This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json) Hash identifier: DhDAPidPqpUNFR5VkdQK0s2J7gAjFwgXlfVst6+1COo= Subject key identifier: FF:8F:F1:A9:AE:3F:C4:0D:B0:3E:4B:04:27:73:7B:D1:9C:F0:A9:78 Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86 Certificate serial: 019B4B4D0B8DAB0731CC7F4A683B65EF4EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft Manifest number: 11C6 Signing time: Tue 23 Dec 2025 13:01:38 +0000 Manifest this update: Tue 23 Dec 2025 13:01:38 +0000 Manifest next update: Wed 24 Dec 2025 13:01:38 +0000 Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: QBUsy6qDqSAlKQC7QTWHiAfCjP4lT9mzlYlrgPhJnkA=) 2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:0b:8d:ab:07:31:cc:7f:4a:68:3b:65:ef:4e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0632542221caef6448cc545214e000071bd56b86 Validity Not Before: Dec 23 13:01:38 2025 GMT Not After : Dec 24 13:01:38 2025 GMT Subject: CN=ff8ff1a9ae3fc40db03e4b0427737bd19cf0a978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:de:a0:0a:0c:08:a8:51:ea:1f:92:09:f9: 93:eb:31:8d:af:7a:d1:2d:d6:7b:e3:d2:57:52:da: 1c:09:f8:c8:f9:52:5b:28:fa:59:83:9f:dc:84:f3: 71:91:69:72:72:05:61:bf:ee:cd:17:c5:3a:2d:d3: b5:b8:5b:d1:35:31:cf:dc:1b:1b:27:c5:02:2a:38: 60:af:4e:de:62:b4:b4:f9:92:4c:39:fd:4f:e5:22: 75:3a:ea:fe:70:a6:05:22:ff:46:28:f5:cf:c8:ae: ce:41:76:9a:0c:a6:6e:8d:25:6e:16:b7:28:5f:2d: 96:58:da:1b:c7:73:19:7c:60:2b:6f:f7:cf:3f:56: d7:27:d3:be:0d:81:f3:0b:14:c3:ee:1e:b3:a1:9a: 23:e2:4a:9c:1d:76:73:39:0b:e2:87:01:e0:86:8c: f5:cc:c5:ee:27:e3:ba:c7:4c:0c:cc:40:fa:8f:a6: 1c:40:3b:a5:ad:cb:6c:cd:fc:60:38:80:66:b7:62: a5:3b:7c:16:29:83:fd:3b:42:6e:bd:c1:34:b8:1d: f9:86:39:7a:23:bf:30:5f:ff:2f:0c:04:96:ac:bb: e0:c2:72:75:9b:7d:e2:ae:89:1d:0a:6b:44:61:1c: 26:72:28:b8:78:e3:b6:67:a6:7c:0b:c1:55:37:b5: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8F:F1:A9:AE:3F:C4:0D:B0:3E:4B:04:27:73:7B:D1:9C:F0:A9:78 X509v3 Authority Key Identifier: keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:37:24:e1:0c:a0:ad:8c:8d:ba:84:90:da:90:d1:a3:5e:35: 6b:a9:cd:3a:a2:0f:b7:04:a0:9e:fa:d4:1f:60:cd:fb:2d:f4: 9f:05:58:e7:6f:ef:d3:d9:15:f0:86:20:b4:02:5e:b6:2e:d0: 97:e2:28:b4:81:6e:61:65:2e:b3:23:d6:42:76:0f:6c:c6:df: cd:bb:c1:75:ac:cc:b5:1b:88:45:12:37:79:84:bd:70:76:73: 9a:8b:99:bc:d0:32:dd:fd:8d:92:c1:33:a5:8f:6e:09:10:a5: 91:02:a2:76:85:1d:a2:27:f4:94:57:fe:33:0f:17:65:69:91: 43:2b:32:06:4c:2c:bd:a1:2e:0b:b8:19:d7:48:18:03:2c:57: 87:19:e6:1a:46:78:23:fa:e4:16:9d:04:c6:10:d8:09:b1:40: cd:44:6c:3d:6d:59:12:e4:9b:c4:6b:5b:39:3a:7b:58:00:98: 01:22:37:b5:2e:0c:64:22:57:77:18:d2:b0:6e:69:52:c5:b5: 60:4f:ce:95:71:15:1b:cf:32:0b:0d:c4:4d:4d:57:20:ca:2c: cc:35:2d:6a:c5:ad:cc:81:8c:79:7c:56:e9:8e:23:be:a3:4c: 59:5d:0c:91:2d:0d:0c:c5:47:bc:21:b4:f5:2d:cd:f4:53:d6: 6c:f4:47:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTQuNqwcxzH9KaDtl707pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk NTZiODYwHhcNMjUxMjIzMTMwMTM4WhcNMjUxMjI0MTMwMTM4WjAzMTEwLwYDVQQD EyhmZjhmZjFhOWFlM2ZjNDBkYjAzZTRiMDQyNzczN2JkMTljZjBhOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXeoAoMCKhR6h+SCfmT6zGNr3rR LdZ749JXUtocCfjI+VJbKPpZg5/chPNxkWlycgVhv+7NF8U6LdO1uFvRNTHP3Bsb J8UCKjhgr07eYrS0+ZJMOf1P5SJ1Our+cKYFIv9GKPXPyK7OQXaaDKZujSVuFrco Xy2WWNobx3MZfGArb/fPP1bXJ9O+DYHzCxTD7h6zoZoj4kqcHXZzOQvihwHghoz1 zMXuJ+O6x0wMzED6j6YcQDulrctszfxgOIBmt2KlO3wWKYP9O0JuvcE0uB35hjl6 I78wX/8vDASWrLvgwnJ1m33irokdCmtEYRwmcii4eOO2Z6Z8C8FVN7X0QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+P8amuP8QNsD5LBCdze9Gc8Kl4MB8GA1UdIwQY MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzck4Qyg rYyNuoSQ2pDRo141a6nNOqIPtwSgnvrUH2DN+y30nwVY52/v09kV8IYgtAJeti7Q l+IotIFuYWUusyPWQnYPbMbfzbvBdazMtRuIRRI3eYS9cHZzmouZvNAy3f2NksEz pY9uCRClkQKidoUdoif0lFf+Mw8XZWmRQysyBkwsvaEuC7gZ10gYAyxXhxnmGkZ4 I/rkFp0ExhDYCbFAzURsPW1ZEuSbxGtbOTp7WACYASI3tS4MZCJXdxjSsG5pUsW1 YE/OlXEVG88yCw3ETU1XIMoszDUtasWtzIGMeXxW6Y4jvqNMWV0MkS0NDMVHvCG0 9S3N9FPWbPRHeg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:35 2025 by rpki-client