This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json) Hash identifier: 0k1FJxWzXKr0jKwpDGh49Oy0FFIu+osY4Ay9rOS/nF8= Subject key identifier: 8E:A3:A1:19:4D:A0:1D:0F:96:28:EF:26:9B:B0:A5:E5:DA:B2:5B:6B Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Certificate serial: 019B07471994652F4933905DFA8D7F81454B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft Manifest number: 0908 Signing time: Wed 10 Dec 2025 08:00:58 +0000 Manifest this update: Wed 10 Dec 2025 08:00:58 +0000 Manifest next update: Thu 11 Dec 2025 08:00:58 +0000 Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: LpEgrTLoHN8erxyCbm9uBMv9HKaFa9HpNJYHjKqqha4=) 2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:19:94:65:2f:49:33:90:5d:fa:8d:7f:81:45:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Validity Not Before: Dec 10 08:00:58 2025 GMT Not After : Dec 11 08:00:58 2025 GMT Subject: CN=8ea3a1194da01d0f9628ef269bb0a5e5dab25b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:2d:49:39:70:12:14:a4:da:97:18:41:15: 60:6f:fb:15:e4:f0:b8:75:51:56:0b:b0:69:ce:7e: b3:28:55:4f:89:f0:8f:7b:ea:a5:7a:2e:b0:0c:4a: 29:79:a1:25:78:95:b6:81:10:e0:31:be:8f:62:22: 7e:cc:d3:14:00:41:df:76:f5:21:d2:ab:c0:29:c6: 3a:14:bc:50:74:71:ad:ee:fe:88:7d:4f:61:d2:fb: 00:03:d0:10:41:11:f2:34:43:0d:29:ae:1c:4e:e5: 51:5d:4b:e7:c8:34:3e:ef:2a:85:66:82:d7:e8:0f: 55:2d:92:fc:9d:2d:7a:71:0f:8e:ce:17:9c:84:17: de:c5:3f:ab:16:ef:40:9b:78:a4:83:65:9d:9d:9c: b8:65:b0:ee:ef:ab:2a:fd:b8:c1:be:fb:8b:d1:d5: 8e:9b:22:af:36:07:a0:82:98:4f:8b:55:ac:dd:d1: 64:dc:eb:62:64:84:96:c5:f0:f3:bf:b3:a9:41:97: 7f:8d:8e:9f:6e:16:08:ea:f2:23:b6:17:6d:9c:f0: 27:8c:da:d9:38:25:be:5e:a5:a1:8b:e4:e3:bc:f5: 50:3f:5f:fb:a3:11:fa:dd:48:5a:d1:ad:0c:f9:2a: 3b:63:f6:c4:50:f7:ce:46:a6:43:82:e0:43:6b:ba: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:A1:19:4D:A0:1D:0F:96:28:EF:26:9B:B0:A5:E5:DA:B2:5B:6B X509v3 Authority Key Identifier: keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:83:20:35:35:15:fa:36:2e:a7:54:41:e1:0b:d1:31:e7:f7: c5:1a:d0:7d:c2:6f:4b:de:28:59:0b:a1:68:a9:db:6d:73:a2: 49:fa:57:c0:45:b5:24:7a:92:42:f6:2a:f2:8a:cf:d4:52:9b: 05:9d:17:26:65:0a:47:d3:6e:ce:a9:54:97:31:f1:da:7e:71: ed:94:39:6d:33:53:2a:ee:55:94:97:69:94:31:6b:92:13:e1: 6d:df:bd:c7:34:45:4c:b7:cc:ed:8f:41:78:49:5e:1d:85:30: 5a:27:3b:2f:f1:e2:2b:ec:fd:b9:7b:ef:3b:14:30:9b:e1:82: 73:e8:ae:86:38:4e:d2:7e:38:ea:58:b8:c2:be:95:f2:6d:26: 6d:31:44:2b:92:26:08:01:e0:41:43:83:5f:6e:7c:ae:0b:63: 00:ce:41:ba:84:c7:d0:fc:9d:93:ba:3f:11:6f:ba:ff:92:1c: 1d:5c:24:bd:21:cc:09:ad:3e:24:c9:94:e5:c1:19:84:51:05: 72:fe:f8:e9:ba:c8:27:7e:d6:8f:9b:de:95:2a:cb:66:0b:6f: fc:47:f2:fd:8d:dd:66:8f:ba:70:2b:0c:1f:60:71:c5:90:3a: 2a:89:2f:50:45:ec:f3:18:05:9d:b2:cb:43:3d:0b:86:35:07: 20:5f:9f:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRxmUZS9JM5Bd+o1/gUVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj MzBmZTQwHhcNMjUxMjEwMDgwMDU4WhcNMjUxMjExMDgwMDU4WjAzMTEwLwYDVQQD Eyg4ZWEzYTExOTRkYTAxZDBmOTYyOGVmMjY5YmIwYTVlNWRhYjI1YjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGgtSTlwEhSk2pcYQRVgb/sV5PC4 dVFWC7Bpzn6zKFVPifCPe+qlei6wDEopeaEleJW2gRDgMb6PYiJ+zNMUAEHfdvUh 0qvAKcY6FLxQdHGt7v6IfU9h0vsAA9AQQRHyNEMNKa4cTuVRXUvnyDQ+7yqFZoLX 6A9VLZL8nS16cQ+OzhechBfexT+rFu9Am3ikg2WdnZy4ZbDu76sq/bjBvvuL0dWO myKvNgeggphPi1Ws3dFk3OtiZISWxfDzv7OpQZd/jY6fbhYI6vIjthdtnPAnjNrZ OCW+XqWhi+TjvPVQP1/7oxH63Uha0a0M+So7Y/bEUPfORqZDguBDa7phBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6joRlNoB0PlijvJpuwpeXasltrMB8GA1UdIwQY MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIMgNTUV +jYup1RB4QvRMef3xRrQfcJvS94oWQuhaKnbbXOiSfpXwEW1JHqSQvYq8orP1FKb BZ0XJmUKR9NuzqlUlzHx2n5x7ZQ5bTNTKu5VlJdplDFrkhPhbd+9xzRFTLfM7Y9B eEleHYUwWic7L/HiK+z9uXvvOxQwm+GCc+iuhjhO0n446li4wr6V8m0mbTFEK5Im CAHgQUODX258rgtjAM5BuoTH0Pydk7o/EW+6/5IcHVwkvSHMCa0+JMmU5cEZhFEF cv746brIJ37Wj5velSrLZgtv/Efy/Y3dZo+6cCsMH2BxxZA6KokvUEXs8xgFnbLL Qz0LhjUHIF+fVg== -----END CERTIFICATE-----Generated at Wed Dec 10 09:45:28 2025 by rpki-client