This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json) Hash identifier: 5qYGm6fcfjTHAz1oHuDuyRdZeJHg/7B/NRiPB/HRdIM= Subject key identifier: 1F:D6:0F:8F:F4:57:15:5F:85:89:CD:F2:0B:BB:DD:74:0A:DA:DF:A8 Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06 Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106 Certificate serial: 019AF19AC717F473E35B342C9D6890D650E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: CP02r6p7UdIqh06ve7zW2rQ0fYdE0Yo3lttHs63eRgw=) 2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=) 3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:17:f4:73:e3:5b:34:2c:9d:68:90:d6:50:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=1fd60f8ff457155f8589cdf20bbbdd740adadfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:93:28:7b:00:87:34:41:b7:62:87:3c:22: 67:f4:3b:bb:88:06:5f:f9:e8:f1:ac:7a:4b:14:28: c7:3d:3a:6b:23:b9:53:f6:08:58:cd:65:5f:cd:fc: a0:75:a7:78:54:3d:6f:0b:47:00:e2:3b:b1:44:c6: 27:8e:64:da:22:87:d2:cb:10:4a:79:29:d5:93:bb: fa:97:58:24:36:01:d7:af:f4:0a:cb:84:32:5a:8a: 52:b1:5d:99:2a:61:29:34:bc:48:6f:13:62:f0:fb: 1b:7b:ff:11:a6:f3:33:b5:ae:5c:57:a7:75:1a:00: a0:08:86:64:e5:f8:a6:7b:d5:fb:bf:04:37:a1:9a: 78:8d:0c:87:1e:76:68:26:91:ee:50:41:2a:60:1d: 1e:80:53:c3:b7:af:fa:ef:43:d5:8b:0f:2f:fc:0b: 15:34:fc:87:8c:41:7d:d1:59:1e:36:0e:ff:53:86: 07:99:dd:eb:79:72:d2:01:47:42:83:bd:20:ef:f1: 04:29:63:ca:0a:7d:84:76:4a:c8:11:bc:2c:af:12: 6c:c3:05:66:06:4d:dc:0f:c0:3c:78:f2:d5:a8:ca: 1f:bd:25:ad:49:ee:dd:59:00:96:fc:f3:2d:af:ad: c8:26:2f:e9:17:56:d8:04:3d:16:42:71:4a:63:0d: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:0F:8F:F4:57:15:5F:85:89:CD:F2:0B:BB:DD:74:0A:DA:DF:A8 X509v3 Authority Key Identifier: keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1a:cc:78:50:4b:b7:0c:c2:b8:e4:98:04:e8:5b:d1:5d:b0: 72:8c:d9:73:3e:21:50:22:78:01:50:a4:1b:9e:fc:2b:2f:63: bb:a7:00:3d:a1:9e:c2:51:2f:5b:d4:b6:6a:bf:cc:18:9a:45: a0:c2:99:ae:1c:77:54:d9:8f:6a:b7:dd:6d:74:02:0d:5d:97: c6:9a:36:d5:6a:0a:39:ca:79:e2:43:99:bc:0c:bb:49:7a:fc: 6e:cc:e8:69:6a:a6:71:32:66:06:c6:75:9b:5e:d0:3d:c2:d7: 9a:2f:94:cf:ba:f0:2c:77:7a:de:17:b2:70:3b:2f:03:9b:2c: 5a:dc:7f:b4:02:97:b4:87:71:2c:7e:35:41:5a:34:d7:9b:db: c6:c5:7f:4e:a4:a2:32:25:ea:10:67:55:20:67:eb:4c:98:cd: 5e:c3:0c:65:71:4b:b8:19:8c:bb:56:00:81:30:a0:ea:ae:e7: f4:bd:5c:13:52:30:40:3d:8d:9b:77:6d:93:d2:10:5c:2c:5c: 4e:1d:32:e3:95:14:55:33:93:ad:69:35:e1:d8:72:4b:92:1b: b1:63:af:bd:3a:06:eb:05:62:0e:ab:95:b2:75:cb:ae:52:00: fe:b7:29:0d:c6:79:92:e5:c3:52:64:e9:b1:bf:68:fc:cf:3b: 6c:a1:ef:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmscX9HPjWzQsnWiQ1lDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi YmIxMDYwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EygxZmQ2MGY4ZmY0NTcxNTVmODU4OWNkZjIwYmJiZGQ3NDBhZGFkZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HuTKHsAhzRBt2KHPCJn9Du7iAZf +ejxrHpLFCjHPTprI7lT9ghYzWVfzfygdad4VD1vC0cA4juxRMYnjmTaIofSyxBK eSnVk7v6l1gkNgHXr/QKy4QyWopSsV2ZKmEpNLxIbxNi8Psbe/8RpvMzta5cV6d1 GgCgCIZk5fime9X7vwQ3oZp4jQyHHnZoJpHuUEEqYB0egFPDt6/670PViw8v/AsV NPyHjEF90VkeNg7/U4YHmd3reXLSAUdCg70g7/EEKWPKCn2EdkrIEbwsrxJswwVm Bk3cD8A8ePLVqMofvSWtSe7dWQCW/PMtr63IJi/pF1bYBD0WQnFKYw32wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/WD4/0VxVfhYnN8gu73XQK2t+oMB8GA1UdIwQY MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt YjE2ZDIxOWIzNTkyLzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORrMeFBL twzCuOSYBOhb0V2wcozZcz4hUCJ4AVCkG578Ky9ju6cAPaGewlEvW9S2ar/MGJpF oMKZrhx3VNmParfdbXQCDV2Xxpo21WoKOcp54kOZvAy7SXr8bszoaWqmcTJmBsZ1 m17QPcLXmi+Uz7rwLHd63heycDsvA5ssWtx/tAKXtIdxLH41QVo015vbxsV/TqSi MiXqEGdVIGfrTJjNXsMMZXFLuBmMu1YAgTCg6q7n9L1cE1IwQD2Nm3dtk9IQXCxc Th0y45UUVTOTrWk14dhyS5IbsWOvvToG6wViDquVsnXLrlIA/rcpDcZ5kuXDUmTp sb9o/M87bKHvIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:11 2025 by rpki-client