This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json) Hash identifier: EhcKiBCGpx6XwkErobBFjkuHr8bfx+vVQn4QXbo5rp8= Subject key identifier: 32:24:F4:20:6B:55:20:56:E6:72:03:9D:1F:EA:BD:54:1A:DE:6F:00 Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa Certificate serial: 019AF16458DE6FF2C03B3A997D376F92C5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft Manifest number: 9D Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: 8+zpFy8q4fPE/m0KfIMFVF2i5wlOdqRc5IX8z1nwL64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:58:de:6f:f2:c0:3b:3a:99:7d:37:6f:92:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=3224f4206b552056e672039d1feabd541ade6f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:b9:38:8e:bc:22:63:7f:9b:5d:b3:66:e9: a8:01:62:5a:a4:14:67:5a:ed:8e:61:f8:c4:31:70: d6:5a:23:df:b3:67:49:2b:c5:a9:d3:7c:26:e2:b5: 37:3e:8c:b0:c0:49:42:0a:7f:9f:5d:75:93:cc:2c: 63:92:6c:1a:ba:34:20:34:c6:e6:ff:e0:e1:57:32: 43:9a:6b:24:7a:ef:3e:5d:14:95:7d:69:75:0a:f5: cb:bf:a4:bb:db:56:c2:28:7f:93:ce:ae:80:c3:7b: 93:86:7d:64:8f:e6:17:fc:bd:94:97:bb:a8:dc:57: d9:41:de:c7:14:87:39:fd:f3:d3:4e:1b:57:76:a7: 8a:d6:6e:89:18:00:3b:28:ab:27:a5:01:4e:f7:e5: 06:45:6a:00:71:48:6a:f0:e0:7b:4e:88:c9:67:bb: fe:94:d3:1e:23:de:8a:05:d8:07:81:9f:5c:7a:12: 5a:df:10:67:ab:84:93:e5:a2:e4:35:26:3b:6b:24: b5:12:30:bf:36:94:31:06:00:ab:35:bb:1a:1b:74: 4b:cc:c3:4b:48:9b:9d:74:ba:7f:c3:91:62:e6:9f: 08:80:19:df:18:bb:ab:8f:00:9a:a1:5e:9e:de:1a: 20:c7:9d:da:9a:c7:6b:fd:31:04:64:6b:da:a1:e1: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:24:F4:20:6B:55:20:56:E6:72:03:9D:1F:EA:BD:54:1A:DE:6F:00 X509v3 Authority Key Identifier: keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:bd:31:50:e7:2a:e2:36:96:12:b8:47:a9:57:72:cd:6b:5e: b3:64:b7:e1:a1:eb:78:ba:fc:f9:6c:e6:0a:76:05:64:90:95: 4e:79:74:36:c6:78:6f:80:1b:15:dd:e3:0d:c4:e2:f4:b1:92: 94:1c:fa:f2:7f:eb:ef:fe:e7:9f:be:81:ab:02:24:63:48:e7: 74:81:50:8b:3b:f8:70:a6:f3:d0:4d:de:b7:06:df:85:d2:2b: 3b:d7:4c:cf:87:78:70:7e:63:b9:d2:d9:c9:4b:72:42:3f:e3: c1:52:5b:4c:23:02:1e:e1:9e:ed:25:1c:b7:ca:29:f8:b3:48: a9:83:3d:e5:3d:b9:34:28:2a:44:8c:c9:03:ea:e3:e2:64:a9: 96:18:54:90:5b:25:c8:56:28:ce:fd:81:db:08:07:8e:a4:17: cf:2c:ee:6c:8e:d2:ef:81:76:b6:5e:99:01:fa:d9:00:08:d6: 6e:22:20:9a:07:91:e6:74:2b:8b:db:78:b2:2e:74:e2:97:4e: 51:43:b4:ef:10:19:68:90:f5:5e:7d:0d:57:b6:30:ae:0a:4b: 90:e6:85:43:e8:87:12:3e:f0:a4:81:88:76:ca:43:f9:f5:23: f8:ea:17:e2:e4:5b:15:93:f5:de:95:35:08:02:de:6a:db:38: e1:e4:73:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFjeb/LAOzqZfTdvksW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1 YWZiYWEwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EygzMjI0ZjQyMDZiNTUyMDU2ZTY3MjAzOWQxZmVhYmQ1NDFhZGU2ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs325OI68ImN/m12zZumoAWJapBRn Wu2OYfjEMXDWWiPfs2dJK8Wp03wm4rU3PoywwElCCn+fXXWTzCxjkmwaujQgNMbm /+DhVzJDmmskeu8+XRSVfWl1CvXLv6S721bCKH+Tzq6Aw3uThn1kj+YX/L2Ul7uo 3FfZQd7HFIc5/fPTThtXdqeK1m6JGAA7KKsnpQFO9+UGRWoAcUhq8OB7TojJZ7v+ lNMeI96KBdgHgZ9cehJa3xBnq4ST5aLkNSY7ayS1EjC/NpQxBgCrNbsaG3RLzMNL SJuddLp/w5Fi5p8IgBnfGLurjwCaoV6e3hogx53amsdr/TEEZGvaoeGi8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIk9CBrVSBW5nIDnR/qvVQa3m8AMB8GA1UdIwQY MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt ZDJkYTUxN2E5NmZkLzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgb0xUOcq 4jaWErhHqVdyzWtes2S34aHreLr8+WzmCnYFZJCVTnl0NsZ4b4AbFd3jDcTi9LGS lBz68n/r7/7nn76BqwIkY0jndIFQizv4cKbz0E3etwbfhdIrO9dMz4d4cH5judLZ yUtyQj/jwVJbTCMCHuGe7SUct8op+LNIqYM95T25NCgqRIzJA+rj4mSplhhUkFsl yFYozv2B2wgHjqQXzyzubI7S74F2tl6ZAfrZAAjWbiIgmgeR5nQri9t4si504pdO UUO07xAZaJD1Xn0NV7YwrgpLkOaFQ+iHEj7wpIGIdspD+fUj+OoX4uRbFZP13pU1 CALeats44eRzRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:51 2025 by rpki-client