This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json) Hash identifier: +qPMzosUcLgLNbTjUmmhfrh79qXSfhyeqVigNzOxmag= Subject key identifier: 60:8E:7C:A0:8B:B0:47:08:7D:70:F6:15:A9:65:CB:D7:BE:BE:88:7F Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759 Certificate serial: 019B5117B0DEC18AEAD34B2CF18205016DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft Manifest number: 16D8 Signing time: Wed 24 Dec 2025 16:01:05 +0000 Manifest this update: Wed 24 Dec 2025 16:01:05 +0000 Manifest next update: Thu 25 Dec 2025 16:01:05 +0000 Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: 72D7ptWF5IllNfuGFsfDILAbp6B0v55o9z70y4OOXZg=) 2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=) 3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:b0:de:c1:8a:ea:d3:4b:2c:f1:82:05:01:6d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049d4f66598668079353721c21935a00319f6759 Validity Not Before: Dec 24 16:01:05 2025 GMT Not After : Dec 25 16:01:05 2025 GMT Subject: CN=608e7ca08bb047087d70f615a965cbd7bebe887f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:c9:60:e6:41:00:53:20:46:38:7d:14:22: 77:bd:ab:c4:2f:0c:db:84:30:35:14:0e:f3:a8:ad: 9d:3b:e9:d2:43:36:f8:c9:2f:52:cc:50:41:a0:ab: d0:71:ea:af:69:0c:06:27:35:f6:f1:2e:cc:e7:a9: fd:99:83:d9:5d:38:3c:58:9a:42:9c:40:72:fd:cf: 9d:2e:a4:0b:14:df:b3:6b:96:58:75:c1:85:6c:1e: 23:f3:a1:50:a7:b8:66:ed:19:ec:e1:de:1d:62:f6: 8c:4a:16:51:46:22:f6:4d:58:11:73:4b:c9:49:91: 4e:01:e1:a0:2f:33:fa:b4:9a:92:d1:76:ff:3c:f2: c9:07:8a:c0:e2:a7:dd:6c:2a:dc:42:1e:6e:28:6e: 87:9e:39:84:67:5d:b3:ab:ef:5e:7b:54:15:39:9b: 80:97:cd:01:3b:c9:13:e0:06:36:ba:b8:bc:f2:d8: 62:bd:ef:8f:c0:ec:78:27:ef:fe:3f:06:1b:d8:2c: 7a:cc:1f:c0:8f:09:94:da:bc:61:21:4c:bf:8c:7e: 54:dc:9d:4a:66:48:12:59:fe:76:cd:05:63:68:cd: 70:ac:20:a2:36:dc:b8:7e:69:45:90:cd:93:3e:aa: b3:36:12:93:35:21:11:b1:bd:f6:6d:10:a2:5a:36: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8E:7C:A0:8B:B0:47:08:7D:70:F6:15:A9:65:CB:D7:BE:BE:88:7F X509v3 Authority Key Identifier: keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:9c:81:de:e0:98:97:c3:ec:42:4a:d7:18:97:8a:18:b8: 64:fd:1c:59:9a:07:41:57:0c:d8:74:2c:28:0b:a7:37:b4:58: 5c:c8:34:ac:aa:cc:f0:26:cd:cd:d2:62:05:99:af:24:c4:6d: 5f:09:8f:c7:34:e2:2c:c9:f5:90:6e:73:25:10:a3:51:c9:0a: dd:18:ba:9f:bf:a6:d7:0e:7c:c6:c1:58:cc:a4:7b:6e:72:3e: 04:93:0b:af:11:c9:7c:83:33:3c:a4:75:6c:bb:03:be:b7:e9: 24:8e:29:da:f0:e6:f7:fd:e1:b9:90:b2:79:72:2a:6f:f6:fb: 02:c3:76:91:09:63:43:3e:69:a8:f5:04:5b:90:ad:1d:b9:74: 0a:e4:1e:d8:4a:3c:d2:c1:ea:de:a0:d2:e5:cf:b9:6d:f2:bb: 6c:75:6e:32:bb:f2:bd:d5:48:27:5c:84:3d:8d:07:bd:56:5f: a9:92:ba:74:51:f2:ed:a1:d4:b9:c3:70:42:31:77:d6:ec:a0: 36:23:d6:7a:5e:ad:ff:3b:fa:9a:7d:da:5d:5a:26:72:fe:45: cf:9e:4a:16:97:2d:02:6d:bd:c0:45:20:2d:d9:54:10:58:01: 87:19:d1:8f:1d:e5:9d:68:a6:36:c2:4a:f9:64:e0:df:e8:41: fe:ca:4c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF7DewYrq00ss8YIFAW3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OWQ0ZjY2NTk4NjY4MDc5MzUzNzIxYzIxOTM1YTAwMzE5 ZjY3NTkwHhcNMjUxMjI0MTYwMTA1WhcNMjUxMjI1MTYwMTA1WjAzMTEwLwYDVQQD Eyg2MDhlN2NhMDhiYjA0NzA4N2Q3MGY2MTVhOTY1Y2JkN2JlYmU4ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto/JYOZBAFMgRjh9FCJ3vavELwzb hDA1FA7zqK2dO+nSQzb4yS9SzFBBoKvQceqvaQwGJzX28S7M56n9mYPZXTg8WJpC nEBy/c+dLqQLFN+za5ZYdcGFbB4j86FQp7hm7Rns4d4dYvaMShZRRiL2TVgRc0vJ SZFOAeGgLzP6tJqS0Xb/PPLJB4rA4qfdbCrcQh5uKG6HnjmEZ12zq+9ee1QVOZuA l80BO8kT4AY2uri88thive+PwOx4J+/+PwYb2Cx6zB/AjwmU2rxhIUy/jH5U3J1K ZkgSWf52zQVjaM1wrCCiNty4fmlFkM2TPqqzNhKTNSERsb32bRCiWjbYGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCOfKCLsEcIfXD2Fally9e+voh/MB8GA1UdIwQY MBaAFASdT2ZZhmgHk1NyHCGTWgAxn2dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEt OTI3OTU0N2VjYTU1LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEtOTI3OTU0N2VjYTU1 LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyicgd7g mJfD7EJK1xiXihi4ZP0cWZoHQVcM2HQsKAunN7RYXMg0rKrM8CbNzdJiBZmvJMRt XwmPxzTiLMn1kG5zJRCjUckK3Ri6n7+m1w58xsFYzKR7bnI+BJMLrxHJfIMzPKR1 bLsDvrfpJI4p2vDm9/3huZCyeXIqb/b7AsN2kQljQz5pqPUEW5CtHbl0CuQe2Eo8 0sHq3qDS5c+5bfK7bHVuMrvyvdVIJ1yEPY0HvVZfqZK6dFHy7aHUucNwQjF31uyg NiPWel6t/zv6mn3aXVomcv5Fz55KFpctAm29wEUgLdlUEFgBhxnRjx3lnWimNsJK +WTg3+hB/spMYA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:06:03 2025 by rpki-client