This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json) Hash identifier: yuXkXFV6l63HteSHfyN2+05pL6dMik1hOTRW0Rf0Yf8= Subject key identifier: 97:4B:DA:E7:CE:65:2C:55:49:C6:E6:3B:37:70:EE:2A:F7:25:F8:DB Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e Certificate serial: 019B6CC66C3F4C69242C1F2AE9964EE55D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft Manifest number: 0C92 Signing time: Tue 30 Dec 2025 01:01:41 +0000 Manifest this update: Tue 30 Dec 2025 01:01:41 +0000 Manifest next update: Wed 31 Dec 2025 01:01:41 +0000 Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: RakWkPxC3kIzhwQOO3pqjaeX+gd8tKvDHloX+Z/0kmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:6c:3f:4c:69:24:2c:1f:2a:e9:96:4e:e5:5d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e Validity Not Before: Dec 30 01:01:41 2025 GMT Not After : Dec 31 01:01:41 2025 GMT Subject: CN=974bdae7ce652c5549c6e63b3770ee2af725f8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:62:c9:80:8b:32:7d:e0:9a:49:82:d5:89:27: a2:ec:ac:08:03:80:da:49:41:69:ec:c0:82:bc:0d: bb:1e:cc:48:72:80:66:a7:46:00:65:82:07:86:93: c2:a1:18:b1:70:f3:3e:fc:6a:25:ad:79:92:55:ee: 6e:76:68:73:29:9c:96:a0:51:7d:93:7a:b8:d3:7e: 53:da:9a:6e:c8:c8:87:65:e5:d3:e2:e0:74:62:e3: 94:b8:04:ed:53:11:4c:78:1b:d9:99:f4:1e:14:7b: 50:26:bb:08:e0:33:db:11:7f:37:6c:27:63:1f:da: 15:fa:64:fc:4c:45:93:41:5c:e4:e0:8c:86:cc:13: 33:d6:28:44:37:ab:88:bc:de:44:b0:b5:68:33:e9: 7d:c5:c4:87:4c:0e:77:90:bc:7a:55:4e:cc:50:e2: 71:5a:42:9d:45:05:4d:49:8a:a2:ac:4c:94:ef:14: 55:c2:97:e9:95:dc:f3:35:94:e6:bb:fc:f3:5c:95: 7f:09:b2:3a:b6:53:1b:da:cc:e2:27:ae:97:20:7b: c6:2c:d4:be:ef:5b:e4:32:6a:21:fd:0c:00:38:8f: 8a:39:1d:06:87:f7:25:a7:de:ef:11:f8:7c:a6:d8: 0b:c9:46:31:64:c4:9d:95:f7:df:56:cb:14:b2:c3: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:DA:E7:CE:65:2C:55:49:C6:E6:3B:37:70:EE:2A:F7:25:F8:DB X509v3 Authority Key Identifier: keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a7:33:e4:84:1d:9c:b9:13:09:f3:3b:97:6d:7b:8d:40:d3: 04:27:b5:cc:2a:2d:93:2d:e0:eb:61:91:47:1d:81:28:8a:be: 90:52:ca:66:3a:22:d9:d9:f3:6e:16:57:04:29:0e:7e:6e:2c: 3c:ff:5a:ea:41:31:55:63:80:89:93:35:69:ea:a1:8d:a7:eb: 7c:a0:3e:19:31:fd:dc:ff:23:dd:ea:ba:f0:bb:d7:6a:92:99: 40:da:40:d1:ce:2a:5b:48:3c:db:0f:5d:73:f8:50:4b:20:68: 03:89:3a:8c:54:12:27:bf:4c:39:65:a1:c8:a7:d2:31:0f:13: 7a:fb:bc:bb:ed:9d:dc:c3:ca:cc:65:26:e6:ab:b2:8d:21:e7: 63:71:ed:c6:c7:60:2b:36:c5:49:78:33:dc:9a:63:58:fd:ea: bf:ce:cd:5c:e2:b1:73:ef:e5:4e:94:9e:cc:d0:44:06:6d:d6: 0f:54:9c:6c:9d:5d:dc:41:bd:f6:de:c1:be:09:4f:14:db:d4: 35:ce:3f:1c:aa:a4:c6:06:41:56:01:df:b3:b8:36:6c:f8:7a: 74:08:09:05:ad:05:14:67:bb:5e:fd:9b:67:b0:8c:4f:2e:da: 24:69:e6:cb:06:5a:da:8d:8d:ea:83:93:ec:a3:62:08:5f:40: 87:10:88:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxmw/TGkkLB8q6ZZO5V1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzQ3ZmE1MTEwOWRkZWNkNmNkNTk0YzY3YmIwMmIyZDVl NzIxMGUwHhcNMjUxMjMwMDEwMTQxWhcNMjUxMjMxMDEwMTQxWjAzMTEwLwYDVQQD Eyg5NzRiZGFlN2NlNjUyYzU1NDljNmU2M2IzNzcwZWUyYWY3MjVmOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GLJgIsyfeCaSYLViSei7KwIA4Da SUFp7MCCvA27HsxIcoBmp0YAZYIHhpPCoRixcPM+/GolrXmSVe5udmhzKZyWoFF9 k3q4035T2ppuyMiHZeXT4uB0YuOUuATtUxFMeBvZmfQeFHtQJrsI4DPbEX83bCdj H9oV+mT8TEWTQVzk4IyGzBMz1ihEN6uIvN5EsLVoM+l9xcSHTA53kLx6VU7MUOJx WkKdRQVNSYqirEyU7xRVwpfpldzzNZTmu/zzXJV/CbI6tlMb2sziJ66XIHvGLNS+ 71vkMmoh/QwAOI+KOR0Gh/clp97vEfh8ptgLyUYxZMSdlfffVssUssM6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdL2ufOZSxVScbmOzdw7ir3JfjbMB8GA1UdIwQY MBaAFAQ0f6URCd3s1s1ZTGe7ArLV5yEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTYxODYtNTU3Mi00MGZjLTllMmYt NzdlYjUzZTgyYzVlLzEvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTYxODYtNTU3Mi00MGZjLTllMmYtNzdlYjUzZTgyYzVl LzEvQkRSX3BSRUozZXpXelZsTVo3c0NzdFhuSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmacz5IQd nLkTCfM7l217jUDTBCe1zCotky3g62GRRx2BKIq+kFLKZjoi2dnzbhZXBCkOfm4s PP9a6kExVWOAiZM1aeqhjafrfKA+GTH93P8j3eq68LvXapKZQNpA0c4qW0g82w9d c/hQSyBoA4k6jFQSJ79MOWWhyKfSMQ8Tevu8u+2d3MPKzGUm5quyjSHnY3Htxsdg KzbFSXgz3JpjWP3qv87NXOKxc+/lTpSezNBEBm3WD1ScbJ1d3EG99t7BvglPFNvU Nc4/HKqkxgZBVgHfs7g2bPh6dAgJBa0FFGe7Xv2bZ7CMTy7aJGnmywZa2o2N6oOT 7KNiCF9AhxCImg== -----END CERTIFICATE-----Generated at Tue Dec 30 09:05:12 2025 by rpki-client