNMjUxMjI4MDAwMDU0WjAzMTEwLwYDVQQD EygwZDA5NjdiODAyZjBiOWFjYzc3YmVmMDIyYjFiM2VkZjEwNmJmNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eVD8EM6mfNN/9uUaV9hnvNVZ0OI 8zrr3ATmndxd8FdY5aaqFxMn4pE1W0gxxjaqds/RE66v/+KxpPon3Ola1Xn2LjCY KwDnGQsnqgK45KpN5Bbgklcbkt4nQFTisvSlQdAGlJBWNgDoVgOXc5IQ2R2uJkOb D7+YTwXrshEGvOw/yMt1/8Ez2n2Uok1Qioh7ZtP9aSPzOUsl8xIjobkGmP/nXDgx IO27WmoI/aA9aDgJV1oGtUhFCRztJkyFSrF4vKUY8sfh/ktLk1B/9SfLKJ58iSpy lBFtuysWfQZghLiRpbMPjm/z3AWNImGggZD/5n9xwmHLGLI2r9t0BbpoFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0JZ7gC8Lmsx3vvAisbPt8Qa/RwMB8GA1UdIwQY MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL42BVW6+ V3z00Agiankrb6iG+QoKUeW951VPtQ37exhAcC/2zHEI22AODc1QmzTQm2KdnO8W m9Et/ON+zmmNIm5FQi9FEiVKyHmrNwYb+s/Hbbzzlrr4SRU6cmjYH5HvD43Pj49/ hyAwHr8gkrQGqYkXRQQqKW2iNJEQlhhVq1w/69KAyJagjoxLrq+L+W7pio0GtIfk YTYijWVDS0ZzS5IPcX3Oi4YHK2Y0G/Fl1Nsf/XsbllAquYIiD4gKRGOvygryxBda zVJ9SM6RLXeHuutvaColExrIdF8UGsw7Itvqv0x+hpCXxgyJHQrxowZSmJGwbfzz +dW5ovR5epvcOA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:20 2025 by rpki-client