This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json) Hash identifier: cb8urW6SCOn3/kop4Uror0pehVr1/wwo0ii9FpVcR2Y= Subject key identifier: 67:3F:EF:87:02:0C:66:54:D7:3D:49:AD:DF:1C:5D:29:CC:D9:EC:02 Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe Certificate serial: 019B72FE9DE5FDA4444434F13069C368E6CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 06:00:47 +0000 Manifest this update: Wed 31 Dec 2025 06:00:47 +0000 Manifest next update: Thu 01 Jan 2026 06:00:47 +0000 Files and hashes: 1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: hYgeGXAgeSX6aYXt0E6ExYcuM7x+IHrT+UHibh0whng=) 2: UkP4jKKKyGHBawn8RPGOoI0g86k.roa (hash: t1NCQU9kIDrxSOL+gI05c500j4/UZOaC1oFaRb7Gluw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:9d:e5:fd:a4:44:44:34:f1:30:69:c3:68:e6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe Validity Not Before: Dec 31 06:00:47 2025 GMT Not After : Jan 1 06:00:47 2026 GMT Subject: CN=673fef87020c6654d73d49addf1c5d29ccd9ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:93:f7:ea:1e:5e:62:e6:4f:7c:bd:73:50: 92:ba:f6:f2:7a:37:ec:2f:bd:9a:07:73:12:f3:20: db:c5:55:d6:84:c2:9c:c5:9a:6b:9b:3b:36:2a:f6: 03:02:f6:17:06:b9:9e:26:21:cb:ca:73:94:94:9c: 75:d8:d6:b3:5e:5b:e5:09:95:c6:50:f3:eb:e0:fd: ed:ed:60:40:4e:cd:63:9b:17:c6:f4:32:0c:2f:a4: 6b:e6:4c:7f:e4:7d:c3:5c:db:cb:88:a9:1b:f6:a2: 5d:5d:f2:ac:01:8f:96:43:69:b3:cc:ec:65:d5:e6: f9:3d:93:36:4e:ad:f4:12:18:b0:4d:54:62:98:64: 61:34:cd:85:58:db:5f:c1:fd:c6:d4:84:4b:46:0b: d9:07:c4:62:31:c5:d2:8f:e6:c7:a6:e7:e2:21:65: 90:96:bd:22:24:90:ef:cb:62:37:78:4b:27:59:26: 0c:a5:66:86:59:07:3d:44:a8:84:6b:61:b8:54:b1: 3a:6d:de:77:68:24:6a:82:fb:8a:9b:19:7c:52:b4: 7d:53:a2:21:c4:09:12:61:d7:2e:80:ed:bd:99:d9: c0:c9:52:a8:e2:d2:af:52:f6:7e:61:07:a3:82:04: d0:db:25:03:4e:ac:14:22:a8:1f:df:07:3a:59:7e: 10:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:EF:87:02:0C:66:54:D7:3D:49:AD:DF:1C:5D:29:CC:D9:EC:02 X509v3 Authority Key Identifier: keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:45:ec:b6:b5:e4:ef:de:47:32:ef:35:8b:9b:b8:3c:4d:02: a5:36:55:9f:46:11:1b:b3:18:c1:23:a8:5e:9e:a9:4c:39:ad: 8c:e6:19:59:87:73:f8:e3:65:44:f6:37:a2:22:9d:59:13:63: a8:05:25:8b:1a:f8:5e:60:ad:68:be:4d:98:db:8b:65:8f:7e: fb:cc:5d:80:d9:9c:ba:b4:8b:09:8f:8b:16:95:fc:a5:07:25: bc:e6:04:69:5c:22:48:b0:b5:34:22:54:92:73:ec:1a:19:3a: 29:f5:73:8b:1b:77:e1:6e:29:a2:a1:3f:2b:9f:f0:e0:56:05: 03:7e:8e:a3:78:7e:90:c9:52:d2:65:28:02:4f:3c:7e:9c:30: 7e:87:fc:61:d7:ad:82:cd:28:1d:f1:f4:22:0c:0f:a4:a3:ca: db:7c:f6:e4:4f:19:52:ef:f1:95:f6:d7:d9:fe:d5:cf:8a:b3: 44:bd:78:14:62:10:b0:3a:6c:6a:19:2d:5c:7b:b0:9c:b9:c7: 69:69:bc:1b:66:f6:5c:40:2e:d1:86:bc:c4:4b:9e:d7:d0:4a: 61:88:dc:73:56:6f:86:42:b1:db:4f:d9:eb:bf:1f:a3:58:0f: 24:9f:a0:b9:5b:a6:54:98:9c:98:60:af:58:c2:cf:c2:84:28: c4:86:c5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/p3l/aRERDTxMGnDaObKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1 OGQ1ZmUwHhcNMjUxMjMxMDYwMDQ3WhcNMjYwMTAxMDYwMDQ3WjAzMTEwLwYDVQQD Eyg2NzNmZWY4NzAyMGM2NjU0ZDczZDQ5YWRkZjFjNWQyOWNjZDllYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCaT9+oeXmLmT3y9c1CSuvbyejfs L72aB3MS8yDbxVXWhMKcxZprmzs2KvYDAvYXBrmeJiHLynOUlJx12NazXlvlCZXG UPPr4P3t7WBATs1jmxfG9DIML6Rr5kx/5H3DXNvLiKkb9qJdXfKsAY+WQ2mzzOxl 1eb5PZM2Tq30EhiwTVRimGRhNM2FWNtfwf3G1IRLRgvZB8RiMcXSj+bHpufiIWWQ lr0iJJDvy2I3eEsnWSYMpWaGWQc9RKiEa2G4VLE6bd53aCRqgvuKmxl8UrR9U6Ih xAkSYdcugO29mdnAyVKo4tKvUvZ+YQejggTQ2yUDTqwUIqgf3wc6WX4QtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc/74cCDGZU1z1Jrd8cXSnM2ewCMB8GA1UdIwQY MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1EXstrXk 795HMu81i5u4PE0CpTZVn0YRG7MYwSOoXp6pTDmtjOYZWYdz+ONlRPY3oiKdWRNj qAUlixr4XmCtaL5NmNuLZY9++8xdgNmcurSLCY+LFpX8pQclvOYEaVwiSLC1NCJU knPsGhk6KfVzixt34W4poqE/K5/w4FYFA36Oo3h+kMlS0mUoAk88fpwwfof8Ydet gs0oHfH0IgwPpKPK23z25E8ZUu/xlfbX2f7Vz4qzRL14FGIQsDpsahktXHuwnLnH aWm8G2b2XEAu0Ya8xEue19BKYYjcc1ZvhkKx20/Z678fo1gPJJ+guVumVJicmGCv WMLPwoQoxIbFFQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:53 2025 by rpki-client