This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json) Hash identifier: V3LZ4FFdvDy8f5U8cyhBBSgc/u4hfRWcXEdB4Wk5hnY= Subject key identifier: 3E:33:AF:55:B4:78:78:0A:78:74:48:CC:2A:89:3F:D7:85:E8:DD:04 Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae Certificate serial: 019B40C961FF9B79760BD4B6074F9B03993B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft Manifest number: 0287 Signing time: Sun 21 Dec 2025 12:01:38 +0000 Manifest this update: Sun 21 Dec 2025 12:01:38 +0000 Manifest next update: Mon 22 Dec 2025 12:01:38 +0000 Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: PhXEK+QPbbPH6KST+szkpQay1YimRQXwEgvm9WkXpTw=) 2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:61:ff:9b:79:76:0b:d4:b6:07:4f:9b:03:99:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae Validity Not Before: Dec 21 12:01:38 2025 GMT Not After : Dec 22 12:01:38 2025 GMT Subject: CN=3e33af55b478780a787448cc2a893fd785e8dd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:ea:24:a9:a2:3c:66:24:8c:47:b9:b1:be: a2:07:7f:ec:a1:a6:53:f1:57:63:31:41:ca:6b:30: 88:93:fa:07:49:0f:a1:0f:59:83:cc:54:17:92:40: f9:16:86:fe:4b:27:93:1d:19:72:3c:9e:4e:89:47: 43:6e:0c:de:83:6f:4b:7f:c9:18:30:71:90:02:e0: 50:4c:b2:24:22:51:b3:33:b1:7f:c0:1f:fa:f3:66: db:6a:82:be:88:8c:a2:46:7b:9c:95:2a:88:30:d3: 8b:9e:e2:be:65:b0:a9:7d:43:06:ea:ad:ff:c6:c4: b5:1a:f9:80:11:ce:7d:14:0c:be:08:8e:af:4d:10: d2:f6:ea:eb:0e:f4:ef:1b:b5:30:c6:01:52:1a:58: cd:d6:8b:d5:e4:39:7b:d8:21:2d:8a:0a:10:5e:a4: 2b:78:6f:10:93:da:f5:4f:df:f8:1d:76:6d:bf:a4: 55:30:41:75:82:40:bd:e4:b5:cf:b1:1b:8a:2f:d9: 1f:36:8b:82:99:d1:90:2e:ef:18:49:14:89:4d:09: 40:8e:15:25:b8:19:73:59:57:11:f2:33:bd:29:d4: 88:c4:b8:ca:c8:ca:8b:96:39:c0:14:a0:2f:20:51: f0:0e:c9:8d:46:7a:c8:92:74:02:0a:bf:fd:d6:73: 71:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:AF:55:B4:78:78:0A:78:74:48:CC:2A:89:3F:D7:85:E8:DD:04 X509v3 Authority Key Identifier: keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:54:c3:39:dd:d1:7c:34:52:ab:a3:2e:9a:0f:ca:81:21:05: 86:78:75:8a:98:04:e7:0d:5d:bc:56:37:94:42:5a:28:c4:c7: 0f:d2:07:c6:ea:f0:11:ad:f6:cf:3f:e4:db:32:c3:92:a4:fa: 2f:8e:61:e3:d9:5f:cb:90:35:45:d6:83:de:84:e2:11:58:49: 48:15:09:3c:be:da:d2:5e:37:63:52:17:3d:d6:b6:1a:6f:27: a4:e6:cb:e2:00:77:d5:86:7d:c1:c9:3d:9d:af:e6:de:da:96: e1:6e:88:f7:4a:c2:99:1a:87:7e:dc:22:21:28:91:6c:f8:c8: ef:69:20:83:d8:18:d6:86:b7:52:0e:06:1c:16:2d:5c:6b:57: 8b:47:55:93:26:17:26:bf:e8:e7:64:1f:9b:31:c1:8b:8a:6b: b9:01:f9:9a:e6:ea:6c:67:3b:53:fa:9a:85:51:5c:9f:a2:d7: a5:5c:18:34:d4:a9:e2:8c:55:a8:b8:1a:a9:ae:09:fa:6b:54: 80:9c:6b:27:67:0d:5b:e5:1c:36:46:4a:ff:84:a9:4f:43:a8: 71:c1:39:df:e0:b8:e1:92:41:57:5f:90:ab:bd:4a:e1:26:68: e4:05:d7:73:19:7b:7d:7b:1f:09:d1:27:40:6e:ca:06:f7:97: c4:a1:28:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyWH/m3l2C9S2B0+bA5k7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl Y2MyYWUwHhcNMjUxMjIxMTIwMTM4WhcNMjUxMjIyMTIwMTM4WjAzMTEwLwYDVQQD EygzZTMzYWY1NWI0Nzg3ODBhNzg3NDQ4Y2MyYTg5M2ZkNzg1ZThkZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FDqJKmiPGYkjEe5sb6iB3/soaZT 8VdjMUHKazCIk/oHSQ+hD1mDzFQXkkD5Fob+SyeTHRlyPJ5OiUdDbgzeg29Lf8kY MHGQAuBQTLIkIlGzM7F/wB/682bbaoK+iIyiRnuclSqIMNOLnuK+ZbCpfUMG6q3/ xsS1GvmAEc59FAy+CI6vTRDS9urrDvTvG7UwxgFSGljN1ovV5Dl72CEtigoQXqQr eG8Qk9r1T9/4HXZtv6RVMEF1gkC95LXPsRuKL9kfNouCmdGQLu8YSRSJTQlAjhUl uBlzWVcR8jO9KdSIxLjKyMqLljnAFKAvIFHwDsmNRnrIknQCCr/91nNxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4zr1W0eHgKeHRIzCqJP9eF6N0EMB8GA1UdIwQY MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlTDOd3R fDRSq6Mumg/KgSEFhnh1ipgE5w1dvFY3lEJaKMTHD9IHxurwEa32zz/k2zLDkqT6 L45h49lfy5A1RdaD3oTiEVhJSBUJPL7a0l43Y1IXPda2Gm8npObL4gB31YZ9wck9 na/m3tqW4W6I90rCmRqHftwiISiRbPjI72kgg9gY1oa3Ug4GHBYtXGtXi0dVkyYX Jr/o52QfmzHBi4pruQH5mubqbGc7U/qahVFcn6LXpVwYNNSp4oxVqLgaqa4J+mtU gJxrJ2cNW+UcNkZK/4SpT0OoccE53+C44ZJBV1+Qq71K4SZo5AXXcxl7fXsfCdEn QG7KBveXxKEo8w== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:34 2025 by rpki-client