This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json) Hash identifier: qn3rqtmYFPwViLtWBFQahLCtz/6/JEc9Krz6VWtYtcc= Subject key identifier: 8C:3E:53:44:8C:F6:6B:90:AD:FA:ED:D3:CC:EF:EE:0E:AB:BD:EA:34 Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f Certificate serial: 019B6D6A402BCFC288B22C1130F002AEBCD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft Manifest number: 0A1B Signing time: Tue 30 Dec 2025 04:00:38 +0000 Manifest this update: Tue 30 Dec 2025 04:00:38 +0000 Manifest next update: Wed 31 Dec 2025 04:00:38 +0000 Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: xjM/LUTYdl0ZhWbI0ZthASp+OnFLM/z7IGD9QlsvsmY=) 2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:40:2b:cf:c2:88:b2:2c:11:30:f0:02:ae:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f Validity Not Before: Dec 30 04:00:38 2025 GMT Not After : Dec 31 04:00:38 2025 GMT Subject: CN=8c3e53448cf66b90adfaedd3ccefee0eabbdea34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:5f:ba:95:b6:70:17:cd:62:a7:08:00:ab: ae:53:7c:1d:5a:56:f5:d5:ef:13:22:dc:ef:7f:9c: 74:ae:0a:e4:2b:b6:43:3a:78:c8:ab:55:74:de:2b: 90:8d:75:02:34:f6:8c:79:fa:1e:f9:bb:5f:80:84: f4:9c:16:63:bc:6c:e1:61:3f:08:2e:3c:18:96:13: dd:69:f7:fa:11:c2:40:fb:2e:e0:30:47:18:e6:d7: 03:ee:a7:73:57:97:d7:9f:16:03:ff:b0:af:5a:0f: e6:78:f6:3b:bf:f9:4b:05:ca:8d:5f:d4:71:b0:f6: e9:df:42:a9:f4:55:2b:61:fa:3a:e5:63:c3:1a:4f: 6d:d5:a7:c5:80:ea:b4:07:fe:fd:89:d6:a7:86:c7: 6a:84:01:59:0c:5d:47:80:f2:07:de:94:48:2b:b9: dd:a6:e8:45:7c:d2:3e:70:e1:54:ef:0b:8b:86:f7: da:88:d6:a2:32:98:cb:4f:ca:4b:50:30:6c:43:85: b0:a9:fe:e4:e9:71:f4:16:3a:8b:ac:76:db:32:69: 6d:05:17:87:d5:48:e3:a0:0e:6c:d0:d1:b8:cb:0e: 1b:86:32:b9:52:29:c2:a7:7c:9c:57:3a:15:a0:b7: c7:17:e7:60:fb:00:94:93:c6:5c:96:1c:bf:41:d4: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3E:53:44:8C:F6:6B:90:AD:FA:ED:D3:CC:EF:EE:0E:AB:BD:EA:34 X509v3 Authority Key Identifier: keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7f:8a:32:c2:20:57:9c:7b:3e:15:8d:52:7f:d2:ca:b1:2f: 4a:30:22:64:58:39:35:ec:47:f9:12:fb:e4:7f:02:e0:11:91: 03:43:f6:6d:6d:a4:01:48:f3:a9:9a:c7:a0:10:85:1f:d0:a3: b2:85:74:b0:1b:4d:28:ef:fe:46:7f:85:4a:52:8b:9d:e9:d7: ad:0a:54:c2:7d:4b:eb:ed:03:d9:f9:1f:1f:eb:a9:a6:51:cd: c4:b3:94:47:8c:87:47:00:76:a2:2f:2d:4f:3c:d0:7f:aa:ca: ad:93:d6:54:f6:0a:92:03:1b:71:54:6b:ca:99:7c:81:d9:10: eb:36:30:be:57:f2:95:50:a8:b1:53:4b:21:d2:24:68:e4:37: 57:4d:c6:51:bd:18:ab:00:00:6b:2e:08:40:07:92:7e:b3:03: a6:04:6e:c5:c0:de:44:85:e9:e5:43:a6:57:fb:19:cc:52:15: a4:53:1e:54:ee:77:6f:33:31:ba:86:8b:2c:e2:65:59:35:21: ce:66:8d:40:09:39:05:f8:96:87:82:08:2e:07:95:a8:72:34: 48:31:5f:d7:c1:bf:f1:d5:5d:a7:ab:8c:63:aa:6d:06:03:99: a7:ff:31:fe:e6:6d:5d:0b:f8:44:8b:90:52:67:f4:5b:a6:0a: 1e:12:6f:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttakArz8KIsiwRMPACrrzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk ZmJlNGYwHhcNMjUxMjMwMDQwMDM4WhcNMjUxMjMxMDQwMDM4WjAzMTEwLwYDVQQD Eyg4YzNlNTM0NDhjZjY2YjkwYWRmYWVkZDNjY2VmZWUwZWFiYmRlYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/RfupW2cBfNYqcIAKuuU3wdWlb1 1e8TItzvf5x0rgrkK7ZDOnjIq1V03iuQjXUCNPaMefoe+btfgIT0nBZjvGzhYT8I LjwYlhPdaff6EcJA+y7gMEcY5tcD7qdzV5fXnxYD/7CvWg/mePY7v/lLBcqNX9Rx sPbp30Kp9FUrYfo65WPDGk9t1afFgOq0B/79idanhsdqhAFZDF1HgPIH3pRIK7nd puhFfNI+cOFU7wuLhvfaiNaiMpjLT8pLUDBsQ4Wwqf7k6XH0FjqLrHbbMmltBReH 1UjjoA5s0NG4yw4bhjK5UinCp3ycVzoVoLfHF+dg+wCUk8Zclhy/QdTsHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw+U0SM9muQrfrt08zv7g6rveo0MB8GA1UdIwQY MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt MWY3NmU5ZGNmZjkyLzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX+KMsIg V5x7PhWNUn/SyrEvSjAiZFg5NexH+RL75H8C4BGRA0P2bW2kAUjzqZrHoBCFH9Cj soV0sBtNKO/+Rn+FSlKLnenXrQpUwn1L6+0D2fkfH+upplHNxLOUR4yHRwB2oi8t TzzQf6rKrZPWVPYKkgMbcVRrypl8gdkQ6zYwvlfylVCosVNLIdIkaOQ3V03GUb0Y qwAAay4IQAeSfrMDpgRuxcDeRIXp5UOmV/sZzFIVpFMeVO53bzMxuoaLLOJlWTUh zmaNQAk5BfiWh4IILgeVqHI0SDFf18G/8dVdp6uMY6ptBgOZp/8x/uZtXQv4RIuQ Umf0W6YKHhJvqA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:26 2025 by rpki-client