This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json) Hash identifier: +AtQ3oL+GA/656qlVZkH8vIAX3u4trKgYu5fSRBWl8A= Subject key identifier: 5D:D7:3C:9F:42:8B:56:54:3A:30:31:CA:F6:F8:4A:21:C2:6F:25:ED Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019B25BFD149AA7160886999FCC0F0275320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft Manifest number: 10C4 Signing time: Tue 16 Dec 2025 06:01:26 +0000 Manifest this update: Tue 16 Dec 2025 06:01:26 +0000 Manifest next update: Wed 17 Dec 2025 06:01:26 +0000 Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: vmr7hV4rssWsoS1Osbqp+1M+nVJMN9JI/yJyGpLc0Xg=) 2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=) 3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=) 4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=) 5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=) 6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=) 7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=) 8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:d1:49:aa:71:60:88:69:99:fc:c0:f0:27:53:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Dec 16 06:01:26 2025 GMT Not After : Dec 17 06:01:26 2025 GMT Subject: CN=5dd73c9f428b56543a3031caf6f84a21c26f25ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:53:e0:2c:fb:11:14:13:4b:22:bf:e5:bb: 28:a8:64:bd:8f:b4:b2:b8:75:c2:a1:b0:89:36:01: 76:88:c2:c0:cf:be:3e:de:9e:b6:33:03:8a:a7:40: 7c:27:f4:e9:93:d1:fd:c7:0d:62:38:2b:5f:0e:8e: 26:af:04:15:14:55:95:48:42:a4:4a:a8:c2:94:17: b1:8b:ef:8b:76:22:ef:31:9e:86:ec:e9:f9:db:a6: 5b:49:a7:ff:ed:e6:39:b7:bc:dd:4c:63:0c:65:41: ce:2b:45:89:e5:8f:55:6d:83:46:b1:82:88:b3:2d: 0b:cd:aa:ee:32:f6:d0:fe:c9:ad:a7:b1:91:2e:78: 07:a6:e3:81:f8:07:19:ac:1a:d1:29:3f:96:96:15: 53:12:ea:f4:de:b2:fd:5e:cc:26:d0:c7:7c:4a:3a: 9f:8f:8d:5c:b8:e9:29:26:1d:55:a0:26:79:3a:e2: 41:ab:7a:d4:e8:c9:c1:86:f9:0e:dd:44:38:fa:c9: 9f:72:cc:fe:39:74:2c:17:28:d6:df:1d:a3:48:5e: da:f5:e4:74:f7:8d:89:60:d1:fb:7a:11:f5:ce:24: 38:b7:db:0b:2c:16:33:ff:e6:53:ca:f5:45:87:94: 56:63:0d:0c:70:fe:3c:ef:7f:72:3e:83:34:72:4a: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:3C:9F:42:8B:56:54:3A:30:31:CA:F6:F8:4A:21:C2:6F:25:ED X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:30:43:26:48:e6:f4:de:33:03:85:db:24:9b:b1:96:32:bc: 71:dd:d9:f8:1d:9a:b4:4b:11:46:a6:6b:2d:3a:f7:64:9a:00: c8:3a:29:f4:d1:5e:69:14:b3:05:77:c7:92:8a:5d:54:e4:4f: 4c:5f:36:d7:21:63:1c:0c:b9:60:26:62:40:22:e9:eb:d5:98: 50:f0:1f:ac:ce:b0:14:18:90:0a:ca:a8:b2:40:b1:5a:5d:e8: ea:47:8b:f5:1f:6d:dc:2a:ab:aa:b6:8e:b7:87:af:cc:b8:28: 1a:49:92:61:a7:4f:2d:0a:88:a7:1b:71:94:b1:05:8d:d3:58: 68:fb:23:36:ae:e7:16:b9:68:fd:53:1e:e3:0b:50:64:27:55: 84:29:b3:9e:d7:2f:93:16:f4:cd:fd:96:0c:3c:79:f6:a4:9c: e7:aa:77:90:fc:c8:b0:d1:a1:a9:f8:af:72:44:eb:5e:d0:3c: 7f:70:b3:62:c5:07:03:3b:b6:be:40:c4:44:91:92:87:d0:da: 1d:21:e3:f3:c9:7f:90:f6:12:71:eb:fe:1d:44:69:16:07:2f: 8d:1c:71:28:a6:62:00:45:37:40:40:54:ad:da:42:5d:91:ae: 7e:6a:0f:90:6a:db:ad:cc:c4:67:e5:19:8c:40:be:83:e5:ec: 6b:c8:b2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv9FJqnFgiGmZ/MDwJ1MgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjUxMjE2MDYwMTI2WhcNMjUxMjE3MDYwMTI2WjAzMTEwLwYDVQQD Eyg1ZGQ3M2M5ZjQyOGI1NjU0M2EzMDMxY2FmNmY4NGEyMWMyNmYyNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCFT4Cz7ERQTSyK/5bsoqGS9j7Sy uHXCobCJNgF2iMLAz74+3p62MwOKp0B8J/Tpk9H9xw1iOCtfDo4mrwQVFFWVSEKk SqjClBexi++LdiLvMZ6G7On526ZbSaf/7eY5t7zdTGMMZUHOK0WJ5Y9VbYNGsYKI sy0LzaruMvbQ/smtp7GRLngHpuOB+AcZrBrRKT+WlhVTEur03rL9Xswm0Md8Sjqf j41cuOkpJh1VoCZ5OuJBq3rU6MnBhvkO3UQ4+smfcsz+OXQsFyjW3x2jSF7a9eR0 942JYNH7ehH1ziQ4t9sLLBYz/+ZTyvVFh5RWYw0McP48739yPoM0ckojWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3XPJ9Ci1ZUOjAxyvb4SiHCbyXtMB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljBDJkjm 9N4zA4XbJJuxljK8cd3Z+B2atEsRRqZrLTr3ZJoAyDop9NFeaRSzBXfHkopdVORP TF821yFjHAy5YCZiQCLp69WYUPAfrM6wFBiQCsqoskCxWl3o6keL9R9t3CqrqraO t4evzLgoGkmSYadPLQqIpxtxlLEFjdNYaPsjNq7nFrlo/VMe4wtQZCdVhCmzntcv kxb0zf2WDDx59qSc56p3kPzIsNGhqfivckTrXtA8f3CzYsUHAzu2vkDERJGSh9Da HSHj88l/kPYScev+HURpFgcvjRxxKKZiAEU3QEBUrdpCXZGufmoPkGrbrczEZ+UZ jEC+g+Xsa8iylw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:31:34 2025 by rpki-client