This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json) Hash identifier: d5YLLg4WnHCNzv0XpLHqKSwrA9V5DtvUpRKuF2BhthU= Subject key identifier: DD:B5:B8:CE:75:E2:3B:7C:CD:30:79:DB:CF:89:45:88:72:49:54:51 Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759 Certificate serial: 019B66557F04F46048275508F6FC51481964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft Manifest number: 16E3 Signing time: Sun 28 Dec 2025 19:00:37 +0000 Manifest this update: Sun 28 Dec 2025 19:00:37 +0000 Manifest next update: Mon 29 Dec 2025 19:00:37 +0000 Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: 5hzcrlO+S9djK4TNumejrThReK1JArm4edw153X1rWg=) 2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=) 3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:7f:04:f4:60:48:27:55:08:f6:fc:51:48:19:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049d4f66598668079353721c21935a00319f6759 Validity Not Before: Dec 28 19:00:37 2025 GMT Not After : Dec 29 19:00:37 2025 GMT Subject: CN=ddb5b8ce75e23b7ccd3079dbcf89458872495451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:44:92:b7:b4:d5:a9:5b:bb:df:70:3c:e4: 45:54:99:21:5f:14:d4:9f:d8:fd:82:89:d9:f9:a4: 57:61:1a:76:ee:89:38:8a:df:8a:b2:cd:f0:2a:5d: bd:dc:5d:a6:af:04:16:34:ce:95:28:fc:72:b1:14: d2:0c:6f:f0:f6:b9:b8:c6:d3:60:ec:07:82:49:2c: 24:d4:5f:08:ac:7e:96:b9:5d:a1:c5:2b:37:cb:5d: ba:ff:50:7e:68:56:3b:6a:0b:6b:f0:84:6e:53:26: 27:e5:8d:a4:07:34:b9:27:1c:60:ba:66:8c:b5:fe: 0d:cb:60:65:9c:b3:3b:1d:b8:bc:35:3d:ee:f3:58: 8b:76:09:72:7a:14:0b:25:55:9b:2d:21:f4:ef:53: 63:19:8c:9c:c8:26:f6:b7:d6:1a:b2:ac:9a:f0:8c: f2:a5:21:c2:dd:2c:97:22:b0:63:24:5b:bb:e7:52: c1:3d:2a:72:09:f4:98:c4:3e:1b:34:7f:75:e1:31: 9f:bc:88:00:10:53:e3:e7:3c:d7:07:07:38:2a:07: 70:dd:5a:4d:92:d2:1a:b4:bf:f6:21:34:76:a0:3a: 01:40:da:9b:99:56:eb:82:0c:c3:bb:dd:65:87:4d: 52:26:17:9e:59:22:c6:d6:ce:5c:0c:b8:58:53:fb: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:B8:CE:75:E2:3B:7C:CD:30:79:DB:CF:89:45:88:72:49:54:51 X509v3 Authority Key Identifier: keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:36:ba:df:f4:95:01:72:8b:09:67:53:cd:d7:e1:14:ab: 08:09:59:42:de:f5:18:ec:a2:60:b6:51:b2:66:0a:20:de:79: ea:0e:fe:48:f8:fc:3c:e6:97:15:36:18:8a:6b:a1:eb:ec:24: 99:46:57:d7:01:1d:c1:f3:c2:0e:70:16:02:9e:26:73:d6:de: 5f:7e:aa:b1:fa:31:65:9e:73:75:ce:80:7e:f4:ad:6c:ca:01: ca:dd:6b:57:0c:cc:86:76:62:cb:c9:d8:c2:0b:ee:2c:12:f6: 0c:5e:8c:2b:30:ec:b3:8f:dd:23:34:b1:ca:41:f6:9c:b9:64: 15:5d:c0:c0:43:03:dc:1a:5f:67:d5:29:a7:91:a3:45:c4:11: 94:92:16:fc:eb:e5:b4:b4:9c:d9:1e:1a:e1:1c:2a:64:e9:ee: a8:95:49:fc:73:0c:39:5b:d0:83:e8:03:b9:07:c3:f7:da:d1: 12:be:7a:88:c4:9c:d0:58:16:bd:28:d8:61:66:a1:a3:1a:89: fa:33:ac:16:15:15:8b:03:e6:d6:4f:c5:45:11:e5:61:14:94: 12:71:47:10:b2:7c:f7:a0:20:e1:56:a2:51:c3:92:07:c1:19: 9e:59:77:b0:2a:20:26:06:17:b2:65:a0:06:a9:8c:63:47:14: 1d:43:6d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVX8E9GBIJ1UI9vxRSBlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OWQ0ZjY2NTk4NjY4MDc5MzUzNzIxYzIxOTM1YTAwMzE5 ZjY3NTkwHhcNMjUxMjI4MTkwMDM3WhcNMjUxMjI5MTkwMDM3WjAzMTEwLwYDVQQD EyhkZGI1YjhjZTc1ZTIzYjdjY2QzMDc5ZGJjZjg5NDU4ODcyNDk1NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZEkre01albu99wPORFVJkhXxTU n9j9gonZ+aRXYRp27ok4it+Kss3wKl293F2mrwQWNM6VKPxysRTSDG/w9rm4xtNg 7AeCSSwk1F8IrH6WuV2hxSs3y126/1B+aFY7agtr8IRuUyYn5Y2kBzS5JxxgumaM tf4Ny2BlnLM7Hbi8NT3u81iLdglyehQLJVWbLSH071NjGYycyCb2t9Yasqya8Izy pSHC3SyXIrBjJFu751LBPSpyCfSYxD4bNH914TGfvIgAEFPj5zzXBwc4Kgdw3VpN ktIatL/2ITR2oDoBQNqbmVbrggzDu91lh01SJheeWSLG1s5cDLhYU/vmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN21uM514jt8zTB528+JRYhySVRRMB8GA1UdIwQY MBaAFASdT2ZZhmgHk1NyHCGTWgAxn2dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEt OTI3OTU0N2VjYTU1LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEtOTI3OTU0N2VjYTU1 LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwU2ut/0 lQFyiwlnU83X4RSrCAlZQt71GOyiYLZRsmYKIN556g7+SPj8POaXFTYYimuh6+wk mUZX1wEdwfPCDnAWAp4mc9beX36qsfoxZZ5zdc6AfvStbMoByt1rVwzMhnZiy8nY wgvuLBL2DF6MKzDss4/dIzSxykH2nLlkFV3AwEMD3BpfZ9Upp5GjRcQRlJIW/Ovl tLSc2R4a4RwqZOnuqJVJ/HMMOVvQg+gDuQfD99rREr56iMSc0FgWvSjYYWahoxqJ +jOsFhUViwPm1k/FRRHlYRSUEnFHELJ896Ag4VaiUcOSB8EZnll3sCogJgYXsmWg BqmMY0cUHUNt0g== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:15 2025 by rpki-client