This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json) Hash identifier: xfqAhvlTf2VK803lu6Di9fmbJA7ZL3ar+gEuvx8NTd4= Subject key identifier: AF:E6:D0:5B:46:F5:61:46:08:AC:F9:3E:4E:DB:AE:6E:37:97:F5:63 Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Certificate serial: 019B3DFE7F991B1A89DC918609E08595D450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft Manifest number: 133A Signing time: Sat 20 Dec 2025 23:00:47 +0000 Manifest this update: Sat 20 Dec 2025 23:00:47 +0000 Manifest next update: Sun 21 Dec 2025 23:00:47 +0000 Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: znXGX6PHFYlCVeM+jlCI5hzg/4fPhqAT2B7oPJwHIqc=) 2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:7f:99:1b:1a:89:dc:91:86:09:e0:85:95:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Validity Not Before: Dec 20 23:00:47 2025 GMT Not After : Dec 21 23:00:47 2025 GMT Subject: CN=afe6d05b46f5614608acf93e4edbae6e3797f563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:6e:dd:16:8f:b9:91:36:ae:d6:51:e7:6e: 9a:51:38:94:16:a4:15:07:23:df:51:0b:79:f8:92: 9c:b2:19:b3:5b:2e:59:22:b6:0d:d7:54:51:0b:89: 53:23:ec:80:bc:67:93:44:07:0e:63:ce:4f:2c:93: df:c1:75:1a:cb:a0:dc:df:cc:91:8b:96:10:30:be: 7d:6a:0b:53:4f:db:91:7e:05:c5:e9:f4:a7:4d:ed: 5f:36:f4:33:9e:18:e1:5f:55:85:e5:08:f9:ce:b7: b1:91:ca:ca:9e:87:a7:17:58:48:a6:42:fe:c0:32: d2:43:3d:4f:fd:a4:0a:ef:5a:8a:0a:e7:dc:3a:b3: 1d:3e:94:d9:5e:ee:a8:7d:70:94:f0:dc:99:f9:87: 2b:c6:18:c4:77:a0:d6:3f:89:d3:ae:37:a0:84:80: d5:d8:90:e8:29:45:7c:f6:ad:36:48:67:c6:dd:10: 0c:4d:92:4e:4e:96:18:e3:b3:9d:6f:ff:58:f2:42: 9c:64:1a:7e:03:d6:5c:2a:79:5d:a2:bd:46:ff:31: 3e:78:df:87:05:56:96:a3:39:14:37:1a:a7:17:0a: a6:e3:3d:76:54:c1:d2:b1:a0:61:d8:b3:5b:54:85: da:4a:08:2e:c6:5a:74:d9:ba:fc:a7:71:de:17:1e: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:D0:5B:46:F5:61:46:08:AC:F9:3E:4E:DB:AE:6E:37:97:F5:63 X509v3 Authority Key Identifier: keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8d:ea:06:33:bb:df:0f:bc:40:96:ea:31:fd:86:ed:df:80: 96:38:f2:b9:6b:70:2e:cc:3d:f5:33:b3:c4:9c:52:7f:99:17: 0a:57:4f:86:4a:a0:cc:24:b9:14:5d:49:ab:60:41:56:17:1a: b9:f2:98:f3:97:f5:ca:f7:b2:61:36:82:80:a9:92:de:6a:cd: 06:06:06:77:49:b9:ee:10:67:bc:eb:1b:d5:3b:42:8c:df:03: fc:f0:eb:8b:83:22:6e:6f:8d:68:aa:82:02:b3:7c:9b:56:86: c0:bc:ab:48:d7:37:46:97:b7:32:9a:74:c9:af:f4:73:5c:ad: ee:dc:a0:fc:0a:23:d3:05:1e:84:c2:97:bd:81:ee:21:f2:32: 55:de:e8:77:e8:06:74:c5:fd:68:d7:38:f6:54:a5:79:d1:0a: 05:75:d4:63:f9:c7:7d:38:71:17:03:eb:d6:b8:4b:8c:9f:55: 18:55:5e:c6:f9:0f:6d:56:32:41:8f:9a:a4:1f:23:29:ca:bf: 22:30:a7:50:86:59:55:fb:23:36:7a:5b:fa:ab:99:86:88:33: 4d:34:1f:4c:4b:ba:54:62:a3:eb:c7:34:71:ef:b4:1f:7b:d2: a9:85:7f:04:85:bf:7e:5b:44:6c:58:10:0e:6c:f9:2a:d9:75: 8e:6f:42:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/n+ZGxqJ3JGGCeCFldRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTA4ZmI5YWY0ZDZjYWZjY2ZhZTNiMjhlYzZlZDQ5YzQy M2VmYzYwHhcNMjUxMjIwMjMwMDQ3WhcNMjUxMjIxMjMwMDQ3WjAzMTEwLwYDVQQD EyhhZmU2ZDA1YjQ2ZjU2MTQ2MDhhY2Y5M2U0ZWRiYWU2ZTM3OTdmNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc1u3RaPuZE2rtZR526aUTiUFqQV ByPfUQt5+JKcshmzWy5ZIrYN11RRC4lTI+yAvGeTRAcOY85PLJPfwXUay6Dc38yR i5YQML59agtTT9uRfgXF6fSnTe1fNvQznhjhX1WF5Qj5zrexkcrKnoenF1hIpkL+ wDLSQz1P/aQK71qKCufcOrMdPpTZXu6ofXCU8NyZ+YcrxhjEd6DWP4nTrjeghIDV 2JDoKUV89q02SGfG3RAMTZJOTpYY47Odb/9Y8kKcZBp+A9ZcKnldor1G/zE+eN+H BVaWozkUNxqnFwqm4z12VMHSsaBh2LNbVIXaSgguxlp02br8p3HeFx7lhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/m0FtG9WFGCKz5Pk7brm43l/VjMB8GA1UdIwQY MBaAFAWgj7mvTWyvzPrjso7G7UnEI+/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEt ZDJiMjNhMzU1ZWRhLzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEtZDJiMjNhMzU1ZWRh LzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY3qBjO7 3w+8QJbqMf2G7d+AljjyuWtwLsw99TOzxJxSf5kXCldPhkqgzCS5FF1Jq2BBVhca ufKY85f1yveyYTaCgKmS3mrNBgYGd0m57hBnvOsb1TtCjN8D/PDri4Mibm+NaKqC ArN8m1aGwLyrSNc3Rpe3Mpp0ya/0c1yt7tyg/Aoj0wUehMKXvYHuIfIyVd7od+gG dMX9aNc49lSledEKBXXUY/nHfThxFwPr1rhLjJ9VGFVexvkPbVYyQY+apB8jKcq/ IjCnUIZZVfsjNnpb+quZhogzTTQfTEu6VGKj68c0ce+0H3vSqYV/BIW/fltEbFgQ Dmz5Ktl1jm9CTw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:36 2025 by rpki-client