This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json) Hash identifier: IlkbtMP+cSFP8rZiZqKbm9FI929DIxvhS35blE11s9M= Subject key identifier: DE:39:6F:0A:C8:1D:BB:D2:54:91:22:F1:1A:4E:62:D8:90:E3:0B:D1 Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe Certificate serial: 019B34C4419A3B633787F81BCE206EE63BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft Manifest number: 16E1 Signing time: Fri 19 Dec 2025 04:00:35 +0000 Manifest this update: Fri 19 Dec 2025 04:00:35 +0000 Manifest next update: Sat 20 Dec 2025 04:00:35 +0000 Files and hashes: 1: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: ry+yFmG+iN67+UyecGB/wLRgzozU0hcicQySZbtVVy0=) 2: c2zsKW42u9qFvcl-pNszF08tguU.roa (hash: V/eBjVd839gDYIh5zShIDIAcf0aMo/ChEoQd1e5SHwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:41:9a:3b:63:37:87:f8:1b:ce:20:6e:e6:3b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe Validity Not Before: Dec 19 04:00:35 2025 GMT Not After : Dec 20 04:00:35 2025 GMT Subject: CN=de396f0ac81dbbd2549122f11a4e62d890e30bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:29:f8:e0:fe:13:6b:e7:f2:ac:f7:23:26: 46:08:3a:4d:33:a2:02:2c:23:fd:e3:2d:6e:b8:85: 4f:ad:5c:cb:24:68:ed:0b:12:55:d0:29:98:4c:f6: d8:0b:76:88:62:ee:c1:6a:5b:db:46:5a:7a:e4:fc: 66:ac:87:5c:e8:de:64:d9:bf:40:a6:8f:57:ee:2c: 7a:30:ea:ca:28:e9:49:1f:bf:39:3a:0e:02:c9:a3: cd:73:c1:12:61:71:6b:e9:4b:f9:44:dc:3c:04:31: 43:3b:b6:0f:75:5c:e2:8f:38:c0:71:cd:9d:c4:e0: 17:8f:0d:8a:af:01:25:ff:bd:48:1b:82:cd:c6:07: ff:49:f5:54:81:3c:64:78:e3:29:81:5a:57:03:4a: 22:9c:4d:82:e3:7f:55:ba:0d:0c:1d:71:a2:9c:90: 7e:49:d7:d8:85:ba:23:0b:dc:86:91:3a:ed:39:8b: aa:25:35:81:9a:8e:26:17:bb:a0:d0:d5:73:31:ae: 48:19:52:ec:e7:ba:6d:2d:68:e4:28:59:8c:d2:37: ad:49:4b:c7:89:f3:dd:12:85:90:7e:11:7a:98:69: 6c:b5:69:74:fd:2b:c5:28:94:9d:57:4c:82:0e:9b: 94:4a:32:63:23:56:11:d6:80:e7:58:13:bc:d2:76: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:39:6F:0A:C8:1D:BB:D2:54:91:22:F1:1A:4E:62:D8:90:E3:0B:D1 X509v3 Authority Key Identifier: keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d7:84:df:a7:58:08:50:74:37:3c:3e:45:8a:18:b7:e4:70: df:6d:c9:47:39:ce:67:bf:97:1b:ee:e0:71:10:31:59:fc:27: 93:18:5a:7a:d6:a7:93:6c:9a:f9:3e:a9:e1:5a:e9:98:2e:f8: b7:bd:bc:5c:31:23:6f:2d:c7:c5:82:f8:93:e2:65:6e:70:77: af:c9:69:c8:de:a0:25:a4:02:55:cc:17:a0:4f:df:40:4f:73: 7b:0f:2a:04:89:fa:51:7f:04:1b:5c:bb:4e:f0:33:20:80:5b: a6:7d:14:c6:6c:5d:a3:b0:6b:e8:95:32:a2:9a:3b:f4:97:98: 91:d4:60:94:ed:5d:71:b8:b9:1d:7b:21:b6:84:7c:93:7c:5e: 2e:7c:b7:6d:76:27:5a:d8:52:7d:4d:69:75:30:a1:01:4c:d2: 97:fb:23:88:e8:98:6b:14:80:ff:f9:cd:ae:48:f1:86:c7:b9: bc:65:7b:1d:06:b3:b6:9a:46:4e:34:05:57:3f:26:d3:a2:9c: 20:7c:72:d8:d9:35:90:32:40:79:49:18:01:92:c5:34:51:35: fd:1e:68:bf:93:f0:83:8b:36:f5:b6:6b:7f:b1:98:8a:e7:dc: 5b:26:47:6c:ef:76:8d:c5:ca:be:33:79:fb:94:0d:0f:19:58: 48:36:56:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEGaO2M3h/gbziBu5jvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm ZTQ4ZmUwHhcNMjUxMjE5MDQwMDM1WhcNMjUxMjIwMDQwMDM1WjAzMTEwLwYDVQQD EyhkZTM5NmYwYWM4MWRiYmQyNTQ5MTIyZjExYTRlNjJkODkwZTMwYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Up+OD+E2vn8qz3IyZGCDpNM6IC LCP94y1uuIVPrVzLJGjtCxJV0CmYTPbYC3aIYu7BalvbRlp65PxmrIdc6N5k2b9A po9X7ix6MOrKKOlJH785Og4CyaPNc8ESYXFr6Uv5RNw8BDFDO7YPdVzijzjAcc2d xOAXjw2KrwEl/71IG4LNxgf/SfVUgTxkeOMpgVpXA0oinE2C439Vug0MHXGinJB+ SdfYhbojC9yGkTrtOYuqJTWBmo4mF7ug0NVzMa5IGVLs57ptLWjkKFmM0jetSUvH ifPdEoWQfhF6mGlstWl0/SvFKJSdV0yCDpuUSjJjI1YR1oDnWBO80nbmYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN45bwrIHbvSVJEi8RpOYtiQ4wvRMB8GA1UdIwQY MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt NGZkYWUwOWE2NzdkLzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNeE36dY CFB0Nzw+RYoYt+Rw323JRznOZ7+XG+7gcRAxWfwnkxhaetank2ya+T6p4VrpmC74 t728XDEjby3HxYL4k+JlbnB3r8lpyN6gJaQCVcwXoE/fQE9zew8qBIn6UX8EG1y7 TvAzIIBbpn0Uxmxdo7Br6JUyopo79JeYkdRglO1dcbi5HXshtoR8k3xeLny3bXYn WthSfU1pdTChAUzSl/sjiOiYaxSA//nNrkjxhse5vGV7HQaztppGTjQFVz8m06Kc IHxy2Nk1kDJAeUkYAZLFNFE1/R5ov5Pwg4s29bZrf7GYiufcWyZHbO92jcXKvjN5 +5QNDxlYSDZWLw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:42 2025 by rpki-client