This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: xcXQvGJFUr19Px9nfBKOdP2UYwUaQXFnp3vBVjQFUDQ= Subject key identifier: A4:6F:FD:FE:3D:C3:C8:B7:5C:0C:EB:7F:A7:4C:E2:20:4C:6A:11:1B Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B3D5A5FB7C61A78464F858B8C31BA8101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:31 +0000 Manifest this update: Sat 20 Dec 2025 20:01:31 +0000 Manifest next update: Sun 21 Dec 2025 20:01:31 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: xKkutvlMflTZ/5N44NKR2eKIrtlVmsi+kdtLTyor7Jo=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:5f:b7:c6:1a:78:46:4f:85:8b:8c:31:ba:81:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 20 20:01:31 2025 GMT Not After : Dec 21 20:01:31 2025 GMT Subject: CN=a46ffdfe3dc3c8b75c0ceb7fa74ce2204c6a111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:2d:f6:4a:84:29:91:26:b6:7e:63:2b:83: 73:d3:68:b3:f6:1a:2e:3a:47:4a:43:05:46:f2:49: c2:c1:1b:1e:14:a7:81:a1:a3:02:d4:9e:59:28:20: 26:d7:65:b4:68:05:46:f4:0a:83:61:75:61:6e:0b: 4e:27:4b:b9:3a:25:b3:5d:ae:c7:de:cb:0c:c8:a5: ed:c0:90:c7:8d:66:a3:de:9e:73:ca:71:3f:14:ce: 5c:26:74:e5:a9:98:90:73:33:ff:81:74:b1:12:11: c5:97:6f:3d:5f:2c:b7:0b:18:69:da:8d:cb:9e:38: d1:2d:5f:58:1c:56:44:d1:46:68:c4:e6:38:2b:52: 41:f8:9b:72:c5:5b:fb:db:dd:0d:2b:bb:9e:2d:10: a8:83:94:a5:3f:26:52:17:85:28:06:19:df:e5:b3: 77:d0:69:72:71:5b:15:be:2e:7f:11:7d:bc:b9:e4: f9:75:b8:f4:93:83:9a:64:d8:cf:d1:39:b1:d4:32: 32:d5:f5:0d:ef:e7:8a:88:65:f5:44:22:d8:9f:38: 3b:80:fd:d2:6d:38:a5:de:07:c3:99:53:8f:c9:ef: 51:b7:56:2c:b4:30:f7:97:69:fc:67:83:d4:81:63: 1f:83:d9:1f:c6:8a:c3:23:d7:24:76:df:4f:e2:14: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6F:FD:FE:3D:C3:C8:B7:5C:0C:EB:7F:A7:4C:E2:20:4C:6A:11:1B X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d0:1f:38:20:03:e1:ac:6d:7b:7f:56:f8:59:9a:8f:17:33: 42:64:0b:12:84:9c:aa:0b:09:58:c7:eb:38:61:e3:6a:40:5b: dd:16:54:d5:52:06:a0:ff:9a:3e:19:0f:cb:e2:45:a3:c0:41: cb:a2:0b:1f:db:18:89:61:ee:a8:f0:8e:52:b2:34:4b:e1:d0: 92:a3:09:e5:a6:c5:ad:6a:c8:f5:ae:11:2a:5e:fd:52:e8:da: ac:b8:fa:8b:b1:47:2b:95:3a:ca:d2:a1:40:12:96:67:1d:9a: 29:5f:d7:ed:89:6e:d6:e4:fa:7d:c4:25:be:e8:78:bd:89:6b: 61:46:ee:3e:91:4e:d4:a7:31:76:cf:d6:31:68:95:24:ef:69: d6:8a:9c:c4:85:73:d6:64:ca:f0:af:df:7b:5a:3f:06:c9:1b: ad:18:34:95:91:1b:f2:0f:22:e5:75:72:92:b6:0a:8e:e7:5a: 4f:f9:c3:49:4c:1d:04:f9:51:d6:1c:33:dc:3e:4e:13:9b:1d: fd:32:2f:fc:01:57:aa:06:e1:d7:1e:4c:be:b5:43:d8:e0:ec: e5:bd:1c:ed:1c:92:a0:a7:fb:a3:da:2e:bf:f6:e8:be:b2:dd: 10:10:32:bb:92:ae:ed:6d:4b:f8:f3:02:c2:8f:52:2b:28:2c: 4e:03:17:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wl+3xhp4Rk+Fi4wxuoEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjIwMjAwMTMxWhcNMjUxMjIxMjAwMTMxWjAzMTEwLwYDVQQD EyhhNDZmZmRmZTNkYzNjOGI3NWMwY2ViN2ZhNzRjZTIyMDRjNmExMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcYt9kqEKZEmtn5jK4Nz02iz9hou OkdKQwVG8knCwRseFKeBoaMC1J5ZKCAm12W0aAVG9AqDYXVhbgtOJ0u5OiWzXa7H 3ssMyKXtwJDHjWaj3p5zynE/FM5cJnTlqZiQczP/gXSxEhHFl289Xyy3Cxhp2o3L njjRLV9YHFZE0UZoxOY4K1JB+JtyxVv7290NK7ueLRCog5SlPyZSF4UoBhnf5bN3 0GlycVsVvi5/EX28ueT5dbj0k4OaZNjP0Tmx1DIy1fUN7+eKiGX1RCLYnzg7gP3S bTil3gfDmVOPye9Rt1YstDD3l2n8Z4PUgWMfg9kfxorDI9ckdt9P4hThMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRv/f49w8i3XAzrf6dM4iBMahEbMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNAfOCAD 4axte39W+FmajxczQmQLEoScqgsJWMfrOGHjakBb3RZU1VIGoP+aPhkPy+JFo8BB y6ILH9sYiWHuqPCOUrI0S+HQkqMJ5abFrWrI9a4RKl79UujarLj6i7FHK5U6ytKh QBKWZx2aKV/X7Ylu1uT6fcQlvuh4vYlrYUbuPpFO1Kcxds/WMWiVJO9p1oqcxIVz 1mTK8K/fe1o/BskbrRg0lZEb8g8i5XVykrYKjudaT/nDSUwdBPlR1hwz3D5OE5sd /TIv/AFXqgbh1x5MvrVD2ODs5b0c7RySoKf7o9ouv/bovrLdEBAyu5Ku7W1L+PMC wo9SKygsTgMXvg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:10:55 2025 by rpki-client