This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json) Hash identifier: Ci7t06Lj406REmY+0T189itaDDPQf6sZP7nRQJ4h6dc= Subject key identifier: FA:D3:B0:4D:3D:2C:69:61:F9:DC:2D:E1:A7:58:D6:48:F0:50:15:6A Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Certificate serial: 019B6A692A94B6D61565DBFB50BAEE84B36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 14:00:35 +0000 Manifest this update: Mon 29 Dec 2025 14:00:35 +0000 Manifest next update: Tue 30 Dec 2025 14:00:35 +0000 Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=) 2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 2A1b6FLiEeAtOnceii7vdh6yM4xadcW1BI6B42akpxs=) 3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:2a:94:b6:d6:15:65:db:fb:50:ba:ee:84:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Validity Not Before: Dec 29 14:00:35 2025 GMT Not After : Dec 30 14:00:35 2025 GMT Subject: CN=fad3b04d3d2c6961f9dc2de1a758d648f050156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:90:28:60:59:b0:ac:ca:d4:88:dc:bf:38: b0:ed:4f:1f:67:aa:8a:e0:71:38:ff:ba:34:b0:17: 9a:72:30:cd:d0:f3:c6:0c:cb:ea:ae:30:7a:8d:25: e7:c2:e2:bb:ac:14:5a:4c:b2:92:2e:b2:73:d7:6e: 57:14:b5:92:6f:38:e9:03:1d:f8:15:2c:27:ae:87: 9c:46:d5:2a:6b:a8:c7:1d:95:18:37:43:2c:b0:be: 0c:05:34:97:93:af:f6:f3:d7:6c:7a:2e:47:1a:87: 4d:22:51:ab:e3:34:2b:c9:72:1d:e3:fc:a3:c9:a9: a9:cd:62:93:e9:54:67:45:7d:39:81:6e:77:d1:67: 26:57:4b:b9:5d:0e:3d:cf:e9:8b:ac:fe:4d:bd:b3: 4c:bc:0c:c3:be:98:8a:51:60:10:53:04:8e:14:a4: 45:0b:cd:70:a0:84:12:bf:89:60:65:e1:1e:0c:86: bf:83:ce:92:16:90:1e:23:dd:74:37:10:93:37:9e: 31:32:47:1d:25:07:d4:c0:10:f9:86:01:2d:3e:28: bd:ae:c5:96:14:8d:5e:2f:96:ac:63:60:15:63:1d: 8a:96:23:15:c5:16:a8:2c:7a:39:01:ed:07:c6:83: d4:e9:b4:d2:ac:79:3b:7b:f5:75:79:76:5d:e0:53: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D3:B0:4D:3D:2C:69:61:F9:DC:2D:E1:A7:58:D6:48:F0:50:15:6A X509v3 Authority Key Identifier: keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:83:52:8b:98:9e:16:33:62:e1:f3:52:19:f3:a8:e7:da:f8: 26:37:ca:74:a0:75:24:c8:07:69:71:91:aa:0c:57:5c:c5:3b: 90:4b:02:89:f2:b8:6c:92:ea:5f:3c:af:84:48:2c:65:dd:ad: 6a:34:f0:7e:94:97:09:c5:2f:ba:a9:b9:48:49:e4:78:73:b3: 97:ae:84:96:b8:47:df:2b:01:ff:9c:82:e2:bd:0f:b6:48:b8: 25:cc:77:65:49:d0:c6:d9:4e:eb:12:4c:10:39:2d:60:15:01: 4c:8f:13:6a:be:4f:a4:61:80:57:99:96:77:67:89:0b:03:aa: 71:93:21:bb:cb:49:b3:65:0d:2f:e2:e1:9b:2c:cf:7e:b6:22: ab:08:91:f9:90:0d:91:40:92:90:69:f2:2f:61:11:65:eb:f6: 2c:e0:84:dc:c4:4a:3e:80:61:f7:4b:78:1a:6a:32:aa:92:94: 9f:66:ca:64:e0:0d:6f:d5:1d:89:5c:0c:b3:6c:49:28:7c:58: 29:61:90:8d:15:d0:4a:c1:9e:4a:9a:48:f5:86:3f:3f:20:a2: 13:65:e0:0d:44:41:6c:fa:00:e2:e0:89:66:ad:1f:ee:5b:6e: 35:47:65:02:82:63:c0:23:3e:c5:a2:af:a8:03:28:94:4f:0b: 25:03:46:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaSqUttYVZdv7ULruhLNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5 MDJlMmQwHhcNMjUxMjI5MTQwMDM1WhcNMjUxMjMwMTQwMDM1WjAzMTEwLwYDVQQD EyhmYWQzYjA0ZDNkMmM2OTYxZjlkYzJkZTFhNzU4ZDY0OGYwNTAxNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoaQKGBZsKzK1Ijcvziw7U8fZ6qK 4HE4/7o0sBeacjDN0PPGDMvqrjB6jSXnwuK7rBRaTLKSLrJz125XFLWSbzjpAx34 FSwnroecRtUqa6jHHZUYN0MssL4MBTSXk6/289dsei5HGodNIlGr4zQryXId4/yj yampzWKT6VRnRX05gW530WcmV0u5XQ49z+mLrP5NvbNMvAzDvpiKUWAQUwSOFKRF C81woIQSv4lgZeEeDIa/g86SFpAeI910NxCTN54xMkcdJQfUwBD5hgEtPii9rsWW FI1eL5asY2AVYx2KliMVxRaoLHo5Ae0HxoPU6bTSrHk7e/V1eXZd4FNmkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrTsE09LGlh+dwt4adY1kjwUBVqMB8GA1UdIwQY MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1 LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioNSi5ie FjNi4fNSGfOo59r4JjfKdKB1JMgHaXGRqgxXXMU7kEsCifK4bJLqXzyvhEgsZd2t ajTwfpSXCcUvuqm5SEnkeHOzl66ElrhH3ysB/5yC4r0Ptki4Jcx3ZUnQxtlO6xJM EDktYBUBTI8Tar5PpGGAV5mWd2eJCwOqcZMhu8tJs2UNL+LhmyzPfrYiqwiR+ZAN kUCSkGnyL2ERZev2LOCE3MRKPoBh90t4GmoyqpKUn2bKZOANb9UdiVwMs2xJKHxY KWGQjRXQSsGeSppI9YY/PyCiE2XgDURBbPoA4uCJZq0f7ltuNUdlAoJjwCM+xaKv qAMolE8LJQNGAA== -----END CERTIFICATE-----Generated at Mon Dec 29 19:38:52 2025 by rpki-client