This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json) Hash identifier: Jb/8nEbaMDubNx1QeXnpwuGAtUN3TkgZCMjXsf7Qcm4= Subject key identifier: 16:77:2D:8D:6D:B6:91:3D:63:70:4D:38:5F:BD:A2:50:F8:C3:83:A5 Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53 Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953 Certificate serial: 019B5976BF9727A6880EF36E6B663CDF03B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:53 +0000 Manifest this update: Fri 26 Dec 2025 07:01:53 +0000 Manifest next update: Sat 27 Dec 2025 07:01:53 +0000 Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: 2EIq7p2te7J/+I4CcKSZKJ9niIPUvLYdpPZjqHrZhrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:bf:97:27:a6:88:0e:f3:6e:6b:66:3c:df:03:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953 Validity Not Before: Dec 26 07:01:53 2025 GMT Not After : Dec 27 07:01:53 2025 GMT Subject: CN=16772d8d6db6913d63704d385fbda250f8c383a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:23:ee:0d:f1:7a:55:a2:45:fd:2a:71:e8: b3:be:6c:df:c6:bd:55:09:90:0e:4f:f3:2f:31:1f: 3b:84:18:e8:9c:bf:7e:a0:84:b0:07:9f:cb:7a:d8: 08:bc:8a:5c:29:4d:aa:15:7e:ba:30:fe:6f:c4:43: 32:7d:bf:5d:bc:9f:f7:87:a8:4f:07:49:63:51:30: 8a:c8:cd:60:74:2c:c9:73:e6:d4:82:53:99:8f:80: 16:b1:b3:22:82:bd:ca:17:af:d2:36:13:a1:e7:67: 3a:df:4a:05:23:57:ae:a8:37:29:84:23:30:80:13: 7d:50:a4:6a:9d:0b:8a:86:c5:62:44:c5:a8:20:c6: 75:47:eb:60:6d:5b:e5:d6:6f:73:ca:0b:81:3f:89: 79:52:eb:54:9d:1d:72:c0:d9:a0:7b:ba:5c:3d:e7: d8:43:5c:5c:6a:93:7b:2a:1e:ab:dd:0e:a6:ef:31: 4e:29:fc:eb:3e:70:54:ae:a8:e3:c9:84:77:e5:01: 50:5b:4e:19:1b:d1:64:ab:4b:82:a5:5d:d4:e6:1a: 28:36:a1:99:bd:57:00:33:3d:f5:6f:08:9b:99:2f: a4:01:fe:ef:fa:41:81:f1:8d:e4:be:50:ae:47:34: 1e:ab:aa:a1:e0:f9:e2:aa:3d:10:07:e4:5b:dd:3a: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:77:2D:8D:6D:B6:91:3D:63:70:4D:38:5F:BD:A2:50:F8:C3:83:A5 X509v3 Authority Key Identifier: keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:64:81:87:78:bf:ef:a9:5f:92:64:ba:41:df:88:b5:07: 0b:6c:e7:57:8e:54:2c:fe:24:66:f8:00:98:71:14:9e:2b:00: 85:4a:ab:44:20:e9:8e:11:7b:d2:d4:49:1d:12:02:5b:8f:bd: b8:cc:62:13:ea:1e:ab:35:d1:de:95:d2:62:26:22:fa:5e:74: bc:ba:5d:12:10:75:fc:ae:8a:ff:59:6d:61:4c:2f:be:b8:c8: be:a5:7a:a9:9c:9f:35:c3:15:88:61:35:e2:87:c2:12:f1:d8: 0b:8b:8b:a1:8c:0d:8f:41:78:e9:d7:13:e0:33:57:f6:d9:81: ea:57:b1:d7:f1:7d:3e:b3:c6:93:ad:b9:9f:35:fb:f7:6c:a5: 5b:2f:bd:a8:50:f5:89:6e:29:79:5e:47:27:f2:ec:69:b2:83: e7:84:22:e3:8b:33:fe:7f:0e:88:b3:2b:9b:3d:bc:03:d8:1e: 95:98:83:7e:24:cc:94:79:41:43:c4:93:8b:f1:90:9f:e3:70: bf:9e:2f:cc:4d:b4:4f:a8:5c:a7:4f:e7:7d:ab:e8:62:cd:b8: fe:8f:ce:d0:ae:5f:91:46:31:68:b9:da:9f:8a:ce:d0:39:83: 84:f1:e5:28:a0:6d:2b:aa:5d:c5:64:94:1f:e2:20:17:fb:b0: 63:9c:55:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdr+XJ6aIDvNua2Y83wO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTQyZDg5N2U5Njg5NWM3MGY0M2NhMDM1MGQwZmY0NGI4 NDg5NTMwHhcNMjUxMjI2MDcwMTUzWhcNMjUxMjI3MDcwMTUzWjAzMTEwLwYDVQQD EygxNjc3MmQ4ZDZkYjY5MTNkNjM3MDRkMzg1ZmJkYTI1MGY4YzM4M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43Qj7g3xelWiRf0qceizvmzfxr1V CZAOT/MvMR87hBjonL9+oISwB5/LetgIvIpcKU2qFX66MP5vxEMyfb9dvJ/3h6hP B0ljUTCKyM1gdCzJc+bUglOZj4AWsbMigr3KF6/SNhOh52c630oFI1euqDcphCMw gBN9UKRqnQuKhsViRMWoIMZ1R+tgbVvl1m9zyguBP4l5UutUnR1ywNmge7pcPefY Q1xcapN7Kh6r3Q6m7zFOKfzrPnBUrqjjyYR35QFQW04ZG9Fkq0uCpV3U5hooNqGZ vVcAMz31bwibmS+kAf7v+kGB8Y3kvlCuRzQeq6qh4Pniqj0QB+Rb3Tpc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ3LY1ttpE9Y3BNOF+9olD4w4OlMB8GA1UdIwQY MBaAFAbkLYl+lolccPQ8oDUND/RLhIlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYt Mjk1MjdjZTE5OWVkLzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYtMjk1MjdjZTE5OWVk LzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrZkgYd4 v++pX5JkukHfiLUHC2znV45ULP4kZvgAmHEUnisAhUqrRCDpjhF70tRJHRICW4+9 uMxiE+oeqzXR3pXSYiYi+l50vLpdEhB1/K6K/1ltYUwvvrjIvqV6qZyfNcMViGE1 4ofCEvHYC4uLoYwNj0F46dcT4DNX9tmB6lex1/F9PrPGk625nzX792ylWy+9qFD1 iW4peV5HJ/LsabKD54Qi44sz/n8OiLMrmz28A9gelZiDfiTMlHlBQ8STi/GQn+Nw v54vzE20T6hcp0/nfavoYs24/o/O0K5fkUYxaLnan4rO0DmDhPHlKKBtK6pdxWSU H+IgF/uwY5xVlA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:15 2025 by rpki-client