This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: tvtE/rU4fEcSBLU05OkojCkNnqNzH3yGTHdVPfQIvW8= Subject key identifier: DF:35:38:D3:F0:80:7A:26:7C:3B:08:DC:2C:C1:EC:78:39:C4:50:22 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019A9B2208990E7EFC14363A7862D41DBC07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1735 Signing time: Wed 19 Nov 2025 08:01:30 +0000 Manifest this update: Wed 19 Nov 2025 08:01:30 +0000 Manifest next update: Thu 20 Nov 2025 08:01:30 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: R2GvWaXOBBKtyn2ogSemtLShSe5bq2XiKncMV9lHWDQ=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:22:08:99:0e:7e:fc:14:36:3a:78:62:d4:1d:bc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Nov 19 08:01:30 2025 GMT Not After : Nov 20 08:01:30 2025 GMT Subject: CN=df3538d3f0807a267c3b08dc2cc1ec7839c45022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:45:3c:1d:d8:97:2b:88:84:57:f8:d6:ca: f2:e1:ed:57:94:71:a3:f4:61:b2:75:02:04:49:f1: 46:79:9d:56:ef:ab:0a:d5:03:09:1f:f9:8b:77:63: 4e:01:70:c9:af:70:75:6c:91:b5:c8:70:c2:f7:90: c7:3e:94:08:5c:4f:91:50:1c:bf:a2:f2:95:b4:33: e4:96:2d:0b:7f:3e:15:66:dd:05:0b:c9:87:86:59: 6f:2e:c2:40:37:5e:ea:29:44:db:29:8c:a9:07:17: 2a:7f:78:1b:0b:9c:61:8d:36:62:ca:ae:60:1f:82: c4:e6:cd:ce:e7:44:29:95:33:01:14:fc:b3:6e:8c: cd:85:94:5d:54:32:65:13:b0:37:6a:c4:ca:ab:d5: ef:5f:0d:18:4f:c1:e6:46:e3:b6:e8:5f:f0:8c:5f: 34:0d:57:7a:51:ab:40:b7:23:e2:0e:6f:c4:a5:f7: 64:78:b1:57:22:c0:14:0c:94:e3:de:61:48:5d:ad: a7:56:0c:58:c8:6a:24:72:5b:82:91:60:44:7d:98: 05:41:91:29:6f:08:05:e3:c7:5e:dc:4d:83:bb:ba: e8:e6:b6:e1:5b:56:c3:b4:5b:a5:fa:a8:b3:b5:30: ad:0c:3b:80:bd:4b:bb:97:9e:bd:f7:3d:27:60:e3: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:35:38:D3:F0:80:7A:26:7C:3B:08:DC:2C:C1:EC:78:39:C4:50:22 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d2:2e:db:71:d9:96:de:78:04:7d:02:e8:80:fe:bb:7c:8c: ed:43:d6:a7:5f:96:63:be:c9:74:2b:5c:d1:6f:9a:55:01:6d: bf:0f:f6:d1:fa:4a:96:ae:58:46:f5:29:a7:4a:0a:45:e8:11: 63:d7:5f:3f:44:e4:85:44:c6:a9:a1:3e:65:a8:b0:05:e0:3a: 1f:07:b8:0a:27:60:73:cd:c7:12:14:39:08:6f:46:f6:37:7b: 65:6a:45:64:7a:7d:ec:0a:22:64:27:bd:b9:a3:1e:6e:37:72: 89:4f:c2:2c:d7:bd:87:54:c0:9b:a3:bc:d9:c6:1b:d6:fc:b2: 29:c4:ee:2a:7c:8c:94:f0:1e:61:d2:d5:6b:19:2d:91:6e:17: 67:a6:1c:3a:9b:69:cb:aa:4c:45:5a:8f:ca:1b:aa:41:3a:b1: 79:67:2c:56:3c:65:01:d8:20:e5:c4:73:00:e6:ed:9e:2d:d7: 26:c8:c1:1c:a3:a4:b2:1a:bd:23:4e:b7:76:61:32:fe:8c:03: 3c:6c:1a:09:d3:3b:4e:9b:3b:78:58:a7:83:be:45:9f:ab:72: 3a:5f:e5:3a:55:da:9f:bf:c8:7f:38:4a:03:2a:03:96:50:5e: 01:12:ca:2a:ea:0d:bb:cd:d3:60:b8:65:70:35:d4:3e:f5:75: f5:49:05:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqbIgiZDn78FDY6eGLUHbwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMTE5MDgwMTMwWhcNMjUxMTIwMDgwMTMwWjAzMTEwLwYDVQQD EyhkZjM1MzhkM2YwODA3YTI2N2MzYjA4ZGMyY2MxZWM3ODM5YzQ1MDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRFPB3YlyuIhFf41sry4e1XlHGj 9GGydQIESfFGeZ1W76sK1QMJH/mLd2NOAXDJr3B1bJG1yHDC95DHPpQIXE+RUBy/ ovKVtDPkli0Lfz4VZt0FC8mHhllvLsJAN17qKUTbKYypBxcqf3gbC5xhjTZiyq5g H4LE5s3O50QplTMBFPyzbozNhZRdVDJlE7A3asTKq9XvXw0YT8HmRuO26F/wjF80 DVd6UatAtyPiDm/EpfdkeLFXIsAUDJTj3mFIXa2nVgxYyGokcluCkWBEfZgFQZEp bwgF48de3E2Du7ro5rbhW1bDtFul+qiztTCtDDuAvUu7l5699z0nYONs8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN81ONPwgHomfDsI3CzB7Hg5xFAiMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdIu23HZ lt54BH0C6ID+u3yM7UPWp1+WY77JdCtc0W+aVQFtvw/20fpKlq5YRvUpp0oKRegR Y9dfP0TkhUTGqaE+ZaiwBeA6Hwe4Cidgc83HEhQ5CG9G9jd7ZWpFZHp97AoiZCe9 uaMebjdyiU/CLNe9h1TAm6O82cYb1vyyKcTuKnyMlPAeYdLVaxktkW4XZ6YcOptp y6pMRVqPyhuqQTqxeWcsVjxlAdgg5cRzAObtni3XJsjBHKOkshq9I063dmEy/owD PGwaCdM7Tps7eFing75Fn6tyOl/lOlXan7/IfzhKAyoDllBeARLKKuoNu83TYLhl cDXUPvV19UkF8Q== -----END CERTIFICATE-----Generated at Wed Nov 19 11:14:28 2025 by rpki-client