This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json) Hash identifier: n5USY3WBi2nn8n4iOR5EblI3YQoc2cr2RX5vk/jEhK4= Subject key identifier: 29:EA:0D:56:B1:2D:43:EF:61:CE:68:A7:C6:69:19:BA:9A:C7:B6:15 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019B38D7FF0DFBA597D8FF01D770933B416B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft Manifest number: 0280 Signing time: Fri 19 Dec 2025 23:00:38 +0000 Manifest this update: Fri 19 Dec 2025 23:00:38 +0000 Manifest next update: Sat 20 Dec 2025 23:00:38 +0000 Files and hashes: 1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: pVJSBz6w/Y3gtA6Ps55ghfXyaANSkeDaW0FaD1NZP6I=) 2: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=) 3: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=) 4: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (hash: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=) 5: lf7VZmq2rsBXJedCujxEgR3JSRw.roa (hash: i4ihoqVdnAGdUVkmGd9SoSzj6rV5e9gZRKeKMlY+OMU=) 6: nUED803VQA3FQMxxixbYPvvT1fY.roa (hash: 94UVai/ELIeCASHwbPKqhrh8AQ5arAyWotHfhfl12OU=) 7: ru7w0W3lQckov7VLXi2IdFlGxc8.roa (hash: vKg9HC/GY7EtcTEA0K5g2y1Kwk8jYnfJyEo6IYPl+Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:ff:0d:fb:a5:97:d8:ff:01:d7:70:93:3b:41:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Dec 19 23:00:38 2025 GMT Not After : Dec 20 23:00:38 2025 GMT Subject: CN=29ea0d56b12d43ef61ce68a7c66919ba9ac7b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:42:6f:25:0e:c8:fc:b1:5a:92:b6:52:88: 3a:f2:39:88:0f:12:40:36:b3:d3:a4:1d:ad:68:9a: 64:70:e9:b7:6f:c1:72:b5:ae:23:2b:20:1a:d6:90: de:fa:bb:fd:39:67:5a:0b:ff:7f:0c:ab:01:a4:6e: 44:c6:f9:17:c0:42:cb:54:c9:86:d7:cf:2a:ec:3b: e1:9a:5a:58:d6:bd:ba:24:5e:9f:df:ec:b4:57:df: d8:70:19:fe:c6:38:14:39:ab:ee:12:c7:c0:f6:94: 40:29:3a:a1:0c:08:79:79:d4:4f:8a:02:8d:70:cd: f1:a4:1d:e3:56:3e:0a:98:04:57:b5:8a:bf:2e:dc: ca:ba:20:1f:54:37:5b:58:7c:23:cf:4e:75:c3:e0: e8:b2:14:a8:91:55:70:5a:d8:73:b1:8c:6f:0f:1d: 1f:2a:e2:86:24:ce:16:cc:ba:36:5c:3b:12:6b:35: 71:8c:d3:ff:ed:b3:df:d8:ec:4a:26:e1:1b:48:a1: c1:e5:4b:1b:e6:58:38:cf:ec:fd:af:3e:14:d2:2c: c3:a0:03:cf:5a:3d:27:ba:8d:e0:fa:d6:13:7f:cc: 65:a6:7c:84:f5:f0:f0:4d:66:6e:22:34:82:9f:bd: a2:b1:7c:fb:10:26:f0:13:f3:b3:07:46:dd:af:63: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:0D:56:B1:2D:43:EF:61:CE:68:A7:C6:69:19:BA:9A:C7:B6:15 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:9b:1e:41:a1:73:13:0f:9e:95:32:c1:66:ba:84:a9:d6: b7:43:6f:3a:f6:d8:75:10:20:e8:d1:fa:cd:bf:7c:23:03:f5: fb:3b:33:e1:e8:59:ed:f3:25:e6:83:c7:44:cc:0a:c8:c0:6a: 65:19:2f:c1:ff:dc:79:8a:54:0b:3d:8a:b3:be:5d:19:24:c0: 2b:14:68:7a:0a:66:90:8e:12:0b:04:7e:a3:3d:98:90:b7:a1: a3:c8:06:d2:f2:47:7d:fd:96:12:e4:02:4d:4b:9b:2c:a5:34: 8b:e1:6e:1f:54:b6:4d:5e:49:80:c0:94:09:b4:9a:74:50:12: 23:fd:a3:8f:36:f9:cc:1e:75:26:c5:69:4d:1b:a8:f1:12:8f: 00:aa:18:fc:72:84:f8:20:cf:d4:04:37:6a:2d:aa:51:f6:f2: 57:8f:f6:92:93:6c:10:5a:54:19:e0:c4:eb:65:3a:21:88:2e: b0:a5:18:90:4a:76:63:a8:01:d7:dc:2c:46:a7:49:08:fd:c5: 09:04:bb:c8:0c:4e:ed:45:4f:d2:8d:ab:72:15:90:6f:91:0b: ab:7b:73:ab:2a:3d:f7:75:71:5a:bc:01:f5:a2:43:d2:c4:a5: dd:48:24:fb:dd:f2:a8:8e:1d:d0:b9:9e:9e:80:9a:2b:70:39: db:4e:4b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/8N+6WX2P8B13CTO0FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjUxMjE5MjMwMDM4WhcNMjUxMjIwMjMwMDM4WjAzMTEwLwYDVQQD EygyOWVhMGQ1NmIxMmQ0M2VmNjFjZTY4YTdjNjY5MTliYTlhYzdiNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS5CbyUOyPyxWpK2Uog68jmIDxJA NrPTpB2taJpkcOm3b8Fyta4jKyAa1pDe+rv9OWdaC/9/DKsBpG5ExvkXwELLVMmG 188q7DvhmlpY1r26JF6f3+y0V9/YcBn+xjgUOavuEsfA9pRAKTqhDAh5edRPigKN cM3xpB3jVj4KmARXtYq/LtzKuiAfVDdbWHwjz051w+DoshSokVVwWthzsYxvDx0f KuKGJM4WzLo2XDsSazVxjNP/7bPf2OxKJuEbSKHB5Usb5lg4z+z9rz4U0izDoAPP Wj0nuo3g+tYTf8xlpnyE9fDwTWZuIjSCn72isXz7ECbwE/OzB0bdr2NA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnqDVaxLUPvYc5op8ZpGbqax7YVMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDybHkGh cxMPnpUywWa6hKnWt0NvOvbYdRAg6NH6zb98IwP1+zsz4ehZ7fMl5oPHRMwKyMBq ZRkvwf/ceYpUCz2Ks75dGSTAKxRoegpmkI4SCwR+oz2YkLeho8gG0vJHff2WEuQC TUubLKU0i+FuH1S2TV5JgMCUCbSadFASI/2jjzb5zB51JsVpTRuo8RKPAKoY/HKE +CDP1AQ3ai2qUfbyV4/2kpNsEFpUGeDE62U6IYgusKUYkEp2Y6gB19wsRqdJCP3F CQS7yAxO7UVP0o2rchWQb5ELq3tzqyo993VxWrwB9aJD0sSl3Ugk+93yqI4d0Lme noCaK3A5205LiA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:22:34 2025 by rpki-client