This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json) Hash identifier: 2n7FxPMIz8JqEYyM4cw3b3HysAuhWnHEXTCcgCiatiY= Subject key identifier: 50:6C:FF:D7:D7:F7:1F:CD:08:D9:5B:D3:45:13:D9:85:06:A4:39:BE Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019B390F4434D1E42B517D47E455EB3CC83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft Manifest number: 16C6 Signing time: Sat 20 Dec 2025 00:01:00 +0000 Manifest this update: Sat 20 Dec 2025 00:01:00 +0000 Manifest next update: Sun 21 Dec 2025 00:01:00 +0000 Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: JA8KB9g7jOAu9KxRhaSRrEvhIaVnxuMmxTpR8Nc/glY=) 2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=) 3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=) 4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:44:34:d1:e4:2b:51:7d:47:e4:55:eb:3c:c8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Dec 20 00:01:00 2025 GMT Not After : Dec 21 00:01:00 2025 GMT Subject: CN=506cffd7d7f71fcd08d95bd34513d98506a439be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9d:f2:8c:f2:02:d6:3d:8d:cc:d3:d2:4e:ff: 54:2d:1f:76:52:8c:55:5d:6c:51:30:f1:e1:c9:c5: 44:f5:f2:3c:76:cc:c6:72:90:c4:8c:20:a4:3e:7c: e3:f9:98:3e:fa:90:6c:e6:43:28:c0:79:40:3b:8c: fc:0a:a8:9c:93:8b:36:7c:4c:1b:c0:2c:c4:6e:41: 50:97:8b:e1:4f:f6:50:ed:7b:1a:f4:23:5b:62:79: 6e:53:da:fe:b0:ea:f2:27:45:3a:f9:04:ca:02:b5: 1e:6a:39:7d:90:89:01:37:b3:8c:50:46:6b:1d:47: 12:c4:94:8d:ff:1f:f2:d9:a3:78:33:0b:94:9c:51: 35:ef:8c:13:51:b3:a3:db:02:8b:8f:01:a4:8c:0e: 88:cd:b3:f7:76:ca:62:05:eb:f5:fa:fe:e9:e2:d3: db:14:7a:a1:4a:14:d1:96:b2:26:38:31:ea:50:95: a5:68:07:d7:0e:44:ad:c2:b0:2a:27:9f:d7:9e:13: b6:3d:85:1f:9f:fd:5a:72:c7:66:35:3b:74:62:22: 3b:65:38:a6:46:cb:9c:a7:3b:09:79:70:81:2e:4e: 91:78:76:ff:ec:cb:df:26:b6:8f:f9:e0:66:46:a5: d9:7f:45:b1:56:17:57:ef:b8:ef:14:d0:d3:66:a0: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6C:FF:D7:D7:F7:1F:CD:08:D9:5B:D3:45:13:D9:85:06:A4:39:BE X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a6:d1:6d:70:ea:4e:b6:e0:9e:33:d5:df:6c:c2:2c:15:01: 22:2d:45:a0:15:f5:f4:e1:ed:48:80:94:fb:04:7d:83:53:02: b7:5f:fe:89:ca:8c:a1:47:35:72:eb:b2:57:5b:aa:88:41:db: f1:b6:5d:dc:02:f1:46:b6:40:37:e1:2d:5c:12:e0:8e:d4:ee: 44:5d:5a:d2:fc:3c:88:85:23:63:9e:c6:36:cb:b8:b8:ca:47: a4:83:4b:eb:61:74:98:d9:27:c3:96:e4:5d:6a:9d:82:51:6e: ab:28:80:7e:e0:8d:ac:a5:9d:50:0a:fa:25:cb:d6:bd:9c:c0: 62:d0:5a:74:8e:df:56:24:bc:4f:e9:ce:02:51:03:a3:9d:d7: 04:22:c3:da:ec:b7:08:b8:52:ee:b4:d0:5b:6f:0f:69:f6:20: a4:5b:ea:e2:41:b1:ff:2e:83:15:f8:c5:4f:b4:9f:75:64:98: 35:83:0b:b7:0b:77:e7:e5:ef:ac:94:5c:d4:4f:01:d0:ad:41: 80:47:45:14:51:08:c0:f4:e5:69:e6:02:84:f6:24:fd:36:59: 4d:73:bd:fe:ec:d7:d1:29:60:76:d1:a4:ba:ee:0e:ad:ab:b7: ce:7b:3f:fd:b3:3e:a2:57:c5:56:4d:32:dd:83:84:62:1e:93: ef:05:f3:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D0Q00eQrUX1H5FXrPMg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjUxMjIwMDAwMTAwWhcNMjUxMjIxMDAwMTAwWjAzMTEwLwYDVQQD Eyg1MDZjZmZkN2Q3ZjcxZmNkMDhkOTViZDM0NTEzZDk4NTA2YTQzOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J3yjPIC1j2NzNPSTv9ULR92UoxV XWxRMPHhycVE9fI8dszGcpDEjCCkPnzj+Zg++pBs5kMowHlAO4z8Cqick4s2fEwb wCzEbkFQl4vhT/ZQ7Xsa9CNbYnluU9r+sOryJ0U6+QTKArUeajl9kIkBN7OMUEZr HUcSxJSN/x/y2aN4MwuUnFE174wTUbOj2wKLjwGkjA6IzbP3dspiBev1+v7p4tPb FHqhShTRlrImODHqUJWlaAfXDkStwrAqJ5/XnhO2PYUfn/1acsdmNTt0YiI7ZTim RsucpzsJeXCBLk6ReHb/7MvfJraP+eBmRqXZf0WxVhdX77jvFNDTZqBn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBs/9fX9x/NCNlb00UT2YUGpDm+MB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKbRbXDq TrbgnjPV32zCLBUBIi1FoBX19OHtSICU+wR9g1MCt1/+icqMoUc1cuuyV1uqiEHb 8bZd3ALxRrZAN+EtXBLgjtTuRF1a0vw8iIUjY57GNsu4uMpHpINL62F0mNknw5bk XWqdglFuqyiAfuCNrKWdUAr6JcvWvZzAYtBadI7fViS8T+nOAlEDo53XBCLD2uy3 CLhS7rTQW28PafYgpFvq4kGx/y6DFfjFT7SfdWSYNYMLtwt35+XvrJRc1E8B0K1B gEdFFFEIwPTlaeYChPYk/TZZTXO9/uzX0SlgdtGkuu4Orau3zns//bM+olfFVk0y 3YOEYh6T7wXzjw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:41 2025 by rpki-client