This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json) Hash identifier: v8ychxj4b5xiyHpcFX1wUHEh1Bl1s44xqsEG6AxhTj4= Subject key identifier: BF:F2:D5:4A:CE:D7:CF:93:8C:CB:B9:80:3E:B8:09:8A:50:8D:82:35 Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Certificate serial: 019B3F48D896DCCEB17E293AF1CA19B30700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft Manifest number: 0925 Signing time: Sun 21 Dec 2025 05:01:37 +0000 Manifest this update: Sun 21 Dec 2025 05:01:37 +0000 Manifest next update: Mon 22 Dec 2025 05:01:37 +0000 Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: KtgLElSAzhej4AbmPcDSSP1FM2tbwWCSe9oDN3caSF4=) 2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:d8:96:dc:ce:b1:7e:29:3a:f1:ca:19:b3:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Validity Not Before: Dec 21 05:01:37 2025 GMT Not After : Dec 22 05:01:37 2025 GMT Subject: CN=bff2d54aced7cf938ccbb9803eb8098a508d8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:a8:6f:b3:73:f0:b0:74:f3:2a:c6:58:cc: d8:17:6a:9b:88:df:98:91:fd:dd:d6:74:2a:70:6a: 66:75:5d:7b:c4:d2:fe:18:45:ab:3c:d5:54:1c:31: a2:91:0d:aa:68:70:b3:e7:3f:f7:e3:8c:c1:df:74: b0:93:07:7a:31:ba:a7:81:27:e3:79:49:7d:45:8a: 1d:84:6d:1d:1e:ff:a2:62:2c:05:6a:2d:be:f9:87: 8d:11:8d:d2:64:77:96:91:0b:c6:80:af:28:bf:5d: 89:f7:d0:99:5c:4c:59:2a:99:d4:5d:0c:da:79:a8: 1d:31:41:6b:2c:6f:40:26:2d:5f:c1:7d:aa:74:b1: b5:80:ae:f2:00:2a:2a:c0:37:01:47:bf:3b:f5:f3: 6d:ec:f6:24:0a:40:e1:01:8f:c2:17:a4:55:e1:62: b0:95:6c:00:0a:24:04:5f:f0:a7:88:e0:50:10:bf: 83:47:51:e5:ca:4c:ca:10:43:fa:ef:c4:25:ed:1f: f8:d4:10:df:7e:98:6b:1f:bd:f6:ba:bf:01:09:99: 46:84:4e:3d:63:a4:49:28:b5:f6:b1:84:02:49:6f: 41:0b:1c:32:25:95:4c:ed:0c:38:47:0a:05:64:18: 8e:0e:6a:f2:90:14:7d:4c:b8:c9:e8:0c:a6:98:9f: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F2:D5:4A:CE:D7:CF:93:8C:CB:B9:80:3E:B8:09:8A:50:8D:82:35 X509v3 Authority Key Identifier: keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3e:24:d7:dd:cd:fb:eb:0a:c0:ea:7c:a2:b7:66:0f:9c:5b: 31:1a:0f:0a:1f:5e:90:a9:68:9f:46:d9:1f:db:2e:67:ca:ae: 1f:d2:13:5e:4b:94:b2:9b:30:c2:f3:46:1c:d5:4c:a0:ea:87: 9a:54:de:89:c1:d0:ff:9e:ff:88:38:60:01:70:9b:1a:f7:da: 58:53:65:6d:db:c0:43:b1:b8:b1:7c:e4:bf:ce:8c:43:20:0a: d1:a7:b5:b2:fd:79:03:24:37:29:e7:98:82:0a:8e:fe:5c:83: 0b:73:7c:fe:55:0f:04:f4:16:c4:e2:56:b4:f0:b9:66:bf:75: ca:65:ae:f8:1c:47:a7:d9:00:ea:b5:05:e9:a7:6b:d4:6c:85: 05:64:8f:9c:d5:a6:dc:65:42:16:aa:f5:c0:a2:1c:7c:23:a3: ef:f8:d0:53:c5:82:79:86:9e:d4:ea:74:2d:ff:21:6f:e7:11: 4a:bd:b3:a2:31:ca:0e:4b:e1:a4:c7:33:13:a9:29:14:fa:dd: 3b:9f:be:6d:2a:db:b5:18:38:09:76:36:c7:05:a0:0a:9e:0b: a1:e7:c7:5a:e0:e1:75:c8:1b:6e:6b:75:25:ee:ac:c5:03:10: 8c:95:c8:2d:f5:30:52:b5:d5:a7:93:7d:1b:1f:76:1e:1e:bd: 6a:d6:15:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SNiW3M6xfik68coZswcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj MzBmZTQwHhcNMjUxMjIxMDUwMTM3WhcNMjUxMjIyMDUwMTM3WjAzMTEwLwYDVQQD EyhiZmYyZDU0YWNlZDdjZjkzOGNjYmI5ODAzZWI4MDk4YTUwOGQ4MjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFaob7Nz8LB08yrGWMzYF2qbiN+Y kf3d1nQqcGpmdV17xNL+GEWrPNVUHDGikQ2qaHCz5z/344zB33Swkwd6MbqngSfj eUl9RYodhG0dHv+iYiwFai2++YeNEY3SZHeWkQvGgK8ov12J99CZXExZKpnUXQza eagdMUFrLG9AJi1fwX2qdLG1gK7yACoqwDcBR7879fNt7PYkCkDhAY/CF6RV4WKw lWwACiQEX/CniOBQEL+DR1HlykzKEEP678Ql7R/41BDffphrH732ur8BCZlGhE49 Y6RJKLX2sYQCSW9BCxwyJZVM7Qw4RwoFZBiODmrykBR9TLjJ6AymmJ+kBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/y1UrO18+TjMu5gD64CYpQjYI1MB8GA1UdIwQY MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj4k193N ++sKwOp8ordmD5xbMRoPCh9ekKlon0bZH9suZ8quH9ITXkuUspswwvNGHNVMoOqH mlTeicHQ/57/iDhgAXCbGvfaWFNlbdvAQ7G4sXzkv86MQyAK0ae1sv15AyQ3KeeY ggqO/lyDC3N8/lUPBPQWxOJWtPC5Zr91ymWu+BxHp9kA6rUF6adr1GyFBWSPnNWm 3GVCFqr1wKIcfCOj7/jQU8WCeYae1Op0Lf8hb+cRSr2zojHKDkvhpMczE6kpFPrd O5++bSrbtRg4CXY2xwWgCp4LoefHWuDhdcgbbmt1Je6sxQMQjJXILfUwUrXVp5N9 Gx92Hh69atYV5A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:28 2025 by rpki-client