This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json) Hash identifier: JeWbmzm/dv3Lpa1IcsiNLEDwA2a8mXvuTbjs/NP+eQw= Subject key identifier: 91:B7:3D:53:5F:18:B4:78:3F:EE:06:30:FD:76:3E:2B:2E:B8:E3:68 Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Certificate serial: 019B446EC839CCE8516624DA39E0FA3F9976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft Manifest number: 17A1 Signing time: Mon 22 Dec 2025 05:01:09 +0000 Manifest this update: Mon 22 Dec 2025 05:01:09 +0000 Manifest next update: Tue 23 Dec 2025 05:01:09 +0000 Files and hashes: 1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=) 2: TtsJ_9irph6KMpr-0Unxq5mv0Pk.roa (hash: KdfI5XrAnT/kZVbthzfs9Tp5F0pVhQnXMy58T6F38qY=) 3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: adQv9WR/YWsvQZRm6tuNyLIKsN4ZJX0D+gtcuw13PMg=) 4: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (hash: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=) 5: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:c8:39:cc:e8:51:66:24:da:39:e0:fa:3f:99:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Validity Not Before: Dec 22 05:01:09 2025 GMT Not After : Dec 23 05:01:09 2025 GMT Subject: CN=91b73d535f18b4783fee0630fd763e2b2eb8e368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:df:a9:de:18:94:93:bf:98:66:9b:da:50: d4:c5:ee:f8:ad:23:07:48:1e:38:ee:bd:93:df:e4: 1e:26:d1:6b:d0:97:86:2e:b0:15:ec:4a:6a:b0:10: c0:e4:b8:3c:ca:71:a1:a1:de:e1:26:95:ab:b8:4b: c1:5f:21:1f:5a:7f:a8:22:37:5a:7a:1c:ea:27:8f: 8d:40:df:8c:be:cc:f5:cf:3e:bc:94:6e:a0:1d:49: 36:83:69:78:9c:f3:a9:97:90:cc:53:da:70:a7:f0: 54:ca:6a:e7:39:40:cc:62:b1:96:18:81:09:6f:04: 24:b3:9f:6b:8b:e1:e3:52:17:27:a3:ac:dd:76:66: 40:a8:fa:c6:d0:d1:68:9a:cf:ca:ad:7f:a9:fe:39: da:1d:46:95:a1:64:5b:0e:5d:34:2f:db:bb:e1:b1: be:55:98:cb:05:d2:7d:b1:e9:22:01:21:7e:5e:49: 17:8c:dc:d6:1d:3b:17:8f:51:1c:01:9a:a1:fe:5d: c5:bf:2c:d2:ce:a7:6a:92:f5:5e:1b:48:45:51:7f: 20:12:30:19:80:b3:81:e6:f5:9e:36:53:ff:78:18: c5:b0:7e:a2:fe:f2:85:1f:c4:04:95:e6:3a:26:4c: d8:5e:03:e8:06:b7:03:78:5d:0c:b1:d1:39:bc:3e: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:3D:53:5F:18:B4:78:3F:EE:06:30:FD:76:3E:2B:2E:B8:E3:68 X509v3 Authority Key Identifier: keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:be:41:40:56:63:af:2f:b2:f5:bf:75:75:bb:86:96:6f:6b: c9:b7:44:fb:65:e3:ea:58:b4:3d:e6:f3:58:2c:2a:df:4d:a2: 00:bf:af:b3:b3:c2:77:79:aa:f8:81:97:ad:08:09:14:5f:19: ab:94:88:f6:d4:02:10:00:9b:83:68:b2:82:5d:bf:7c:f4:dd: cb:97:68:11:e8:66:37:33:84:16:ec:2b:36:53:41:aa:fc:25: 0d:3d:22:50:a0:27:29:ad:ec:24:29:fe:05:29:f8:01:57:c4: fe:d6:29:53:59:c3:e7:e5:a7:21:80:b5:50:86:92:9d:2a:e9: af:96:23:5c:5e:b2:3b:1b:68:e7:4b:77:d1:20:a5:99:61:9c: c8:9e:74:58:c5:58:6f:1d:ab:d5:7b:2d:46:69:13:86:77:a4: 0f:84:1f:12:67:a1:7b:3e:b1:a3:20:fe:3f:4b:1f:97:3e:a2: f0:55:b3:8d:b6:28:df:bb:71:58:a9:9e:7d:e2:25:04:33:d2: 0a:6e:31:cf:34:72:5f:1c:d2:35:00:12:0b:3d:29:42:e0:21: b4:8a:c1:72:67:86:59:77:a9:92:ed:f9:fa:f4:dd:be:d4:ed: fe:6e:a8:85:04:f8:b6:36:b7:27:02:c6:9b:ec:ca:aa:fb:d3: 3e:e6:d7:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbsg5zOhRZiTaOeD6P5l2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy ODJlMzAwHhcNMjUxMjIyMDUwMTA5WhcNMjUxMjIzMDUwMTA5WjAzMTEwLwYDVQQD Eyg5MWI3M2Q1MzVmMThiNDc4M2ZlZTA2MzBmZDc2M2UyYjJlYjhlMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOLfqd4YlJO/mGab2lDUxe74rSMH SB447r2T3+QeJtFr0JeGLrAV7EpqsBDA5Lg8ynGhod7hJpWruEvBXyEfWn+oIjda ehzqJ4+NQN+Mvsz1zz68lG6gHUk2g2l4nPOpl5DMU9pwp/BUymrnOUDMYrGWGIEJ bwQks59ri+HjUhcno6zddmZAqPrG0NFoms/KrX+p/jnaHUaVoWRbDl00L9u74bG+ VZjLBdJ9sekiASF+XkkXjNzWHTsXj1EcAZqh/l3FvyzSzqdqkvVeG0hFUX8gEjAZ gLOB5vWeNlP/eBjFsH6i/vKFH8QEleY6JkzYXgPoBrcDeF0MsdE5vD42NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG3PVNfGLR4P+4GMP12PisuuONoMB8GA1UdIwQY MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb5BQFZj ry+y9b91dbuGlm9rybdE+2Xj6li0PebzWCwq302iAL+vs7PCd3mq+IGXrQgJFF8Z q5SI9tQCEACbg2iygl2/fPTdy5doEehmNzOEFuwrNlNBqvwlDT0iUKAnKa3sJCn+ BSn4AVfE/tYpU1nD5+WnIYC1UIaSnSrpr5YjXF6yOxto50t30SClmWGcyJ50WMVY bx2r1XstRmkThnekD4QfEmehez6xoyD+P0sflz6i8FWzjbYo37txWKmefeIlBDPS Cm4xzzRyXxzSNQASCz0pQuAhtIrBcmeGWXepku35+vTdvtTt/m6ohQT4tja3JwLG m+zKqvvTPubX0Q== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:29 2025 by rpki-client