This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json) Hash identifier: 3yDS4MzIASbndK8gDuxsPfz6YRIl0qCD/6T+rVP+ldc= Subject key identifier: 75:55:ED:7C:A6:3C:E5:4E:9A:A2:63:11:FB:B1:1A:25:33:85:F9:DC Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Certificate serial: 019B3B6BFD752BB8DBA093511C3EC86E5309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft Manifest number: 1466 Signing time: Sat 20 Dec 2025 11:01:31 +0000 Manifest this update: Sat 20 Dec 2025 11:01:31 +0000 Manifest next update: Sun 21 Dec 2025 11:01:31 +0000 Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: 82Eb9xGT1FbEZ88xXODg0YDBqrHiJvfjv9d2TczRrWw=) 2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:fd:75:2b:b8:db:a0:93:51:1c:3e:c8:6e:53:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c Validity Not Before: Dec 20 11:01:31 2025 GMT Not After : Dec 21 11:01:31 2025 GMT Subject: CN=7555ed7ca63ce54e9aa26311fbb11a253385f9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:73:b5:ac:64:1a:55:42:d4:db:ed:5a:25: 41:3b:e9:9e:d1:b5:76:fe:f1:dc:78:47:d4:5f:e8: 37:2e:d1:6b:8e:c0:d7:54:28:84:5f:92:bb:3b:46: 62:b7:d5:e7:f0:35:d0:ee:d0:19:6b:74:18:27:18: 17:fc:aa:ec:03:3d:c4:61:41:87:04:90:fa:9c:79: 01:14:38:23:a3:b2:08:dd:30:4c:bb:2d:7e:52:cd: ee:97:35:fd:10:31:55:ea:60:f5:06:1f:3e:37:fe: 91:b9:a0:00:33:a9:32:fb:2b:73:b0:a8:65:60:89: 93:fa:e1:27:1e:69:da:4c:6c:91:b1:43:ca:98:87: 16:41:67:86:1a:e4:9d:66:c5:a9:b3:99:87:97:66: b7:34:e4:63:e2:e5:5e:43:c4:41:98:23:75:da:d7: 62:0b:73:a5:fe:8e:2c:07:80:92:5c:4d:74:e2:63: 07:87:22:1c:87:26:1a:d8:74:db:a4:ad:26:11:fd: 0e:fd:25:8f:d1:1c:29:c1:86:99:c9:db:cd:ac:b8: ec:1c:1f:09:11:08:87:b2:a3:e9:b3:46:02:81:67: c2:52:3a:b9:49:68:cf:a1:f5:f8:b4:f7:48:1c:02: 95:23:e2:5d:a4:b9:7a:43:6e:67:60:bb:fd:e5:ef: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:55:ED:7C:A6:3C:E5:4E:9A:A2:63:11:FB:B1:1A:25:33:85:F9:DC X509v3 Authority Key Identifier: keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:58:0a:8f:83:0c:00:1a:30:ec:7a:d8:e5:6a:b3:76:75:19: e5:64:8e:6e:70:a5:d4:6a:89:29:d2:b2:c4:cb:fa:56:66:0e: 06:58:76:3c:d3:aa:40:aa:b0:a6:31:02:c5:bd:55:44:d2:d7: 90:0d:3a:1a:ab:d4:c1:c4:22:c5:9f:1a:d5:df:57:ca:dd:0e: f6:77:25:9a:28:e4:5a:0e:bd:6c:07:89:3c:b1:70:a3:a0:66: 3f:d0:d1:51:ee:38:b3:45:d8:ac:87:1a:1a:3c:50:1a:64:31: e1:11:e3:bc:70:c5:04:26:33:a1:47:93:2e:20:6d:7a:8a:f2: f4:11:34:1c:80:cb:13:50:74:c0:8b:15:3c:0c:88:f0:ff:ef: 93:b9:85:90:5b:cc:10:de:23:8a:cd:94:a9:bc:77:26:5b:80: 0c:98:5f:b6:2a:7a:e3:59:f4:26:b2:5f:6c:e4:19:a3:08:3d: a7:b2:dd:2c:df:3d:4a:0b:97:dc:ec:d5:80:c0:d8:d3:fd:7d: cd:3c:a6:b0:02:b9:26:13:a3:00:64:54:ff:41:e6:1a:52:be: ea:38:98:cf:c6:63:46:7e:6d:9b:96:2b:10:6e:6f:42:11:f2: ff:51:cf:15:44:3a:9a:7b:48:60:5f:01:2a:49:94:f0:9c:1e: 5d:3c:1f:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/11K7jboJNRHD7IblMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh MTY2MWMwHhcNMjUxMjIwMTEwMTMxWhcNMjUxMjIxMTEwMTMxWjAzMTEwLwYDVQQD Eyg3NTU1ZWQ3Y2E2M2NlNTRlOWFhMjYzMTFmYmIxMWEyNTMzODVmOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwpztaxkGlVC1NvtWiVBO+me0bV2 /vHceEfUX+g3LtFrjsDXVCiEX5K7O0Zit9Xn8DXQ7tAZa3QYJxgX/KrsAz3EYUGH BJD6nHkBFDgjo7II3TBMuy1+Us3ulzX9EDFV6mD1Bh8+N/6RuaAAM6ky+ytzsKhl YImT+uEnHmnaTGyRsUPKmIcWQWeGGuSdZsWps5mHl2a3NORj4uVeQ8RBmCN12tdi C3Ol/o4sB4CSXE104mMHhyIchyYa2HTbpK0mEf0O/SWP0RwpwYaZydvNrLjsHB8J EQiHsqPps0YCgWfCUjq5SWjPofX4tPdIHAKVI+JdpLl6Q25nYLv95e+bBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVV7XymPOVOmqJjEfuxGiUzhfncMB8GA1UdIwQY MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1 LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1gKj4MM ABow7HrY5WqzdnUZ5WSObnCl1GqJKdKyxMv6VmYOBlh2PNOqQKqwpjECxb1VRNLX kA06GqvUwcQixZ8a1d9Xyt0O9nclmijkWg69bAeJPLFwo6BmP9DRUe44s0XYrIca GjxQGmQx4RHjvHDFBCYzoUeTLiBteory9BE0HIDLE1B0wIsVPAyI8P/vk7mFkFvM EN4jis2Uqbx3JluADJhftip641n0JrJfbOQZowg9p7LdLN89SguX3OzVgMDY0/19 zTymsAK5JhOjAGRU/0HmGlK+6jiYz8ZjRn5tm5YrEG5vQhHy/1HPFUQ6mntIYF8B KkmU8JweXTwf7g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:45 2025 by rpki-client