This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json) Hash identifier: oIsI2jbjfZmI1A6cYll/2ZgsIRpMb5tCcqqs4+5efiw= Subject key identifier: A3:52:9D:67:53:6B:5A:67:39:35:72:CA:0E:91:A8:D8:E3:B0:7E:1D Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Certificate serial: 019B4D71A10ACD6C92014CC4B04F49512C4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft Manifest number: 1493 Signing time: Tue 23 Dec 2025 23:00:51 +0000 Manifest this update: Tue 23 Dec 2025 23:00:51 +0000 Manifest next update: Wed 24 Dec 2025 23:00:51 +0000 Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 10c2bDTjgj5T6S8VBeX4i3FF8MkvNZ6amz1KtUSNOUQ=) 2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:a1:0a:cd:6c:92:01:4c:c4:b0:4f:49:51:2c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Validity Not Before: Dec 23 23:00:51 2025 GMT Not After : Dec 24 23:00:51 2025 GMT Subject: CN=a3529d67536b5a67393572ca0e91a8d8e3b07e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:11:dd:09:09:12:3c:4f:a2:ee:8d:86:ce: 90:eb:f1:cc:78:1f:11:fa:66:5b:7b:81:29:0b:f1: 93:44:8d:16:70:0b:d0:a7:4d:bd:bb:9d:8c:03:97: fa:51:06:4a:74:dc:00:80:ee:93:ea:54:f8:cb:5c: 8b:75:9a:b4:86:33:81:91:8d:5f:95:d9:4c:5b:35: 36:4f:4a:40:03:fa:51:06:b9:2a:c8:50:52:c7:8f: 11:8a:3f:ad:bf:71:4a:60:88:d5:ac:c6:80:a2:38: d9:57:85:19:34:2a:3a:bd:58:e9:b6:2b:8b:a6:ce: 27:e5:ad:22:e5:23:cc:56:5a:dd:f1:b2:2b:81:93: 93:2b:94:27:6d:8c:4d:9c:1a:05:81:fe:43:1a:18: 9b:da:ae:ef:c7:8e:7e:ea:57:45:15:0e:10:e4:94: e4:03:00:26:b7:09:7f:83:66:0a:68:a1:33:d3:46: 21:e8:b9:a8:6c:03:8a:7a:74:1f:34:9f:22:f0:9b: 4d:86:a0:43:a5:c9:68:14:61:5d:86:1c:00:1e:67: e6:35:c2:77:2f:94:64:d7:8f:f4:96:b6:d9:4e:0b: 49:12:24:01:73:3a:ff:5d:bc:16:92:8c:31:b3:06: 84:d1:2e:6d:05:97:1a:3f:e7:d6:ae:07:8c:40:d3: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:9D:67:53:6B:5A:67:39:35:72:CA:0E:91:A8:D8:E3:B0:7E:1D X509v3 Authority Key Identifier: keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4a:8e:69:01:dd:90:41:64:eb:89:59:51:9e:ba:fb:e8:31: 64:fb:a7:ab:73:6e:63:57:fb:18:73:96:d6:bc:7c:a8:5e:70: aa:59:e9:18:73:c1:eb:8d:48:69:ef:41:c6:6d:37:e8:d7:30: 8c:eb:a7:fe:cc:d0:34:f1:1d:af:6d:00:f7:89:1e:e2:8b:96: 6e:c3:3e:81:4d:ee:4d:56:a3:94:d6:4b:d0:17:72:c4:06:1c: de:16:6c:08:42:af:e8:16:94:42:6a:75:a7:40:ed:5e:ff:8a: 0c:55:54:9b:f7:f4:ef:dd:f3:00:68:61:ce:3b:4e:2f:d8:38: 59:6c:4a:b0:99:73:e1:55:c9:25:11:3f:e7:01:29:39:d8:0a: 37:8d:6f:f9:16:9f:27:45:31:6c:5c:e1:a5:72:cd:86:7f:5b: 98:90:73:eb:13:7f:d1:ab:5b:fe:bc:ea:16:2b:21:7e:92:a9: f1:fd:b2:65:c9:26:1f:2e:75:ce:84:83:32:6c:ba:6d:58:d6: df:e9:33:20:68:5e:85:4f:88:9a:27:2f:92:8c:0d:b1:02:f5: ea:f7:80:ca:6a:a0:85:e4:1e:af:6c:49:57:9c:fe:ae:55:7f: 77:9a:45:8c:f1:81:03:85:fa:d3:d9:bc:b0:7b:3d:c8:3d:70: 7b:25:96:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcaEKzWySAUzEsE9JUSxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy NDQzOTUwHhcNMjUxMjIzMjMwMDUxWhcNMjUxMjI0MjMwMDUxWjAzMTEwLwYDVQQD EyhhMzUyOWQ2NzUzNmI1YTY3MzkzNTcyY2EwZTkxYThkOGUzYjA3ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rQR3QkJEjxPou6Nhs6Q6/HMeB8R +mZbe4EpC/GTRI0WcAvQp029u52MA5f6UQZKdNwAgO6T6lT4y1yLdZq0hjOBkY1f ldlMWzU2T0pAA/pRBrkqyFBSx48Rij+tv3FKYIjVrMaAojjZV4UZNCo6vVjptiuL ps4n5a0i5SPMVlrd8bIrgZOTK5QnbYxNnBoFgf5DGhib2q7vx45+6ldFFQ4Q5JTk AwAmtwl/g2YKaKEz00Yh6LmobAOKenQfNJ8i8JtNhqBDpcloFGFdhhwAHmfmNcJ3 L5Rk14/0lrbZTgtJEiQBczr/XbwWkowxswaE0S5tBZcaP+fWrgeMQNP6TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNSnWdTa1pnOTVyyg6RqNjjsH4dMB8GA1UdIwQY MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEqOaQHd kEFk64lZUZ66++gxZPunq3NuY1f7GHOW1rx8qF5wqlnpGHPB641Iae9Bxm036Ncw jOun/szQNPEdr20A94ke4ouWbsM+gU3uTVajlNZL0BdyxAYc3hZsCEKv6BaUQmp1 p0DtXv+KDFVUm/f0793zAGhhzjtOL9g4WWxKsJlz4VXJJRE/5wEpOdgKN41v+Raf J0UxbFzhpXLNhn9bmJBz6xN/0atb/rzqFishfpKp8f2yZckmHy51zoSDMmy6bVjW 3+kzIGhehU+ImicvkowNsQL16veAymqgheQer2xJV5z+rlV/d5pFjPGBA4X609m8 sHs9yD1weyWWwA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:35 2025 by rpki-client