This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft File: BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json) Hash identifier: U502q+U9ACqUYrB3B4OwSZw1QhQXa+uKMlzAfrkcf9I= Subject key identifier: 5E:53:16:B3:83:37:D0:35:14:25:4A:0F:B1:E1:1A:E5:56:50:20:D1 Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019B484BA874EC461DA535BE629E0A1E2B4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft Manifest number: 11C4 Signing time: Mon 22 Dec 2025 23:01:16 +0000 Manifest this update: Mon 22 Dec 2025 23:01:16 +0000 Manifest next update: Tue 23 Dec 2025 23:01:16 +0000 Files and hashes: 1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=) 2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: b8sdmvVk/TNQbBQP5QiR0IHjxk9tc1z97A5u97EKNuw=) 3: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=) 4: nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa (hash: Gb+jmLlW78LaJODUMsMQolCStI4IVcksSh8B2dzPGko=) 5: ppaVoCVyYt16HDG7WfOtkr7EeHs.roa (hash: Qez8a/FWG6eNLOTogKVCXP47/rGL1fBAom4YDZ6wxts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:a8:74:ec:46:1d:a5:35:be:62:9e:0a:1e:2b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 22 23:01:16 2025 GMT Not After : Dec 23 23:01:16 2025 GMT Subject: CN=5e5316b38337d03514254a0fb1e11ae5565020d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:ed:22:9d:f2:4b:e7:dc:35:cd:5b:09:29: 9c:af:1e:33:b5:5c:0c:b0:7d:4f:ad:05:dc:2c:47: bf:5d:88:30:bc:42:ff:a1:aa:98:34:ad:b8:e2:9c: d5:e8:28:a9:4f:59:6a:f5:8d:af:a5:79:f6:3a:a5: 6f:b6:a5:18:fb:a4:c0:1b:a6:79:7c:ca:8d:dd:0f: df:ac:50:24:46:83:82:b2:13:ce:95:ae:63:18:a6: 5f:91:55:9b:e0:cb:c9:11:a6:4e:83:0c:bc:d2:9f: e2:f7:00:93:a8:18:4a:b2:b2:e1:94:a2:95:cf:2c: e0:dc:5c:de:f6:ce:fa:46:30:e9:3f:68:5c:92:54: b5:6a:b0:e1:a3:ed:d8:d9:57:25:0f:7e:76:77:2e: 57:fb:48:e6:7b:68:ff:cb:67:85:a6:21:1b:f0:cf: 42:7f:3c:81:ff:36:19:da:3c:d2:e3:cd:ee:ef:ce: a1:ac:2d:d9:48:e9:d3:8f:5a:5b:0b:ae:64:a4:e4: 77:cc:5b:10:d6:83:fb:c4:e4:a5:2a:b3:3a:db:c9: 10:1d:44:1f:48:65:ae:aa:a2:52:6f:45:e9:23:39: 21:cc:61:18:25:58:d1:7c:23:e5:c2:0c:26:ad:b5: 15:93:fc:93:e8:4e:e6:3c:39:57:e5:a0:5f:63:82: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:53:16:B3:83:37:D0:35:14:25:4A:0F:B1:E1:1A:E5:56:50:20:D1 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c6:a3:1a:c8:ce:18:2b:bf:30:61:93:81:48:d1:94:ad:68: 13:9a:36:ee:57:84:7e:d8:2e:be:36:2b:12:fb:46:ba:89:36: 5c:76:96:02:60:6c:68:ab:eb:45:c2:d6:85:0a:9e:3e:ec:aa: e1:06:07:3c:77:ae:48:9c:ac:d6:e8:84:55:07:37:9a:94:d4: 63:7b:75:72:62:41:c1:93:29:1f:dc:18:d0:9a:19:2e:a8:14: 85:d7:9c:40:f7:6a:d2:1e:6f:89:e4:3f:58:62:09:33:18:27: fd:27:8a:3a:18:d8:32:da:cd:96:8f:dc:43:de:b8:fa:a2:2e: a1:73:50:18:0c:8a:4c:d3:50:6b:97:98:20:bc:11:17:08:1c: d9:ac:0c:d1:01:01:54:9f:4b:0d:f8:63:bc:02:60:f5:1a:8a: e0:17:e6:6f:d3:8a:82:38:58:45:e0:2f:8a:2f:92:d4:00:67: 3a:91:86:6e:3a:d4:92:e2:d8:b8:43:f6:d7:78:40:d9:86:43: 87:b6:77:27:07:58:89:21:29:3b:0b:f7:f4:f2:fc:eb:16:66: 86:95:fb:f1:1a:7f:8a:21:5c:af:4a:22:cc:9a:b6:93:93:4b: fc:6a:c2:96:02:b4:a8:2b:16:86:40:d9:1f:96:29:fe:a7:d2: 6f:e4:0c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS6h07EYdpTW+Yp4KHitPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjIyMjMwMTE2WhcNMjUxMjIzMjMwMTE2WjAzMTEwLwYDVQQD Eyg1ZTUzMTZiMzgzMzdkMDM1MTQyNTRhMGZiMWUxMWFlNTU2NTAyMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmrtIp3yS+fcNc1bCSmcrx4ztVwM sH1PrQXcLEe/XYgwvEL/oaqYNK244pzV6CipT1lq9Y2vpXn2OqVvtqUY+6TAG6Z5 fMqN3Q/frFAkRoOCshPOla5jGKZfkVWb4MvJEaZOgwy80p/i9wCTqBhKsrLhlKKV zyzg3Fze9s76RjDpP2hcklS1arDho+3Y2VclD352dy5X+0jme2j/y2eFpiEb8M9C fzyB/zYZ2jzS483u786hrC3ZSOnTj1pbC65kpOR3zFsQ1oP7xOSlKrM628kQHUQf SGWuqqJSb0XpIzkhzGEYJVjRfCPlwgwmrbUVk/yT6E7mPDlX5aBfY4IsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5TFrODN9A1FCVKD7HhGuVWUCDRMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcajGsjO GCu/MGGTgUjRlK1oE5o27leEftguvjYrEvtGuok2XHaWAmBsaKvrRcLWhQqePuyq 4QYHPHeuSJys1uiEVQc3mpTUY3t1cmJBwZMpH9wY0JoZLqgUhdecQPdq0h5vieQ/ WGIJMxgn/SeKOhjYMtrNlo/cQ964+qIuoXNQGAyKTNNQa5eYILwRFwgc2awM0QEB VJ9LDfhjvAJg9RqK4Bfmb9OKgjhYReAvii+S1ABnOpGGbjrUkuLYuEP213hA2YZD h7Z3JwdYiSEpOwv39PL86xZmhpX78Rp/iiFcr0oizJq2k5NL/GrClgK0qCsWhkDZ H5Yp/qfSb+QMOA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:45 2025 by rpki-client