This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json) Hash identifier: UD60shi7SjZ7oVvBebRzf57uOKkMGGfgViPIZd+gYwc= Subject key identifier: 71:03:19:17:7C:64:44:67:46:95:69:9D:43:67:CD:43:19:E9:64:28 Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Certificate serial: 019B3757D1D3DD40F3759FF33B79B727BF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft Manifest number: 163A Signing time: Fri 19 Dec 2025 16:01:00 +0000 Manifest this update: Fri 19 Dec 2025 16:01:00 +0000 Manifest next update: Sat 20 Dec 2025 16:01:00 +0000 Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: plB4DCMPPZMJEH/XeolR6ht8sWh5VG0WPo/w/EcxAaI=) 2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:d1:d3:dd:40:f3:75:9f:f3:3b:79:b7:27:bf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Validity Not Before: Dec 19 16:01:00 2025 GMT Not After : Dec 20 16:01:00 2025 GMT Subject: CN=710319177c6444674695699d4367cd4319e96428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:1e:86:3f:84:7b:6e:a4:f5:51:c4:ec:dc: 60:d6:11:79:3d:e5:1b:27:be:bc:b1:dd:92:39:76: 95:bc:1d:f0:c0:cd:30:d8:48:47:cc:4c:dc:99:08: 21:00:ea:16:c5:2b:21:c1:ef:74:f0:10:b1:e2:5b: 64:f6:75:35:27:e4:eb:89:44:03:ed:54:2d:e9:37: ed:d3:c5:a9:a7:4c:44:98:90:3d:c6:54:fc:06:52: 12:2e:ef:54:07:7e:01:8f:b2:fb:a8:1f:10:1c:ec: ca:3c:25:da:76:e1:0f:6c:47:14:89:00:d5:a4:50: db:02:ca:7b:17:a4:ab:b4:11:57:0c:7b:f4:6e:63: ae:32:06:90:9d:e4:35:62:36:c4:db:35:dd:1f:60: 88:2c:09:d7:7c:28:78:aa:d4:2f:61:bb:9a:2c:97: b9:cc:f1:82:e7:a9:81:49:8e:c7:b7:e1:2c:64:e0: 84:cb:ba:15:9c:c0:81:31:13:19:f9:9d:34:9d:6d: 1d:75:ea:45:73:2e:bf:9f:52:6a:89:8b:dd:48:c7: 84:ff:36:ec:9e:1c:58:e6:07:81:65:ce:0d:ef:f3: 56:8e:1e:8a:be:a2:65:87:8a:2f:53:11:23:62:e0: 42:71:c7:f1:e5:25:d3:c1:8b:18:04:61:19:0c:c8: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:19:17:7C:64:44:67:46:95:69:9D:43:67:CD:43:19:E9:64:28 X509v3 Authority Key Identifier: keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:83:bb:c6:9a:bd:aa:6e:e9:74:3c:a2:c6:b9:f4:5b:53:92: 3a:d5:c8:f0:f6:53:c0:ee:e4:11:cf:34:4f:e0:62:70:a4:de: a1:f1:fb:01:7c:b5:96:59:86:ce:b4:57:c9:c9:0e:25:b8:28: ad:63:ef:ec:63:f1:a2:67:f2:b3:87:ea:5d:f9:03:0b:49:77: 1d:4c:bc:f0:05:9a:55:f8:81:af:00:ba:dc:44:e8:85:9c:62: 8c:dc:30:6f:31:3d:e4:d9:81:79:da:90:ef:fa:fa:c2:a8:d0: 06:ad:ac:e2:57:75:3d:34:d9:ba:85:18:9a:e5:40:b4:ac:8c: f5:a0:c6:e2:07:fd:ae:51:19:32:5e:fe:8e:be:0f:ed:62:e7: 29:c1:02:90:d9:64:54:48:05:14:31:90:40:a8:d5:ff:7c:28: b5:dd:dc:9d:91:21:e8:15:e9:cb:4c:42:10:21:c1:09:6e:d0: f7:bf:22:e9:f9:07:d3:00:d8:16:15:e5:a8:8b:0a:c9:f5:fc: f7:af:32:a3:6d:13:3d:f3:c1:0d:2f:d3:dc:4f:6e:e4:9d:80: 1c:7f:95:2e:55:35:da:b7:28:00:43:aa:94:4a:62:ad:3b:c4: 2a:10:01:62:61:c7:1c:7a:4c:59:0f:37:cd:63:47:15:14:bd: 04:7a:13:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V9HT3UDzdZ/zO3m3J78FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi NjgxOWIwHhcNMjUxMjE5MTYwMTAwWhcNMjUxMjIwMTYwMTAwWjAzMTEwLwYDVQQD Eyg3MTAzMTkxNzdjNjQ0NDY3NDY5NTY5OWQ0MzY3Y2Q0MzE5ZTk2NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eAehj+Ee26k9VHE7Nxg1hF5PeUb J768sd2SOXaVvB3wwM0w2EhHzEzcmQghAOoWxSshwe908BCx4ltk9nU1J+TriUQD 7VQt6Tft08Wpp0xEmJA9xlT8BlISLu9UB34Bj7L7qB8QHOzKPCXaduEPbEcUiQDV pFDbAsp7F6SrtBFXDHv0bmOuMgaQneQ1YjbE2zXdH2CILAnXfCh4qtQvYbuaLJe5 zPGC56mBSY7Ht+EsZOCEy7oVnMCBMRMZ+Z00nW0ddepFcy6/n1JqiYvdSMeE/zbs nhxY5geBZc4N7/NWjh6KvqJlh4ovUxEjYuBCccfx5SXTwYsYBGEZDMjbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEDGRd8ZERnRpVpnUNnzUMZ6WQoMB8GA1UdIwQY MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1 LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYO7xpq9 qm7pdDyixrn0W1OSOtXI8PZTwO7kEc80T+BicKTeofH7AXy1llmGzrRXyckOJbgo rWPv7GPxomfys4fqXfkDC0l3HUy88AWaVfiBrwC63ETohZxijNwwbzE95NmBedqQ 7/r6wqjQBq2s4ld1PTTZuoUYmuVAtKyM9aDG4gf9rlEZMl7+jr4P7WLnKcECkNlk VEgFFDGQQKjV/3wotd3cnZEh6BXpy0xCECHBCW7Q978i6fkH0wDYFhXlqIsKyfX8 968yo20TPfPBDS/T3E9u5J2AHH+VLlU12rcoAEOqlEpirTvEKhABYmHHHHpMWQ83 zWNHFRS9BHoToA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:38 2025 by rpki-client