This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft File: BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json) Hash identifier: r/zxryE5WqeOnBtjLV6UiHF8NUxr/njOaWHDJTJtZy0= Subject key identifier: BB:D2:86:C0:C3:59:4E:B5:B7:99:5C:32:BF:5E:AB:DE:C4:53:DA:A8 Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019B3AC6F08163B57D0F42A827EA23887B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft Manifest number: 11BD Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=) 2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: r0FFHsmeyNPj6mQtlrwG+MmJ74UhzB4Rd1T6ZYzywXU=) 3: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=) 4: nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa (hash: Gb+jmLlW78LaJODUMsMQolCStI4IVcksSh8B2dzPGko=) 5: ppaVoCVyYt16HDG7WfOtkr7EeHs.roa (hash: Qez8a/FWG6eNLOTogKVCXP47/rGL1fBAom4YDZ6wxts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f0:81:63:b5:7d:0f:42:a8:27:ea:23:88:7b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=bbd286c0c3594eb5b7995c32bf5eabdec453daa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:d1:84:0d:56:b9:62:d4:f7:67:07:ce:4d: 8d:94:0e:63:94:42:0e:9d:60:87:fd:46:98:54:40: 2b:32:38:e7:fc:31:27:34:9e:f3:1e:4b:a0:4f:33: 30:5d:97:dc:0c:0b:25:a1:c7:4c:b5:09:7f:a8:e0: f0:04:4c:da:b1:dd:20:6f:89:11:63:96:5b:fb:ec: c1:e9:82:68:de:a5:8b:76:f7:f0:e6:9e:c8:a7:6a: 9a:d9:ff:4e:3a:9f:b4:98:ac:04:01:0e:42:d0:f7: 27:48:0f:2f:5d:f8:e3:d7:d6:a1:9b:0f:70:dd:2a: cc:c0:a4:07:3e:d3:aa:5e:5e:90:5a:a5:1f:82:40: 42:66:0c:ea:73:5f:dc:9a:89:78:2a:58:91:64:d4: 94:c4:6f:76:66:01:06:8b:ae:26:73:1f:4f:74:8f: 33:9d:da:8b:6f:6c:b5:bc:a0:66:d3:ea:c1:a1:01: 43:b6:f8:4e:c9:65:41:c9:b5:8e:2b:da:7e:66:d7: bd:a3:0c:73:87:52:a0:d9:f0:c2:fb:e7:35:e8:03: 76:d9:56:cb:ea:90:0b:20:6b:fb:d3:50:bd:c6:99: aa:01:f6:29:19:13:48:2b:9b:82:f8:da:df:6f:ac: b6:f6:77:cb:1f:4b:f2:b9:12:8a:dc:cd:85:b6:af: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D2:86:C0:C3:59:4E:B5:B7:99:5C:32:BF:5E:AB:DE:C4:53:DA:A8 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c7:f5:5b:18:13:b1:bc:5b:47:7c:c1:53:fc:f5:4c:26:eb: a8:70:7f:dd:a5:7c:3a:c1:28:aa:6c:94:3f:9c:5a:e0:24:09: eb:fe:78:61:ba:95:f2:31:aa:e8:29:c9:7f:cf:0c:18:2f:c0: b2:b5:3d:4d:9e:bc:fc:e0:8e:9a:dc:a8:7d:91:7c:4b:75:ee: b8:b9:36:28:a6:77:55:c9:a9:ee:42:f8:bc:4b:5e:af:b1:78: 6b:5d:5a:48:0f:cd:d9:03:38:4f:b9:44:da:9b:79:64:f9:43: a9:a7:a9:24:a1:fd:b4:8f:d1:69:de:1c:c3:92:07:25:a9:a0: be:ab:9d:29:20:da:51:6a:99:a3:16:b6:2a:d2:95:e3:59:1e: f4:b7:cc:4e:ee:32:68:58:a7:5a:ba:87:0d:e8:25:4b:b4:b4: f3:56:b7:54:74:91:49:fd:6d:9c:be:9f:9d:03:93:25:97:87: f7:ef:27:b1:4d:7d:f8:4e:53:01:79:45:ef:ef:f9:83:f6:0d: 92:a2:e0:8b:56:e2:2c:d1:cb:c3:67:88:bd:98:be:55:a3:df: a6:19:14:d2:f2:43:4e:7b:fe:16:20:da:41:8b:2f:df:c8:b2: 69:38:b2:55:cb:6d:a4:bd:d4:b4:b7:55:dd:56:3f:49:bf:2d: 2e:33:fb:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvCBY7V9D0KoJ+ojiHueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EyhiYmQyODZjMGMzNTk0ZWI1Yjc5OTVjMzJiZjVlYWJkZWM0NTNkYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOXRhA1WuWLU92cHzk2NlA5jlEIO nWCH/UaYVEArMjjn/DEnNJ7zHkugTzMwXZfcDAslocdMtQl/qODwBEzasd0gb4kR Y5Zb++zB6YJo3qWLdvfw5p7Ip2qa2f9OOp+0mKwEAQ5C0PcnSA8vXfjj19ahmw9w 3SrMwKQHPtOqXl6QWqUfgkBCZgzqc1/cmol4KliRZNSUxG92ZgEGi64mcx9PdI8z ndqLb2y1vKBm0+rBoQFDtvhOyWVBybWOK9p+Zte9owxzh1Kg2fDC++c16AN22VbL 6pALIGv701C9xpmqAfYpGRNIK5uC+Nrfb6y29nfLH0vyuRKK3M2Ftq9f/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvShsDDWU61t5lcMr9eq97EU9qoMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8f1WxgT sbxbR3zBU/z1TCbrqHB/3aV8OsEoqmyUP5xa4CQJ6/54YbqV8jGq6CnJf88MGC/A srU9TZ68/OCOmtyofZF8S3XuuLk2KKZ3Vcmp7kL4vEter7F4a11aSA/N2QM4T7lE 2pt5ZPlDqaepJKH9tI/Rad4cw5IHJamgvqudKSDaUWqZoxa2KtKV41ke9LfMTu4y aFinWrqHDeglS7S081a3VHSRSf1tnL6fnQOTJZeH9+8nsU19+E5TAXlF7+/5g/YN kqLgi1biLNHLw2eIvZi+VaPfphkU0vJDTnv+FiDaQYsv38iyaTiyVcttpL3UtLdV 3VY/Sb8tLjP7VA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:21 2025 by rpki-client