This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json) Hash identifier: vqOG9nsgzljcrwLpRdaEL0MI83TrFfbGZFXr739lMsw= Subject key identifier: F9:9E:92:1C:A6:F4:0C:B1:1B:E4:40:54:0E:2E:67:C5:58:7C:20:6A Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7 Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7 Certificate serial: 019B405BD6D5D521E55D58B280B0270F1BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft Manifest number: 090C Signing time: Sun 21 Dec 2025 10:01:59 +0000 Manifest this update: Sun 21 Dec 2025 10:01:59 +0000 Manifest next update: Mon 22 Dec 2025 10:01:59 +0000 Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=) 2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: OkIT3WY9+EsbvehswBq1z2NbwO6Hr0zyuwVZvIZ0u7Y=) 3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:d6:d5:d5:21:e5:5d:58:b2:80:b0:27:0f:1b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7 Validity Not Before: Dec 21 10:01:59 2025 GMT Not After : Dec 22 10:01:59 2025 GMT Subject: CN=f99e921ca6f40cb11be440540e2e67c5587c206a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:08:9d:30:41:ae:67:e1:cd:4a:5d:1d:c0: c1:09:61:de:13:b4:67:33:5a:e1:b4:46:62:a1:8e: 98:47:4d:91:d8:05:d5:00:72:71:d1:e8:e8:8a:6b: 1b:c0:08:fd:54:2e:c7:87:11:20:16:19:3d:f6:23: 86:39:fe:c1:60:e0:25:e9:54:75:83:86:2e:07:71: 77:eb:fb:85:63:1d:24:94:ff:34:01:b9:c4:2d:4d: 97:0a:46:03:e0:f0:23:6b:f2:d5:1f:c8:89:e6:1c: cd:9b:10:d8:bf:c1:53:89:1c:19:0b:a3:88:79:39: e2:d6:01:ff:5d:8e:7b:ea:e7:f9:cf:7e:08:be:03: 8f:2a:34:97:52:53:7c:64:3e:d0:cb:a0:b7:84:46: 7c:5d:ee:ae:4b:4a:8a:66:fc:ca:3f:d4:6c:79:08: b0:e5:18:bd:b1:21:d6:fb:12:73:ff:90:8b:66:a7: e7:b6:d2:aa:2a:50:ce:c8:f4:6c:31:02:b8:3a:17: f5:57:1d:a4:6c:14:fe:84:b3:14:38:db:17:ca:f9: 94:71:14:de:02:e8:76:a4:14:b1:f7:c4:4f:8d:91: 42:3f:11:ac:3f:bc:0e:c5:bf:89:d1:cf:6d:53:2e: 10:05:6b:a0:53:0a:62:80:07:08:49:ad:b3:7e:16: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9E:92:1C:A6:F4:0C:B1:1B:E4:40:54:0E:2E:67:C5:58:7C:20:6A X509v3 Authority Key Identifier: keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5b:aa:2a:bc:a2:db:07:52:73:8f:62:be:c8:87:b5:13:33: a2:62:fe:fb:1e:22:b6:06:bc:a7:1b:de:59:c4:ac:76:a0:90: cc:ee:fa:88:39:c9:74:ea:92:17:75:7a:0c:03:3a:95:d2:c3: 3b:3a:fc:8e:b3:db:76:d4:74:2c:eb:33:76:75:4d:42:57:41: 6f:52:60:d6:72:94:96:55:af:e8:d6:34:27:a3:16:fa:71:3c: 26:35:49:7a:d9:12:0a:7e:11:71:55:62:c5:b2:ce:88:1c:be: 7f:f6:30:1c:b4:42:4c:fd:1c:e6:a7:db:b8:5e:e3:c6:bc:f9: 11:35:20:3d:c1:0b:cc:b4:41:14:98:54:81:fb:cc:cd:0b:05: 39:c8:0c:6a:21:7c:69:0a:3c:93:b4:34:b2:34:aa:f6:45:c4: 86:40:65:a4:3b:6d:b5:fe:67:45:a0:71:3b:61:db:ea:c4:f6: 25:57:be:6a:a0:a6:b0:40:f5:fa:a3:5f:a9:95:cf:4d:bf:60: ca:f0:fe:f9:e7:54:02:3e:11:89:ef:87:5d:f9:26:dd:b2:30: 96:41:e9:1f:0b:3f:23:ca:ba:ad:0e:39:e5:c4:ee:64:4d:eb: 15:66:5f:91:85:ca:c4:4b:ce:da:04:1a:a3:ab:10:f0:e2:f3: ee:76:2d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW9bV1SHlXViygLAnDxvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTA4YmQ1YWRkZmFiZjE1MWQ5MDc5ZTNkM2QzNDEyNjk2 NjZmYTcwHhcNMjUxMjIxMTAwMTU5WhcNMjUxMjIyMTAwMTU5WjAzMTEwLwYDVQQD EyhmOTllOTIxY2E2ZjQwY2IxMWJlNDQwNTQwZTJlNjdjNTU4N2MyMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AEInTBBrmfhzUpdHcDBCWHeE7Rn M1rhtEZioY6YR02R2AXVAHJx0ejoimsbwAj9VC7HhxEgFhk99iOGOf7BYOAl6VR1 g4YuB3F36/uFYx0klP80AbnELU2XCkYD4PAja/LVH8iJ5hzNmxDYv8FTiRwZC6OI eTni1gH/XY576uf5z34IvgOPKjSXUlN8ZD7Qy6C3hEZ8Xe6uS0qKZvzKP9RseQiw 5Ri9sSHW+xJz/5CLZqfnttKqKlDOyPRsMQK4Ohf1Vx2kbBT+hLMUONsXyvmUcRTe Auh2pBSx98RPjZFCPxGsP7wOxb+J0c9tUy4QBWugUwpigAcISa2zfhYuswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmekhym9AyxG+RAVA4uZ8VYfCBqMB8GA1UdIwQY MBaAFG8Qi9Wt36vxUdkHnj09NBJpZm+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4Nzgt MDk3YjRkNmQ4MWU0LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4NzgtMDk3YjRkNmQ4MWU0 LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFuqKryi 2wdSc49ivsiHtRMzomL++x4itga8pxveWcSsdqCQzO76iDnJdOqSF3V6DAM6ldLD Ozr8jrPbdtR0LOszdnVNQldBb1Jg1nKUllWv6NY0J6MW+nE8JjVJetkSCn4RcVVi xbLOiBy+f/YwHLRCTP0c5qfbuF7jxrz5ETUgPcELzLRBFJhUgfvMzQsFOcgMaiF8 aQo8k7Q0sjSq9kXEhkBlpDtttf5nRaBxO2Hb6sT2JVe+aqCmsED1+qNfqZXPTb9g yvD++edUAj4Rie+HXfkm3bIwlkHpHws/I8q6rQ455cTuZE3rFWZfkYXKxEvO2gQa o6sQ8OLz7nYt4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:34 2025 by rpki-client