This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: tLRQGzIQqXcOEGbIxDCbZQC2a4jMT+shkMlRa06Wdm4= Subject key identifier: 1B:42:5E:59:5E:9B:56:78:42:2C:BB:2D:7C:9B:41:BA:D4:AB:EB:E4 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019AF20900F26A190B874B1E12C45C139CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 35MvNNMESAlHJOV7RdcJTyZvTQUyoN036P/2ktYDbmU=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:00:f2:6a:19:0b:87:4b:1e:12:c4:5c:13:9c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=1b425e595e9b5678422cbb2d7c9b41bad4abebe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:f3:6a:b6:c6:cc:85:77:26:60:04:16:9f: 91:d8:cc:fe:b4:c0:10:93:c4:0f:b3:7b:6a:77:33: 6d:88:df:50:91:23:62:24:45:97:e1:30:9f:ac:f4: f1:82:7b:12:d9:25:54:f4:74:89:03:e1:09:36:46: 1d:b7:c4:d3:10:30:c6:fb:ff:80:f4:90:ed:39:3e: a7:9c:f9:0e:fe:86:dd:88:47:67:9a:68:66:c4:87: bc:f6:60:e9:88:38:3f:1e:de:dd:69:39:73:dd:cd: f7:90:86:0c:6c:61:b4:96:06:38:2f:68:72:9d:55: 0d:d5:98:ab:c2:61:ea:58:60:2f:6e:92:29:de:cd: 4f:83:e5:cc:28:77:ed:84:c9:89:dd:b4:bf:5f:ae: 35:8b:56:6e:85:ba:a3:d0:25:b0:2f:9e:af:c9:bb: 09:8d:08:17:79:91:2e:1c:a8:a8:35:13:4c:99:84: 51:67:e8:7c:b6:7a:ba:13:ec:3d:79:63:58:fb:af: fa:f4:7b:31:e6:a3:5b:5e:d3:ec:99:2e:9a:5f:e7: f2:22:88:61:b8:34:ef:60:0b:9c:5f:ab:fa:3e:dd: 2d:49:13:a8:e4:1d:b0:f7:58:00:3e:48:36:f1:1c: 8e:b7:67:85:d5:d4:34:ff:4e:20:f6:18:d1:0f:28: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:42:5E:59:5E:9B:56:78:42:2C:BB:2D:7C:9B:41:BA:D4:AB:EB:E4 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:69:4b:c9:28:01:77:c7:4c:eb:4d:f1:43:3c:11:cb:ba:21: cc:e4:b2:57:f1:ed:b7:3a:c8:bb:bd:69:85:b1:c8:12:af:52: b8:e4:5a:22:ea:e1:04:c3:a6:0d:d4:33:ff:71:c3:73:f0:33: 86:9a:44:37:85:c8:9c:f2:85:43:c1:e2:17:e1:10:01:8d:4f: 5f:57:8e:18:99:85:a6:42:1b:42:62:e9:04:aa:af:f1:95:2a: 96:fb:6c:70:52:9f:11:6f:43:d6:ff:cb:e5:1e:86:48:7f:fb: d2:de:01:94:4b:b7:e9:82:25:fa:62:c2:84:17:aa:2e:e7:28: b8:5a:6e:2f:ea:62:b2:18:e6:15:d5:ca:b2:b0:09:52:07:53: 2c:69:f7:c4:9a:45:d6:20:f6:ef:c0:79:f8:97:ed:56:38:bd: f3:55:2e:54:8b:b3:c3:78:b4:b2:8c:b6:85:8f:27:3b:e3:94: 72:0b:0d:35:72:d8:2f:ad:80:0b:61:a5:b7:0e:1c:c6:f5:37: b4:3d:83:15:1b:72:77:58:37:a4:99:d6:7d:17:3e:d0:67:da: 3f:13:d3:37:8e:a5:62:c6:b2:2b:92:23:f7:f8:50:7d:79:f6: 46:8a:36:a5:31:2a:25:e7:38:1a:a2:b4:c9:6e:e0:10:3c:a7: 1a:5b:8e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQDyahkLh0seEsRcE5ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EygxYjQyNWU1OTVlOWI1Njc4NDIyY2JiMmQ3YzliNDFiYWQ0YWJlYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy03zarbGzIV3JmAEFp+R2Mz+tMAQ k8QPs3tqdzNtiN9QkSNiJEWX4TCfrPTxgnsS2SVU9HSJA+EJNkYdt8TTEDDG+/+A 9JDtOT6nnPkO/obdiEdnmmhmxIe89mDpiDg/Ht7daTlz3c33kIYMbGG0lgY4L2hy nVUN1ZirwmHqWGAvbpIp3s1Pg+XMKHfthMmJ3bS/X641i1Zuhbqj0CWwL56vybsJ jQgXeZEuHKioNRNMmYRRZ+h8tnq6E+w9eWNY+6/69Hsx5qNbXtPsmS6aX+fyIohh uDTvYAucX6v6Pt0tSROo5B2w91gAPkg28RyOt2eF1dQ0/04g9hjRDyjvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtCXllem1Z4Qiy7LXybQbrUq+vkMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2lLySgB d8dM603xQzwRy7ohzOSyV/HttzrIu71phbHIEq9SuORaIurhBMOmDdQz/3HDc/Az hppEN4XInPKFQ8HiF+EQAY1PX1eOGJmFpkIbQmLpBKqv8ZUqlvtscFKfEW9D1v/L 5R6GSH/70t4BlEu36YIl+mLChBeqLucouFpuL+pishjmFdXKsrAJUgdTLGn3xJpF 1iD278B5+JftVji981UuVIuzw3i0soy2hY8nO+OUcgsNNXLYL62AC2Gltw4cxvU3 tD2DFRtyd1g3pJnWfRc+0GfaPxPTN46lYsayK5Ij9/hQfXn2Roo2pTEqJec4GqK0 yW7gEDynGluO/g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:20 2025 by rpki-client