This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json) Hash identifier: 5SJ+0ZB5rGMe1owgr76Aioh+AZ5tWFWLa4w0J6Qvedo= Subject key identifier: 91:19:F8:8B:BD:79:54:22:A1:5A:59:2D:E2:EA:BA:0A:46:DF:B7:B1 Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c Certificate serial: 019B75C8DAE948CF52B84856897C9E2765C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft Manifest number: 0BF4 Signing time: Wed 31 Dec 2025 19:00:56 +0000 Manifest this update: Wed 31 Dec 2025 19:00:56 +0000 Manifest next update: Thu 01 Jan 2026 19:00:56 +0000 Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: OV1Rd521Uh2+3ssgkXrcDTs3qTp/8tMwGhSaZBvNzlM=) 2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c8:da:e9:48:cf:52:b8:48:56:89:7c:9e:27:65:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c Validity Not Before: Dec 31 19:00:56 2025 GMT Not After : Jan 1 19:00:56 2026 GMT Subject: CN=9119f88bbd795422a15a592de2eaba0a46dfb7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:68:1a:5b:ba:dc:e1:7f:99:d9:f5:fa:e8: 14:f4:8e:dc:2c:39:0f:48:cd:98:4b:13:1d:61:bc: 39:22:a9:70:3d:9b:9d:5b:98:69:92:58:fb:8e:ac: e4:5d:16:d3:10:3f:5c:5a:6c:16:ef:b5:ea:f5:a2: 7c:e1:2f:d8:e3:ae:7c:d8:6e:64:89:58:d1:a7:54: 5e:93:df:4a:6f:83:c8:82:72:c9:4c:e3:aa:1b:65: 20:94:e7:85:f1:77:87:7d:1a:2c:a9:af:f6:35:3c: 8b:0b:1d:1d:25:a8:3c:2d:38:ee:c1:5d:50:70:c1: b0:bb:81:7e:7f:f9:f5:c6:ef:02:47:38:ea:51:42: 23:b4:c2:7c:aa:85:16:5d:7d:a7:82:96:91:18:6d: d7:d3:25:c4:e6:90:f8:e4:e2:fb:f5:cb:27:b5:c2: 56:05:b8:de:a9:e1:a5:db:6f:f0:03:7a:2c:31:ab: 47:03:42:78:eb:2e:31:46:d6:da:07:6e:56:07:54: de:bd:73:48:64:48:ed:be:76:b8:30:39:69:d2:8b: ed:21:01:28:c5:0e:2f:51:f3:63:0e:43:68:b1:87: 5b:a3:12:b8:2a:c9:f3:3a:58:f5:b6:05:81:b8:39: 79:51:7e:76:24:d5:60:ce:f5:d1:7b:ed:f6:44:69: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:19:F8:8B:BD:79:54:22:A1:5A:59:2D:E2:EA:BA:0A:46:DF:B7:B1 X509v3 Authority Key Identifier: keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:67:7b:ea:ab:64:51:f6:e4:1d:04:e6:19:0a:9c:f2:a7:39: 13:f9:c5:a4:01:56:e4:f5:19:93:b8:5b:cb:c6:2f:a8:ea:79: 24:73:4d:e1:8f:b5:32:42:d6:bf:47:f0:69:84:ad:06:9c:ee: 20:b6:fe:e5:b5:ef:2e:52:83:e7:0f:82:d2:b0:7d:68:3e:d7: 45:3e:64:19:93:56:1e:d6:d9:7f:89:c5:c7:0a:e0:36:cd:8b: df:05:ba:d2:46:fc:fa:bd:0b:f8:3a:65:5b:b9:49:19:75:dd: 0c:11:6a:63:48:c2:ba:3a:9d:61:9f:79:d4:6f:6e:dd:d0:f0: 77:1b:c5:a0:b8:23:59:32:71:43:59:86:de:84:c5:f9:26:12: c2:95:ca:be:28:11:34:18:85:ed:60:66:ca:ee:9d:56:75:91: 8f:d8:75:e1:48:1d:ad:dd:f9:bc:02:5b:07:be:33:be:e4:d7: ce:61:7e:d9:e3:cb:01:5f:7b:e4:ea:5b:eb:4b:bf:27:06:f0: 9e:e7:eb:36:e2:72:5c:b0:9b:c2:90:74:12:bf:a4:3f:84:9d: 84:8c:45:31:e2:c7:64:38:78:cb:7e:32:8f:7a:2c:44:ff:3a: 3c:51:db:8e:16:1e:5e:ae:fc:16:b0:89:81:d8:2c:4a:09:8e: df:da:33:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1yNrpSM9SuEhWiXyeJ2XHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDA4OWE3MTQ4YjI2MWEwNTllNjY2ZmViYTU5ZjkyYTI2 OGMxNmMwHhcNMjUxMjMxMTkwMDU2WhcNMjYwMTAxMTkwMDU2WjAzMTEwLwYDVQQD Eyg5MTE5Zjg4YmJkNzk1NDIyYTE1YTU5MmRlMmVhYmEwYTQ2ZGZiN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqploGlu63OF/mdn1+ugU9I7cLDkP SM2YSxMdYbw5IqlwPZudW5hpklj7jqzkXRbTED9cWmwW77Xq9aJ84S/Y46582G5k iVjRp1Rek99Kb4PIgnLJTOOqG2UglOeF8XeHfRosqa/2NTyLCx0dJag8LTjuwV1Q cMGwu4F+f/n1xu8CRzjqUUIjtMJ8qoUWXX2ngpaRGG3X0yXE5pD45OL79csntcJW BbjeqeGl22/wA3osMatHA0J46y4xRtbaB25WB1TevXNIZEjtvna4MDlp0ovtIQEo xQ4vUfNjDkNosYdboxK4KsnzOlj1tgWBuDl5UX52JNVgzvXRe+32RGk+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEZ+Iu9eVQioVpZLeLqugpG37exMB8GA1UdIwQY MBaAFAXQiacUiyYaBZ5mb+uln5KiaMFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEt MWVhYTNmMjJkZjUyLzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEtMWVhYTNmMjJkZjUy LzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWd76qtk UfbkHQTmGQqc8qc5E/nFpAFW5PUZk7hby8YvqOp5JHNN4Y+1MkLWv0fwaYStBpzu ILb+5bXvLlKD5w+C0rB9aD7XRT5kGZNWHtbZf4nFxwrgNs2L3wW60kb8+r0L+Dpl W7lJGXXdDBFqY0jCujqdYZ951G9u3dDwdxvFoLgjWTJxQ1mG3oTF+SYSwpXKvigR NBiF7WBmyu6dVnWRj9h14Ugdrd35vAJbB74zvuTXzmF+2ePLAV975Opb60u/Jwbw nufrNuJyXLCbwpB0Er+kP4SdhIxFMeLHZDh4y34yj3osRP86PFHbjhYeXq78FrCJ gdgsSgmO39ozdA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:12 2025 by rpki-client