This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json) Hash identifier: 7af3fi09WYJthNqkmcGJbfigfbWCG5RB+V0444Z7Ezk= Subject key identifier: D0:13:A6:3B:7E:39:D5:B9:0C:70:98:6D:7E:4B:9F:35:71:0D:43:6E Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8 Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8 Certificate serial: 019AF20926F72A8485CCACFD8A283900556D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: Uw+tPzNpXgkwB5QZAPf5tnbbbkWFuhrEFIKPTRfT/wI=) 2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:f7:2a:84:85:cc:ac:fd:8a:28:39:00:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d013a63b7e39d5b90c70986d7e4b9f35710d436e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:47:55:ed:83:24:f3:7e:88:b0:d4:f1:2e: ee:b4:a7:bb:b2:ee:10:e3:80:9f:91:1b:b6:1a:92: e0:12:f2:67:9e:ba:07:c9:2d:a2:fc:4f:d1:d5:51: 02:b7:00:c0:40:48:42:65:1d:13:b8:80:09:bd:0c: 5a:ce:d3:08:51:d2:2d:8c:d8:c2:81:59:fc:08:26: 69:89:75:03:62:06:93:de:e2:24:51:22:1f:c3:df: 9d:b3:4b:bb:9c:c8:79:40:3b:cb:d0:7a:5b:06:50: 28:f9:5a:d9:91:f6:78:62:3a:fc:3c:82:8e:62:4c: 59:8d:98:2d:9c:b2:8d:dc:03:1e:63:67:3c:16:90: b1:ea:5e:66:32:8f:69:24:ec:ff:20:16:c8:fc:ad: e3:72:6e:bf:e4:b3:cd:d6:0a:94:66:bf:b4:d7:37: a3:36:b8:61:51:ca:99:49:d0:65:54:96:77:ed:a9: 6f:82:0c:ab:4e:a8:0c:d4:61:62:60:9a:56:27:0d: c1:e3:b3:12:69:d2:ea:83:66:5e:14:ce:fd:07:75: b6:a4:36:80:f1:b8:e7:b2:d0:4c:08:f5:d0:1d:70: a8:ee:70:5a:e9:b0:4d:e6:ee:4a:2a:36:62:e7:6f: 7d:5f:42:4b:e4:0a:40:ea:87:ef:1f:5a:0d:b7:a1: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:13:A6:3B:7E:39:D5:B9:0C:70:98:6D:7E:4B:9F:35:71:0D:43:6E X509v3 Authority Key Identifier: keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:23:3b:04:23:32:a9:2a:2b:69:41:db:af:02:1c:04:a3:e7: f3:27:e1:88:17:bd:ad:13:8a:e0:11:2d:c4:31:18:7f:f2:1a: ff:41:50:21:56:11:d3:7e:11:e3:99:35:df:81:36:86:55:f1: 87:90:56:f2:80:fe:62:fe:70:11:2f:f5:4f:22:40:3a:63:6d: 29:17:3d:c1:d0:bc:c6:84:0a:50:89:1d:8b:8b:59:a8:5b:3f: f1:35:bd:12:95:0e:59:0a:21:e4:86:fc:2a:d5:d7:4f:22:a5: fa:9b:35:bb:67:43:ed:86:6a:c0:48:72:bf:fb:95:df:36:df: 77:8b:db:d6:e6:37:f7:5a:d3:ac:87:74:3b:bc:43:04:6d:dd: 7c:f0:94:4b:e0:b0:18:4f:a5:b5:3e:c7:65:1d:57:00:8b:f4: 8a:60:13:35:7f:33:41:75:ab:dc:08:d1:ce:9e:71:f7:92:c5: 0a:47:e2:59:db:cc:06:b3:61:ae:b1:f8:a7:49:57:15:02:26: 23:6b:e9:a5:a6:0f:ba:ed:9a:55:03:49:91:f2:01:81:8c:0f: d3:f4:70:d0:e8:a4:15:67:45:7d:04:bf:b0:a1:42:e9:62:a8: cb:0e:f1:6a:12:43:76:00:74:ac:8e:db:06:e8:5e:f6:51:47: 8d:e7:2b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSb3KoSFzKz9iig5AFVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzQwN2QyZTdiMmZmNGJjZWU2ZWExMGQ0MDg1MmVjZGNi YzY5YjgwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkMDEzYTYzYjdlMzlkNWI5MGM3MDk4NmQ3ZTRiOWYzNTcxMGQ0MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsRHVe2DJPN+iLDU8S7utKe7su4Q 44CfkRu2GpLgEvJnnroHyS2i/E/R1VECtwDAQEhCZR0TuIAJvQxaztMIUdItjNjC gVn8CCZpiXUDYgaT3uIkUSIfw9+ds0u7nMh5QDvL0HpbBlAo+VrZkfZ4Yjr8PIKO YkxZjZgtnLKN3AMeY2c8FpCx6l5mMo9pJOz/IBbI/K3jcm6/5LPN1gqUZr+01zej NrhhUcqZSdBlVJZ37alvggyrTqgM1GFiYJpWJw3B47MSadLqg2ZeFM79B3W2pDaA 8bjnstBMCPXQHXCo7nBa6bBN5u5KKjZi5299X0JL5ApA6ofvH1oNt6ET1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNATpjt+OdW5DHCYbX5LnzVxDUNuMB8GA1UdIwQY MBaAFAV0B9Lnsv9LzubqENQIUuzcvGm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEt MWJlZDJlZTA2NWYwLzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEtMWJlZDJlZTA2NWYw LzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICM7BCMy qSoraUHbrwIcBKPn8yfhiBe9rROK4BEtxDEYf/Ia/0FQIVYR034R45k134E2hlXx h5BW8oD+Yv5wES/1TyJAOmNtKRc9wdC8xoQKUIkdi4tZqFs/8TW9EpUOWQoh5Ib8 KtXXTyKl+ps1u2dD7YZqwEhyv/uV3zbfd4vb1uY391rTrId0O7xDBG3dfPCUS+Cw GE+ltT7HZR1XAIv0imATNX8zQXWr3AjRzp5x95LFCkfiWdvMBrNhrrH4p0lXFQIm I2vppaYPuu2aVQNJkfIBgYwP0/Rw0OikFWdFfQS/sKFC6WKoyw7xahJDdgB0rI7b Buhe9lFHjecroQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:36 2025 by rpki-client