This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json) Hash identifier: t+XRFccVKKDHbkYOL83sJRgouMgb5m8i2maB4OK1OWc= Subject key identifier: D4:67:F9:BC:F9:FC:4D:F4:93:CB:1C:E7:DC:77:6A:C8:2B:59:6D:D1 Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Certificate serial: 019AF0BF2C6AB0BA879A323AB593F5327D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft Manifest number: 1463 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 63ba4NXwPa6K7mvXCbhCDFfchQGzy+SdAwvzvYVPw88=) 2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2c:6a:b0:ba:87:9a:32:3a:b5:93:f5:32:7d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=d467f9bcf9fc4df493cb1ce7dc776ac82b596dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:32:88:56:5c:7f:85:34:f7:35:b7:5d:7f: ff:92:a3:bb:34:a6:eb:97:3d:49:a5:8c:41:d9:6e: 53:56:3b:32:95:ad:e9:8b:70:02:a3:6f:15:d9:2d: fe:1c:f4:3c:a9:4c:59:53:e7:ad:cb:31:85:5b:ab: 44:e3:a0:a5:e7:7a:b9:68:c6:ca:df:57:04:72:2d: b8:c1:e8:a7:db:4a:8f:90:c7:0f:5c:9e:0e:7b:71: 59:24:70:35:fb:15:19:79:8d:dc:8e:c6:fc:b2:d6: 0e:20:b4:72:0a:f3:3e:3c:1e:ab:ae:a9:c8:f9:f8: de:58:e0:cb:8c:ac:ab:0c:16:75:c6:f1:f7:af:55: 7d:03:b2:c9:9f:01:64:75:22:cd:3f:f3:22:26:8f: 66:c9:89:6c:1e:43:5d:06:54:2e:35:d0:ae:bf:9e: d8:a1:d4:11:16:e1:45:ce:94:ec:09:53:9c:38:2b: 09:65:23:73:c6:c0:ed:bf:43:2d:12:97:01:71:f5: dc:85:b8:ba:91:62:61:89:07:b1:58:e9:81:9d:4c: ee:5d:84:7f:ce:84:a4:1f:e1:35:91:de:df:cf:2f: b6:08:a1:92:59:bb:63:7d:38:3d:a1:9c:58:f7:e3: 56:9f:39:ef:36:1b:e1:97:07:a7:71:28:25:36:64: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:F9:BC:F9:FC:4D:F4:93:CB:1C:E7:DC:77:6A:C8:2B:59:6D:D1 X509v3 Authority Key Identifier: keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:d2:cb:9f:c5:b9:b3:52:10:9d:2d:04:19:cc:42:a0:49: c9:a4:96:b6:11:c9:be:ca:fc:f1:2d:2f:80:bf:51:96:7e:68: 89:eb:fd:80:06:f7:e5:be:5c:9f:98:d9:60:ba:a9:f3:09:5a: 0b:12:c5:7c:27:ca:8e:cc:77:4a:3d:02:a9:5d:94:1d:c1:d9: 90:69:05:33:eb:f0:22:23:86:22:b3:6e:db:f7:76:14:22:25: ad:06:65:dd:7f:03:ab:bc:5f:e8:2b:96:d9:53:fc:29:f4:6b: e9:51:86:7b:88:ad:3b:d0:a5:4f:f1:44:f0:8e:69:ce:9a:24: a9:5e:13:5c:b2:fd:b3:d6:28:3b:06:a8:8c:e0:1a:41:8c:e6: 53:43:4e:b7:b7:3f:7d:ba:d2:b5:e6:3f:14:32:80:aa:b4:4e: 0a:64:7f:53:95:e6:2c:cd:3e:ed:ad:92:94:31:91:ce:be:43: 5e:a9:b6:92:28:73:0b:dd:4c:8c:11:84:f1:1b:6a:ab:3d:7d: c7:88:c6:30:4b:77:aa:75:0c:09:6b:44:e3:2e:1c:09:92:18: 1f:cf:a8:69:24:cc:b4:24:83:e4:df:6f:32:a4:08:2c:5f:d1: a4:af:72:7d:ce:30:04:b2:5a:a1:4e:44:4b:24:82:e5:89:74: 40:71:e0:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyxqsLqHmjI6tZP1Mn2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy NDQzOTUwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EyhkNDY3ZjliY2Y5ZmM0ZGY0OTNjYjFjZTdkYzc3NmFjODJiNTk2ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpwyiFZcf4U09zW3XX//kqO7NKbr lz1JpYxB2W5TVjsyla3pi3ACo28V2S3+HPQ8qUxZU+etyzGFW6tE46Cl53q5aMbK 31cEci24wein20qPkMcPXJ4Oe3FZJHA1+xUZeY3cjsb8stYOILRyCvM+PB6rrqnI +fjeWODLjKyrDBZ1xvH3r1V9A7LJnwFkdSLNP/MiJo9myYlsHkNdBlQuNdCuv57Y odQRFuFFzpTsCVOcOCsJZSNzxsDtv0MtEpcBcfXchbi6kWJhiQexWOmBnUzuXYR/ zoSkH+E1kd7fzy+2CKGSWbtjfTg9oZxY9+NWnznvNhvhlwencSglNmQKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRn+bz5/E30k8sc59x3asgrWW3RMB8GA1UdIwQY MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgvSy5/F ubNSEJ0tBBnMQqBJyaSWthHJvsr88S0vgL9Rln5oiev9gAb35b5cn5jZYLqp8wla CxLFfCfKjsx3Sj0CqV2UHcHZkGkFM+vwIiOGIrNu2/d2FCIlrQZl3X8Dq7xf6CuW 2VP8KfRr6VGGe4itO9ClT/FE8I5pzpokqV4TXLL9s9YoOwaojOAaQYzmU0NOt7c/ fbrSteY/FDKAqrROCmR/U5XmLM0+7a2SlDGRzr5DXqm2kihzC91MjBGE8Rtqqz19 x4jGMEt3qnUMCWtE4y4cCZIYH8+oaSTMtCSD5N9vMqQILF/RpK9yfc4wBLJaoU5E SySC5Yl0QHHgHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:26 2025 by rpki-client