This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json) Hash identifier: 0ede8lOpm7VyEJwfXyHQbiamtKUfyMAKPcwN8XJj/yY= Subject key identifier: 3C:58:F5:E9:81:91:6C:91:B8:48:85:97:1E:F4:71:BC:D7:26:8A:31 Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662 Certificate serial: 019B2BF8A7D4C43E8B4970C4A96E8E63352D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft Manifest number: 12FC Signing time: Wed 17 Dec 2025 11:01:14 +0000 Manifest this update: Wed 17 Dec 2025 11:01:14 +0000 Manifest next update: Thu 18 Dec 2025 11:01:14 +0000 Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: TkchvwHuBA1QPcJ3h3zqWrKuvRIVs7vgZ/jgHE7f9As=) 2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:a7:d4:c4:3e:8b:49:70:c4:a9:6e:8e:63:35:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662 Validity Not Before: Dec 17 11:01:14 2025 GMT Not After : Dec 18 11:01:14 2025 GMT Subject: CN=3c58f5e981916c91b84885971ef471bcd7268a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:50:d6:a3:08:3e:62:b8:ea:9f:d9:66:d9: f7:e1:d0:79:a8:9c:bc:c3:83:e8:79:10:32:61:93: ac:6e:e8:9e:ff:df:cb:d0:7f:bf:24:e9:2d:8b:72: 53:05:d6:4c:5d:34:d3:6d:f0:7b:8f:fe:5b:4b:3f: 71:eb:0d:14:65:a9:e5:0f:5f:c5:be:c3:8d:81:ac: b8:37:d0:59:43:c8:86:a4:60:a3:98:8f:81:34:0d: df:cd:a0:75:71:3f:e5:ca:02:b7:a0:83:69:10:55: 07:dc:44:41:c9:7b:31:26:cc:66:1c:21:39:8a:8a: da:3b:a5:07:e5:0c:9a:e4:57:98:ae:03:18:a5:32: ca:e8:e4:62:80:bc:a6:c0:d1:99:54:57:6a:0b:4a: 6e:c5:88:c5:b6:e5:50:5a:16:d5:e8:40:5c:a3:08: 4f:42:5e:88:bd:84:28:69:e3:c5:92:cd:b9:79:f3: 81:6a:1d:0d:2b:22:17:e2:e9:39:c6:69:bc:ed:cd: 4a:0d:39:ef:8a:bc:63:6f:d4:c4:af:89:a0:92:0e: ab:94:56:c3:1d:30:0b:e1:ec:59:77:93:99:bb:24: b0:19:16:87:1a:a0:ee:50:31:f5:bd:9f:53:f1:97: de:78:ce:51:fd:60:7f:a1:ab:a8:6b:44:d8:f4:fb: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:F5:E9:81:91:6C:91:B8:48:85:97:1E:F4:71:BC:D7:26:8A:31 X509v3 Authority Key Identifier: keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:18:1f:aa:4f:d4:16:4e:45:79:4d:66:ae:46:40:10:af:e4: 42:bf:70:ae:2a:d2:c0:86:af:60:9d:b0:30:ae:fb:82:c1:8b: b8:eb:4b:f2:44:aa:15:95:42:59:33:46:f2:98:b2:b0:bc:5a: 66:3f:4b:36:0a:58:44:79:ce:76:c5:b1:af:fa:5b:07:e1:43: 32:09:4d:37:6a:3b:2f:5d:75:f9:b9:7c:0b:31:c6:b1:2e:66: 6d:63:17:01:93:42:04:13:25:7e:ab:96:af:1e:4d:05:db:ed: e5:8b:00:d2:ee:b4:89:cf:98:f4:00:63:03:09:d1:48:f7:c0: f3:fc:2d:b0:8a:37:66:53:bb:d1:69:94:af:12:5d:4c:15:bc: 86:92:85:22:1f:cf:a7:3e:26:11:95:db:ad:f8:aa:ff:75:12: 41:38:cb:4e:37:e0:cb:6d:31:df:1f:db:fc:87:da:1f:46:0a: ee:af:9b:83:0c:07:6e:38:ab:9d:ee:46:14:f4:63:a5:43:8b: 71:a9:52:a7:6c:51:16:bc:72:9c:d1:9b:7f:5c:f1:e1:d9:19: ab:7a:89:7d:1f:a5:5a:43:6d:b9:d7:e6:61:ab:89:ee:6b:f1: f2:58:54:1e:01:13:b9:12:6a:52:49:96:9e:19:eb:5d:8e:34: 84:49:93:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+KfUxD6LSXDEqW6OYzUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2 NDI2NjIwHhcNMjUxMjE3MTEwMTE0WhcNMjUxMjE4MTEwMTE0WjAzMTEwLwYDVQQD EygzYzU4ZjVlOTgxOTE2YzkxYjg0ODg1OTcxZWY0NzFiY2Q3MjY4YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMBQ1qMIPmK46p/ZZtn34dB5qJy8 w4PoeRAyYZOsbuie/9/L0H+/JOkti3JTBdZMXTTTbfB7j/5bSz9x6w0UZanlD1/F vsONgay4N9BZQ8iGpGCjmI+BNA3fzaB1cT/lygK3oINpEFUH3ERByXsxJsxmHCE5 ioraO6UH5Qya5FeYrgMYpTLK6ORigLymwNGZVFdqC0puxYjFtuVQWhbV6EBcowhP Ql6IvYQoaePFks25efOBah0NKyIX4uk5xmm87c1KDTnvirxjb9TEr4mgkg6rlFbD HTAL4exZd5OZuySwGRaHGqDuUDH1vZ9T8ZfeeM5R/WB/oauoa0TY9PuvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxY9emBkWyRuEiFlx70cbzXJooxMB8GA1UdIwQY MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhgfqk/U Fk5FeU1mrkZAEK/kQr9wrirSwIavYJ2wMK77gsGLuOtL8kSqFZVCWTNG8piysLxa Zj9LNgpYRHnOdsWxr/pbB+FDMglNN2o7L111+bl8CzHGsS5mbWMXAZNCBBMlfquW rx5NBdvt5YsA0u60ic+Y9ABjAwnRSPfA8/wtsIo3ZlO70WmUrxJdTBW8hpKFIh/P pz4mEZXbrfiq/3USQTjLTjfgy20x3x/b/IfaH0YK7q+bgwwHbjirne5GFPRjpUOL calSp2xRFrxynNGbf1zx4dkZq3qJfR+lWkNtudfmYauJ7mvx8lhUHgETuRJqUkmW nhnrXY40hEmTQw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:37:26 2025 by rpki-client