This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json) Hash identifier: RbYB5w9pGIfTcvx8qiusXCzFm9+6Laz70NWxzW7vijQ= Subject key identifier: 0A:FE:5B:47:05:F9:80:DD:73:17:A2:92:31:26:8A:B2:10:D6:4D:E7 Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019AF19B222A5B74FF59D1807F4A5B034E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft Manifest number: 10A9 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: JamYuxweyhPZY/FZIkzHDoY4zhsosTHMkfXOzo2sMrE=) 2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=) 3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=) 4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=) 5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=) 6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=) 7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=) 8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:2a:5b:74:ff:59:d1:80:7f:4a:5b:03:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=0afe5b4705f980dd7317a29231268ab210d64de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:77:cb:09:4c:bb:88:97:89:c1:85:c7:44: b1:d1:0b:bc:06:58:be:72:56:79:87:f2:97:f6:9a: 55:b0:40:81:58:a1:96:b9:d8:94:ec:f4:68:dc:37: f3:5e:60:97:af:e5:ec:75:05:1c:35:2c:e1:15:9d: e6:8c:59:d6:8d:7e:48:68:ea:f5:4c:e1:c2:39:6c: b3:5f:7f:0c:5e:a3:fd:b2:5b:81:86:06:7d:e7:fc: bb:9c:20:63:61:80:e0:2f:cc:60:70:03:4c:d7:db: 48:43:8a:f4:6d:51:66:68:18:b3:75:15:b0:bb:48: 9c:db:12:2f:45:ba:12:05:46:00:fe:b0:08:41:6a: 45:2f:3d:d5:aa:14:16:ec:f5:36:8d:16:12:64:c2: e3:e7:1e:bb:9e:3e:0d:c1:0c:f8:21:b3:4c:c8:ff: 78:a4:ec:6b:2f:dc:95:d5:3a:53:80:4e:43:88:bf: a2:60:e4:2e:a4:7f:d6:7f:a2:27:2f:4d:17:16:5f: 1e:2c:b5:c7:62:e3:3c:77:63:d6:54:29:f1:1e:71: d6:07:98:6a:c6:e0:b3:cd:a9:8d:1d:60:36:89:2c: f3:ed:93:cf:0c:00:0e:36:73:bb:cd:7a:35:a6:bb: 69:ce:ca:39:e9:a3:e9:4c:0b:22:17:20:38:a9:86: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FE:5B:47:05:F9:80:DD:73:17:A2:92:31:26:8A:B2:10:D6:4D:E7 X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b5:1f:86:28:dd:ff:8d:75:66:4f:c5:7f:64:53:23:ea:75: 65:fb:79:68:4b:a8:ed:20:8e:91:96:3f:7b:99:74:c4:34:d3: 7e:b0:5f:6f:e5:79:9d:cc:b5:dd:07:64:55:03:06:03:9b:3a: e7:4d:cd:04:08:d0:2c:a1:77:68:51:cb:8c:e2:a7:14:ae:5e: e2:6d:77:2e:f7:54:99:c3:f0:9b:d1:32:34:c7:86:2e:1f:a3: 4c:d9:7d:d1:85:3d:34:22:9f:88:ea:5a:85:7d:bd:0a:fb:5e: 44:c9:f3:78:ca:e7:53:d4:c9:1e:e5:82:02:21:45:fe:4a:c7: 92:b7:ae:7c:ef:61:59:c1:ec:57:52:9d:ce:e1:16:12:0f:07: f0:e5:ff:30:21:1b:4d:92:0f:00:80:8b:ea:2e:bd:e2:86:ea: 12:14:5d:2e:67:f8:55:4a:53:98:1e:47:10:6d:cd:21:69:94: e9:67:11:36:f3:ab:9c:82:78:f0:2f:07:80:bc:33:27:0a:24: d9:6c:c4:cc:30:5b:1a:8f:80:89:8e:3d:7b:7f:4c:1f:a6:0c: 71:f7:2c:15:3d:b7:4c:5d:6c:05:56:af:17:4f:07:79:a1:4a: eb:a9:64:04:6e:34:57:64:4f:f0:1f:be:cb:ef:33:d6:b3:db: e0:1a:83:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyIqW3T/WdGAf0pbA045MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygwYWZlNWI0NzA1Zjk4MGRkNzMxN2EyOTIzMTI2OGFiMjEwZDY0ZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmup3ywlMu4iXicGFx0Sx0Qu8Bli+ clZ5h/KX9ppVsECBWKGWudiU7PRo3DfzXmCXr+XsdQUcNSzhFZ3mjFnWjX5IaOr1 TOHCOWyzX38MXqP9sluBhgZ95/y7nCBjYYDgL8xgcANM19tIQ4r0bVFmaBizdRWw u0ic2xIvRboSBUYA/rAIQWpFLz3VqhQW7PU2jRYSZMLj5x67nj4NwQz4IbNMyP94 pOxrL9yV1TpTgE5DiL+iYOQupH/Wf6InL00XFl8eLLXHYuM8d2PWVCnxHnHWB5hq xuCzzamNHWA2iSzz7ZPPDAAONnO7zXo1prtpzso56aPpTAsiFyA4qYYbHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr+W0cF+YDdcxeikjEmirIQ1k3nMB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrUfhijd /411Zk/Ff2RTI+p1Zft5aEuo7SCOkZY/e5l0xDTTfrBfb+V5ncy13QdkVQMGA5s6 503NBAjQLKF3aFHLjOKnFK5e4m13LvdUmcPwm9EyNMeGLh+jTNl90YU9NCKfiOpa hX29CvteRMnzeMrnU9TJHuWCAiFF/krHkreufO9hWcHsV1KdzuEWEg8H8OX/MCEb TZIPAICL6i694obqEhRdLmf4VUpTmB5HEG3NIWmU6WcRNvOrnIJ48C8HgLwzJwok 2WzEzDBbGo+AiY49e39MH6YMcfcsFT23TF1sBVavF08HeaFK66lkBG40V2RP8B++ y+8z1rPb4BqDRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client