This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json) Hash identifier: blzR8s/HdUOiumUmEegKLyoq7xBmMA6UDMfd2yhk/0s= Subject key identifier: 7F:49:D5:47:89:95:6C:A3:E5:66:A0:E5:D0:34:93:A0:80:08:50:6F Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Certificate serial: 019B465D31CBD647078C969339D264F60E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft Manifest number: 072B Signing time: Mon 22 Dec 2025 14:01:11 +0000 Manifest this update: Mon 22 Dec 2025 14:01:11 +0000 Manifest next update: Tue 23 Dec 2025 14:01:11 +0000 Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: BwCrb5ZqNFWYJVx3fUl29jz03qqLsJq1X8Af1GB8nXA=) 2: KnO7E8tJ1abhGCx2wXuCqs1IO3U.roa (hash: BCSVnZM2aJUhjEMy986ORQcWilXP95wH0oKfNXEAgBs=) 3: Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa (hash: S28QHIVwCTs2cZmHNwDOnovD8sAEfmTgDloHmODDCO4=) 4: Tg5Eip16OiivA4_zKye1REwFA00.roa (hash: Gd1niBs91vG5rW4xFPormFpiCgQUUugy0jDW22UcbYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:31:cb:d6:47:07:8c:96:93:39:d2:64:f6:0e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Validity Not Before: Dec 22 14:01:11 2025 GMT Not After : Dec 23 14:01:11 2025 GMT Subject: CN=7f49d54789956ca3e566a0e5d03493a08008506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:0a:a7:0f:0c:58:84:33:f5:69:64:7c:4f: 94:e1:84:14:7f:1d:57:0f:e9:0c:74:e6:56:4d:a0: 3b:dd:2e:50:cc:44:41:8e:88:49:cc:15:03:25:91: 67:59:4d:3b:86:b1:9f:f2:79:3e:ae:b9:f7:e7:7d: 91:cb:97:24:f3:a4:09:f6:bf:85:f0:23:c8:80:33: 11:80:ea:ac:00:63:19:c2:ef:c5:a1:38:4a:fc:26: 9e:cd:3c:3b:83:22:11:bb:c1:d1:ad:ef:a1:c4:81: 65:12:9a:d4:7f:5b:34:9d:84:dd:7b:bb:c0:8c:fa: fe:c8:6a:6c:5a:45:67:2c:02:18:cd:2c:d4:b9:31: 83:91:1a:54:ad:d5:26:44:35:7b:dd:e2:4b:a9:20: ee:a1:bd:5a:1a:b4:d1:cb:bf:97:c1:98:46:96:5e: d8:18:bf:e8:4e:cc:de:98:2c:15:9d:9a:75:41:2d: f4:29:b4:02:73:b9:14:59:ec:b8:94:fa:a8:0d:23: 4f:77:60:a0:13:3c:0f:35:31:45:b7:08:47:44:db: e2:59:97:a5:88:72:12:28:1d:ca:c1:16:16:29:53: 14:d6:92:42:e0:a8:a2:77:ad:52:ca:df:ab:d5:37: ca:5a:60:a3:ed:c2:ae:2a:b1:18:05:16:1f:73:12: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:49:D5:47:89:95:6C:A3:E5:66:A0:E5:D0:34:93:A0:80:08:50:6F X509v3 Authority Key Identifier: keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:83:d5:93:58:7f:4d:bf:5c:95:34:1d:cb:22:5c:84:5d: 6d:a0:40:82:e4:cf:c4:71:80:4c:a3:a9:57:e8:66:e8:b2:34: 90:fb:d9:4a:ee:c5:6c:ad:60:0f:d4:09:07:83:1c:f2:5f:89: cc:aa:44:b0:f6:01:b4:66:58:bf:0a:ef:f0:29:51:d7:57:ed: 41:65:24:08:06:ce:7a:d5:40:bb:c3:09:58:75:02:c8:9b:2f: 15:52:19:26:9a:95:59:e3:c2:94:d4:72:36:a7:e7:55:09:e7: c2:ae:01:89:b2:cc:ea:83:b3:33:e0:30:18:1c:c2:8b:5f:9e: f0:86:4e:0b:b9:84:29:9a:6b:99:d8:d2:44:ca:11:e5:8e:ab: 4d:88:31:d4:3c:0b:59:e4:a5:ff:6b:77:7e:f7:b3:a9:ba:64: 14:54:be:85:65:01:1c:09:17:87:80:dc:b1:08:6d:f6:2c:24: e9:9c:11:4e:23:57:ca:98:a9:cc:8e:43:af:27:b3:3e:ed:9e: c6:25:45:7c:09:e4:b6:ac:26:89:53:59:9a:c1:20:81:fe:91: d8:ac:59:10:f1:88:cd:86:fb:3b:54:4a:20:35:7d:bb:4f:ac: 33:1b:a3:8a:58:b2:ab:34:31:24:d3:94:bf:ce:f2:da:a7:e5: 14:6b:10:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXTHL1kcHjJaTOdJk9g6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2 NmE3MTIwHhcNMjUxMjIyMTQwMTExWhcNMjUxMjIzMTQwMTExWjAzMTEwLwYDVQQD Eyg3ZjQ5ZDU0Nzg5OTU2Y2EzZTU2NmEwZTVkMDM0OTNhMDgwMDg1MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ncKpw8MWIQz9WlkfE+U4YQUfx1X D+kMdOZWTaA73S5QzERBjohJzBUDJZFnWU07hrGf8nk+rrn3532Ry5ck86QJ9r+F 8CPIgDMRgOqsAGMZwu/FoThK/CaezTw7gyIRu8HRre+hxIFlEprUf1s0nYTde7vA jPr+yGpsWkVnLAIYzSzUuTGDkRpUrdUmRDV73eJLqSDuob1aGrTRy7+XwZhGll7Y GL/oTszemCwVnZp1QS30KbQCc7kUWey4lPqoDSNPd2CgEzwPNTFFtwhHRNviWZel iHISKB3KwRYWKVMU1pJC4Kiid61Syt+r1TfKWmCj7cKuKrEYBRYfcxJBsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9J1UeJlWyj5Wag5dA0k6CACFBvMB8GA1UdIwQY MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt ZmUwZDI4YjY4Y2Q1LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1 LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0aD1ZNY f02/XJU0HcsiXIRdbaBAguTPxHGATKOpV+hm6LI0kPvZSu7FbK1gD9QJB4Mc8l+J zKpEsPYBtGZYvwrv8ClR11ftQWUkCAbOetVAu8MJWHUCyJsvFVIZJpqVWePClNRy NqfnVQnnwq4BibLM6oOzM+AwGBzCi1+e8IZOC7mEKZprmdjSRMoR5Y6rTYgx1DwL WeSl/2t3fvezqbpkFFS+hWUBHAkXh4DcsQht9iwk6ZwRTiNXypipzI5DryezPu2e xiVFfAnktqwmiVNZmsEggf6R2KxZEPGIzYb7O1RKIDV9u0+sMxujiliyqzQxJNOU v87y2qflFGsQmw== -----END CERTIFICATE-----Generated at Mon Dec 22 18:48:51 2025 by rpki-client