This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json) Hash identifier: SQNVDjuJxg593VEBvTfKxAe+sSXnmhIXf9OjvzRSTYk= Subject key identifier: 7D:07:52:1E:31:13:F3:C8:70:E0:F9:25:CC:C6:E1:E5:7F:7A:70:4E Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Certificate serial: 019B5AF655D27E6D9142BD2B1DF531FF1D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft Manifest number: 149A Signing time: Fri 26 Dec 2025 14:00:51 +0000 Manifest this update: Fri 26 Dec 2025 14:00:51 +0000 Manifest next update: Sat 27 Dec 2025 14:00:51 +0000 Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: BV3CRjRWMbRHy9AWFMsJLMZhHmcPs19ibjRsJNfSwS4=) 2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:55:d2:7e:6d:91:42:bd:2b:1d:f5:31:ff:1d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395 Validity Not Before: Dec 26 14:00:51 2025 GMT Not After : Dec 27 14:00:51 2025 GMT Subject: CN=7d07521e3113f3c870e0f925ccc6e1e57f7a704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:8f:90:76:30:1e:e2:6b:5b:bb:2b:f3:96: 6c:1f:e0:4d:b5:5c:82:f2:dd:da:73:03:97:86:a8: 51:78:87:71:dd:eb:be:86:8d:86:5c:99:fd:b3:f1: b8:74:d3:db:5d:3a:54:5b:4b:ad:51:24:c9:e6:a0: 43:61:2c:02:41:d0:7e:87:b3:3e:13:72:8d:b7:8b: 34:bc:45:29:50:5d:a7:4d:81:28:5e:fb:4a:15:3b: 5b:9c:1e:f2:ab:6c:a8:6a:b4:48:32:f6:87:aa:98: 98:6a:94:50:52:c6:05:53:2b:42:76:94:93:f5:4d: e4:5a:39:82:0e:e4:a4:02:e1:41:55:5b:da:89:a2: 8d:28:a8:44:18:41:26:4d:9e:08:16:48:d0:d4:2d: e4:be:88:37:e2:0a:74:ce:72:99:59:22:60:b7:46: 77:bd:28:90:17:34:40:ce:2c:53:ee:fd:96:f6:a4: cb:bc:4c:c8:a8:59:ef:e4:1c:48:60:3b:1f:82:6a: 75:ce:2f:f9:e4:9c:f4:d9:b0:08:52:5c:b9:81:e0: ef:2d:a8:fc:91:a9:ee:66:16:59:6f:ac:15:71:b2: 08:60:89:21:b5:68:e3:eb:e2:0c:39:71:9b:fa:fe: c3:f0:39:24:01:bc:63:67:7e:e7:8d:cf:0f:a4:90: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:52:1E:31:13:F3:C8:70:E0:F9:25:CC:C6:E1:E5:7F:7A:70:4E X509v3 Authority Key Identifier: keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:df:72:e3:2b:16:78:f0:ca:8b:3f:6e:79:98:3b:a8:f1:ff: 35:25:e1:3e:82:06:db:b8:4f:1d:44:31:a6:4d:8f:56:1f:6d: e4:47:d0:fe:4a:59:e3:36:ae:ec:18:ed:22:ee:33:f4:18:e4: 43:ec:2f:22:30:82:56:7e:1a:25:cf:f0:54:03:9e:75:9c:91: 8b:80:24:77:68:9d:6f:4b:a1:5d:54:8d:87:52:39:9b:a0:36: ae:f2:f7:1e:9d:83:be:5f:66:4b:0d:63:83:5e:21:c4:40:53: 1e:f3:30:b0:7d:2a:90:7f:8c:4e:40:89:21:a7:07:2a:5b:9c: ed:6c:a5:9b:a7:ff:13:32:8e:33:46:4f:58:91:50:45:23:24: 6c:24:58:c7:96:dd:68:76:3e:b5:d0:f0:ac:b1:0f:61:a1:47: 5d:d8:90:4f:a1:87:cb:1b:07:7e:2d:55:d2:30:b8:34:fe:de: 2c:d7:3b:d3:55:4a:02:3b:9a:a5:4f:e3:e2:63:06:2b:78:e0: d1:4f:28:d4:00:8d:65:09:7e:9f:3a:6c:4d:b3:72:3a:3d:19: d8:4d:bc:c0:14:cf:75:47:63:62:5a:ce:71:dd:c4:76:ba:83: d1:99:af:09:3d:e9:0c:e7:c0:8f:5f:9d:4a:4e:7d:1f:fc:c7: 57:30:86:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9lXSfm2RQr0rHfUx/x15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy NDQzOTUwHhcNMjUxMjI2MTQwMDUxWhcNMjUxMjI3MTQwMDUxWjAzMTEwLwYDVQQD Eyg3ZDA3NTIxZTMxMTNmM2M4NzBlMGY5MjVjY2M2ZTFlNTdmN2E3MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKPkHYwHuJrW7sr85ZsH+BNtVyC 8t3acwOXhqhReIdx3eu+ho2GXJn9s/G4dNPbXTpUW0utUSTJ5qBDYSwCQdB+h7M+ E3KNt4s0vEUpUF2nTYEoXvtKFTtbnB7yq2yoarRIMvaHqpiYapRQUsYFUytCdpST 9U3kWjmCDuSkAuFBVVvaiaKNKKhEGEEmTZ4IFkjQ1C3kvog34gp0znKZWSJgt0Z3 vSiQFzRAzixT7v2W9qTLvEzIqFnv5BxIYDsfgmp1zi/55Jz02bAIUly5geDvLaj8 kanuZhZZb6wVcbIIYIkhtWjj6+IMOXGb+v7D8DkkAbxjZ37njc8PpJDo7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0HUh4xE/PIcOD5JczG4eV/enBOMB8GA1UdIwQY MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt9y4ysW ePDKiz9ueZg7qPH/NSXhPoIG27hPHUQxpk2PVh9t5EfQ/kpZ4zau7BjtIu4z9Bjk Q+wvIjCCVn4aJc/wVAOedZyRi4Akd2idb0uhXVSNh1I5m6A2rvL3Hp2Dvl9mSw1j g14hxEBTHvMwsH0qkH+MTkCJIacHKluc7Wylm6f/EzKOM0ZPWJFQRSMkbCRYx5bd aHY+tdDwrLEPYaFHXdiQT6GHyxsHfi1V0jC4NP7eLNc701VKAjuapU/j4mMGK3jg 0U8o1ACNZQl+nzpsTbNyOj0Z2E28wBTPdUdjYlrOcd3EdrqD0ZmvCT3pDOfAj1+d Sk59H/zHVzCGnw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:53 2025 by rpki-client