This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json) Hash identifier: RgUahrJyCe0bKtv0Mc7cDDql05JAzqawxy+bmCNeZO0= Subject key identifier: B5:4B:D4:CB:3B:33:FA:C1:D9:45:44:4F:15:81:8E:34:FD:E4:31:41 Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Certificate serial: 019B3B34FDEC1A3984412EAC15CE1CBF94B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft Manifest number: 0599 Signing time: Sat 20 Dec 2025 10:01:27 +0000 Manifest this update: Sat 20 Dec 2025 10:01:27 +0000 Manifest next update: Sun 21 Dec 2025 10:01:27 +0000 Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 1ueH1RKqPpHsU4p0/xtvtKT7KaHn9UpSOxdIiIYaKXA=) 2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:fd:ec:1a:39:84:41:2e:ac:15:ce:1c:bf:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Validity Not Before: Dec 20 10:01:27 2025 GMT Not After : Dec 21 10:01:27 2025 GMT Subject: CN=b54bd4cb3b33fac1d945444f15818e34fde43141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:0a:7e:ac:e3:fa:99:69:1b:9e:15:f8:e3: 8b:9a:e2:0c:b1:7f:bd:03:0c:6a:9d:ac:ee:6f:8f: 3c:41:6e:bc:98:16:61:47:2d:6c:db:78:f6:18:ca: a8:1c:ae:2c:dd:91:f6:6e:68:a8:cf:8d:b2:54:67: 43:49:0d:be:84:e7:c5:f8:c4:87:3e:d6:48:10:17: b8:e6:63:d7:86:c4:75:44:59:57:1d:49:8d:e5:96: f9:66:2f:30:2e:ff:88:8d:a8:95:b3:bd:90:79:aa: 33:c8:70:b6:64:39:50:f9:c3:db:61:b1:a8:1e:0c: dd:8c:f9:08:a9:ae:6c:83:22:88:ce:66:99:f1:85: 34:bd:2d:49:7e:5b:ac:02:ce:b8:f2:4d:5f:88:48: 91:01:09:70:ae:4b:50:98:4d:81:a0:bd:1a:b1:23: 14:9b:62:6e:62:39:d5:f4:b3:c7:0c:db:90:00:21: a9:50:ce:d1:4f:d2:d8:ec:f9:a2:c3:63:d2:6b:8c: 9b:94:91:b1:9d:1e:b9:27:17:2d:3d:55:16:db:d3: f3:5d:48:c8:01:51:66:32:0b:9d:9e:56:c5:d9:32: 5a:ae:9b:fa:69:09:89:5f:fc:01:f1:99:24:89:ae: d9:18:15:a6:9f:97:3d:37:6d:df:e1:49:76:f6:28: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:D4:CB:3B:33:FA:C1:D9:45:44:4F:15:81:8E:34:FD:E4:31:41 X509v3 Authority Key Identifier: keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:e0:0b:cf:9e:61:42:8c:fd:e1:29:df:47:27:4e:45:cb: 9d:99:2b:15:b7:2b:69:7e:32:b6:a0:22:b3:61:88:ae:0d:58: d8:a7:b8:59:e1:b0:84:e0:b3:3c:04:b6:40:17:9f:d0:07:88: 4b:ad:28:e6:ec:d1:1f:af:a9:86:69:ab:0a:1e:d0:a5:06:bc: 0f:d4:55:c1:4b:78:62:bd:36:e4:39:81:c9:ea:ad:7c:2f:3f: 0e:66:74:17:e4:ed:2c:07:77:29:1c:3f:af:0e:66:de:7a:df: 1a:1e:4d:87:68:9b:b6:32:3a:a7:38:80:15:60:08:57:4b:97: 66:3c:e5:10:e2:ee:c1:29:02:c9:49:f2:10:ae:26:a5:0a:ef: 42:51:6b:76:6c:9e:51:03:ce:9e:8c:55:c5:a4:69:86:6b:58: e7:14:30:c2:77:93:30:0f:8f:37:fb:49:2a:49:bc:f0:15:4d: c4:ad:8f:db:b7:91:3c:a0:df:45:43:09:91:df:9e:b6:ab:1e: a7:09:da:e9:31:a2:25:79:f9:1f:c2:09:15:81:7b:1a:cb:54: 9a:65:f6:30:4c:fb:9d:b7:be:9c:c4:5c:30:0a:e3:09:70:e9: 7b:70:98:6d:56:92:38:fa:8a:00:04:ee:dc:22:e4:c3:80:b1: b2:71:6f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NP3sGjmEQS6sFc4cv5SxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj MmY5NWEwHhcNMjUxMjIwMTAwMTI3WhcNMjUxMjIxMTAwMTI3WjAzMTEwLwYDVQQD EyhiNTRiZDRjYjNiMzNmYWMxZDk0NTQ0NGYxNTgxOGUzNGZkZTQzMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSYKfqzj+plpG54V+OOLmuIMsX+9 Awxqnazub488QW68mBZhRy1s23j2GMqoHK4s3ZH2bmioz42yVGdDSQ2+hOfF+MSH PtZIEBe45mPXhsR1RFlXHUmN5Zb5Zi8wLv+IjaiVs72QeaozyHC2ZDlQ+cPbYbGo HgzdjPkIqa5sgyKIzmaZ8YU0vS1JflusAs648k1fiEiRAQlwrktQmE2BoL0asSMU m2JuYjnV9LPHDNuQACGpUM7RT9LY7Pmiw2PSa4yblJGxnR65JxctPVUW29PzXUjI AVFmMgudnlbF2TJarpv6aQmJX/wB8Zkkia7ZGBWmn5c9N23f4Ul29iggbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVL1Ms7M/rB2UVETxWBjjT95DFBMB8GA1UdIwQY MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0 LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwHgC8+e YUKM/eEp30cnTkXLnZkrFbcraX4ytqAis2GIrg1Y2Ke4WeGwhOCzPAS2QBef0AeI S60o5uzRH6+phmmrCh7QpQa8D9RVwUt4Yr025DmByeqtfC8/DmZ0F+TtLAd3KRw/ rw5m3nrfGh5Nh2ibtjI6pziAFWAIV0uXZjzlEOLuwSkCyUnyEK4mpQrvQlFrdmye UQPOnoxVxaRphmtY5xQwwneTMA+PN/tJKkm88BVNxK2P27eRPKDfRUMJkd+etqse pwna6TGiJXn5H8IJFYF7GstUmmX2MEz7nbe+nMRcMArjCXDpe3CYbVaSOPqKAATu 3CLkw4CxsnFvKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:39 2025 by rpki-client