This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json) Hash identifier: 8yQP8xhDLNWMgfna+yyrIijSXpDrS9Pe3/OjHMewlZA= Subject key identifier: 07:C8:11:A4:48:DA:1E:F6:86:D3:DD:D9:AC:F3:49:D3:11:5B:9A:91 Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Certificate serial: 019AF2ADDFD32A149EEB0F5C52E04FA0FCC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft Manifest number: 1313 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: jPG3am2thAi7r0L4UR7qSyB53sTsWcscIT1RkN6c2Ys=) 2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:df:d3:2a:14:9e:eb:0f:5c:52:e0:4f:a0:fc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=07c811a448da1ef686d3ddd9acf349d3115b9a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:f8:e9:dd:22:63:99:fa:c6:66:f5:7f:32: 4f:ef:25:ff:80:97:de:ab:0e:48:f8:a9:b0:23:63: 14:56:f2:b2:55:97:66:1a:d0:17:19:c6:ce:2f:0e: ce:ba:ba:be:be:ea:a2:e5:71:f3:01:fd:7c:c7:2c: 93:22:ca:9f:f5:32:8c:2b:76:73:e2:e7:33:c1:1e: d4:b9:6c:d6:63:62:08:92:23:e8:df:06:a9:e8:21: 6f:24:ed:8a:90:3f:ae:db:a6:aa:e6:21:90:33:4b: 09:08:b4:3d:5a:d6:92:09:ec:b2:44:c6:cc:c8:9a: 0c:04:7d:67:da:f1:30:f5:56:b8:5f:ae:7f:03:39: 1b:95:d5:9b:fa:21:c0:61:f1:c2:47:9c:d6:12:03: 4f:7c:1d:ee:e0:ce:87:41:f9:38:54:d5:ea:6a:90: dc:81:93:82:87:32:8b:e8:5e:71:46:4a:ab:3b:06: 75:a7:37:2b:47:f0:34:f5:d9:59:e2:2b:c4:b6:96: 9c:dc:8b:68:79:f6:69:56:a4:32:81:dc:d0:a5:db: 40:18:98:ec:26:dd:66:1d:f5:49:9f:7b:2d:bb:8f: b6:6f:f6:46:80:35:47:d5:f7:1f:5b:c5:11:2e:78: 0b:e1:7f:b4:55:91:3e:ac:fb:88:8a:e7:86:05:46: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:11:A4:48:DA:1E:F6:86:D3:DD:D9:AC:F3:49:D3:11:5B:9A:91 X509v3 Authority Key Identifier: keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:55:b8:57:4d:9c:57:79:c1:e1:1e:d4:c1:56:48:4d:b1:43: 52:8b:6c:83:62:44:4e:ed:d1:34:2d:92:c5:5f:99:b4:b0:1e: 58:99:36:16:02:b4:0e:2c:11:6a:71:00:0b:f6:a3:92:51:e5: c5:06:ab:52:4b:5a:61:17:4e:bf:dd:96:42:71:9b:03:fe:70: 8c:02:54:7d:d7:8a:74:d0:59:36:58:63:78:fa:03:32:d7:21: e3:aa:76:94:08:13:0a:b0:e0:e2:eb:ca:23:2a:ed:ec:15:ee: 27:db:85:fc:2d:b1:38:c9:0d:73:cb:a0:de:ff:81:60:02:7f: a5:40:71:1d:c1:a8:86:85:e3:c6:02:83:94:7c:4e:27:d0:85: 37:27:5a:58:74:1f:c3:f7:69:22:53:cd:9e:a4:ad:10:55:60: 78:b9:23:af:28:ed:f0:31:e9:13:a6:45:58:f7:9e:ab:d4:13: a2:a7:07:99:78:d1:f4:e6:ca:a9:3c:6e:4d:22:ef:30:9a:b1: 32:5d:30:5a:17:33:ca:cd:cb:7b:54:d5:74:1f:54:cc:2b:30: 0b:81:8a:b3:c0:82:cc:59:77:c7:86:4e:13:09:f0:4c:c9:5b: 5e:0c:59:7d:3e:e0:b9:05:6d:6f:f1:4c:9b:7a:0c:af:de:73: 0e:09:5f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrd/TKhSe6w9cUuBPoPzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTA4ZmI5YWY0ZDZjYWZjY2ZhZTNiMjhlYzZlZDQ5YzQy M2VmYzYwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EygwN2M4MTFhNDQ4ZGExZWY2ODZkM2RkZDlhY2YzNDlkMzExNWI5YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbr46d0iY5n6xmb1fzJP7yX/gJfe qw5I+KmwI2MUVvKyVZdmGtAXGcbOLw7Ourq+vuqi5XHzAf18xyyTIsqf9TKMK3Zz 4uczwR7UuWzWY2IIkiPo3wap6CFvJO2KkD+u26aq5iGQM0sJCLQ9WtaSCeyyRMbM yJoMBH1n2vEw9Va4X65/AzkbldWb+iHAYfHCR5zWEgNPfB3u4M6HQfk4VNXqapDc gZOChzKL6F5xRkqrOwZ1pzcrR/A09dlZ4ivEtpac3ItoefZpVqQygdzQpdtAGJjs Jt1mHfVJn3stu4+2b/ZGgDVH1fcfW8URLngL4X+0VZE+rPuIiueGBUYItQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfIEaRI2h72htPd2azzSdMRW5qRMB8GA1UdIwQY MBaAFAWgj7mvTWyvzPrjso7G7UnEI+/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEt ZDJiMjNhMzU1ZWRhLzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEtZDJiMjNhMzU1ZWRh LzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFW4V02c V3nB4R7UwVZITbFDUotsg2JETu3RNC2SxV+ZtLAeWJk2FgK0DiwRanEAC/ajklHl xQarUktaYRdOv92WQnGbA/5wjAJUfdeKdNBZNlhjePoDMtch46p2lAgTCrDg4uvK Iyrt7BXuJ9uF/C2xOMkNc8ug3v+BYAJ/pUBxHcGohoXjxgKDlHxOJ9CFNydaWHQf w/dpIlPNnqStEFVgeLkjryjt8DHpE6ZFWPeeq9QToqcHmXjR9ObKqTxuTSLvMJqx Ml0wWhczys3Le1TVdB9UzCswC4GKs8CCzFl3x4ZOEwnwTMlbXgxZfT7guQVtb/FM m3oMr95zDglf1A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:30 2025 by rpki-client