This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json) Hash identifier: iDiLSP57sTDQrG8j5dFyc6iXMD/ZMDm02kVMNQscBYQ= Subject key identifier: 60:9A:45:61:4A:F1:F9:C1:D0:5C:F0:46:E2:95:41:F4:D3:98:5A:BD Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0 Certificate serial: 019B3A21F047CDD1CB81C497F83031CD8FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft Manifest number: 0EAE Signing time: Sat 20 Dec 2025 05:01:01 +0000 Manifest this update: Sat 20 Dec 2025 05:01:01 +0000 Manifest next update: Sun 21 Dec 2025 05:01:01 +0000 Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=) 2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: Ck2vAmwzn5nnhy3ug3LcEhC3VnwYej/mwR6ADBZ0dkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:f0:47:cd:d1:cb:81:c4:97:f8:30:31:cd:8f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0 Validity Not Before: Dec 20 05:01:01 2025 GMT Not After : Dec 21 05:01:01 2025 GMT Subject: CN=609a45614af1f9c1d05cf046e29541f4d3985abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:2d:3c:eb:76:b8:5f:7e:2c:15:2c:fa:01: 92:c1:22:74:f1:a9:1f:88:38:a3:6e:1e:c5:d5:bb: 5e:ef:ad:ee:9a:4d:60:c2:ce:87:4d:c5:8f:ea:22: 1c:95:c8:e1:a0:3f:ed:20:e8:f2:a1:ba:d3:70:7f: f6:ff:73:8b:75:8a:47:b6:1a:45:c5:ed:4a:e4:f7: 34:70:3c:30:a1:f9:f3:d1:e8:f9:78:6a:37:b7:39: 26:2b:3e:31:a3:af:cd:4c:4c:af:71:13:33:58:46: 15:ac:0a:d8:d6:3e:ca:58:97:7f:ed:af:f0:42:78: 56:72:4d:6d:f0:ab:a5:74:2c:b6:99:78:9d:31:29: 99:39:52:43:0d:b6:fa:a7:a8:99:3e:15:f2:13:70: 62:ba:d6:9a:e6:7e:77:47:8a:ad:a8:42:50:db:15: 29:65:b7:f5:2f:26:9e:77:65:ea:70:19:08:86:1e: 8e:1c:87:15:17:56:54:f9:8e:93:80:ff:dc:e5:b7: 72:39:7f:76:2e:f0:70:2f:a9:55:d5:e3:82:9d:11: c0:1c:5b:19:aa:5a:64:4b:91:37:00:01:60:2d:00: 6c:ce:71:6a:4e:de:36:32:c4:28:98:2f:07:66:18: 87:8f:40:90:6a:7b:89:4c:0f:30:90:f9:15:d9:fa: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9A:45:61:4A:F1:F9:C1:D0:5C:F0:46:E2:95:41:F4:D3:98:5A:BD X509v3 Authority Key Identifier: keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:08:9b:b1:0b:2c:d2:65:47:cf:19:c3:1c:88:23:52:ef:d5: ed:52:f9:f6:ec:93:7f:6e:dd:da:4b:3b:a1:d2:61:73:67:d7: 90:22:be:60:5d:62:91:f0:ad:f7:3d:54:c4:42:63:3e:d3:84: a7:dc:c8:07:0b:c9:62:37:e3:85:9a:dc:93:da:be:70:3b:a8: 3f:12:50:45:df:c5:71:07:8d:f7:ed:88:9b:8f:73:34:91:24: ff:68:4e:01:f9:56:da:43:c2:9a:cb:39:8c:52:26:35:36:a2: 53:18:07:f0:b3:ed:34:2c:67:b1:05:32:e1:57:a6:09:43:68: d1:af:dc:0b:3e:3b:3b:d1:e2:24:37:18:af:cd:72:54:21:d2: 95:6a:21:fe:05:32:19:63:e8:f4:c4:75:48:e4:81:e3:e0:ad: 91:8f:c5:32:b6:2b:e2:a7:98:86:c4:b2:1c:b9:c3:df:e5:91: 06:8a:5c:fb:76:27:e1:c9:63:94:02:54:b3:94:3a:0f:ae:65: b9:49:4f:38:1f:23:a1:8b:ed:73:e3:30:0e:18:ba:f9:7b:30: 66:db:3b:2b:e4:77:b2:27:fb:d1:af:e1:4d:8a:1b:74:70:bf: e4:0a:9f:a1:b7:fa:e7:ef:90:5d:26:60:bc:bc:ba:20:30:12: ac:12:07:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IfBHzdHLgcSX+DAxzY/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk OWE5YTAwHhcNMjUxMjIwMDUwMTAxWhcNMjUxMjIxMDUwMTAxWjAzMTEwLwYDVQQD Eyg2MDlhNDU2MTRhZjFmOWMxZDA1Y2YwNDZlMjk1NDFmNGQzOTg1YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxMtPOt2uF9+LBUs+gGSwSJ08akf iDijbh7F1bte763umk1gws6HTcWP6iIclcjhoD/tIOjyobrTcH/2/3OLdYpHthpF xe1K5Pc0cDwwofnz0ej5eGo3tzkmKz4xo6/NTEyvcRMzWEYVrArY1j7KWJd/7a/w QnhWck1t8KuldCy2mXidMSmZOVJDDbb6p6iZPhXyE3Biutaa5n53R4qtqEJQ2xUp Zbf1Lyaed2XqcBkIhh6OHIcVF1ZU+Y6TgP/c5bdyOX92LvBwL6lV1eOCnRHAHFsZ qlpkS5E3AAFgLQBsznFqTt42MsQomC8HZhiHj0CQanuJTA8wkPkV2fpBcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCaRWFK8fnB0FzwRuKVQfTTmFq9MB8GA1UdIwQY MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgibsQss 0mVHzxnDHIgjUu/V7VL59uyTf27d2ks7odJhc2fXkCK+YF1ikfCt9z1UxEJjPtOE p9zIBwvJYjfjhZrck9q+cDuoPxJQRd/FcQeN9+2Im49zNJEk/2hOAflW2kPCmss5 jFImNTaiUxgH8LPtNCxnsQUy4VemCUNo0a/cCz47O9HiJDcYr81yVCHSlWoh/gUy GWPo9MR1SOSB4+CtkY/FMrYr4qeYhsSyHLnD3+WRBopc+3Yn4cljlAJUs5Q6D65l uUlPOB8joYvtc+MwDhi6+XswZts7K+R3sif70a/hTYobdHC/5Aqfobf65++QXSZg vLy6IDASrBIHEA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:55 2025 by rpki-client