This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json) Hash identifier: tZm36JGSmEOnHypkc9V8lxHQInM4Y8emFBYIMAszqW0= Subject key identifier: D2:CD:2F:63:AA:22:87:06:9F:19:63:71:A0:55:6C:BB:8E:18:73:A2 Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53 Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953 Certificate serial: 019AF50A529B8A9D62EAE12A913B289DEF06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:25 +0000 Manifest this update: Sat 06 Dec 2025 19:01:25 +0000 Manifest next update: Sun 07 Dec 2025 19:01:25 +0000 Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: N0aiCRCarBe+UVOKNaKSko1W10f+c5LrdvgKBSGVle0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:52:9b:8a:9d:62:ea:e1:2a:91:3b:28:9d:ef:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953 Validity Not Before: Dec 6 19:01:25 2025 GMT Not After : Dec 7 19:01:25 2025 GMT Subject: CN=d2cd2f63aa2287069f196371a0556cbb8e1873a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:dd:bf:c0:42:67:9a:01:ec:23:2b:d3:1b: ff:3b:d1:19:30:04:5e:2f:57:9e:f3:17:77:c4:16: cb:f2:7e:31:14:d3:ea:ba:f5:5e:eb:ce:e7:ed:6b: 61:fd:30:cf:16:fa:0b:56:98:06:43:56:83:88:62: 66:73:94:36:e7:1f:81:4e:32:97:0c:7c:15:c2:38: e7:84:2c:f7:cd:c0:da:35:c4:f4:e1:57:8a:14:ae: 66:82:1e:bc:86:1d:19:c7:8e:29:a4:52:54:b0:fd: 58:12:a3:43:e0:eb:eb:c4:93:7a:9f:5d:04:fa:7b: 39:6f:41:1e:96:a4:60:fc:08:62:a2:1a:d1:de:0a: f7:99:63:0c:06:00:77:3a:62:8e:ec:b0:c2:04:05: b2:14:b0:f5:49:12:8e:2a:4f:5e:0a:7e:91:64:61: 2b:c8:63:56:20:e5:3c:be:af:a7:9a:e8:37:9a:87: dd:60:a6:a7:6c:60:8b:da:1c:f4:52:ff:cb:f9:28: 2d:fb:50:8a:23:c5:65:ab:0e:52:e4:6f:48:1f:5d: 99:04:1d:ae:52:af:d9:b5:7c:83:de:1c:39:98:88: b3:6c:70:ba:8a:6e:45:3b:92:95:d9:ac:07:18:5b: e7:96:d0:24:58:3c:e7:88:6c:89:6a:32:ed:5a:fb: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CD:2F:63:AA:22:87:06:9F:19:63:71:A0:55:6C:BB:8E:18:73:A2 X509v3 Authority Key Identifier: keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:aa:3d:4f:ea:20:11:8f:c9:a2:a3:80:80:e9:13:f3:64:d9: d1:fc:4a:eb:1a:dc:ad:58:13:dd:3e:48:8a:ee:63:6f:20:11: 1b:7c:dd:16:9f:df:6f:db:20:22:60:d7:a2:c2:e8:14:8e:ab: 07:fd:3a:ab:cf:e3:87:85:bc:25:29:75:3f:1c:76:ab:6f:4a: be:c5:eb:56:5b:06:04:21:71:c3:65:99:60:6c:d9:8f:90:38: 81:71:d0:0d:b8:24:9d:40:70:6d:83:97:00:1c:ef:8b:7e:5f: 90:ed:88:07:65:c1:77:0e:0d:cb:69:a5:0c:8c:62:bd:0c:dd: af:69:f2:07:11:32:0e:5c:95:1b:d6:7f:a0:86:5a:7f:df:fd: 68:1b:3b:aa:bf:47:cf:81:9e:fc:ef:29:bc:9c:7a:8e:32:9b: df:7f:e6:8f:e4:bc:2f:b7:cb:c9:70:c2:bd:4d:21:52:15:e4: c2:d6:48:c9:90:e1:90:89:30:9d:8b:ff:c4:40:df:b9:1c:8f: bf:f1:ee:8f:52:5f:15:d2:a0:cb:37:ad:5a:3d:7c:42:91:61: ec:4b:ed:ca:df:f0:17:5a:87:42:3f:e0:c2:30:8a:3d:f3:2d: 19:59:c5:c4:a6:fa:3f:0e:6f:71:4f:99:8d:9a:d7:d1:2e:79: cc:ae:2f:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClKbip1i6uEqkTsone8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTQyZDg5N2U5Njg5NWM3MGY0M2NhMDM1MGQwZmY0NGI4 NDg5NTMwHhcNMjUxMjA2MTkwMTI1WhcNMjUxMjA3MTkwMTI1WjAzMTEwLwYDVQQD EyhkMmNkMmY2M2FhMjI4NzA2OWYxOTYzNzFhMDU1NmNiYjhlMTg3M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLHdv8BCZ5oB7CMr0xv/O9EZMARe L1ee8xd3xBbL8n4xFNPquvVe687n7Wth/TDPFvoLVpgGQ1aDiGJmc5Q25x+BTjKX DHwVwjjnhCz3zcDaNcT04VeKFK5mgh68hh0Zx44ppFJUsP1YEqND4OvrxJN6n10E +ns5b0EelqRg/AhiohrR3gr3mWMMBgB3OmKO7LDCBAWyFLD1SRKOKk9eCn6RZGEr yGNWIOU8vq+nmug3mofdYKanbGCL2hz0Uv/L+Sgt+1CKI8Vlqw5S5G9IH12ZBB2u Uq/ZtXyD3hw5mIizbHC6im5FO5KV2awHGFvnltAkWDzniGyJajLtWvuY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLNL2OqIocGnxljcaBVbLuOGHOiMB8GA1UdIwQY MBaAFAbkLYl+lolccPQ8oDUND/RLhIlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYt Mjk1MjdjZTE5OWVkLzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYtMjk1MjdjZTE5OWVk LzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6o9T+og EY/JoqOAgOkT82TZ0fxK6xrcrVgT3T5Iiu5jbyARG3zdFp/fb9sgImDXosLoFI6r B/06q8/jh4W8JSl1Pxx2q29KvsXrVlsGBCFxw2WZYGzZj5A4gXHQDbgknUBwbYOX ABzvi35fkO2IB2XBdw4Ny2mlDIxivQzdr2nyBxEyDlyVG9Z/oIZaf9/9aBs7qr9H z4Ge/O8pvJx6jjKb33/mj+S8L7fLyXDCvU0hUhXkwtZIyZDhkIkwnYv/xEDfuRyP v/Huj1JfFdKgyzetWj18QpFh7Evtyt/wF1qHQj/gwjCKPfMtGVnFxKb6Pw5vcU+Z jZrX0S55zK4vwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:35 2025 by rpki-client