This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json) Hash identifier: 5yMd1T2JXXdN7m2+qqthMGA3YwERL6Sf1BDb0L2ZIDI= Subject key identifier: 30:02:DC:3C:F2:60:4B:40:F7:49:8E:78:20:DC:DF:B9:B0:2E:38:23 Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07 Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107 Certificate serial: 019B4EBBC60EAD796BD14DA1169055A892DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 05:01:27 +0000 Manifest this update: Wed 24 Dec 2025 05:01:27 +0000 Manifest next update: Thu 25 Dec 2025 05:01:27 +0000 Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: 0kcboazgIZ9vy4sqqfTVAx3H5/JZTwuYsOsq45mnCfs=) 2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:c6:0e:ad:79:6b:d1:4d:a1:16:90:55:a8:92:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107 Validity Not Before: Dec 24 05:01:27 2025 GMT Not After : Dec 25 05:01:27 2025 GMT Subject: CN=3002dc3cf2604b40f7498e7820dcdfb9b02e3823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:d6:c4:35:d0:a7:52:ce:6c:61:2d:91:da: 58:f4:40:48:21:0e:98:2d:dd:5f:6e:d9:c1:99:f5: 02:11:2c:84:d3:76:3a:6c:12:41:a4:c2:0d:5b:a6: 6b:fc:cd:66:0a:fe:0d:5a:80:66:3b:15:38:5d:08: f2:a5:b8:2a:94:ec:00:43:6b:32:95:9c:24:55:28: 05:45:61:d2:6a:01:af:6a:90:7a:82:83:c4:ee:1b: 63:21:6d:3d:6d:de:3b:92:cb:fc:2a:0c:28:5f:a5: f2:58:e9:99:56:b9:6e:5f:a0:f4:80:48:2d:27:4b: b3:c7:ab:40:b2:f9:7e:38:6b:e5:1e:ee:84:ac:8c: 66:30:06:17:34:2a:72:3b:7f:9a:6e:0a:98:67:ec: 04:19:62:91:41:d7:9e:72:27:b0:f0:50:5a:59:03: 40:ea:fe:76:8a:ae:f2:a7:72:e9:83:c4:f1:d6:d0: 0c:56:e7:16:50:c1:83:0f:1e:b1:09:e3:11:cf:a9: 45:be:a6:50:f3:bf:37:d6:13:2a:5d:08:5d:f6:e9: 30:e3:b6:3f:90:f1:e9:05:5a:0f:ca:0f:14:3f:45: 46:aa:c7:93:a6:c4:c9:30:c0:ce:86:23:25:12:db: 21:0e:0f:d4:3e:49:6c:7c:62:5d:8f:58:24:de:81: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:02:DC:3C:F2:60:4B:40:F7:49:8E:78:20:DC:DF:B9:B0:2E:38:23 X509v3 Authority Key Identifier: keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:84:8a:4d:43:68:e3:c7:8f:e1:b9:37:7a:c8:db:6b:33:8d: e1:4f:43:0e:a2:1e:fe:06:76:3b:22:e2:ba:ca:bc:f9:cf:f7: cb:ef:cc:97:42:f8:5d:57:44:81:eb:a6:1e:94:ef:09:c8:e7: 02:f5:0f:e5:31:8e:5d:73:87:fc:22:97:ec:36:b6:d5:5d:5e: 97:a8:8b:b5:69:b0:6b:cf:97:e9:c8:8f:9e:97:84:24:f0:c0: 35:54:6f:12:5b:bd:51:22:43:74:04:58:9a:80:b4:45:07:ff: eb:05:ee:c0:58:fb:e1:45:32:a5:00:fd:11:fc:88:38:f5:43: 23:12:45:3c:d7:67:3f:cb:dc:13:f9:ab:db:78:10:0f:4a:ac: f6:ed:d2:18:e5:71:3b:d0:4e:4e:c1:ba:0e:7b:be:77:32:bf: 52:3b:61:b3:81:28:2b:6e:a5:ea:71:bc:79:56:a1:ab:d2:a9: 02:d1:c1:38:ed:8c:a3:c8:ac:8e:d0:b1:13:b1:43:d9:bc:f6: 07:c6:8e:fd:ee:00:92:b8:2c:8f:5d:29:ad:a5:fb:e2:f2:51: f1:39:96:fc:b4:e1:fa:ed:49:f9:2d:89:70:4b:06:41:85:f5: e7:dd:25:f8:00:33:fc:6c:6f:34:c5:5e:5a:05:28:2c:ad:09: 7a:f4:64:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu8YOrXlr0U2hFpBVqJLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzczZWI4MjFjOTY2YmEyNjdhODM4ZDk1MmZjNGE0MThj YmExMDcwHhcNMjUxMjI0MDUwMTI3WhcNMjUxMjI1MDUwMTI3WjAzMTEwLwYDVQQD EygzMDAyZGMzY2YyNjA0YjQwZjc0OThlNzgyMGRjZGZiOWIwMmUzODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQPWxDXQp1LObGEtkdpY9EBIIQ6Y Ld1fbtnBmfUCESyE03Y6bBJBpMINW6Zr/M1mCv4NWoBmOxU4XQjypbgqlOwAQ2sy lZwkVSgFRWHSagGvapB6goPE7htjIW09bd47ksv8KgwoX6XyWOmZVrluX6D0gEgt J0uzx6tAsvl+OGvlHu6ErIxmMAYXNCpyO3+abgqYZ+wEGWKRQdeeciew8FBaWQNA 6v52iq7yp3Lpg8Tx1tAMVucWUMGDDx6xCeMRz6lFvqZQ87831hMqXQhd9ukw47Y/ kPHpBVoPyg8UP0VGqseTpsTJMMDOhiMlEtshDg/UPklsfGJdj1gk3oFfxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAC3DzyYEtA90mOeCDc37mwLjgjMB8GA1UdIwQY MBaAFAY3PrghyWa6JnqDjZUvxKQYy6EHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUt ZjMzZTNjNWM2NWRiLzEvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUtZjMzZTNjNWM2NWRi LzEvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZISKTUNo 48eP4bk3esjbazON4U9DDqIe/gZ2OyLiusq8+c/3y+/Ml0L4XVdEgeumHpTvCcjn AvUP5TGOXXOH/CKX7Da21V1el6iLtWmwa8+X6ciPnpeEJPDANVRvElu9USJDdARY moC0RQf/6wXuwFj74UUypQD9EfyIOPVDIxJFPNdnP8vcE/mr23gQD0qs9u3SGOVx O9BOTsG6Dnu+dzK/Ujths4EoK26l6nG8eVahq9KpAtHBOO2Mo8isjtCxE7FD2bz2 B8aO/e4Akrgsj10praX74vJR8TmW/LTh+u1J+S2JcEsGQYX1590l+AAz/GxvNMVe WgUoLK0JevRkUw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:06 2025 by rpki-client