This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft File: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json) Hash identifier: U2a1noNAQsSde/d/uhMxGx7X7WKYICN9ib2+0QQSI+s= Subject key identifier: B0:17:3C:74:8D:61:A7:DD:8B:DE:56:AA:21:FB:35:0E:C3:9C:24:64 Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3 Certificate issuer: /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3 Certificate serial: 019B36B33A6E6C59D9013FFC17E100C64378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 13:01:14 +0000 Manifest this update: Fri 19 Dec 2025 13:01:14 +0000 Manifest next update: Sat 20 Dec 2025 13:01:14 +0000 Files and hashes: 1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: NyTwbceZ73AU9DT1I7YnCsYxYeHODhn8atyEETWFH40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:3a:6e:6c:59:d9:01:3f:fc:17:e1:00:c6:43:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3 Validity Not Before: Dec 19 13:01:14 2025 GMT Not After : Dec 20 13:01:14 2025 GMT Subject: CN=b0173c748d61a7dd8bde56aa21fb350ec39c2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:1f:19:91:c2:fc:d2:d4:33:30:d3:92:69: f0:c0:e2:15:c5:9e:90:f4:dc:da:0c:cd:43:08:80: 1a:6f:ae:0c:a4:21:01:80:3d:5c:5f:73:7f:03:88: 27:ff:5a:26:60:30:9c:13:32:7c:74:a9:02:6f:64: 8d:69:51:b5:6c:2c:52:8c:77:b5:17:a5:22:35:36: 3c:71:ef:c8:8a:70:02:45:c9:fd:a9:4f:40:48:9c: 21:b7:79:da:cd:82:f1:65:9f:b1:1e:63:e4:c7:2f: 03:aa:41:38:2d:8f:9b:3a:aa:14:b6:c7:05:ca:8c: 5b:c0:f9:0d:a9:da:d6:58:a8:1e:ab:16:ee:26:5d: b2:72:4c:43:ba:d0:df:d0:d4:8b:f8:da:0f:43:e8: dd:e8:0e:be:58:5e:99:a2:93:19:3e:aa:ed:01:c9: dc:49:ec:81:f6:3a:5c:3a:41:35:06:94:1d:7c:7b: 2a:6f:59:64:da:b7:1d:58:e9:f3:77:4e:5a:76:a5: fb:c0:f0:a2:73:66:ee:ab:b7:03:21:9a:6c:42:3d: 9d:90:5c:55:b4:60:da:1c:ec:f9:50:c4:3e:fb:56: 0a:1c:00:6a:15:92:68:68:17:01:fd:d1:42:a0:e6: 9d:58:62:0d:d0:b2:98:8b:67:61:63:58:01:b8:0a: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:3C:74:8D:61:A7:DD:8B:DE:56:AA:21:FB:35:0E:C3:9C:24:64 X509v3 Authority Key Identifier: keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:db:24:c1:bd:2a:af:7c:25:b2:be:22:f4:0f:41:8d:18:8d: 8b:b0:80:85:3c:3b:f7:a1:9b:e9:1d:06:46:68:75:28:9d:2c: 0f:cd:7d:83:01:f5:6b:ee:3f:0e:86:56:b8:95:54:86:bd:27: bd:da:67:f8:70:ae:2c:4c:4b:3c:e7:c2:b7:c6:64:3a:e4:5b: 28:fd:69:97:13:14:6c:d5:01:3f:f6:8c:d1:1e:7f:6c:a9:b8: 82:04:d8:07:b3:1c:92:ef:fb:09:09:bc:c7:0d:c0:e8:8c:26: 7d:f3:78:4d:aa:b5:76:b8:04:12:00:60:7d:d0:78:d7:7a:f3: 98:2e:53:73:8e:33:e9:de:ce:05:b7:6a:4c:40:2d:90:10:5a: 9b:bd:76:1f:4f:19:03:39:84:c2:da:a6:e6:db:e0:27:de:e9: 36:68:a8:6c:bb:3f:5e:6a:d6:a9:cf:a3:d5:87:61:68:f9:02: 03:72:e2:37:d4:05:dc:89:fa:92:ab:7d:b7:38:70:21:15:16: b0:e9:a3:25:f7:2a:fb:df:85:93:25:af:f6:bd:38:b1:b5:34: 77:43:0d:6a:70:2f:58:9c:1e:1f:63:1d:f6:d5:5b:d3:3e:ce: cf:d3:f9:66:10:e1:19:a5:30:32:ff:8c:93:bb:69:64:27:31: c2:94:e9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2szpubFnZAT/8F+EAxkN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZWY5YjVmMmVmMTA0M2MyZGYzMTdmODZjOGI5Mjk3MjIx ZjhkYzMwHhcNMjUxMjE5MTMwMTE0WhcNMjUxMjIwMTMwMTE0WjAzMTEwLwYDVQQD EyhiMDE3M2M3NDhkNjFhN2RkOGJkZTU2YWEyMWZiMzUwZWMzOWMyNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/gfGZHC/NLUMzDTkmnwwOIVxZ6Q 9NzaDM1DCIAab64MpCEBgD1cX3N/A4gn/1omYDCcEzJ8dKkCb2SNaVG1bCxSjHe1 F6UiNTY8ce/IinACRcn9qU9ASJwht3nazYLxZZ+xHmPkxy8DqkE4LY+bOqoUtscF yoxbwPkNqdrWWKgeqxbuJl2yckxDutDf0NSL+NoPQ+jd6A6+WF6ZopMZPqrtAcnc SeyB9jpcOkE1BpQdfHsqb1lk2rcdWOnzd05adqX7wPCic2buq7cDIZpsQj2dkFxV tGDaHOz5UMQ++1YKHABqFZJoaBcB/dFCoOadWGIN0LKYi2dhY1gBuAqAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAXPHSNYafdi95WqiH7NQ7DnCRkMB8GA1UdIwQY MBaAFAbvm18u8QQ8LfMX+GyLkpciH43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgt OTFiZWI5Yjg5MDhjLzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgtOTFiZWI5Yjg5MDhj LzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNskwb0q r3wlsr4i9A9BjRiNi7CAhTw796Gb6R0GRmh1KJ0sD819gwH1a+4/DoZWuJVUhr0n vdpn+HCuLExLPOfCt8ZkOuRbKP1plxMUbNUBP/aM0R5/bKm4ggTYB7Mcku/7CQm8 xw3A6IwmffN4Taq1drgEEgBgfdB413rzmC5Tc44z6d7OBbdqTEAtkBBam712H08Z AzmEwtqm5tvgJ97pNmiobLs/XmrWqc+j1YdhaPkCA3LiN9QF3In6kqt9tzhwIRUW sOmjJfcq+9+FkyWv9r04sbU0d0MNanAvWJweH2Md9tVb0z7Oz9P5ZhDhGaUwMv+M k7tpZCcxwpTpnA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:28 2025 by rpki-client