This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json) Hash identifier: 0t+AJGmEURCyy/eltH0asnlVZNB3IkezZgO6X3KOS6A= Subject key identifier: C4:35:E7:12:23:E1:5E:A7:AB:AC:35:03:76:20:93:27:6A:92:37:F9 Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56 Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656 Certificate serial: 019AF54132F6C5724E8F4A8135FCDDFBE612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 20:01:22 +0000 Manifest this update: Sat 06 Dec 2025 20:01:22 +0000 Manifest next update: Sun 07 Dec 2025 20:01:22 +0000 Files and hashes: 1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=) 2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: A/V0X1GSehoQUzKo3Z3/3qSZo+nbuOIQf+SH+L2Gpyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:32:f6:c5:72:4e:8f:4a:81:35:fc:dd:fb:e6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656 Validity Not Before: Dec 6 20:01:22 2025 GMT Not After : Dec 7 20:01:22 2025 GMT Subject: CN=c435e71223e15ea7abac3503762093276a9237f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:ed:6f:ac:98:67:88:aa:78:ad:a9:d8:be: f9:f5:7e:86:1c:96:13:7e:c9:dc:93:03:25:bc:2d: 7c:66:a8:78:98:2a:2e:43:66:af:10:de:16:ee:a7: d6:5f:bd:63:1c:42:55:dc:6f:ee:09:4c:81:ab:44: 20:ec:28:ec:b6:6f:9b:5d:dd:36:56:0f:c6:17:d8: 9b:2e:8c:b2:87:84:81:1b:c9:79:8f:02:68:bf:96: a9:01:68:01:0e:a9:d5:bb:b7:c9:ea:55:63:34:06: 38:76:81:57:73:f4:96:fd:7e:d2:60:41:15:80:7f: 65:42:cd:7c:33:e1:30:59:4a:85:71:3b:fa:7e:f6: 8c:be:b9:d1:57:5e:ce:ff:dd:fa:30:6b:f4:95:81: 22:3e:70:b5:59:74:f6:bc:ff:c2:0d:f3:c8:ae:08: 71:f1:b3:70:81:44:6c:4c:b5:42:3e:2c:f0:ba:02: 77:b2:70:51:33:94:10:03:fd:b7:02:31:70:57:7b: 76:c0:74:e2:95:b5:6d:3e:94:b3:a2:ee:f1:62:32: 1d:dc:7a:30:e0:78:63:17:40:2b:a3:43:cc:be:d5: b3:e2:3a:db:76:85:d4:8c:bc:4b:75:ba:3b:77:e7: 61:3e:79:ed:ae:b3:b4:2a:d2:da:73:76:f1:9e:5a: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:35:E7:12:23:E1:5E:A7:AB:AC:35:03:76:20:93:27:6A:92:37:F9 X509v3 Authority Key Identifier: keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c7:9e:54:93:c2:98:b0:59:ea:41:5b:75:32:39:48:58:b3: b8:04:19:be:db:8a:92:d1:97:b1:d7:f3:30:a3:76:b0:3f:e3: c8:61:0a:1c:36:b1:5a:a8:c8:98:84:fa:d0:79:60:87:31:cf: 89:2a:a0:f4:90:d5:30:d3:31:f3:83:06:6b:83:4a:d6:0a:40: 62:b6:4d:68:58:1f:1f:f2:13:a1:82:8d:a5:4b:7e:6b:8a:e1: 0a:9d:b3:e6:0d:ed:c9:eb:b5:60:99:fd:8c:da:2f:ab:d3:c0: 35:8e:a3:1e:f3:57:9f:17:a9:8a:c3:67:26:36:75:63:ad:2d: 59:65:3c:ec:50:9d:9c:9f:3d:0a:95:12:08:a6:2d:71:02:f2: d8:ba:f5:f1:aa:8f:71:09:e5:ea:56:06:1f:d8:0a:81:b0:ba: 40:c1:28:ee:83:f2:a3:fa:d4:f2:1d:a5:f9:fa:fb:92:dd:46: f1:77:c3:a1:9c:45:6c:e2:68:ec:44:b1:4c:0a:f7:99:bc:89: f7:4d:8b:40:36:c1:a7:18:be:00:91:52:4b:08:e0:df:c4:25: d9:43:d0:4a:7d:5e:31:74:c8:b0:97:75:b3:90:12:10:31:e9: f8:91:61:58:cb:d1:be:11:e5:78:a0:09:fb:81:72:76:68:b0: fa:39:8d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QTL2xXJOj0qBNfzd++YSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZWJhZjE1MjMzZDk4ZWI4ZWYwNjJjMjQ1ZjkxNzM2MmU2 MzI2NTYwHhcNMjUxMjA2MjAwMTIyWhcNMjUxMjA3MjAwMTIyWjAzMTEwLwYDVQQD EyhjNDM1ZTcxMjIzZTE1ZWE3YWJhYzM1MDM3NjIwOTMyNzZhOTIzN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrjtb6yYZ4iqeK2p2L759X6GHJYT fsnckwMlvC18Zqh4mCouQ2avEN4W7qfWX71jHEJV3G/uCUyBq0Qg7Cjstm+bXd02 Vg/GF9ibLoyyh4SBG8l5jwJov5apAWgBDqnVu7fJ6lVjNAY4doFXc/SW/X7SYEEV gH9lQs18M+EwWUqFcTv6fvaMvrnRV17O/936MGv0lYEiPnC1WXT2vP/CDfPIrghx 8bNwgURsTLVCPizwugJ3snBRM5QQA/23AjFwV3t2wHTilbVtPpSzou7xYjId3How 4HhjF0Aro0PMvtWz4jrbdoXUjLxLdbo7d+dhPnntrrO0KtLac3bxnlrIlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ15xIj4V6nq6w1A3Ygkydqkjf5MB8GA1UdIwQY MBaAFG7rrxUjPZjrjvBiwkX5FzYuYyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2Mjgt MGU0NjdlNTFiYTA2LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2MjgtMGU0NjdlNTFiYTA2 LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8eeVJPC mLBZ6kFbdTI5SFizuAQZvtuKktGXsdfzMKN2sD/jyGEKHDaxWqjImIT60HlghzHP iSqg9JDVMNMx84MGa4NK1gpAYrZNaFgfH/IToYKNpUt+a4rhCp2z5g3tyeu1YJn9 jNovq9PANY6jHvNXnxepisNnJjZ1Y60tWWU87FCdnJ89CpUSCKYtcQLy2Lr18aqP cQnl6lYGH9gKgbC6QMEo7oPyo/rU8h2l+fr7kt1G8XfDoZxFbOJo7ESxTAr3mbyJ 902LQDbBpxi+AJFSSwjg38Ql2UPQSn1eMXTIsJd1s5ASEDHp+JFhWMvRvhHleKAJ +4Fydmiw+jmNxA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:34 2025 by rpki-client