This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json) Hash identifier: 3iMnIgWLZeDxjCaIbEUyvv9zb+yECmhNw8ABRW5kCu0= Subject key identifier: 23:F2:7D:CD:FD:0B:B5:CE:5D:77:B5:D9:52:8B:B7:0D:FA:5E:1D:0D Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f Certificate serial: 019AF6F81026838CBF64B36FC72AB6B8D860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 04:00:43 +0000 Manifest this update: Sun 07 Dec 2025 04:00:43 +0000 Manifest next update: Mon 08 Dec 2025 04:00:43 +0000 Files and hashes: 1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: MT7tPSJlezpZhVy2wBaHBQA7caY24wfmEWL71FvolGQ=) 2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:10:26:83:8c:bf:64:b3:6f:c7:2a:b6:b8:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f Validity Not Before: Dec 7 04:00:43 2025 GMT Not After : Dec 8 04:00:43 2025 GMT Subject: CN=23f27dcdfd0bb5ce5d77b5d9528bb70dfa5e1d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:92:4d:8d:8b:07:6d:80:71:55:45:ac:9b:d8: 4a:85:93:63:16:2c:84:d3:de:d5:8c:f1:96:3d:8d: fd:92:f7:44:30:54:c3:43:19:70:6a:37:16:9c:da: 57:0d:0c:61:b5:1b:17:c5:2d:f0:e9:31:89:f1:57: 71:f0:81:69:0c:8f:94:c6:51:53:2e:e9:3f:3c:4f: 31:1d:ed:3b:74:cf:be:90:3a:55:5a:83:bb:69:fb: e0:8b:07:22:80:c4:de:d8:5f:6a:85:93:a3:fa:58: 8b:e0:8b:0f:79:b2:f7:39:c5:80:44:a4:03:a7:e6: 0e:a7:62:76:44:8e:f7:af:db:6c:f3:23:91:51:ef: d7:7a:44:cf:da:2a:d1:55:35:03:29:6d:b0:1d:de: 51:86:a9:5e:93:a8:e3:b8:e3:bc:d4:e7:27:c2:f2: 8b:33:b6:cb:c5:71:5c:a6:b4:72:1e:18:e1:5c:ef: 26:07:64:ba:3b:75:95:a3:78:4e:5e:05:74:d9:af: 74:5c:73:19:3a:98:03:3f:0a:21:09:b5:94:21:df: 58:4a:17:23:96:f2:c7:f5:5f:cd:e1:a4:b7:5e:fe: 6c:ca:d9:90:54:40:b8:7a:ee:d5:a2:a8:54:a3:b7: c9:f9:8f:ce:83:f5:fb:92:f6:43:6b:ba:06:c9:86: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F2:7D:CD:FD:0B:B5:CE:5D:77:B5:D9:52:8B:B7:0D:FA:5E:1D:0D X509v3 Authority Key Identifier: keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:95:c4:ab:af:01:1e:80:0b:0d:72:fd:4e:91:13:07:c6:e5: d7:4b:dc:f1:89:17:77:dd:29:17:d6:26:44:9f:d5:af:df:c9: 35:21:aa:69:bf:2c:4d:ed:2c:78:5f:d8:8f:d2:62:3a:d1:77: 18:31:65:5f:d2:df:4d:5d:f1:77:4b:0d:99:b1:a9:bb:ae:57: 5d:37:04:1f:97:85:29:4c:dd:16:f3:1b:9f:2f:89:df:e8:60: 39:26:d3:e0:47:0d:ee:11:86:0a:4a:5f:5f:70:0e:f1:db:5d: e1:ba:a1:56:26:2d:1c:42:6b:bf:f9:38:8a:43:d8:97:c8:54: cb:17:6d:8a:22:2f:db:03:e0:89:e4:b5:89:ce:6b:aa:13:0b: 45:28:a2:84:62:5c:7f:f7:4d:d1:3d:be:3e:55:62:9f:7f:70: 89:91:76:83:f4:1a:4c:ee:bf:30:93:bd:83:09:5b:75:4e:bb: 77:3c:16:7f:56:d2:1b:19:8d:ba:25:a9:dc:1e:f2:17:f1:a4: cd:2e:19:38:4f:a1:87:79:04:0a:db:18:af:0e:e3:fb:9f:71: ff:93:f9:b1:9e:62:e7:26:2d:9c:ad:5c:6c:be:34:e4:65:0b: 31:b3:b0:5c:7a:89:85:39:a7:ee:a6:3b:27:31:bb:5a:73:e8: 42:34:0f:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+BAmg4y/ZLNvxyq2uNhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZWRmZDI4MzUwZjczZDM5ODU1YzQ3NWExNTE2YWUwYjc3 OTFhMGYwHhcNMjUxMjA3MDQwMDQzWhcNMjUxMjA4MDQwMDQzWjAzMTEwLwYDVQQD EygyM2YyN2RjZGZkMGJiNWNlNWQ3N2I1ZDk1MjhiYjcwZGZhNWUxZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65JNjYsHbYBxVUWsm9hKhZNjFiyE 097VjPGWPY39kvdEMFTDQxlwajcWnNpXDQxhtRsXxS3w6TGJ8Vdx8IFpDI+UxlFT Luk/PE8xHe07dM++kDpVWoO7afvgiwcigMTe2F9qhZOj+liL4IsPebL3OcWARKQD p+YOp2J2RI73r9ts8yORUe/XekTP2irRVTUDKW2wHd5Rhqlek6jjuOO81OcnwvKL M7bLxXFcprRyHhjhXO8mB2S6O3WVo3hOXgV02a90XHMZOpgDPwohCbWUId9YShcj lvLH9V/N4aS3Xv5sytmQVEC4eu7VoqhUo7fJ+Y/Og/X7kvZDa7oGyYbMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPyfc39C7XOXXe12VKLtw36Xh0NMB8GA1UdIwQY MBaAFAbt/Sg1D3PTmFXEdaFRauC3eRoPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMt ZjZkNzI5YTkzZWM4LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMtZjZkNzI5YTkzZWM4 LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5XEq68B HoALDXL9TpETB8bl10vc8YkXd90pF9YmRJ/Vr9/JNSGqab8sTe0seF/Yj9JiOtF3 GDFlX9LfTV3xd0sNmbGpu65XXTcEH5eFKUzdFvMbny+J3+hgOSbT4EcN7hGGCkpf X3AO8dtd4bqhViYtHEJrv/k4ikPYl8hUyxdtiiIv2wPgieS1ic5rqhMLRSiihGJc f/dN0T2+PlVin39wiZF2g/QaTO6/MJO9gwlbdU67dzwWf1bSGxmNuiWp3B7yF/Gk zS4ZOE+hh3kECtsYrw7j+59x/5P5sZ5i5yYtnK1cbL405GULMbOwXHqJhTmn7qY7 JzG7WnPoQjQPkg== -----END CERTIFICATE-----Generated at Sun Dec 7 11:14:31 2025 by rpki-client