This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json) Hash identifier: rlhB+0St7gQ5pNOacafyYeqPFbK5EjoorakY7byskUY= Subject key identifier: 71:C3:B6:54:96:47:20:60:31:BE:9B:FB:7B:F2:38:E1:DB:18:0C:39 Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Certificate serial: 019AF1D1F8DC31D9E75654AC993E94FC97E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft Manifest number: 0573 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: CajuKA+QYGqDY5T/GQseXUFibwTWbAa1TI0xKg56VHw=) 2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f8:dc:31:d9:e7:56:54:ac:99:3e:94:fc:97:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=71c3b6549647206031be9bfb7bf238e1db180c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:a1:ef:07:88:eb:26:f4:01:74:92:14:9e: f9:ae:49:c5:74:bb:8d:f2:12:85:f9:5c:70:cf:a5: b9:17:28:a6:13:7d:21:ef:3c:32:1c:fe:cb:71:ff: 72:d4:d4:f7:e2:3a:b2:74:a2:22:3a:a8:21:b6:15: e7:3d:83:79:56:88:d6:b7:30:98:d6:dc:07:3e:d3: de:61:25:d3:22:d9:e4:fd:93:37:29:d7:2f:a1:fb: 08:86:94:9f:94:02:d0:bf:88:2a:b2:23:c0:98:3e: c7:f1:e6:f6:58:68:9b:30:e0:70:4a:ad:f4:50:58: b8:d2:1e:52:1b:05:a9:91:82:2f:34:27:27:d1:14: bf:c4:92:36:2f:f7:22:ef:c3:41:26:7a:f4:39:c8: f1:fb:b1:7c:43:8e:5c:60:b7:cb:16:1e:fe:b2:49: a3:93:b1:11:72:fd:79:2e:b8:73:f3:09:f6:2f:d6: 7b:e3:ee:9e:83:cb:10:2a:b0:bb:05:d6:c3:08:27: 75:09:59:b8:74:ce:27:35:c3:b2:66:3a:f0:07:c6: 8b:c6:64:bc:73:5e:59:7c:ec:8d:db:78:40:bb:d5: 7e:ea:43:26:9d:16:24:16:1f:17:ed:14:42:96:4a: fd:48:53:74:3e:33:ce:49:01:6e:9e:0e:ee:da:2b: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:B6:54:96:47:20:60:31:BE:9B:FB:7B:F2:38:E1:DB:18:0C:39 X509v3 Authority Key Identifier: keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0d:3c:7b:e2:57:c6:7f:90:98:fb:2d:bb:e0:c5:9a:35:b3: d2:1a:9d:49:10:9c:bb:e2:21:81:d5:9f:17:ab:b4:dc:a5:08: ca:cd:c8:61:58:97:2f:0a:5c:df:a6:e2:f7:1e:9e:fd:f2:3d: 8b:a3:1d:3c:7e:16:3e:77:84:d1:b1:4e:c9:4d:13:0e:d9:e5: d3:a8:fb:c6:cd:77:34:0a:cd:26:5b:49:c5:9c:6d:fd:73:05: 24:ad:4e:29:7b:49:61:75:ed:e1:b3:a4:11:4e:4f:c0:21:2a: a6:66:96:b0:45:11:89:05:ab:70:95:95:79:46:7c:bd:76:ac: 4d:d9:68:da:44:f2:78:ee:eb:2c:10:15:0d:7f:44:31:8a:d4: 89:de:54:2b:52:04:af:37:f3:49:ef:be:86:ff:b2:69:91:30: fb:7f:ec:4f:eb:88:71:9f:42:4d:02:14:ea:10:1b:03:eb:e3: 9d:71:75:4f:45:9c:dc:21:01:05:ed:5e:17:cb:5e:e4:27:68: 75:30:10:d3:7d:10:38:90:94:75:fd:99:dd:b4:6a:5c:73:b9: 5b:d1:ba:1e:60:ec:02:cf:f9:02:2a:cf:51:f6:bf:b5:0b:15: 50:36:d9:7e:f8:f0:57:ed:37:c8:c5:07:d6:9e:aa:ac:77:aa: a5:38:39:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fjcMdnnVlSsmT6U/JfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj MmY5NWEwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD Eyg3MWMzYjY1NDk2NDcyMDYwMzFiZTliZmI3YmYyMzhlMWRiMTgwYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0yh7weI6yb0AXSSFJ75rknFdLuN 8hKF+Vxwz6W5FyimE30h7zwyHP7Lcf9y1NT34jqydKIiOqghthXnPYN5VojWtzCY 1twHPtPeYSXTItnk/ZM3KdcvofsIhpSflALQv4gqsiPAmD7H8eb2WGibMOBwSq30 UFi40h5SGwWpkYIvNCcn0RS/xJI2L/ci78NBJnr0Ocjx+7F8Q45cYLfLFh7+skmj k7ERcv15Lrhz8wn2L9Z74+6eg8sQKrC7BdbDCCd1CVm4dM4nNcOyZjrwB8aLxmS8 c15ZfOyN23hAu9V+6kMmnRYkFh8X7RRClkr9SFN0PjPOSQFung7u2is2PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHDtlSWRyBgMb6b+3vyOOHbGAw5MB8GA1UdIwQY MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0 LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ08e+JX xn+QmPstu+DFmjWz0hqdSRCcu+IhgdWfF6u03KUIys3IYViXLwpc36bi9x6e/fI9 i6MdPH4WPneE0bFOyU0TDtnl06j7xs13NArNJltJxZxt/XMFJK1OKXtJYXXt4bOk EU5PwCEqpmaWsEURiQWrcJWVeUZ8vXasTdlo2kTyeO7rLBAVDX9EMYrUid5UK1IE rzfzSe++hv+yaZEw+3/sT+uIcZ9CTQIU6hAbA+vjnXF1T0Wc3CEBBe1eF8te5Cdo dTAQ030QOJCUdf2Z3bRqXHO5W9G6HmDsAs/5AirPUfa/tQsVUDbZfvjwV+03yMUH 1p6qrHeqpTg5EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:35 2025 by rpki-client