This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json) Hash identifier: aVvd4vTxjNafCl4JmcuUSOmS/Qo2aHHPp5eVQWzRTnw= Subject key identifier: AD:CF:86:86:2F:D7:65:DB:95:95:E4:F0:44:D5:A2:0C:46:DD:EA:D6 Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898 Certificate serial: 019B32D6852FA81A342E211B74269F8ADCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:01:18 +0000 Manifest this update: Thu 18 Dec 2025 19:01:18 +0000 Manifest next update: Fri 19 Dec 2025 19:01:18 +0000 Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: E0Ue+89SPXALyjEg0STqooBhoiPlTs2zg1SEvBbGqLM=) 2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:85:2f:a8:1a:34:2e:21:1b:74:26:9f:8a:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898 Validity Not Before: Dec 18 19:01:18 2025 GMT Not After : Dec 19 19:01:18 2025 GMT Subject: CN=adcf86862fd765db9595e4f044d5a20c46ddead6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:95:c8:5a:36:2e:8c:60:18:9f:a4:7c:f5: 7c:13:a4:ef:c9:6a:c5:d7:3d:8d:64:06:54:6e:90: 55:f7:65:06:ff:ce:1c:db:9c:ce:68:3c:81:81:7c: 19:c8:fb:9b:7d:5c:23:84:7e:b5:30:91:09:8f:60: ad:07:0d:5f:9a:59:b1:8f:19:73:e2:59:5c:f4:98: 0c:cc:a1:8c:63:92:2d:02:b5:49:70:45:0c:88:34: 57:ec:c9:17:aa:ea:f6:85:41:a9:f6:c1:cf:32:d6: 00:1e:d6:0c:54:3f:19:8e:6e:25:28:fe:71:97:c1: 91:64:e8:9e:03:47:4f:e6:1d:4f:79:0b:0a:90:28: 3a:76:18:b4:5c:0e:26:1b:ed:3a:c5:71:2f:ba:ec: c9:00:1b:81:32:0f:1b:90:49:b2:d4:87:7a:de:95: 8c:9b:a7:ce:83:5c:61:fc:28:cc:00:ab:5c:b3:9a: fd:62:7b:91:a6:55:03:be:7d:c3:e9:4c:bb:67:ea: 22:0d:20:8e:cd:f5:d1:60:e9:a8:e4:30:aa:8b:f7: 7e:f9:56:d4:fa:3e:17:c4:cc:ee:0b:3f:a9:08:0c: ea:b6:01:9a:cc:5c:27:c7:f5:61:32:7b:9d:c3:91: 41:94:18:5d:f8:98:31:ef:d7:6f:f8:61:a9:fa:5d: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:86:86:2F:D7:65:DB:95:95:E4:F0:44:D5:A2:0C:46:DD:EA:D6 X509v3 Authority Key Identifier: keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:ec:9e:74:bb:a8:4d:3e:72:31:07:b3:e2:f4:1d:49:33: c0:9f:b3:cd:c0:45:17:cc:e8:08:db:36:72:73:c1:64:bd:bd: 61:10:3c:44:1a:c3:b2:72:74:b1:df:8f:7b:97:d6:ab:69:e5: 38:f1:de:66:77:55:41:59:51:fb:74:86:6e:f4:0d:68:c0:53: 84:32:0e:39:d5:cf:8e:78:5c:71:6b:59:ef:0a:5d:10:fa:79: eb:4d:ab:be:1c:41:c0:a4:83:f6:0f:04:a9:c4:4b:f7:88:fb: 24:85:ff:20:55:46:6b:c3:a7:56:29:f7:a3:4f:01:0a:e1:b4: 94:91:75:60:b3:37:4c:9d:07:37:40:17:07:28:f9:e5:bd:24: 0e:9b:95:9c:ca:9b:51:43:81:b0:2e:ce:63:a8:9b:76:94:e5: df:b2:80:85:0a:7f:f0:35:30:94:d6:87:8b:a9:6e:c3:7a:2c: ee:9d:8a:2a:5a:b8:48:ee:bf:6c:2d:14:27:0f:4c:37:81:a0: a4:37:a1:fc:15:e4:ed:04:8b:08:4f:ef:b1:59:59:c4:6e:a3: 1d:f6:10:f5:7b:50:9a:a4:41:36:f3:1b:06:f8:03:53:7f:31: cd:7f:53:31:98:cd:17:82:b9:e2:2b:96:ad:3e:a1:b0:e1:61: 2a:cd:0e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1oUvqBo0LiEbdCafityiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5 OTc4OTgwHhcNMjUxMjE4MTkwMTE4WhcNMjUxMjE5MTkwMTE4WjAzMTEwLwYDVQQD EyhhZGNmODY4NjJmZDc2NWRiOTU5NWU0ZjA0NGQ1YTIwYzQ2ZGRlYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W+VyFo2LoxgGJ+kfPV8E6TvyWrF 1z2NZAZUbpBV92UG/84c25zOaDyBgXwZyPubfVwjhH61MJEJj2CtBw1fmlmxjxlz 4llc9JgMzKGMY5ItArVJcEUMiDRX7MkXqur2hUGp9sHPMtYAHtYMVD8Zjm4lKP5x l8GRZOieA0dP5h1PeQsKkCg6dhi0XA4mG+06xXEvuuzJABuBMg8bkEmy1Id63pWM m6fOg1xh/CjMAKtcs5r9YnuRplUDvn3D6Uy7Z+oiDSCOzfXRYOmo5DCqi/d++VbU +j4XxMzuCz+pCAzqtgGazFwnx/VhMnudw5FBlBhd+Jgx79dv+GGp+l0e+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3PhoYv12XblZXk8ETVogxG3erWMB8GA1UdIwQY MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1 LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo7snnS7 qE0+cjEHs+L0HUkzwJ+zzcBFF8zoCNs2cnPBZL29YRA8RBrDsnJ0sd+Pe5fWq2nl OPHeZndVQVlR+3SGbvQNaMBThDIOOdXPjnhccWtZ7wpdEPp5602rvhxBwKSD9g8E qcRL94j7JIX/IFVGa8OnVin3o08BCuG0lJF1YLM3TJ0HN0AXByj55b0kDpuVnMqb UUOBsC7OY6ibdpTl37KAhQp/8DUwlNaHi6luw3os7p2KKlq4SO6/bC0UJw9MN4Gg pDeh/BXk7QSLCE/vsVlZxG6jHfYQ9XtQmqRBNvMbBvgDU38xzX9TMZjNF4K54iuW rT6hsOFhKs0OcA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:10 2025 by rpki-client