This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json) Hash identifier: c8fhEUb9SwWyZhpyRcS3Ci4PriKOWo071tswtRkPcS8= Subject key identifier: 13:AA:31:CD:99:EC:B5:8D:75:DC:A4:1C:5B:32:12:7F:DB:7A:1B:19 Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019B37C5ED738282E269AE458F1B9E59C310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft Manifest number: 0668 Signing time: Fri 19 Dec 2025 18:01:16 +0000 Manifest this update: Fri 19 Dec 2025 18:01:16 +0000 Manifest next update: Sat 20 Dec 2025 18:01:16 +0000 Files and hashes: 1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=) 2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: cEKpHUGZUm7CMu3OBEt8vC/J1KN5KpkMlHfqwiuV7do=) 3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=) 4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=) 5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=) 6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=) 7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ed:73:82:82:e2:69:ae:45:8f:1b:9e:59:c3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Dec 19 18:01:16 2025 GMT Not After : Dec 20 18:01:16 2025 GMT Subject: CN=13aa31cd99ecb58d75dca41c5b32127fdb7a1b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:b6:e6:9e:75:68:20:dc:91:87:fb:84:08: 68:d7:ce:76:61:82:d3:86:1b:b5:5f:21:d5:03:87: ce:56:12:82:9e:9f:b2:61:b7:39:63:71:4f:86:c2: 76:11:76:86:78:9a:3b:59:28:8a:67:2e:7f:bc:53: 37:e0:62:df:55:2b:cc:70:91:2b:0c:d3:cf:ff:69: db:23:c6:81:e4:b0:b3:33:07:46:c7:9c:9f:b4:cf: 37:3b:1b:e2:f6:47:eb:73:c9:57:5c:f5:98:71:8f: 9f:6f:5b:61:51:38:de:2e:91:8d:36:ea:ef:4c:3d: 5b:64:1d:9f:cb:60:e6:a4:07:8c:81:ce:5d:8d:cb: ce:b4:e9:bb:40:78:b8:2f:ab:6a:41:3c:5a:5f:72: ea:26:1c:9e:12:58:21:91:65:29:a3:26:6b:ad:49: 8c:2f:ec:a0:f8:81:96:50:b1:f5:c9:9b:86:d9:e3: f9:2b:dd:e0:69:c4:6c:12:d0:07:88:e4:91:5b:ef: 0c:3a:6a:28:3c:88:e2:b4:83:58:bd:06:c0:bf:d1: 87:e7:69:61:b2:7d:ff:61:26:28:04:60:38:8b:52: 3d:6b:99:b5:3f:33:3a:31:4e:58:6a:cb:7f:85:00: f6:7c:1e:3c:42:64:11:99:77:ba:71:7c:d7:9c:b8: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:31:CD:99:EC:B5:8D:75:DC:A4:1C:5B:32:12:7F:DB:7A:1B:19 X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dd:bc:f5:9d:6f:60:56:62:d6:de:ba:25:65:e5:19:6f:cc: 3c:f4:82:73:9d:12:0f:a6:0e:3b:a4:97:79:e4:a0:4c:d5:26: 37:26:c9:36:0a:1b:eb:dd:8b:f1:95:4b:9a:11:ea:1c:c1:e5: ee:88:67:f6:c3:a4:da:fa:02:f3:52:b3:2d:79:52:4f:c9:2e: d9:d7:fc:d5:89:e1:bd:cd:6e:3f:1a:c4:a4:b2:4a:4c:2c:d6: d6:3e:88:6d:dc:c4:31:7b:8a:22:c8:09:e4:aa:d9:06:f8:2e: 86:c1:94:a4:56:2f:25:04:5e:85:ef:4c:74:27:a6:17:20:c3: e1:4d:fd:5f:7c:78:c4:5a:2a:60:22:b9:cc:d5:eb:f9:8b:ad: e4:5e:a1:1d:dc:bf:bc:86:61:89:8d:1b:05:b6:12:ff:25:51: 67:b2:44:33:37:93:f5:6e:d2:c1:32:40:0d:4d:0a:1d:b7:c2: bf:6f:37:13:3f:17:3f:f0:10:a8:38:37:7f:16:db:80:8a:f9: 82:59:91:79:5a:13:86:3a:d1:32:b1:ee:fb:33:6b:3c:d9:72: 70:9f:55:3f:1b:4d:18:27:03:b0:fd:ad:c7:ea:06:3d:6b:7e: 09:97:93:02:ee:99:6f:30:ea:ee:d8:9f:77:47:37:d2:3b:ed: 89:97:b9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xe1zgoLiaa5FjxueWcMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjUxMjE5MTgwMTE2WhcNMjUxMjIwMTgwMTE2WjAzMTEwLwYDVQQD EygxM2FhMzFjZDk5ZWNiNThkNzVkY2E0MWM1YjMyMTI3ZmRiN2ExYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0625p51aCDckYf7hAho1852YYLT hhu1XyHVA4fOVhKCnp+yYbc5Y3FPhsJ2EXaGeJo7WSiKZy5/vFM34GLfVSvMcJEr DNPP/2nbI8aB5LCzMwdGx5yftM83Oxvi9kfrc8lXXPWYcY+fb1thUTjeLpGNNurv TD1bZB2fy2DmpAeMgc5djcvOtOm7QHi4L6tqQTxaX3LqJhyeElghkWUpoyZrrUmM L+yg+IGWULH1yZuG2eP5K93gacRsEtAHiOSRW+8MOmooPIjitINYvQbAv9GH52lh sn3/YSYoBGA4i1I9a5m1PzM6MU5Yast/hQD2fB48QmQRmXe6cXzXnLieXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOqMc2Z7LWNddykHFsyEn/behsZMB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd289Z1v YFZi1t66JWXlGW/MPPSCc50SD6YOO6SXeeSgTNUmNybJNgob692L8ZVLmhHqHMHl 7ohn9sOk2voC81KzLXlST8ku2df81Ynhvc1uPxrEpLJKTCzW1j6IbdzEMXuKIsgJ 5KrZBvguhsGUpFYvJQRehe9MdCemFyDD4U39X3x4xFoqYCK5zNXr+Yut5F6hHdy/ vIZhiY0bBbYS/yVRZ7JEMzeT9W7SwTJADU0KHbfCv283Ez8XP/AQqDg3fxbbgIr5 glmReVoThjrRMrHu+zNrPNlycJ9VPxtNGCcDsP2tx+oGPWt+CZeTAu6ZbzDq7tif d0c30jvtiZe5SQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:14 2025 by rpki-client