This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json) Hash identifier: MPDJWCloj/nLkPETleq69rpoNtrr5adTN49ZxrfmFA8= Subject key identifier: 2D:08:73:35:B6:02:3C:DD:EE:FC:CC:66:62:B3:5A:75:39:7A:D9:97 Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019B42B704914D5A9AC0EED62F6883601C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft Manifest number: 10D3 Signing time: Sun 21 Dec 2025 21:00:49 +0000 Manifest this update: Sun 21 Dec 2025 21:00:49 +0000 Manifest next update: Mon 22 Dec 2025 21:00:49 +0000 Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: FPVgGj3BsprWCyJTwoSYgDWeT+Wr9MvAzkd6r0Nu0V0=) 2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=) 3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=) 4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=) 5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=) 6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=) 7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=) 8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:04:91:4d:5a:9a:c0:ee:d6:2f:68:83:60:1c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Dec 21 21:00:49 2025 GMT Not After : Dec 22 21:00:49 2025 GMT Subject: CN=2d087335b6023cddeefccc6662b35a75397ad997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:06:e9:21:de:eb:0d:af:c7:96:39:07:7d: 95:f6:cb:11:8c:d4:7c:c6:14:63:5a:1c:40:71:99: 9f:2b:5c:ab:60:c5:df:98:da:ab:bc:fc:8e:76:a6: 0e:87:c8:45:6f:5d:51:c8:a0:1c:e4:1f:77:e6:54: 12:84:23:1e:a7:3a:1d:48:9d:d9:75:3b:6e:33:fd: d6:4d:eb:15:93:e6:2e:61:ec:08:30:b4:33:21:40: d3:1e:0b:92:9b:e3:f5:9e:73:ed:a3:62:78:02:9e: e7:61:ad:ec:6a:70:5c:cd:f5:27:66:c2:b9:10:a7: 11:5d:b4:16:72:36:36:85:9a:55:32:9c:74:0b:ae: 3e:e5:27:a0:d8:f0:e3:f4:82:19:8d:a4:b7:f2:b7: 20:bf:2a:59:5f:1e:d8:bb:a6:08:25:63:b9:1f:59: 9d:16:37:f1:56:4b:5c:55:1b:8c:3c:83:4b:54:0b: 58:6a:60:16:2c:4a:3f:54:3b:a5:d7:9b:3d:e7:d7: 02:fb:8a:3e:ca:e8:df:38:c7:fb:82:98:a0:df:ed: e5:57:05:50:54:ee:28:45:1b:d2:3a:68:44:60:8a: 47:ce:58:06:7f:56:bb:12:a9:a6:9e:99:af:85:fe: bb:c6:cf:b4:0f:53:68:08:b5:ad:99:a0:73:f0:cd: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:08:73:35:B6:02:3C:DD:EE:FC:CC:66:62:B3:5A:75:39:7A:D9:97 X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:21:cb:f6:dd:b1:e6:f3:5b:f7:1b:bd:fc:85:95:4f:be:e7: fb:19:9e:3c:a1:7d:f3:1c:8d:2c:5a:d2:42:85:b4:5e:9f:7f: a0:13:c0:d2:5b:0b:c5:b5:dd:7c:2e:2e:9c:b7:91:8b:ef:5f: de:42:a0:c6:c8:6d:9d:2a:d9:30:ee:cd:bc:ac:e9:c8:6e:2d: fc:a3:8d:e8:02:db:cb:2e:92:a6:eb:d3:ab:44:bc:2d:cc:57: ba:50:d9:09:22:ad:fd:53:71:8f:32:f5:b7:c6:e1:2d:55:22: 93:80:da:fc:bb:83:7b:e3:c9:89:30:47:60:56:6f:c5:c6:8b: ef:77:0b:35:96:44:6c:c5:6b:d9:58:bc:80:75:4e:24:77:d9: a1:ab:42:96:72:b6:c3:9d:f6:d2:8c:13:47:cb:b9:9f:ad:61: ee:c9:c1:0a:03:64:60:e0:e3:fb:fc:62:5f:3a:8a:e5:1c:42: 78:f4:c5:06:16:53:ad:34:6d:68:63:d0:e0:5f:74:01:b0:71: dc:4c:a5:bc:2d:55:5a:ad:20:08:ee:21:89:66:fa:62:01:1b: b9:a1:d2:25:d1:b9:b5:3a:c4:29:62:e9:2c:01:48:08:32:77: b4:9c:3a:90:51:c9:ab:ad:02:9b:6d:dc:e2:6b:1b:c4:a9:4b: ed:61:fa:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwSRTVqawO7WL2iDYBw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjUxMjIxMjEwMDQ5WhcNMjUxMjIyMjEwMDQ5WjAzMTEwLwYDVQQD EygyZDA4NzMzNWI2MDIzY2RkZWVmY2NjNjY2MmIzNWE3NTM5N2FkOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8G6SHe6w2vx5Y5B32V9ssRjNR8 xhRjWhxAcZmfK1yrYMXfmNqrvPyOdqYOh8hFb11RyKAc5B935lQShCMepzodSJ3Z dTtuM/3WTesVk+YuYewIMLQzIUDTHguSm+P1nnPto2J4Ap7nYa3sanBczfUnZsK5 EKcRXbQWcjY2hZpVMpx0C64+5Seg2PDj9IIZjaS38rcgvypZXx7Yu6YIJWO5H1md FjfxVktcVRuMPINLVAtYamAWLEo/VDul15s959cC+4o+yujfOMf7gpig3+3lVwVQ VO4oRRvSOmhEYIpHzlgGf1a7Eqmmnpmvhf67xs+0D1NoCLWtmaBz8M37OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0IczW2Ajzd7vzMZmKzWnU5etmXMB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyHL9t2x 5vNb9xu9/IWVT77n+xmePKF98xyNLFrSQoW0Xp9/oBPA0lsLxbXdfC4unLeRi+9f 3kKgxshtnSrZMO7NvKzpyG4t/KON6ALbyy6SpuvTq0S8LcxXulDZCSKt/VNxjzL1 t8bhLVUik4Da/LuDe+PJiTBHYFZvxcaL73cLNZZEbMVr2Vi8gHVOJHfZoatClnK2 w5320owTR8u5n61h7snBCgNkYODj+/xiXzqK5RxCePTFBhZTrTRtaGPQ4F90AbBx 3EylvC1VWq0gCO4hiWb6YgEbuaHSJdG5tTrEKWLpLAFICDJ3tJw6kFHJq60Cm23c 4msbxKlL7WH65A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:45 2025 by rpki-client