This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json) Hash identifier: DcQyXNCK4r0yL2yH5eSInXbhE6hm128Kybfgqd0wsxw= Subject key identifier: 18:1F:7A:F4:F0:DE:D3:90:09:56:27:7B:61:32:67:55:6F:31:4C:CE Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Certificate serial: 019AF5AEBAFC137B8C4AEEF9366703237D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft Manifest number: 1618 Signing time: Sat 06 Dec 2025 22:01:00 +0000 Manifest this update: Sat 06 Dec 2025 22:01:00 +0000 Manifest next update: Sun 07 Dec 2025 22:01:00 +0000 Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: hr+LvBmEZ4TomHV2gxbYoAkNYOEJot0UdtNItgttKYs=) 2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ba:fc:13:7b:8c:4a:ee:f9:36:67:03:23:7d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Validity Not Before: Dec 6 22:01:00 2025 GMT Not After : Dec 7 22:01:00 2025 GMT Subject: CN=181f7af4f0ded3900956277b613267556f314cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:c5:fc:85:ad:0a:3a:6b:34:1d:b6:8f:5b: be:9d:87:99:e9:e7:7e:40:23:31:5a:84:28:b0:15: 5f:00:68:53:8f:ea:ec:61:1a:5c:b7:18:0e:3d:df: 6a:6f:be:a2:38:48:a4:13:03:99:38:82:bb:2c:cc: 21:7f:ea:c9:58:29:93:44:dd:f5:fc:63:bb:34:24: a9:c3:f7:d9:d5:b4:f6:14:c6:2e:0a:59:60:16:d5: c9:4c:5c:f4:29:88:64:7b:d5:8e:5b:61:30:2c:e5: 60:f8:d5:40:a3:43:53:e6:88:f9:18:3e:9a:3c:fb: c2:41:2b:c1:1f:7f:92:b1:32:16:16:c3:c5:34:41: 44:33:de:02:52:df:0b:c3:9d:c8:c3:04:8b:4d:a7: 34:31:f7:d7:84:55:6a:df:2e:c5:55:22:d7:d1:dd: af:9d:88:be:cb:32:2a:18:a1:42:a9:74:e8:ee:ff: 4f:a1:b7:c3:82:ea:95:e9:a5:38:dc:d4:0b:58:b0: 7f:12:a8:0e:e3:d8:0e:82:ce:30:9d:5c:3c:51:f7: 0d:65:84:49:d5:bc:6c:e2:a6:3a:4c:9b:6e:7e:6c: 05:08:29:18:15:a9:66:b5:0b:8a:66:34:87:32:8a: 67:9f:8d:af:1e:bc:1e:05:50:eb:75:e8:2c:24:28: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:7A:F4:F0:DE:D3:90:09:56:27:7B:61:32:67:55:6F:31:4C:CE X509v3 Authority Key Identifier: keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:01:24:00:55:1a:f1:13:fa:a7:7d:05:60:9f:b3:65:bf:e3: ea:7f:3c:f2:21:5b:8d:6b:33:2d:22:c7:6f:3a:b5:3e:f4:86: 96:8e:d5:e9:26:c2:0c:ac:9f:5f:53:86:46:84:e7:9f:62:2f: 76:ef:34:17:e3:16:3a:61:f6:56:4b:68:fc:08:27:73:7e:f6: f3:d7:54:a4:c9:22:e5:8a:21:b7:35:b7:1c:de:a7:f7:98:71: c8:b8:8e:64:5f:d6:67:fe:97:0c:ff:38:0e:ea:6b:ce:b3:f8: a0:26:a8:37:50:b2:14:45:2c:41:d2:58:c0:ef:79:03:dd:8c: 5a:48:e0:e5:d5:93:43:df:ee:3a:5f:ce:6e:e0:30:4e:dd:6b: 03:97:b8:11:f9:a9:5a:8c:fb:15:2f:e7:2a:25:eb:20:50:21: 12:ad:94:2f:89:eb:3e:c5:a5:e2:ba:93:a5:07:a9:9b:f5:1d: 4f:f3:55:4a:a4:8c:0b:7c:84:7a:4b:26:50:40:d4:08:82:62: 84:23:66:f5:f4:98:fd:ce:94:f0:c7:90:a7:09:ee:9a:de:91: 70:d7:c7:fa:7d:c8:e0:9c:d3:ce:d8:c8:32:a5:c6:08:25:ef: a5:e3:84:0f:e5:1c:65:d3:26:b0:4c:3f:b6:83:30:18:67:b4: 86:e6:66:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rrr8E3uMSu75NmcDI32bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi NjgxOWIwHhcNMjUxMjA2MjIwMTAwWhcNMjUxMjA3MjIwMTAwWjAzMTEwLwYDVQQD EygxODFmN2FmNGYwZGVkMzkwMDk1NjI3N2I2MTMyNjc1NTZmMzE0Y2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnF/IWtCjprNB22j1u+nYeZ6ed+ QCMxWoQosBVfAGhTj+rsYRpctxgOPd9qb76iOEikEwOZOIK7LMwhf+rJWCmTRN31 /GO7NCSpw/fZ1bT2FMYuCllgFtXJTFz0KYhke9WOW2EwLOVg+NVAo0NT5oj5GD6a PPvCQSvBH3+SsTIWFsPFNEFEM94CUt8Lw53IwwSLTac0MffXhFVq3y7FVSLX0d2v nYi+yzIqGKFCqXTo7v9PobfDguqV6aU43NQLWLB/EqgO49gOgs4wnVw8UfcNZYRJ 1bxs4qY6TJtufmwFCCkYFalmtQuKZjSHMopnn42vHrweBVDrdegsJCioxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgfevTw3tOQCVYne2EyZ1VvMUzOMB8GA1UdIwQY MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1 LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgEkAFUa 8RP6p30FYJ+zZb/j6n888iFbjWszLSLHbzq1PvSGlo7V6SbCDKyfX1OGRoTnn2Iv du80F+MWOmH2Vkto/Agnc37289dUpMki5YohtzW3HN6n95hxyLiOZF/WZ/6XDP84 DuprzrP4oCaoN1CyFEUsQdJYwO95A92MWkjg5dWTQ9/uOl/ObuAwTt1rA5e4Efmp Woz7FS/nKiXrIFAhEq2UL4nrPsWl4rqTpQepm/UdT/NVSqSMC3yEeksmUEDUCIJi hCNm9fSY/c6U8MeQpwnumt6RcNfH+n3I4JzTztjIMqXGCCXvpeOED+UcZdMmsEw/ toMwGGe0huZmrQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:49 2025 by rpki-client