This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json) Hash identifier: vgAhIBrrPOpsYG8+J8CQa43I2WtzoCs/8le8mhkVpmM= Subject key identifier: DC:2C:25:1E:66:7F:8B:F8:E5:CF:22:63:99:55:5D:89:EA:93:C2:5A Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e Certificate serial: 019AF577D88DCAF24188AC13E483F9C66459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft Manifest number: 0534 Signing time: Sat 06 Dec 2025 21:01:03 +0000 Manifest this update: Sat 06 Dec 2025 21:01:03 +0000 Manifest next update: Sun 07 Dec 2025 21:01:03 +0000 Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: eeAvksHWRgtO6lB8zxiwtMyMrWdNQbpWOKMGg93gmNE=) 2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d8:8d:ca:f2:41:88:ac:13:e4:83:f9:c6:64:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e Validity Not Before: Dec 6 21:01:03 2025 GMT Not After : Dec 7 21:01:03 2025 GMT Subject: CN=dc2c251e667f8bf8e5cf226399555d89ea93c25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:70:dd:52:67:cd:85:38:98:54:b4:75:01: 2a:5e:30:b6:e8:7b:5c:da:b9:93:26:73:d0:8c:23: 1f:c5:b6:1a:a2:b1:c5:2d:22:17:93:51:a9:61:1c: d9:e3:de:f2:ab:36:f2:7c:24:c4:0d:dc:f7:fd:a8: 29:3d:12:ec:6b:b6:fc:ac:ba:36:0c:ac:11:d8:ef: 0f:db:ab:8a:67:02:45:5e:c7:fe:6e:e0:2d:09:be: 88:5d:53:d5:2d:a5:51:78:1c:03:ee:f2:04:6f:f8: 43:20:50:e0:8a:9f:0e:05:7b:d9:90:aa:33:9b:69: d5:41:de:d7:19:27:3d:74:91:29:4c:9a:ef:ae:01: 4a:e2:b7:c3:fc:d2:06:a8:1f:96:e3:f3:4d:79:21: b5:2f:7b:ff:b0:8d:ee:76:b9:93:a3:d1:8e:35:56: b4:c5:c3:5b:8a:f3:84:cf:e4:f8:a4:7b:21:99:5b: 9a:87:79:df:85:d9:a4:df:e7:ba:4f:d5:9c:4c:92: ca:c6:58:5f:ee:8e:53:64:28:9c:73:73:70:53:32: b6:b2:e1:55:73:6a:a5:e6:f3:b3:a3:57:18:b4:b5: 77:e1:7a:e3:bc:8b:22:a1:ee:c7:a0:48:9c:c7:d6: 04:59:b4:b7:89:fe:5a:40:6f:7b:1c:9c:7c:18:57: 19:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2C:25:1E:66:7F:8B:F8:E5:CF:22:63:99:55:5D:89:EA:93:C2:5A X509v3 Authority Key Identifier: keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:85:d9:a6:51:01:dd:ff:07:00:15:95:6b:1f:25:88:5c:e5: 90:e0:2c:88:51:64:78:ea:c3:fb:f2:20:b6:62:e4:f0:fc:18: 5d:b1:c7:53:9b:15:24:1d:43:bd:0f:34:8e:33:88:49:b0:ff: 7a:ed:8d:3b:3d:dc:ed:e1:71:5f:4c:4f:79:19:8d:00:5a:3c: c5:42:98:cc:cb:f4:f9:33:59:b8:8d:d2:fe:2f:b8:b1:a9:2e: 46:49:44:ca:96:d0:6a:03:9d:d7:3a:d1:23:6d:c4:5c:dc:e3: 07:78:51:82:e8:3b:f8:79:a5:c9:ac:71:c5:40:fc:ba:d8:15: b2:02:de:17:76:ff:04:16:1c:dc:f8:d7:9c:3e:a6:2b:9a:53: c0:16:df:8f:ba:c2:2e:a4:b1:c2:28:db:2e:a5:f3:d4:a1:ad: 9d:4d:02:5c:33:75:f4:b8:69:63:cd:d0:96:e2:49:06:14:ab: 3b:f3:c0:67:3b:70:6d:79:b5:7c:7d:7f:a9:5f:f7:41:43:79: ab:e7:b6:77:3e:1c:6b:aa:9e:d7:46:9c:b4:a3:06:27:74:f2: f6:30:cf:57:ef:d0:65:fd:df:9f:35:16:c7:6b:5d:53:90:97: e8:c5:a7:0a:b8:6a:c5:e2:25:34:75:3e:3c:bb:ae:56:8e:be: b8:03:05:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9iNyvJBiKwT5IP5xmRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTJkMjdkMzBlY2ZmNDI3NzFjNGFiOTc3YTgyYWVhNThh NzZiNGUwHhcNMjUxMjA2MjEwMTAzWhcNMjUxMjA3MjEwMTAzWjAzMTEwLwYDVQQD EyhkYzJjMjUxZTY2N2Y4YmY4ZTVjZjIyNjM5OTU1NWQ4OWVhOTNjMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmNw3VJnzYU4mFS0dQEqXjC26Htc 2rmTJnPQjCMfxbYaorHFLSIXk1GpYRzZ497yqzbyfCTEDdz3/agpPRLsa7b8rLo2 DKwR2O8P26uKZwJFXsf+buAtCb6IXVPVLaVReBwD7vIEb/hDIFDgip8OBXvZkKoz m2nVQd7XGSc9dJEpTJrvrgFK4rfD/NIGqB+W4/NNeSG1L3v/sI3udrmTo9GONVa0 xcNbivOEz+T4pHshmVuah3nfhdmk3+e6T9WcTJLKxlhf7o5TZCicc3NwUzK2suFV c2ql5vOzo1cYtLV34XrjvIsioe7HoEicx9YEWbS3if5aQG97HJx8GFcZyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwsJR5mf4v45c8iY5lVXYnqk8JaMB8GA1UdIwQY MBaAFAbi0n0w7P9CdxxKuXeoKupYp2tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVMU2ZURHNfMEozSEVxNWQ2Z3E2bGluYTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMDkxM2ItZTUwNi00NzYwLTg4YjYt NmQ5ODMyNGI5OTE2LzEvQnVMU2ZURHNfMEozSEVxNWQ2Z3E2bGluYTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMDkxM2ItZTUwNi00NzYwLTg4YjYtNmQ5ODMyNGI5OTE2 LzEvQnVMU2ZURHNfMEozSEVxNWQ2Z3E2bGluYTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoXZplEB 3f8HABWVax8liFzlkOAsiFFkeOrD+/IgtmLk8PwYXbHHU5sVJB1DvQ80jjOISbD/ eu2NOz3c7eFxX0xPeRmNAFo8xUKYzMv0+TNZuI3S/i+4sakuRklEypbQagOd1zrR I23EXNzjB3hRgug7+HmlyaxxxUD8utgVsgLeF3b/BBYc3PjXnD6mK5pTwBbfj7rC LqSxwijbLqXz1KGtnU0CXDN19LhpY83QluJJBhSrO/PAZztwbXm1fH1/qV/3QUN5 q+e2dz4ca6qe10actKMGJ3Ty9jDPV+/QZf3fnzUWx2tdU5CX6MWnCrhqxeIlNHU+ PLuuVo6+uAMF4w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:31 2025 by rpki-client