This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json) Hash identifier: xlyaWKSMgWC/KIyeTGoUEGLUm9ei7gZkbqQsgKJX9os= Subject key identifier: AF:5F:F3:4D:8D:0E:2E:3D:C6:FD:00:61:E7:EB:30:6B:1F:04:29:24 Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662 Certificate serial: 019B6BB2EBAC52D760CB8223953E0F3F36D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft Manifest number: 131D Signing time: Mon 29 Dec 2025 20:00:46 +0000 Manifest this update: Mon 29 Dec 2025 20:00:46 +0000 Manifest next update: Tue 30 Dec 2025 20:00:46 +0000 Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: z3wN4V0Sf3/m73n8ElWMjNZZhfqqIAUG42ZQaQxNaL8=) 2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:eb:ac:52:d7:60:cb:82:23:95:3e:0f:3f:36:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662 Validity Not Before: Dec 29 20:00:46 2025 GMT Not After : Dec 30 20:00:46 2025 GMT Subject: CN=af5ff34d8d0e2e3dc6fd0061e7eb306b1f042924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:b4:1a:46:c2:cd:95:57:73:2c:3c:b7:02: f8:0d:28:f1:54:8e:7e:72:d8:1c:f9:79:c7:b1:04: 5e:94:6c:fb:4c:e3:2b:9e:99:87:36:9d:55:4f:86: b8:93:96:4f:d2:05:a8:e6:94:a9:f3:0a:56:b0:90: 06:6b:cd:29:4c:38:35:f5:4b:4f:76:78:c2:95:da: bb:42:34:48:c8:38:83:1c:f7:3a:4e:05:52:f7:74: cc:a3:97:f6:7d:6d:f1:5d:49:0c:a5:3c:96:b6:fe: 34:12:c5:5f:c8:6d:c2:8d:01:92:7e:10:2a:9f:0a: cb:a5:93:cc:23:9f:57:7e:cf:de:7e:04:d2:05:69: 25:39:ca:98:aa:f9:3b:6c:73:50:04:c1:64:b3:6e: 64:e6:4b:00:b2:28:44:06:a2:d0:99:bf:d0:db:53: 82:ff:99:d1:00:e8:74:3a:35:f8:a5:d5:e2:b5:bf: 0e:9f:f5:72:ed:8f:47:8c:21:7b:a5:f7:bf:62:95: a3:05:93:b1:df:d3:d0:9f:62:f9:cd:e1:80:1b:96: d3:65:ca:05:3c:d9:5d:35:e1:a0:e7:1c:6f:bd:2b: 8c:8a:b2:cc:18:06:76:e1:f9:65:83:2b:54:0f:c5: 0e:28:91:17:3e:31:92:d4:c7:2e:19:cc:9d:78:10: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:F3:4D:8D:0E:2E:3D:C6:FD:00:61:E7:EB:30:6B:1F:04:29:24 X509v3 Authority Key Identifier: keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3f:aa:e6:63:2f:c2:78:c5:cf:c8:72:93:db:2a:7c:a5:6a: eb:8b:93:71:99:18:2d:e8:70:a7:02:f8:af:b6:77:50:41:c5: c3:84:2a:f6:a8:e4:62:c6:2a:bf:c5:4b:bc:ae:b9:2c:b6:4c: ac:c4:5a:7e:57:a1:58:f3:8b:86:50:df:26:94:80:3b:a5:97: 70:0a:d5:55:ab:93:8e:5a:67:10:3d:d8:94:f5:55:6e:70:ef: f2:57:9e:08:42:7f:6a:1b:a9:a1:b4:30:05:fc:b2:ae:40:94: 91:e4:2d:ca:c3:b3:36:13:f9:61:cc:b8:b5:aa:6a:3b:8e:1a: 10:02:a9:17:d4:5e:be:74:da:d7:35:ed:48:ee:43:d0:79:60: ea:79:95:62:33:3e:7e:15:b6:45:d5:09:be:d7:de:32:93:b5: f3:0b:ce:bc:22:c1:58:cc:a0:69:40:7e:5e:dc:20:a5:ae:be: 35:00:48:f9:81:0c:1f:51:b9:07:0f:a3:36:22:5c:04:52:22: e6:d5:20:41:de:1e:8c:e4:ba:b8:a0:44:bc:29:0b:bd:b0:69: c2:40:9a:48:f0:df:07:67:0c:26:27:40:b1:d5:d4:c2:85:76: 35:da:ed:a1:53:aa:28:d1:65:45:e8:3f:5f:12:e0:be:65:26: 1d:1e:d6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsuusUtdgy4IjlT4PPzbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2 NDI2NjIwHhcNMjUxMjI5MjAwMDQ2WhcNMjUxMjMwMjAwMDQ2WjAzMTEwLwYDVQQD EyhhZjVmZjM0ZDhkMGUyZTNkYzZmZDAwNjFlN2ViMzA2YjFmMDQyOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx60GkbCzZVXcyw8twL4DSjxVI5+ ctgc+XnHsQRelGz7TOMrnpmHNp1VT4a4k5ZP0gWo5pSp8wpWsJAGa80pTDg19UtP dnjCldq7QjRIyDiDHPc6TgVS93TMo5f2fW3xXUkMpTyWtv40EsVfyG3CjQGSfhAq nwrLpZPMI59Xfs/efgTSBWklOcqYqvk7bHNQBMFks25k5ksAsihEBqLQmb/Q21OC /5nRAOh0OjX4pdXitb8On/Vy7Y9HjCF7pfe/YpWjBZOx39PQn2L5zeGAG5bTZcoF PNldNeGg5xxvvSuMirLMGAZ24fllgytUD8UOKJEXPjGS1McuGcydeBDUvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9f802NDi49xv0AYefrMGsfBCkkMB8GA1UdIwQY MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT+q5mMv wnjFz8hyk9sqfKVq64uTcZkYLehwpwL4r7Z3UEHFw4Qq9qjkYsYqv8VLvK65LLZM rMRaflehWPOLhlDfJpSAO6WXcArVVauTjlpnED3YlPVVbnDv8leeCEJ/ahupobQw BfyyrkCUkeQtysOzNhP5Ycy4tapqO44aEAKpF9RevnTa1zXtSO5D0Hlg6nmVYjM+ fhW2RdUJvtfeMpO18wvOvCLBWMygaUB+Xtwgpa6+NQBI+YEMH1G5Bw+jNiJcBFIi 5tUgQd4ejOS6uKBEvCkLvbBpwkCaSPDfB2cMJidAsdXUwoV2NdrtoVOqKNFlReg/ XxLgvmUmHR7Wrw== -----END CERTIFICATE-----Generated at Tue Dec 30 00:21:22 2025 by rpki-client