This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json) Hash identifier: ehFfA7SxZGwLBVY4N/GvGaoOcX258pEBHwSoTBODiq8= Subject key identifier: 28:6A:94:76:4D:BA:8F:33:68:87:36:19:0F:5E:F3:32:4E:03:37:FF Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Certificate serial: 019B4C27D2C44CA6BDD74D560012860023F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft Manifest number: 146A Signing time: Tue 23 Dec 2025 17:00:36 +0000 Manifest this update: Tue 23 Dec 2025 17:00:36 +0000 Manifest next update: Wed 24 Dec 2025 17:00:36 +0000 Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: SFbWgiJg3eKJIJQtpFJ14QatwvFz+DF0Ng0rY+/ieBI=) 2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:d2:c4:4c:a6:bd:d7:4d:56:00:12:86:00:23:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Validity Not Before: Dec 23 17:00:36 2025 GMT Not After : Dec 24 17:00:36 2025 GMT Subject: CN=286a94764dba8f33688736190f5ef3324e0337ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:5f:59:9a:43:db:b6:c8:1f:b0:22:ee:32: 36:8e:5b:be:04:76:16:89:d5:1b:31:b9:5d:dc:6d: 3e:02:8f:92:35:34:23:c4:0f:63:ce:66:74:04:f4: 0b:dd:22:10:5a:71:ad:6e:6e:ba:81:28:8d:35:71: 93:9b:43:cb:31:f5:2c:f0:dd:2d:86:37:a5:27:01: 67:69:fe:77:82:3a:5f:f5:f4:09:af:25:6a:17:d2: 81:c4:ee:07:3c:66:7c:12:f4:f3:70:02:1c:5c:a4: 7c:1a:3e:0b:e2:39:52:93:9c:3c:10:b5:ff:cf:5a: 61:31:9f:82:04:60:02:1f:38:74:a5:88:66:8a:33: ef:1d:7f:77:5e:0c:31:4d:44:e3:b0:e8:c5:e8:e8: da:ae:6f:7f:4e:a3:86:b2:d2:8f:23:ba:6c:c4:18: 01:0a:7d:9f:c5:ae:59:0d:54:07:ae:04:df:53:c0: 37:43:f5:c5:f1:ec:ea:42:0a:19:99:84:2c:01:fc: cb:4c:1e:1c:79:58:4e:f4:64:05:57:60:68:bd:0a: dc:c4:da:13:f0:5c:82:fc:12:73:b6:28:4b:e2:c6: b2:4d:c1:5a:3c:fb:66:f2:f6:de:ae:88:70:5a:4e: 07:e2:2e:ac:8c:e0:5d:e8:21:fb:36:99:2c:b5:bb: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6A:94:76:4D:BA:8F:33:68:87:36:19:0F:5E:F3:32:4E:03:37:FF X509v3 Authority Key Identifier: keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e0:47:f2:42:19:62:70:b9:5f:97:ef:29:d8:2b:30:5e:89: 18:2f:51:53:dc:c2:59:1a:1e:60:e3:8f:1e:1f:b7:d7:dc:56: dd:1e:89:3a:8d:86:b0:99:c8:0d:1e:a8:73:18:03:04:aa:be: 64:74:7d:b8:33:b0:15:cd:8e:4b:ce:1d:ff:76:70:33:fe:3f: 8a:39:ab:5c:95:05:d3:82:00:66:a7:43:8e:f8:53:f4:9b:42: 24:7d:0a:52:fb:5e:8d:e6:67:39:be:1d:0c:c6:9e:81:62:57: 2c:b8:a8:b1:c0:d3:3e:e9:89:dd:96:85:d0:ea:e0:7b:73:8d: 93:fe:dd:ed:74:e4:76:fe:94:0c:d5:b8:cc:00:1f:4e:af:89: d7:42:d6:5b:f8:1a:ed:03:f0:b2:39:5e:7b:98:2e:e4:6b:2c: ef:25:85:f4:71:a6:10:3e:d1:2f:fc:88:8c:76:ca:cf:4c:89: f4:98:e5:ea:03:30:88:08:1b:92:5f:0d:b6:00:a1:e2:94:94: 2b:0d:f8:49:de:2a:0e:c2:b2:23:ff:4f:86:f7:b6:17:70:5b: 73:87:05:85:7c:9f:cd:a4:92:34:30:db:f9:36:ba:c9:36:93: cd:94:39:c2:17:28:88:fe:f1:f0:5b:d5:db:0d:cc:a9:d9:bd: 0b:39:35:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ9LETKa9101WABKGACPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl NzRjNzMwHhcNMjUxMjIzMTcwMDM2WhcNMjUxMjI0MTcwMDM2WjAzMTEwLwYDVQQD EygyODZhOTQ3NjRkYmE4ZjMzNjg4NzM2MTkwZjVlZjMzMjRlMDMzN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5fWZpD27bIH7Ai7jI2jlu+BHYW idUbMbld3G0+Ao+SNTQjxA9jzmZ0BPQL3SIQWnGtbm66gSiNNXGTm0PLMfUs8N0t hjelJwFnaf53gjpf9fQJryVqF9KBxO4HPGZ8EvTzcAIcXKR8Gj4L4jlSk5w8ELX/ z1phMZ+CBGACHzh0pYhmijPvHX93XgwxTUTjsOjF6Ojarm9/TqOGstKPI7psxBgB Cn2fxa5ZDVQHrgTfU8A3Q/XF8ezqQgoZmYQsAfzLTB4ceVhO9GQFV2BovQrcxNoT 8FyC/BJztihL4sayTcFaPPtm8vberohwWk4H4i6sjOBd6CH7NpkstbuFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChqlHZNuo8zaIc2GQ9e8zJOAzf/MB8GA1UdIwQY MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt YzNmNGQxMTI3NGQ0LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0 LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneBH8kIZ YnC5X5fvKdgrMF6JGC9RU9zCWRoeYOOPHh+319xW3R6JOo2GsJnIDR6ocxgDBKq+ ZHR9uDOwFc2OS84d/3ZwM/4/ijmrXJUF04IAZqdDjvhT9JtCJH0KUvtejeZnOb4d DMaegWJXLLioscDTPumJ3ZaF0Orge3ONk/7d7XTkdv6UDNW4zAAfTq+J10LWW/ga 7QPwsjlee5gu5Gss7yWF9HGmED7RL/yIjHbKz0yJ9Jjl6gMwiAgbkl8NtgCh4pSU Kw34Sd4qDsKyI/9Phve2F3Bbc4cFhXyfzaSSNDDb+Ta6yTaTzZQ5whcoiP7x8FvV 2w3Mqdm9Czk1MA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:53:11 2025 by rpki-client