This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: OILSnofnL/jCKPoqQ6cdvgpJRyO5q/iTAVknrWr/mhg= Subject key identifier: 2C:DF:BA:0C:28:A2:B6:FA:F4:E0:EF:9F:A8:19:6E:95:C6:69:13:C5 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019AD511F031D0F8043E1B540B1EAA038793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1753 Signing time: Sun 30 Nov 2025 14:01:53 +0000 Manifest this update: Sun 30 Nov 2025 14:01:53 +0000 Manifest next update: Mon 01 Dec 2025 14:01:53 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: DPGfc232cdnpqY299HsDkF+FlITFbb5Y5KC6ToECfh8=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 08:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:11:f0:31:d0:f8:04:3e:1b:54:0b:1e:aa:03:87:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Nov 30 14:01:53 2025 GMT Not After : Dec 1 14:01:53 2025 GMT Subject: CN=2cdfba0c28a2b6faf4e0ef9fa8196e95c66913c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:40:9c:4f:da:9b:d0:58:9b:78:c7:74:73: d7:ea:c3:26:0b:cd:9a:52:f4:7d:3c:00:8f:b2:b8: d1:8a:25:9b:c1:6d:b4:97:3b:31:d1:ce:78:ed:a5: 4f:ec:d1:82:15:42:50:25:86:5d:25:c8:82:89:84: df:ae:cc:1f:da:c2:3b:78:de:66:5d:26:6b:3a:d3: 42:6b:41:8d:24:13:f8:25:7a:fc:51:6d:bf:64:41: ce:66:7b:e8:0b:39:22:d6:a0:04:56:99:32:85:28: b9:98:cf:60:eb:14:ce:a7:29:5a:95:eb:7a:58:54: f4:6a:0a:be:00:f7:31:89:c7:36:e9:94:39:8d:8b: ad:f3:dd:b7:f2:2d:a0:35:fa:8b:f4:03:34:51:ed: 3f:af:2e:d3:b0:58:65:43:19:7e:c1:23:5a:84:6c: 76:72:e4:3a:2e:68:99:68:25:b7:93:b4:fc:e2:54: b0:ac:40:59:c3:13:66:31:54:9e:ed:8a:4f:d4:4a: 14:05:4b:b7:09:51:a5:99:cd:00:d4:35:f8:e2:b6: 63:50:42:e5:ab:f0:bc:20:c1:9f:ee:10:6d:73:0b: 59:b4:39:8b:1b:20:e3:5b:eb:5a:69:22:d9:10:7e: f1:d1:55:e6:a7:60:0b:d6:10:46:2f:86:02:6d:5f: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:BA:0C:28:A2:B6:FA:F4:E0:EF:9F:A8:19:6E:95:C6:69:13:C5 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ed:26:67:2d:96:be:5d:c1:e3:df:41:61:af:0a:a3:f0:f5: 50:82:44:85:fc:dd:e6:3e:7b:1a:45:ea:54:40:d7:66:88:99: 95:ee:de:cb:c7:bf:06:82:8e:9a:25:66:9d:ab:13:50:e2:28: 26:cb:89:8d:a8:98:9e:68:70:02:8d:b6:9c:57:8c:a6:d7:e1: 05:d5:81:5a:b1:d6:57:54:d4:62:ee:dd:b5:01:ac:6b:cc:bf: 6c:c2:39:1b:34:64:7a:3a:fb:a7:0f:cd:df:7f:2f:17:05:07: 1e:45:62:1c:2b:18:1d:e0:74:d3:13:17:aa:ae:7f:ed:fc:90: c4:a3:40:14:c7:09:1b:55:08:90:d0:7c:85:a7:cf:b0:54:71: 84:e5:94:77:a6:59:ca:8e:25:8d:7b:a9:31:f0:6c:b0:68:34: af:37:85:93:cc:28:15:fc:f5:bd:ca:63:b6:3c:ec:a2:5a:3b: 42:e7:0f:5e:f9:ae:3c:01:cc:dd:79:6c:18:65:5b:8f:d3:8d: 3f:22:c6:cf:b2:9d:81:25:07:fa:78:a8:9b:a0:8b:70:dc:c1: b2:75:c5:1f:3a:39:c2:c5:62:3c:2a:ed:2c:5b:70:6b:c2:3d: 90:c4:b2:e4:2b:fe:70:37:c0:a6:09:1d:b8:ba:df:70:8a:a6: 8a:78:e9:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrVEfAx0PgEPhtUCx6qA4eTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMTMwMTQwMTUzWhcNMjUxMjAxMTQwMTUzWjAzMTEwLwYDVQQD EygyY2RmYmEwYzI4YTJiNmZhZjRlMGVmOWZhODE5NmU5NWM2NjkxM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoBAnE/am9BYm3jHdHPX6sMmC82a UvR9PACPsrjRiiWbwW20lzsx0c547aVP7NGCFUJQJYZdJciCiYTfrswf2sI7eN5m XSZrOtNCa0GNJBP4JXr8UW2/ZEHOZnvoCzki1qAEVpkyhSi5mM9g6xTOpylalet6 WFT0agq+APcxicc26ZQ5jYut89238i2gNfqL9AM0Ue0/ry7TsFhlQxl+wSNahGx2 cuQ6LmiZaCW3k7T84lSwrEBZwxNmMVSe7YpP1EoUBUu3CVGlmc0A1DX44rZjUELl q/C8IMGf7hBtcwtZtDmLGyDjW+taaSLZEH7x0VXmp2AL1hBGL4YCbV8yCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzfugwoorb69ODvn6gZbpXGaRPFMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO0mZy2W vl3B499BYa8Ko/D1UIJEhfzd5j57GkXqVEDXZoiZle7ey8e/BoKOmiVmnasTUOIo JsuJjaiYnmhwAo22nFeMptfhBdWBWrHWV1TUYu7dtQGsa8y/bMI5GzRkejr7pw/N 338vFwUHHkViHCsYHeB00xMXqq5/7fyQxKNAFMcJG1UIkNB8hafPsFRxhOWUd6ZZ yo4ljXupMfBssGg0rzeFk8woFfz1vcpjtjzsolo7QucPXvmuPAHM3XlsGGVbj9ON PyLGz7KdgSUH+niom6CLcNzBsnXFHzo5wsViPCrtLFtwa8I9kMSy5Cv+cDfApgkd uLrfcIqminjpYQ== -----END CERTIFICATE-----Generated at Sun Nov 30 15:12:09 2025 by rpki-client