This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json) Hash identifier: 3sI3VRX3MEv/C9tolutiReeu9CBNQCe0pRpz2WkjyfQ= Subject key identifier: 65:26:C7:7B:23:B4:1C:4F:5B:DD:6B:A6:85:B1:C8:D9:67:5A:57:B0 Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Certificate serial: 019BF808116368F67E78097CF4593F06CC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft Manifest number: 05FB Signing time: Mon 26 Jan 2026 02:00:36 +0000 Manifest this update: Mon 26 Jan 2026 02:00:36 +0000 Manifest next update: Tue 27 Jan 2026 02:00:36 +0000 Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: X4jeMC7759imct/WevfeYoXoSMjJ/HU6yMTBzaPWH/Q=) 2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:11:63:68:f6:7e:78:09:7c:f4:59:3f:06:cc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Validity Not Before: Jan 26 02:00:36 2026 GMT Not After : Jan 27 02:00:36 2026 GMT Subject: CN=6526c77b23b41c4f5bdd6ba685b1c8d9675a57b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:02:e9:c4:3a:01:46:66:dc:6d:d4:4f:f1: 81:cc:b7:a9:05:78:97:fb:c3:9f:ab:3f:15:73:41: a9:5e:2c:ff:5a:dd:ff:6e:13:61:18:0d:2e:37:90: b7:f9:b8:47:aa:c1:98:8e:29:84:f2:b1:25:0d:83: 5a:6e:86:e8:ac:40:a1:dd:0c:de:42:9d:13:8a:d8: 3f:b7:f5:69:ec:fc:28:1d:d3:ba:60:b0:26:8a:62: d8:dc:5b:28:01:09:f8:76:95:4c:34:cf:7e:47:e2: 65:3a:8a:9e:3a:b9:92:fb:df:fd:f4:8b:49:f0:11: bd:59:ad:ac:fc:d3:fc:f6:ea:1a:50:c3:9e:72:ca: 7e:44:fd:0d:6a:ed:23:49:e1:7f:66:58:02:22:74: 65:0a:c4:4d:88:3d:07:9e:e5:ee:42:ec:8d:bc:bf: 3c:34:4c:f7:a2:3e:3e:3b:76:f8:02:cf:8a:21:37: e4:d6:59:8b:d1:d0:5d:bd:17:59:e1:6d:96:e5:37: 79:b2:d2:1e:6d:63:0b:ed:49:8c:33:36:e2:25:7f: df:fb:bc:b0:f0:1f:e9:af:71:80:19:07:0f:8f:98: 15:af:5d:0e:47:72:3e:a5:9e:1c:2d:9e:3b:1e:d2: 97:83:c3:19:31:11:72:c3:bc:38:69:6f:70:db:a4: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:C7:7B:23:B4:1C:4F:5B:DD:6B:A6:85:B1:C8:D9:67:5A:57:B0 X509v3 Authority Key Identifier: keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:54:fa:59:9a:4e:6f:25:31:bd:68:74:b3:f5:c0:65:17:02: d7:2b:36:da:a8:32:2f:d4:d5:50:83:ea:55:8c:9e:c9:25:1d: f1:30:a4:7e:3b:8e:77:30:81:a9:a9:3c:d8:49:20:0a:ae:66: 85:e7:ba:e7:66:2b:19:65:9d:a4:37:4c:7f:e6:da:a3:cc:19: 25:fd:8f:25:80:a1:e8:60:ef:9b:5b:5e:f3:57:0e:8d:f7:82: f2:3e:32:ca:9c:99:d7:25:aa:00:47:ce:cd:a1:bf:e5:35:fe: 55:6a:43:3e:94:4d:3a:2b:07:0a:a1:ee:55:f4:31:58:a9:03: 85:71:70:f0:00:ac:3a:77:e8:83:4c:94:19:b1:55:89:53:f7: f4:a1:8c:e4:0a:33:52:fb:55:56:f3:cf:50:7e:26:78:b9:e9: ce:98:5d:fe:3a:3a:73:fe:66:93:58:c8:d6:60:3e:ea:c3:2f: 4b:25:f9:a7:d3:49:e0:bf:fc:d9:8b:21:3c:ed:c3:06:9c:1e: 9b:3c:ec:0d:df:d2:cc:2e:eb:c4:c7:1c:e3:82:c7:34:24:e8: e7:8b:ba:7e:e9:dc:fc:f4:e9:bd:0d:6d:ea:e8:6d:d4:f0:92: 1b:25:44:e6:91:d9:23:68:2c:bc:a2:a5:7b:51:f1:4a:23:40: 92:90:49:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBFjaPZ+eAl89Fk/BsxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj MmY5NWEwHhcNMjYwMTI2MDIwMDM2WhcNMjYwMTI3MDIwMDM2WjAzMTEwLwYDVQQD Eyg2NTI2Yzc3YjIzYjQxYzRmNWJkZDZiYTY4NWIxYzhkOTY3NWE1N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DkC6cQ6AUZm3G3UT/GBzLepBXiX +8Ofqz8Vc0GpXiz/Wt3/bhNhGA0uN5C3+bhHqsGYjimE8rElDYNaboborECh3Qze Qp0Titg/t/Vp7PwoHdO6YLAmimLY3FsoAQn4dpVMNM9+R+JlOoqeOrmS+9/99ItJ 8BG9Wa2s/NP89uoaUMOecsp+RP0Nau0jSeF/ZlgCInRlCsRNiD0HnuXuQuyNvL88 NEz3oj4+O3b4As+KITfk1lmL0dBdvRdZ4W2W5Td5stIebWML7UmMMzbiJX/f+7yw 8B/pr3GAGQcPj5gVr10OR3I+pZ4cLZ47HtKXg8MZMRFyw7w4aW9w26REFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUmx3sjtBxPW91rpoWxyNlnWlewMB8GA1UdIwQY MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0 LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklT6WZpO byUxvWh0s/XAZRcC1ys22qgyL9TVUIPqVYyeySUd8TCkfjuOdzCBqak82EkgCq5m hee652YrGWWdpDdMf+bao8wZJf2PJYCh6GDvm1te81cOjfeC8j4yypyZ1yWqAEfO zaG/5TX+VWpDPpRNOisHCqHuVfQxWKkDhXFw8ACsOnfog0yUGbFViVP39KGM5Aoz UvtVVvPPUH4meLnpzphd/jo6c/5mk1jI1mA+6sMvSyX5p9NJ4L/82YshPO3DBpwe mzzsDd/SzC7rxMcc44LHNCTo54u6func/PTpvQ1t6uht1PCSGyVE5pHZI2gsvKKl e1HxSiNAkpBJcg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:15 2026 by rpki-client