This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json) Hash identifier: lR2PCYtjW5OBebGiIZ93gdwXQKr4y5EKJ822XppdmVw= Subject key identifier: C5:9A:20:F3:A9:7C:5D:65:16:45:A6:D7:0D:CE:CB:57:2F:3D:C1:B4 Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16 Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16 Certificate serial: 019B69FBAD00354919BFEE284E832B1BE1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft Manifest number: 0883 Signing time: Mon 29 Dec 2025 12:01:00 +0000 Manifest this update: Mon 29 Dec 2025 12:01:00 +0000 Manifest next update: Tue 30 Dec 2025 12:01:00 +0000 Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: a7WFfQSBoODrqnlsZQkkqgkXka9jTEXlYje2H2ZGF2c=) 2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:ad:00:35:49:19:bf:ee:28:4e:83:2b:1b:e1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16 Validity Not Before: Dec 29 12:01:00 2025 GMT Not After : Dec 30 12:01:00 2025 GMT Subject: CN=c59a20f3a97c5d651645a6d70dcecb572f3dc1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:37:de:69:f8:4c:6c:c0:c6:b0:68:9d:65: 77:c5:98:f7:ea:b3:7e:21:33:98:ff:f2:53:d8:22: 95:7f:98:d0:e2:00:c1:84:ea:14:54:4a:5d:af:95: 22:3c:5c:bc:81:97:30:b3:4b:de:6b:53:39:a2:bf: 38:b8:69:d2:36:f3:15:db:86:5f:2d:69:bc:4f:16: 27:39:8b:1a:2e:bc:35:a7:23:49:0a:d3:a4:f5:aa: 36:ef:99:7a:28:8e:09:64:d6:b3:d3:21:5d:8b:8b: 4c:00:03:2a:86:6f:01:cb:68:a3:ab:d1:d7:2a:59: 3b:bd:e1:9b:70:b2:ce:4b:87:b7:5d:9d:e6:a2:f6: 6b:44:1d:02:78:4d:47:75:ea:69:5d:3f:22:2d:94: 6c:c1:d7:69:04:78:76:54:86:fc:df:10:04:5b:17: 5b:81:4e:62:4b:a0:af:d5:bc:0d:1f:13:08:ae:14: 6c:7f:8c:6e:52:dc:ea:6c:7b:cb:1b:99:d3:60:2f: 15:25:72:f4:ba:c6:63:10:c3:42:dc:4e:f8:11:d3: 85:35:29:86:07:2f:b0:a2:26:55:73:65:0d:46:c0: 91:05:b1:0d:90:92:e4:7e:39:55:bf:c0:77:88:9e: bd:84:21:1b:05:3a:e3:7e:5e:b7:95:84:e7:18:ec: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9A:20:F3:A9:7C:5D:65:16:45:A6:D7:0D:CE:CB:57:2F:3D:C1:B4 X509v3 Authority Key Identifier: keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5a:7f:dd:19:b3:da:fe:3b:1e:de:10:75:97:91:e3:c9:fe: a8:95:81:b0:0d:7e:39:a7:1c:75:8b:ae:71:52:c3:88:25:7e: 21:d2:34:ea:26:1c:60:45:67:c7:0c:f0:19:c3:be:46:62:a1: e0:8f:96:72:7e:15:fc:5b:93:04:cd:4f:2e:4c:d5:58:b2:19: 0d:73:70:c1:d8:cb:12:0d:a9:b3:b8:9f:fc:56:ab:83:be:bf: b5:8f:3f:27:2c:74:b4:a2:20:ee:19:c7:bc:05:48:5b:52:45: 1b:06:f4:60:09:47:f6:0a:bc:f5:13:2d:6a:1f:15:2c:c4:b4: 5d:b7:23:a6:59:99:5a:dd:d2:d8:bb:79:40:89:34:4f:7e:51: ab:72:28:3f:65:1e:5f:b6:c2:cd:0f:76:ea:70:06:15:21:a2: a4:e5:d7:73:a1:38:a3:6b:db:1a:0e:57:a3:55:eb:b5:b1:2e: 00:0f:ac:ca:50:42:5e:5f:69:b6:c1:9b:e5:42:da:e7:1b:f0: f4:89:76:07:76:7e:bf:d3:5e:10:80:f8:36:51:57:28:ba:d3: 7d:49:9e:8a:67:97:cd:06:4c:77:7d:64:12:9b:fc:4c:0a:54: e0:9a:37:37:9d:75:98:9f:5d:aa:63:f0:59:4b:e9:f8:f4:76: 7c:7b:28:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+60ANUkZv+4oToMrG+GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjE2NDE4OWY3ZGI2MWU4YjYxZmRkYWU1NjIyYTBiMTM0 ZjVjMTYwHhcNMjUxMjI5MTIwMTAwWhcNMjUxMjMwMTIwMTAwWjAzMTEwLwYDVQQD EyhjNTlhMjBmM2E5N2M1ZDY1MTY0NWE2ZDcwZGNlY2I1NzJmM2RjMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuU33mn4TGzAxrBonWV3xZj36rN+ ITOY//JT2CKVf5jQ4gDBhOoUVEpdr5UiPFy8gZcws0vea1M5or84uGnSNvMV24Zf LWm8TxYnOYsaLrw1pyNJCtOk9ao275l6KI4JZNaz0yFdi4tMAAMqhm8By2ijq9HX Klk7veGbcLLOS4e3XZ3movZrRB0CeE1HdeppXT8iLZRswddpBHh2VIb83xAEWxdb gU5iS6Cv1bwNHxMIrhRsf4xuUtzqbHvLG5nTYC8VJXL0usZjEMNC3E74EdOFNSmG By+woiZVc2UNRsCRBbENkJLkfjlVv8B3iJ69hCEbBTrjfl63lYTnGOxJbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWaIPOpfF1lFkWm1w3Oy1cvPcG0MB8GA1UdIwQY MBaAFAaxZBiffbYei2H92uViKgsTT1wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYt ZmJhNjRjMjNkM2RhLzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYtZmJhNjRjMjNkM2Rh LzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1p/3Rmz 2v47Ht4QdZeR48n+qJWBsA1+OaccdYuucVLDiCV+IdI06iYcYEVnxwzwGcO+RmKh 4I+Wcn4V/FuTBM1PLkzVWLIZDXNwwdjLEg2ps7if/Farg76/tY8/Jyx0tKIg7hnH vAVIW1JFGwb0YAlH9gq89RMtah8VLMS0XbcjplmZWt3S2Lt5QIk0T35Rq3IoP2Ue X7bCzQ926nAGFSGipOXXc6E4o2vbGg5Xo1XrtbEuAA+sylBCXl9ptsGb5ULa5xvw 9Il2B3Z+v9NeEID4NlFXKLrTfUmeimeXzQZMd31kEpv8TApU4Jo3N511mJ9dqmPw WUvp+PR2fHsotw== -----END CERTIFICATE-----Generated at Mon Dec 29 18:00:31 2025 by rpki-client