This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json) Hash identifier: HhB4A+UaHsgg/YrSB7mjhghIS+AmBhQfNsGV5/mc6kw= Subject key identifier: C1:C8:06:83:43:7F:B3:4D:19:1E:0D:7E:ED:AE:2A:AB:3C:EA:E4:B1 Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Certificate serial: 019AF2099C16858B4A999A076EFF11982E12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft Manifest number: 08FD Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: JglZJLTk6uBCBECuMY0EA8KsmBGpUPFzzGrIyuq3NsU=) 2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9c:16:85:8b:4a:99:9a:07:6e:ff:11:98:2e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=c1c80683437fb34d191e0d7eedae2aab3ceae4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:d6:7b:e5:bb:28:24:6e:25:56:6a:72:38: 03:b4:d0:60:b8:c2:c5:83:fd:ef:77:1a:f1:2d:08: 05:60:7a:66:f0:0a:fd:c7:a4:0a:04:aa:d4:f0:66: 69:81:19:c3:d2:3b:35:02:f2:2f:7a:13:11:55:a9: f6:bb:b0:5b:63:14:e3:1f:af:c1:9f:f2:d1:98:f1: 3e:c3:35:ca:1f:72:c8:7c:44:5e:24:b6:d8:1b:31: 41:59:22:3e:7a:f5:a8:a5:30:57:a2:91:0e:4f:e2: 8a:a1:38:11:80:5c:d5:6c:02:ca:85:28:f2:8a:c2: 69:9d:cd:4d:5f:25:69:75:e7:b0:93:57:0d:ac:82: bd:b6:b6:ca:45:13:a7:5f:eb:b1:e8:e8:78:1b:a8: cf:03:5e:43:d9:a2:38:14:b2:bf:f8:d0:22:21:a4: d3:fc:12:ff:2a:a9:d3:b4:b6:bd:fb:da:7d:f7:0c: b7:95:d0:cb:5d:6c:0d:a8:ec:64:c1:7d:bf:97:f3: be:b4:a7:37:10:12:95:a2:ed:83:c2:72:bd:bc:c7: 04:71:4e:f5:c0:15:78:d1:de:e6:00:b0:f5:50:84: 34:bf:d6:6a:9b:2f:d5:8c:64:61:6e:ae:39:6c:93: da:8c:99:48:52:6e:2c:b3:58:5b:53:1f:64:c7:69: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:06:83:43:7F:B3:4D:19:1E:0D:7E:ED:AE:2A:AB:3C:EA:E4:B1 X509v3 Authority Key Identifier: keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:72:5b:f3:e4:08:95:97:ed:ea:81:30:58:22:b7:f9:05: f2:76:eb:68:f5:d8:db:8c:37:5f:f8:30:f5:fb:d2:6c:4b:c3: ca:38:bb:39:6f:1f:69:10:c3:cd:60:6d:f2:26:bf:51:58:4e: 16:a7:4a:e2:1d:d0:a7:05:86:c9:7c:67:d0:52:89:d0:22:48: 2c:76:37:09:26:60:87:59:c2:54:94:c0:e5:4d:69:a7:b3:81: a2:b5:e8:26:51:0e:15:18:34:4c:ff:cf:0c:e1:1c:1d:ab:4f: 90:fa:6c:77:80:6c:83:1b:63:1d:5a:1e:1e:9c:64:5d:b8:08: a3:cc:c1:b5:f2:47:02:a2:17:2e:6c:83:a8:85:05:d2:24:e6: b8:97:c2:e0:cd:7c:6b:89:3a:6a:6a:2d:f1:bb:c8:fb:74:08: d8:c3:dc:86:49:18:72:92:d8:90:f4:69:a8:1c:c2:e2:83:03: c0:d3:74:1b:de:24:9c:3d:a2:16:05:08:c0:46:3f:57:bd:9e: 65:6d:cf:6f:86:cf:af:c8:30:d7:f1:6f:4f:b4:e5:e7:99:04: df:60:95:e9:94:e2:de:3b:f4:fc:8f:b5:e5:64:de:71:a1:35: 37:aa:8f:3c:f0:aa:1b:33:3d:5c:05:63:bc:8a:84:9a:aa:6c: 73:4c:74:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZwWhYtKmZoHbv8RmC4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj MzBmZTQwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhjMWM4MDY4MzQzN2ZiMzRkMTkxZTBkN2VlZGFlMmFhYjNjZWFlNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w/We+W7KCRuJVZqcjgDtNBguMLF g/3vdxrxLQgFYHpm8Ar9x6QKBKrU8GZpgRnD0js1AvIvehMRVan2u7BbYxTjH6/B n/LRmPE+wzXKH3LIfEReJLbYGzFBWSI+evWopTBXopEOT+KKoTgRgFzVbALKhSjy isJpnc1NXyVpdeewk1cNrIK9trbKRROnX+ux6Oh4G6jPA15D2aI4FLK/+NAiIaTT /BL/KqnTtLa9+9p99wy3ldDLXWwNqOxkwX2/l/O+tKc3EBKVou2DwnK9vMcEcU71 wBV40d7mALD1UIQ0v9Zqmy/VjGRhbq45bJPajJlIUm4ss1hbUx9kx2mHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHIBoNDf7NNGR4Nfu2uKqs86uSxMB8GA1UdIwQY MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUdyW/Pk CJWX7eqBMFgit/kF8nbraPXY24w3X/gw9fvSbEvDyji7OW8faRDDzWBt8ia/UVhO FqdK4h3QpwWGyXxn0FKJ0CJILHY3CSZgh1nCVJTA5U1pp7OBorXoJlEOFRg0TP/P DOEcHatPkPpsd4BsgxtjHVoeHpxkXbgIo8zBtfJHAqIXLmyDqIUF0iTmuJfC4M18 a4k6amot8bvI+3QI2MPchkkYcpLYkPRpqBzC4oMDwNN0G94knD2iFgUIwEY/V72e ZW3Pb4bPr8gw1/FvT7Tl55kE32CV6ZTi3jv0/I+15WTecaE1N6qPPPCqGzM9XAVj vIqEmqpsc0x0RA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:10 2025 by rpki-client