This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json) Hash identifier: UATrsfS4lhqyOsIWy2jGCfpCesVwL87U3YuQxxZgTu0= Subject key identifier: 95:9D:B3:66:56:23:EC:01:FC:82:E4:A6:34:9A:40:AF:1F:18:8D:DB Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae Certificate serial: 019AF19ADF42C16D8D4A6CA09AA9E1EAC3E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft Manifest number: 025E Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: jXf3h1m9AGcH3UTirxjRRiX/cV+9BzyMbKYvjktWSNc=) 2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:df:42:c1:6d:8d:4a:6c:a0:9a:a9:e1:ea:c3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=959db3665623ec01fc82e4a6349a40af1f188ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:b5:63:d7:3d:15:47:d3:49:c5:ee:10:da: 71:f0:a4:5a:4f:d3:59:9b:a3:e6:7a:62:cc:89:74: d2:fc:71:77:f2:5f:0c:64:12:2f:de:dd:95:6c:9e: 2f:4f:3b:50:39:89:8e:bc:06:0a:83:40:3b:c9:7d: 93:25:9d:97:5c:e8:92:05:9e:5a:c3:1f:b9:ed:ef: 19:e7:69:92:2b:56:3d:d3:5b:56:4a:f8:57:52:c4: a7:75:3c:94:84:08:dc:1c:61:93:97:4c:4d:95:5f: d8:f5:64:bd:66:27:dd:99:2a:c0:8d:24:5f:c7:5a: dd:d1:1c:dc:6d:da:ae:99:e9:cd:62:4e:e4:ff:c6: 5b:9c:10:56:ac:2a:b9:be:a1:af:44:bc:c5:84:74: 96:07:76:35:7c:22:3d:4f:af:23:bb:81:18:dd:ad: 64:34:90:11:e8:6e:9c:34:67:d4:71:18:d6:e0:1e: 81:b6:2b:37:1c:eb:95:aa:f9:9e:22:bc:c1:ed:62: b0:3d:68:09:9a:f7:45:1b:71:46:35:7a:eb:aa:8d: cc:06:a7:78:e7:87:ca:2e:dc:d2:b8:68:84:38:68: 6b:29:af:3b:f6:f2:d1:34:a6:9f:0c:1c:c1:4b:7e: f9:0f:42:25:fa:c3:af:fd:28:77:6f:24:43:4a:a2: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:B3:66:56:23:EC:01:FC:82:E4:A6:34:9A:40:AF:1F:18:8D:DB X509v3 Authority Key Identifier: keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b2:fb:c5:73:02:0d:be:e8:1b:73:78:d7:77:16:e6:58:91: 40:74:87:20:8f:41:65:9b:c4:ea:21:c8:ac:c5:a5:f0:73:56: 2a:77:0b:3f:85:22:b1:e7:14:92:cf:52:39:14:b8:ee:79:ce: 08:7f:67:1e:f8:ea:bd:90:ce:a5:36:d3:61:fc:7f:43:5f:51: 95:fd:3f:0a:04:77:e4:0b:17:1e:59:57:b4:f5:3a:24:cc:65: 6c:ca:1f:2d:f9:e1:b0:fe:f3:ad:fa:04:4a:ea:44:93:c3:90: 59:49:62:7a:8b:21:51:18:ed:7a:9c:72:9c:76:14:2a:68:11: ce:03:c2:42:78:10:a3:78:ed:8f:58:85:83:9f:e7:fd:63:69: 28:68:13:70:6c:31:c9:72:e9:e6:63:44:c8:c4:77:7a:be:28: 78:11:19:c8:c7:1e:86:0b:d5:f2:41:87:9f:20:7c:97:a9:6d: 20:bf:25:6a:84:0a:93:51:9b:24:b0:58:56:1d:1f:6c:86:00: 1b:9f:bf:09:47:95:61:db:ce:24:89:f9:a6:a0:11:4a:5d:5f: aa:b0:99:66:1c:de:3d:cf:50:39:94:44:ae:a9:49:2d:6b:c5: ce:f4:fa:5a:8a:46:27:f8:57:12:42:7c:04:3d:e3:53:1c:37: b2:84:2c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt9CwW2NSmygmqnh6sPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl Y2MyYWUwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg5NTlkYjM2NjU2MjNlYzAxZmM4MmU0YTYzNDlhNDBhZjFmMTg4ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtry1Y9c9FUfTScXuENpx8KRaT9NZ m6PmemLMiXTS/HF38l8MZBIv3t2VbJ4vTztQOYmOvAYKg0A7yX2TJZ2XXOiSBZ5a wx+57e8Z52mSK1Y901tWSvhXUsSndTyUhAjcHGGTl0xNlV/Y9WS9ZifdmSrAjSRf x1rd0RzcbdqumenNYk7k/8ZbnBBWrCq5vqGvRLzFhHSWB3Y1fCI9T68ju4EY3a1k NJAR6G6cNGfUcRjW4B6Btis3HOuVqvmeIrzB7WKwPWgJmvdFG3FGNXrrqo3MBqd4 54fKLtzSuGiEOGhrKa879vLRNKafDBzBS375D0Il+sOv/Sh3byRDSqLH3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWds2ZWI+wB/ILkpjSaQK8fGI3bMB8GA1UdIwQY MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7L7xXMC Db7oG3N413cW5liRQHSHII9BZZvE6iHIrMWl8HNWKncLP4UisecUks9SORS47nnO CH9nHvjqvZDOpTbTYfx/Q19Rlf0/CgR35AsXHllXtPU6JMxlbMofLfnhsP7zrfoE SupEk8OQWUlieoshURjtepxynHYUKmgRzgPCQngQo3jtj1iFg5/n/WNpKGgTcGwx yXLp5mNEyMR3er4oeBEZyMcehgvV8kGHnyB8l6ltIL8laoQKk1GbJLBYVh0fbIYA G5+/CUeVYdvOJIn5pqARSl1fqrCZZhzePc9QOZRErqlJLWvFzvT6WopGJ/hXEkJ8 BD3jUxw3soQsGw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:57 2025 by rpki-client