This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft File: Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json) Hash identifier: bRkE9hnr4RR9OHIWY9oxyFqKnxc+dSpcT8tZeJbBycU= Subject key identifier: E7:21:70:08:3C:22:B9:00:1F:64:B1:96:7C:78:6C:C4:87:29:C3:C9 Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5 Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5 Certificate serial: 019B0F0125FEFD940B8F3321C077F55F1489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft Manifest number: 0F16 Signing time: Thu 11 Dec 2025 20:01:31 +0000 Manifest this update: Thu 11 Dec 2025 20:01:31 +0000 Manifest next update: Fri 12 Dec 2025 20:01:31 +0000 Files and hashes: 1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: I3nsfXrEtuOmKmCKUBmNApJwjaC1geZOdX1M0fqMV5c=) 2: Xziix3WpukeN1e5SpGgnYgqIF3I.roa (hash: IunBp4C+veP99rGSTt8SQ5POqclxS7qKVFGqTiG4pb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:25:fe:fd:94:0b:8f:33:21:c0:77:f5:5f:14:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5 Validity Not Before: Dec 11 20:01:31 2025 GMT Not After : Dec 12 20:01:31 2025 GMT Subject: CN=e72170083c22b9001f64b1967c786cc48729c3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:37:0a:98:71:c3:8b:ea:d8:07:18:24:eb:e7: 31:ab:39:d2:1e:0e:60:33:44:0d:95:49:6a:c4:1d: 0e:11:fc:e6:9f:ea:29:d5:fb:57:d4:a9:e6:b1:87: 46:c8:5b:3a:cf:2c:de:2b:43:8e:48:f6:cd:c8:80: 90:ee:4a:46:c3:5f:25:73:48:a8:63:8a:0d:08:4f: 3d:48:c2:13:e4:1f:ca:99:f4:64:b8:8d:82:3e:31: 92:66:cc:bc:35:1a:ae:13:0b:db:62:68:84:34:5e: ae:d8:f3:79:36:ea:84:78:4b:0f:1b:38:d1:2c:dc: 95:1d:16:62:fe:71:29:54:14:87:31:65:c3:5c:49: 82:b5:d2:a1:2e:7e:63:6f:ca:5d:4f:93:47:48:87: 0f:ba:2a:7e:d4:5b:b4:cc:3b:e0:26:f3:0e:b1:f2: d0:88:ec:69:fd:ff:eb:96:23:bd:22:92:25:53:64: 32:89:bc:3c:af:b2:b6:f3:56:47:5e:72:10:8d:04: 37:8c:68:c9:8c:81:5b:90:a1:3a:b7:77:8e:0d:16: f1:e0:91:c6:a8:84:8a:fe:3e:45:25:aa:83:79:69: 89:da:b0:1d:76:a0:ad:56:5b:67:7a:82:52:42:b5: 7c:f5:59:2a:09:45:8d:82:ac:82:b0:1d:4a:cc:89: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:21:70:08:3C:22:B9:00:1F:64:B1:96:7C:78:6C:C4:87:29:C3:C9 X509v3 Authority Key Identifier: keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d4:1c:cc:8d:5f:86:ba:5b:2a:2e:3b:99:a8:ce:85:9d:13: 64:ca:04:3a:ce:b7:a2:ce:f0:cc:ea:7e:57:4a:15:46:59:d8: b8:b9:1a:41:79:fb:1e:21:0b:08:da:93:21:e0:29:65:e0:f9: a0:03:bb:72:2c:de:da:d7:42:a8:b3:46:52:0e:6c:4a:88:01: 91:ed:bb:9d:e6:44:2e:06:cf:9e:92:e7:d9:a9:f4:74:3b:db: 0d:1d:96:c8:85:22:40:96:c7:07:a4:7b:5f:b7:01:68:84:be: da:32:dd:02:23:60:c6:0c:d2:50:e0:d9:45:d3:1b:0f:8e:d6: e6:9d:e0:49:1a:90:8d:1e:e7:1a:59:55:15:70:21:13:6d:d6: f8:5c:12:5b:50:72:ed:11:56:32:21:85:2f:cb:7c:1d:98:66: e6:a3:c6:41:d4:f3:c7:6e:e5:a0:ec:b3:18:4e:2d:5c:85:ab: 2a:46:ea:3c:7d:fe:13:c7:8d:5a:62:1d:56:7a:26:9a:8d:50: 63:34:95:70:c6:a3:f9:1b:d3:9f:30:b9:d3:b1:ca:25:56:f4: 86:f2:81:cf:5d:80:46:35:76:b7:16:a5:b4:f3:3c:e8:dc:39: 21:49:cf:9f:6d:44:98:5e:d6:d3:42:8f:13:cb:d5:2c:ea:2f: ec:de:33:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPASX+/ZQLjzMhwHf1XxSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2JhZGM3ODUzYjA1MTAwYTZiMjI0ZGRjZWZjMThlMmU3 ZDNkZDUwHhcNMjUxMjExMjAwMTMxWhcNMjUxMjEyMjAwMTMxWjAzMTEwLwYDVQQD EyhlNzIxNzAwODNjMjJiOTAwMWY2NGIxOTY3Yzc4NmNjNDg3MjljM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TcKmHHDi+rYBxgk6+cxqznSHg5g M0QNlUlqxB0OEfzmn+op1ftX1KnmsYdGyFs6zyzeK0OOSPbNyICQ7kpGw18lc0io Y4oNCE89SMIT5B/KmfRkuI2CPjGSZsy8NRquEwvbYmiENF6u2PN5NuqEeEsPGzjR LNyVHRZi/nEpVBSHMWXDXEmCtdKhLn5jb8pdT5NHSIcPuip+1Fu0zDvgJvMOsfLQ iOxp/f/rliO9IpIlU2Qyibw8r7K281ZHXnIQjQQ3jGjJjIFbkKE6t3eODRbx4JHG qISK/j5FJaqDeWmJ2rAddqCtVltneoJSQrV89VkqCUWNgqyCsB1KzInCawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOchcAg8IrkAH2Sxlnx4bMSHKcPJMB8GA1UdIwQY MBaAFAY7rceFOwUQCmsiTdzvwY4ufT3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYt YTIzNzQ0NGFmODI5LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYtYTIzNzQ0NGFmODI5 LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitQczI1f hrpbKi47majOhZ0TZMoEOs63os7wzOp+V0oVRlnYuLkaQXn7HiELCNqTIeApZeD5 oAO7cize2tdCqLNGUg5sSogBke27neZELgbPnpLn2an0dDvbDR2WyIUiQJbHB6R7 X7cBaIS+2jLdAiNgxgzSUODZRdMbD47W5p3gSRqQjR7nGllVFXAhE23W+FwSW1By 7RFWMiGFL8t8HZhm5qPGQdTzx27loOyzGE4tXIWrKkbqPH3+E8eNWmIdVnommo1Q YzSVcMaj+RvTnzC507HKJVb0hvKBz12ARjV2txaltPM86Nw5IUnPn21EmF7W00KP E8vVLOov7N4z/w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:48 2025 by rpki-client