This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: iVwneTZUJzagrv4jijMF3pMYkChYEHiMNpAE4uqds9w= Subject key identifier: 6B:89:CC:83:49:65:08:B0:F0:6C:3A:D0:AE:13:02:28:BC:EC:D2:82 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019AB0601C0C9ED823FCB39737F5A173CECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1740 Signing time: Sun 23 Nov 2025 11:01:19 +0000 Manifest this update: Sun 23 Nov 2025 11:01:19 +0000 Manifest next update: Mon 24 Nov 2025 11:01:19 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: R8rEokOQCvBswgyEmsPh1fnohsyXsBYS3vZ3gOp0Crc=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:60:1c:0c:9e:d8:23:fc:b3:97:37:f5:a1:73:ce:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Nov 23 11:01:19 2025 GMT Not After : Nov 24 11:01:19 2025 GMT Subject: CN=6b89cc83496508b0f06c3ad0ae130228bcecd282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:ef:8c:7e:8e:fb:a1:1c:8c:0b:0c:18:97: 51:1c:39:49:27:b0:5b:30:60:05:ae:ed:58:71:a5: f5:b5:6d:f8:6d:48:6d:02:25:19:88:f4:fa:96:d9: e1:65:e1:be:62:78:8f:72:67:e4:ae:e0:ea:d0:15: c7:1d:a0:39:7e:e9:ab:43:82:0b:29:5b:75:69:72: 88:9d:07:9a:46:c7:1f:58:8f:77:6c:ae:3c:83:3b: 44:96:35:ee:a2:79:0c:52:e2:aa:9e:80:66:14:b9: 0b:46:54:8d:75:90:8e:b7:4a:d8:f4:b6:e3:bf:33: af:60:a2:70:bb:73:04:41:f5:56:ef:6f:8f:4e:ed: bc:13:1d:fc:55:16:54:fb:89:56:9d:e7:18:6a:cd: 7c:60:06:3a:dc:02:9f:67:39:04:f3:fb:ba:8f:74: 5e:58:2b:8c:10:35:56:d2:24:a1:a2:9a:0e:a1:e0: 57:39:fd:43:4f:94:29:e4:f6:d1:7f:69:6c:e1:51: f4:fa:cf:f4:1d:4c:cc:d8:66:b2:b8:e9:d2:98:99: 24:af:59:2c:a7:d8:73:de:39:c7:af:21:31:83:7b: c0:64:52:72:89:9e:83:85:dd:d9:a9:6c:72:a2:94: bb:ba:3e:4c:63:e7:7e:56:d6:25:6d:78:69:fd:2e: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:89:CC:83:49:65:08:B0:F0:6C:3A:D0:AE:13:02:28:BC:EC:D2:82 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:13:ef:21:df:3b:ee:60:09:d4:88:1c:f6:b8:d3:22:88:60: 6f:4f:af:83:79:53:ab:41:37:1d:dc:54:6e:cf:0c:dc:a0:f6: 19:44:ec:bd:2a:28:75:37:41:46:80:6d:30:9f:3d:e8:f6:b7: 4b:b7:8d:20:1c:39:ea:a9:d9:27:c7:2a:b4:9f:01:90:be:78: 74:88:d3:ee:18:34:22:cc:6d:75:ac:67:b5:cd:87:4b:9b:9a: 09:8d:4b:cd:be:bf:d1:2d:d1:56:a1:c0:b0:26:93:70:6e:a2: f6:f7:1a:51:87:d5:b2:da:f1:49:b4:1e:65:97:e5:93:6f:e6: 38:cc:fe:d9:8f:24:29:a6:4d:03:81:fd:cf:95:b6:16:b8:02: 2b:23:6e:19:ea:f1:42:c5:b2:7b:b2:2c:81:eb:d8:8e:7e:87: 10:9c:6f:99:47:90:5c:e9:fb:b7:6a:27:3d:68:0b:68:2c:ff: 3c:9c:0e:14:e8:28:cc:c7:fd:21:b5:0c:81:8b:db:e7:f2:e1: 79:69:6c:1f:78:26:67:41:38:68:b1:4e:52:86:65:4d:df:0f: 1a:43:ff:c2:06:ab:63:75:67:60:e8:58:44:e8:a5:bd:d5:29: ce:be:b9:cc:46:fc:1c:cf:49:14:1e:07:81:9a:92:52:65:ba: dc:73:e6:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqwYBwMntgj/LOXN/Whc87KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMTIzMTEwMTE5WhcNMjUxMTI0MTEwMTE5WjAzMTEwLwYDVQQD Eyg2Yjg5Y2M4MzQ5NjUwOGIwZjA2YzNhZDBhZTEzMDIyOGJjZWNkMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IHvjH6O+6EcjAsMGJdRHDlJJ7Bb MGAFru1YcaX1tW34bUhtAiUZiPT6ltnhZeG+YniPcmfkruDq0BXHHaA5fumrQ4IL KVt1aXKInQeaRscfWI93bK48gztEljXuonkMUuKqnoBmFLkLRlSNdZCOt0rY9Lbj vzOvYKJwu3MEQfVW72+PTu28Ex38VRZU+4lWnecYas18YAY63AKfZzkE8/u6j3Re WCuMEDVW0iShopoOoeBXOf1DT5Qp5PbRf2ls4VH0+s/0HUzM2GayuOnSmJkkr1ks p9hz3jnHryExg3vAZFJyiZ6Dhd3ZqWxyopS7uj5MY+d+VtYlbXhp/S4fGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuJzINJZQiw8Gw60K4TAii87NKCMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBPvId87 7mAJ1Igc9rjTIohgb0+vg3lTq0E3HdxUbs8M3KD2GUTsvSoodTdBRoBtMJ896Pa3 S7eNIBw56qnZJ8cqtJ8BkL54dIjT7hg0Isxtdaxntc2HS5uaCY1Lzb6/0S3RVqHA sCaTcG6i9vcaUYfVstrxSbQeZZflk2/mOMz+2Y8kKaZNA4H9z5W2FrgCKyNuGerx QsWye7IsgevYjn6HEJxvmUeQXOn7t2onPWgLaCz/PJwOFOgozMf9IbUMgYvb5/Lh eWlsH3gmZ0E4aLFOUoZlTd8PGkP/wgarY3VnYOhYROilvdUpzr65zEb8HM9JFB4H gZqSUmW63HPm2w== -----END CERTIFICATE-----Generated at Sun Nov 23 14:42:44 2025 by rpki-client