This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json) Hash identifier: GvY+qcuKPfSVuv+Elf9Z8JatkyjvxcunzgxjyVXd9To= Subject key identifier: F0:4F:A8:3B:9C:A5:D7:B6:9C:04:FD:ED:29:25:EA:21:BB:C9:A8:7E Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f Certificate serial: 019B34C514F2150A73C85AE4E3CFB258C272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 04:01:29 +0000 Manifest this update: Fri 19 Dec 2025 04:01:29 +0000 Manifest next update: Sat 20 Dec 2025 04:01:29 +0000 Files and hashes: 1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: UMxDZS/tl1DY480uAqh1Zvyl2KhvVfvLJfqbOBJCAKI=) 2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:14:f2:15:0a:73:c8:5a:e4:e3:cf:b2:58:c2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f Validity Not Before: Dec 19 04:01:29 2025 GMT Not After : Dec 20 04:01:29 2025 GMT Subject: CN=f04fa83b9ca5d7b69c04fded2925ea21bbc9a87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:37:00:ae:50:27:56:1e:e6:d5:5c:b6:fd: db:28:23:f9:84:b1:6e:94:ff:5d:d4:83:3a:95:4c: 0e:74:9b:24:27:14:23:e5:9a:78:af:a5:68:c5:10: 6e:26:08:6a:ab:f3:c5:51:3f:81:ee:09:c0:ff:66: f6:d6:de:80:12:b3:f1:d7:c9:fc:23:a1:58:88:6d: 4a:6f:2c:06:66:de:89:35:a2:54:e3:71:6f:ab:ea: 6a:01:f1:5e:ae:31:3e:6a:2a:b3:05:f4:5b:99:48: ad:04:b3:e9:38:21:16:49:33:98:7b:cf:9e:ba:5d: 1e:99:0c:62:d4:97:d1:b1:b1:d8:74:60:c1:6a:f5: 49:a5:41:e0:27:e4:a0:ff:76:a1:c2:54:80:08:87: 03:9a:57:21:9b:0a:62:ca:aa:98:41:7c:48:04:6a: 55:a6:1c:21:98:49:0f:f7:3d:b9:a0:b5:5d:f9:d4: 2c:b7:15:ef:d8:63:9c:87:af:6a:8c:20:a7:34:37: 78:ca:25:73:bc:2c:0d:1d:79:98:de:9c:d9:2c:09: a9:3b:c0:15:b2:f3:a6:f9:fc:f0:e8:bb:7b:85:00: b8:21:86:6b:4f:61:25:60:48:e4:d8:74:9d:7b:2b: ad:99:76:cd:ca:0f:4d:9f:44:96:63:fc:43:c8:5b: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4F:A8:3B:9C:A5:D7:B6:9C:04:FD:ED:29:25:EA:21:BB:C9:A8:7E X509v3 Authority Key Identifier: keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:99:a4:91:18:9b:33:08:35:74:bc:02:3c:71:0d:15:19:b9: d3:33:9b:1e:48:05:27:db:d6:23:ba:6f:62:18:10:0f:e3:ca: c1:69:b4:da:8b:d3:7f:bd:da:8b:e4:e7:71:6a:59:9d:41:00: af:80:b9:f0:cb:3c:3d:b4:ce:3b:b4:70:17:40:bb:87:93:16: 24:29:08:a4:30:51:67:b8:38:7e:1e:cb:fc:87:49:f2:34:5e: 9e:f5:24:f2:70:57:44:93:43:ab:cc:c8:77:02:6b:bb:62:d3: b1:f6:14:25:eb:d5:26:1a:d5:e5:28:b2:46:a5:cd:0d:e6:93: f5:de:ce:f1:ec:c6:fc:40:3c:12:c6:3a:b9:d2:ea:cf:28:44: 77:4f:c7:ef:d1:16:7a:fb:9b:4f:ad:d2:ca:80:9f:5f:8d:10: 2e:c2:36:b4:c7:ae:6c:8f:36:2e:56:e6:af:b0:fd:c7:95:ba: 38:2c:b8:7a:94:e3:82:99:d5:53:2b:ac:29:7a:a6:75:ef:97: a8:41:cb:0d:9b:ad:e4:8a:14:3e:58:ca:86:18:63:9a:53:69: d2:5d:49:d4:2b:c7:56:55:6f:11:67:b5:bf:b0:53:b1:bc:7f: ed:a7:15:cd:c9:e1:57:68:55:85:07:e0:07:a7:e8:6f:b5:3f: 76:5d:62:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRTyFQpzyFrk48+yWMJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZWRmZDI4MzUwZjczZDM5ODU1YzQ3NWExNTE2YWUwYjc3 OTFhMGYwHhcNMjUxMjE5MDQwMTI5WhcNMjUxMjIwMDQwMTI5WjAzMTEwLwYDVQQD EyhmMDRmYTgzYjljYTVkN2I2OWMwNGZkZWQyOTI1ZWEyMWJiYzlhODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxg3AK5QJ1Ye5tVctv3bKCP5hLFu lP9d1IM6lUwOdJskJxQj5Zp4r6VoxRBuJghqq/PFUT+B7gnA/2b21t6AErPx18n8 I6FYiG1KbywGZt6JNaJU43Fvq+pqAfFerjE+aiqzBfRbmUitBLPpOCEWSTOYe8+e ul0emQxi1JfRsbHYdGDBavVJpUHgJ+Sg/3ahwlSACIcDmlchmwpiyqqYQXxIBGpV phwhmEkP9z25oLVd+dQstxXv2GOch69qjCCnNDd4yiVzvCwNHXmY3pzZLAmpO8AV svOm+fzw6Lt7hQC4IYZrT2ElYEjk2HSdeyutmXbNyg9Nn0SWY/xDyFsPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBPqDucpde2nAT97Skl6iG7yah+MB8GA1UdIwQY MBaAFAbt/Sg1D3PTmFXEdaFRauC3eRoPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMt ZjZkNzI5YTkzZWM4LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMtZjZkNzI5YTkzZWM4 LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZmkkRib Mwg1dLwCPHENFRm50zObHkgFJ9vWI7pvYhgQD+PKwWm02ovTf73ai+TncWpZnUEA r4C58Ms8PbTOO7RwF0C7h5MWJCkIpDBRZ7g4fh7L/IdJ8jRenvUk8nBXRJNDq8zI dwJru2LTsfYUJevVJhrV5SiyRqXNDeaT9d7O8ezG/EA8EsY6udLqzyhEd0/H79EW evubT63SyoCfX40QLsI2tMeubI82Llbmr7D9x5W6OCy4epTjgpnVUyusKXqmde+X qEHLDZut5IoUPljKhhhjmlNp0l1J1CvHVlVvEWe1v7BTsbx/7acVzcnhV2hVhQfg B6fob7U/dl1iEA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:22:17 2025 by rpki-client