This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json) Hash identifier: jqNyjN/qGHe61o8nXL/CzeSSgzn/eYyY3A5yXfsl3xc= Subject key identifier: 74:BC:8C:63:A4:96:9B:79:D7:17:E2:E8:B1:AA:E0:B6:08:BD:0E:14 Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898 Certificate serial: 019AF31BDF20A681C410229D02B4DD3782FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: U1RxPzKibyRUSd+GJNBoONtF6ZREWWFNi/qIWHp3L00=) 2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:df:20:a6:81:c4:10:22:9d:02:b4:dd:37:82:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898 Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=74bc8c63a4969b79d717e2e8b1aae0b608bd0e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:a3:d3:6b:ee:07:3e:4d:6a:4c:d9:4d:74: 6b:eb:8a:32:30:f4:8b:bf:88:c6:40:1b:91:49:9b: b2:42:fb:19:72:9e:87:fc:5d:ee:11:d4:b1:ae:1a: 46:f6:bf:c7:95:cf:00:b1:a9:96:f9:d3:e5:24:33: 78:65:0f:c2:da:69:b4:f9:21:aa:5e:8c:db:08:73: 53:d2:41:34:87:08:ed:a6:5a:1a:e3:7f:b6:7e:ad: 41:f6:45:cf:52:92:27:a4:d7:67:d9:84:0c:b0:19: d9:a4:39:20:ce:1f:4c:78:04:7b:9e:27:5b:f5:84: 15:fa:94:18:ae:91:87:3f:2f:47:47:3a:d6:c9:21: 16:5f:f6:34:98:58:57:46:fe:ef:60:02:3b:d3:41: 0c:ea:ec:52:05:1f:62:2c:9a:04:a8:1c:c2:48:62: 73:88:ae:df:56:07:1a:53:2a:91:f2:96:ed:01:c1: 6a:73:cc:74:94:f5:d5:87:80:e0:f8:20:56:af:0d: b3:1b:28:cb:bc:d2:2f:b7:6a:c2:81:7d:1e:ef:83: e2:4d:91:81:6b:0f:2d:7e:f7:25:8a:c5:71:85:72: af:58:dd:84:ff:d8:35:50:4f:18:33:96:d6:38:71: e3:4a:89:68:c8:77:1a:26:68:72:42:d7:19:c7:b6: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:8C:63:A4:96:9B:79:D7:17:E2:E8:B1:AA:E0:B6:08:BD:0E:14 X509v3 Authority Key Identifier: keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5b:87:2b:3d:24:24:99:5b:4c:65:c5:d3:02:61:6f:d4:ed: 05:e3:b7:a7:e9:c9:df:60:db:41:29:e0:5f:f3:82:ca:79:0f: 88:e0:ed:45:f5:81:8d:9b:a6:64:9d:95:7b:40:e0:bf:e2:94: 83:00:e2:b8:10:be:ba:ed:82:d5:fb:95:11:e2:17:30:50:e9: 72:93:59:69:f5:54:32:29:9c:5a:3d:6b:9a:36:a4:9b:47:62: 2c:1a:37:5e:78:43:f5:d9:58:87:74:c5:1a:00:44:0b:7b:63: f4:52:b0:e6:8c:99:b7:b7:bd:18:e2:dc:86:25:b8:b2:81:d5: d4:e4:01:40:3f:e1:f3:ef:69:c3:be:35:96:dd:f0:2e:6a:ce: 63:a2:8c:d3:3d:f2:9f:44:e9:d3:d2:f1:fd:23:e3:73:3c:bc: 05:d4:53:89:7d:bb:58:96:68:bb:a8:b1:15:ab:e6:78:05:79: 11:2e:51:cf:fb:2e:83:99:21:41:01:9a:f4:8c:8e:6a:0a:d9: db:2a:d8:c4:95:b7:ce:70:1f:44:35:ea:dc:50:ed:bd:6a:83: da:cc:56:60:25:15:2c:53:4e:94:4f:51:25:05:5a:f0:f3:f7: 37:d5:80:e5:e5:95:ee:ba:06:e4:69:fd:80:6f:62:65:c7:9d: 49:7e:ff:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG98gpoHEECKdArTdN4L/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5 OTc4OTgwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD Eyg3NGJjOGM2M2E0OTY5Yjc5ZDcxN2UyZThiMWFhZTBiNjA4YmQwZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmej02vuBz5NakzZTXRr64oyMPSL v4jGQBuRSZuyQvsZcp6H/F3uEdSxrhpG9r/Hlc8AsamW+dPlJDN4ZQ/C2mm0+SGq XozbCHNT0kE0hwjtploa43+2fq1B9kXPUpInpNdn2YQMsBnZpDkgzh9MeAR7nidb 9YQV+pQYrpGHPy9HRzrWySEWX/Y0mFhXRv7vYAI700EM6uxSBR9iLJoEqBzCSGJz iK7fVgcaUyqR8pbtAcFqc8x0lPXVh4Dg+CBWrw2zGyjLvNIvt2rCgX0e74PiTZGB aw8tfvclisVxhXKvWN2E/9g1UE8YM5bWOHHjSoloyHcaJmhyQtcZx7awKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS8jGOklpt51xfi6LGq4LYIvQ4UMB8GA1UdIwQY MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1 LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJluHKz0k JJlbTGXF0wJhb9TtBeO3p+nJ32DbQSngX/OCynkPiODtRfWBjZumZJ2Ve0Dgv+KU gwDiuBC+uu2C1fuVEeIXMFDpcpNZafVUMimcWj1rmjakm0diLBo3XnhD9dlYh3TF GgBEC3tj9FKw5oyZt7e9GOLchiW4soHV1OQBQD/h8+9pw741lt3wLmrOY6KM0z3y n0Tp09Lx/SPjczy8BdRTiX27WJZou6ixFavmeAV5ES5Rz/sug5khQQGa9IyOagrZ 2yrYxJW3znAfRDXq3FDtvWqD2sxWYCUVLFNOlE9RJQVa8PP3N9WA5eWV7roG5Gn9 gG9iZcedSX7/ig== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:53 2025 by rpki-client