This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft File: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json) Hash identifier: Dl6qrVwQ56+VJkOkb2tBEBMsdwVVIHYoOLRyIfsZkWA= Subject key identifier: B0:E5:CC:C4:F9:1D:4E:9E:23:BC:A9:11:2C:81:D3:83:0F:A2:36:50 Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07 Certificate issuer: /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07 Certificate serial: 019AF0BF6ABBADA1167BEF503B340953D4E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft Manifest number: 06BB Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: U71IjAyz91YFx4P6dRi1VTJprBOs8vu0qfHqxESo8rc=) 2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6a:bb:ad:a1:16:7b:ef:50:3b:34:09:53:d4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07 Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=b0e5ccc4f91d4e9e23bca9112c81d3830fa23650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:b2:9a:47:da:c6:a4:75:a0:0d:55:0a:3b: d3:d5:a6:39:72:ab:95:4e:da:66:16:c3:73:c0:9f: 5e:29:ab:bc:33:f5:c8:64:42:2c:cc:5c:f1:b5:4e: 0a:81:e9:d8:a7:cf:a3:a6:ef:a1:fd:55:47:63:c9: a9:3e:79:1f:34:eb:fe:28:17:a5:fa:d5:fa:17:22: 9f:5e:1f:e1:4a:12:84:69:97:0d:3e:a8:88:9f:d1: e6:d3:f9:8e:5e:b5:42:d4:ad:ef:8a:df:86:ff:b0: cb:10:ed:2c:05:86:cf:ac:d0:11:57:b4:9e:1c:e7: c2:1b:fe:7e:f1:ce:31:2f:b1:15:1e:49:b1:17:a6: c0:48:d0:39:9c:1c:d1:18:1f:1d:d5:e9:c5:40:66: 2c:8c:f1:65:68:e3:2b:8d:d7:f9:04:44:1f:a5:99: a8:82:37:e3:ff:62:c2:9a:fd:47:18:9e:b5:f3:00: bf:0b:bd:de:42:46:7d:8a:c2:b1:8f:5e:5d:de:9a: 52:79:2a:a7:bc:e3:68:8f:c2:a5:f1:57:d0:0e:4a: 91:08:4f:06:56:8b:56:4e:8f:5a:74:2d:be:66:6b: db:bb:db:c9:64:09:af:df:5d:e0:c7:42:ca:0e:0f: 8b:2d:63:e6:b3:8f:06:26:5c:27:4c:ba:e7:ed:db: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E5:CC:C4:F9:1D:4E:9E:23:BC:A9:11:2C:81:D3:83:0F:A2:36:50 X509v3 Authority Key Identifier: keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4f:e8:5b:79:0b:bc:71:bf:29:ef:81:50:48:89:79:41:f0: 4f:be:28:a4:93:a8:be:04:36:9e:4b:57:73:31:bd:e0:15:d2: dd:d2:85:6a:0d:f9:98:9c:ea:42:74:6b:12:d5:7d:a0:db:36: 7c:60:74:1c:5c:e7:a7:ee:a1:b0:58:ac:83:c4:98:96:ca:c9: 66:6a:70:33:18:36:42:d9:e5:e9:cf:7d:4b:e3:59:3b:64:a7: 8f:ed:af:e5:33:37:e4:b1:30:b1:52:8c:14:a3:c7:bc:13:11: 11:77:96:d0:99:2f:d2:9d:84:38:71:58:df:1b:e3:99:0f:16: de:5d:41:17:9b:ec:a3:ba:76:f6:9a:39:f3:af:ea:8f:d9:8f: 06:6f:95:d4:6a:03:77:89:42:ec:73:89:41:bd:32:2c:40:18: 7e:ad:d5:3d:8a:b5:8f:97:70:aa:24:1e:3a:f3:7d:91:d1:93: e9:41:d6:85:15:fd:4f:d0:31:40:bc:b1:31:6a:b0:3a:42:62: 7f:9c:45:01:fd:df:af:9a:34:88:0d:d6:f4:b1:ef:00:ba:a4: ba:e2:7b:2c:9e:14:94:dc:27:38:af:88:b4:19:08:ba:86:1c: 0e:67:e2:cb:9a:ec:14:81:8e:24:7d:3e:5d:94:05:9c:31:fe: 47:d8:5c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2q7raEWe+9QOzQJU9TmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMmY4MWI4YzE3ZjU1ZGNkZGRlYzU0YzhjY2VhZGQ2OTVk MjhmMDcwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD EyhiMGU1Y2NjNGY5MWQ0ZTllMjNiY2E5MTEyYzgxZDM4MzBmYTIzNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUiymkfaxqR1oA1VCjvT1aY5cquV TtpmFsNzwJ9eKau8M/XIZEIszFzxtU4KgenYp8+jpu+h/VVHY8mpPnkfNOv+KBel +tX6FyKfXh/hShKEaZcNPqiIn9Hm0/mOXrVC1K3vit+G/7DLEO0sBYbPrNARV7Se HOfCG/5+8c4xL7EVHkmxF6bASNA5nBzRGB8d1enFQGYsjPFlaOMrjdf5BEQfpZmo gjfj/2LCmv1HGJ618wC/C73eQkZ9isKxj15d3ppSeSqnvONoj8Kl8VfQDkqRCE8G VotWTo9adC2+Zmvbu9vJZAmv313gx0LKDg+LLWPms48GJlwnTLrn7dtp5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDlzMT5HU6eI7ypESyB04MPojZQMB8GA1UdIwQY MBaAFA0vgbjBf1Xc3d7FTIzOrdaV0o8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODct NjhmMmZhMDAxZmE3LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODctNjhmMmZhMDAxZmE3 LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0/oW3kL vHG/Ke+BUEiJeUHwT74opJOovgQ2nktXczG94BXS3dKFag35mJzqQnRrEtV9oNs2 fGB0HFznp+6hsFisg8SYlsrJZmpwMxg2Qtnl6c99S+NZO2Snj+2v5TM35LEwsVKM FKPHvBMREXeW0Jkv0p2EOHFY3xvjmQ8W3l1BF5vso7p29po586/qj9mPBm+V1GoD d4lC7HOJQb0yLEAYfq3VPYq1j5dwqiQeOvN9kdGT6UHWhRX9T9AxQLyxMWqwOkJi f5xFAf3fr5o0iA3W9LHvALqkuuJ7LJ4UlNwnOK+ItBkIuoYcDmfiy5rsFIGOJH0+ XZQFnDH+R9hcVA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:40 2025 by rpki-client