This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: rRFFJaIsOamxo/j6FCdRHVH4MsdFy7fIjGcrLCiRpEk= Subject key identifier: 1C:87:D5:A8:EE:E5:A1:73:9E:C0:DF:35:6F:78:24:3B:03:FD:65:F8 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B2DE736145DCDFADD3C3948153AFC10CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 20:01:25 +0000 Manifest this update: Wed 17 Dec 2025 20:01:25 +0000 Manifest next update: Thu 18 Dec 2025 20:01:25 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: zueUyEmVLnlfdH1yP6qudZojqTCiew0XKhn9DiVS/7k=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e7:36:14:5d:cd:fa:dd:3c:39:48:15:3a:fc:10:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 17 20:01:25 2025 GMT Not After : Dec 18 20:01:25 2025 GMT Subject: CN=1c87d5a8eee5a1739ec0df356f78243b03fd65f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:1f:3b:97:fd:03:c5:a1:0d:cf:dc:5e:c0: 41:78:9f:a2:eb:e4:11:9b:74:f4:73:ae:2a:12:b5: ad:63:48:eb:99:c1:80:59:89:0c:71:28:c2:5e:c5: b1:48:40:84:0c:4a:0e:c1:ed:01:12:c1:41:49:b2: bc:1d:f0:86:af:5d:11:99:28:6f:36:d9:37:2a:1f: 6c:99:99:67:e8:04:1a:1f:85:20:92:da:15:4e:83: 6a:c0:02:7c:ad:7f:24:64:da:be:5d:5c:93:a2:cd: f0:1b:8c:80:16:bf:2a:2f:40:b7:50:14:9d:35:6d: 9b:08:db:18:8f:b6:6f:3c:23:87:27:9c:7f:fc:f8: c2:5c:1f:01:d3:a9:00:3e:74:34:05:a7:61:93:4d: 25:a2:cb:12:58:b7:9f:0f:51:d0:bb:10:2f:33:a6: 7b:47:03:60:bc:48:31:6d:c4:4e:95:69:3f:05:2c: fb:ae:4b:33:c6:cc:1f:87:a2:63:2d:91:f2:c1:10: b5:7b:67:ad:11:7e:44:1d:60:cc:e0:94:18:0e:7a: 7a:7e:63:d9:7e:cd:6b:38:f3:bb:26:9f:ce:87:fd: fb:e7:fd:6d:db:7f:1f:0e:2a:85:5c:55:95:dd:1d: d0:f9:75:eb:c4:7f:51:c7:ef:1e:d7:ca:59:de:5a: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:87:D5:A8:EE:E5:A1:73:9E:C0:DF:35:6F:78:24:3B:03:FD:65:F8 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:e0:e8:f3:f6:c7:5b:0e:ef:73:ce:90:88:19:1e:53:d3: 6b:f6:74:3f:64:20:bb:cb:8e:50:ea:ed:4c:5a:b5:e1:6f:36: a8:e3:24:ca:b3:46:4e:b3:be:9d:a2:fc:77:cc:eb:d8:88:6c: ee:ef:68:c5:6a:d6:c8:5a:22:16:1d:d6:5c:25:24:86:d7:3d: 9c:38:52:05:e8:c6:88:32:ab:1c:be:c8:63:6b:79:64:f5:e0: bc:2e:c3:e2:c1:a6:c5:fe:8b:15:40:e9:6b:8c:aa:9f:35:de: 7c:a0:cb:4d:01:b3:dc:06:49:83:fa:bc:66:7f:88:b7:21:42: cb:5d:44:f9:f0:5a:be:b5:55:55:4b:55:44:8b:66:a8:7e:07: 85:69:00:33:57:47:83:ad:0a:d3:10:03:7f:93:75:c5:af:a3: b8:12:ed:2e:e4:43:e2:ab:5f:b3:cf:c0:94:c3:c3:e5:73:f2: bc:41:58:24:32:da:72:41:a5:d7:3b:fa:22:9e:41:04:44:60: 1b:72:5c:7e:4b:30:95:fd:ca:88:2a:c9:3d:e3:cd:22:76:fc: 00:05:29:aa:e4:b4:a1:f7:c5:62:ac:db:c2:b7:24:8f:b5:d6: 78:a4:be:cf:8b:cd:8b:52:5d:d0:ba:50:6b:fa:4f:10:7b:32: 6a:6e:26:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5zYUXc363Tw5SBU6/BDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjE3MjAwMTI1WhcNMjUxMjE4MjAwMTI1WjAzMTEwLwYDVQQD EygxYzg3ZDVhOGVlZTVhMTczOWVjMGRmMzU2Zjc4MjQzYjAzZmQ2NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoIfO5f9A8WhDc/cXsBBeJ+i6+QR m3T0c64qErWtY0jrmcGAWYkMcSjCXsWxSECEDEoOwe0BEsFBSbK8HfCGr10RmShv Ntk3Kh9smZln6AQaH4UgktoVToNqwAJ8rX8kZNq+XVyTos3wG4yAFr8qL0C3UBSd NW2bCNsYj7ZvPCOHJ5x//PjCXB8B06kAPnQ0Badhk00lossSWLefD1HQuxAvM6Z7 RwNgvEgxbcROlWk/BSz7rkszxswfh6JjLZHywRC1e2etEX5EHWDM4JQYDnp6fmPZ fs1rOPO7Jp/Oh/375/1t238fDiqFXFWV3R3Q+XXrxH9Rx+8e18pZ3lruDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByH1aju5aFznsDfNW94JDsD/WX4MB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABT3g6PP2 x1sO73POkIgZHlPTa/Z0P2Qgu8uOUOrtTFq14W82qOMkyrNGTrO+naL8d8zr2Ihs 7u9oxWrWyFoiFh3WXCUkhtc9nDhSBejGiDKrHL7IY2t5ZPXgvC7D4sGmxf6LFUDp a4yqnzXefKDLTQGz3AZJg/q8Zn+ItyFCy11E+fBavrVVVUtVRItmqH4HhWkAM1dH g60K0xADf5N1xa+juBLtLuRD4qtfs8/AlMPD5XPyvEFYJDLackGl1zv6Ip5BBERg G3Jcfkswlf3KiCrJPePNInb8AAUpquS0offFYqzbwrckj7XWeKS+z4vNi1Jd0LpQ a/pPEHsyam4mGg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:24 2025 by rpki-client