This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: ACgoO4tOQYVH9xHPeowWG69C/GS5/LgV9Cc0ct01dRY= Subject key identifier: 60:7E:58:25:F0:07:90:C9:09:24:A8:E4:8A:8F:1D:6A:9F:B2:FB:89 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019AA0EC971151078435BFA4C682ABE259A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1738 Signing time: Thu 20 Nov 2025 11:00:50 +0000 Manifest this update: Thu 20 Nov 2025 11:00:50 +0000 Manifest next update: Fri 21 Nov 2025 11:00:50 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 4dvxV4ZBrlGGJQyCKrQ/j5KlHvxEsLIfu1ZlYBXdFCY=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:ec:97:11:51:07:84:35:bf:a4:c6:82:ab:e2:59:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Nov 20 11:00:50 2025 GMT Not After : Nov 21 11:00:50 2025 GMT Subject: CN=607e5825f00790c90924a8e48a8f1d6a9fb2fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:7f:4c:87:0a:ae:ee:37:af:ed:d9:ac:49: 06:d6:0e:cf:9c:5f:62:29:aa:0e:07:f1:b4:5e:d4: 10:e8:9b:c3:ad:df:f1:c9:61:dd:8c:17:c1:b5:50: 16:64:60:1d:91:b3:f0:17:5f:d3:73:a3:af:aa:e5: 33:a9:c6:a1:02:c5:e0:a6:cd:94:33:2e:b1:40:e8: 46:03:c5:ef:9c:26:c8:4b:8e:2d:70:7f:25:d6:b1: b4:45:2a:2f:e7:b7:11:07:85:05:c3:95:49:06:4d: 31:55:4b:20:e1:24:1e:1a:38:9e:a7:8a:20:99:76: 19:d8:1a:3d:12:c8:56:28:6e:e1:08:29:45:cc:13: ff:2a:01:91:8d:9e:c3:04:f2:f8:8c:db:63:ab:ac: c5:7d:46:85:f7:bc:cb:4e:60:8c:c8:5a:f1:e3:d4: d4:ce:d2:18:d8:e4:04:9c:3e:df:76:91:29:f2:48: 1b:5e:87:e3:a1:23:49:61:b9:04:96:c2:70:f8:9a: 50:b8:79:a7:42:56:34:e1:21:77:f2:ba:44:c8:c3: fb:8a:15:36:f1:70:d8:6d:28:0f:5f:92:ed:dd:f3: 93:10:79:21:b0:04:68:92:cf:0f:7f:f7:1f:ad:c4: f9:1c:78:d4:70:da:27:13:6b:67:ab:97:38:93:0e: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:58:25:F0:07:90:C9:09:24:A8:E4:8A:8F:1D:6A:9F:B2:FB:89 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ec:69:1f:99:90:96:7d:ef:0c:72:58:8f:5b:de:02:a3:fb: 1b:70:59:3f:cb:85:8e:e3:bd:31:16:29:f4:04:27:19:82:ba: 5c:a7:f0:0c:dc:c9:27:43:42:8c:14:ad:11:3f:ef:11:8b:2c: ce:b9:b1:76:59:7a:e9:aa:e1:80:81:b1:2c:65:43:3b:0c:32: fc:98:a7:47:a3:fa:bc:14:9a:e1:15:25:f1:1c:05:fe:99:bb: 48:2a:33:29:fc:52:a5:00:97:88:e3:a6:9b:e2:bb:d3:43:af: 8c:1e:f4:d6:96:4b:82:f9:ee:4f:72:04:89:1d:30:9e:83:15: d1:ff:66:cd:85:38:5b:b2:47:9a:eb:ea:a2:40:94:e1:4f:89: 6b:7b:e1:97:a2:12:f7:fe:e3:97:5d:ee:a5:dd:42:f8:8e:51: 9c:10:7b:50:16:cb:78:67:f7:3a:76:7d:f6:52:18:a4:77:61: 67:fc:8d:15:d6:65:77:0e:b8:d5:27:63:88:77:0a:cf:57:ed: a5:0b:08:a2:da:e4:4e:d5:60:b9:d9:48:d5:95:5b:ad:15:c5: e3:36:a6:ea:80:0c:ec:be:f8:64:3c:34:05:e2:77:95:b9:ee: 64:3d:1b:0a:2e:d3:03:43:ce:85:7b:30:c1:c7:14:e7:fc:d5: f8:78:9d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqg7JcRUQeENb+kxoKr4lmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMTIwMTEwMDUwWhcNMjUxMTIxMTEwMDUwWjAzMTEwLwYDVQQD Eyg2MDdlNTgyNWYwMDc5MGM5MDkyNGE4ZTQ4YThmMWQ2YTlmYjJmYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAV/TIcKru43r+3ZrEkG1g7PnF9i KaoOB/G0XtQQ6JvDrd/xyWHdjBfBtVAWZGAdkbPwF1/Tc6OvquUzqcahAsXgps2U My6xQOhGA8XvnCbIS44tcH8l1rG0RSov57cRB4UFw5VJBk0xVUsg4SQeGjiep4og mXYZ2Bo9EshWKG7hCClFzBP/KgGRjZ7DBPL4jNtjq6zFfUaF97zLTmCMyFrx49TU ztIY2OQEnD7fdpEp8kgbXofjoSNJYbkElsJw+JpQuHmnQlY04SF38rpEyMP7ihU2 8XDYbSgPX5Lt3fOTEHkhsARoks8Pf/cfrcT5HHjUcNonE2tnq5c4kw6fmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB+WCXwB5DJCSSo5IqPHWqfsvuJMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhexpH5mQ ln3vDHJYj1veAqP7G3BZP8uFjuO9MRYp9AQnGYK6XKfwDNzJJ0NCjBStET/vEYss zrmxdll66arhgIGxLGVDOwwy/JinR6P6vBSa4RUl8RwF/pm7SCozKfxSpQCXiOOm m+K700OvjB701pZLgvnuT3IEiR0wnoMV0f9mzYU4W7JHmuvqokCU4U+Ja3vhl6IS 9/7jl13upd1C+I5RnBB7UBbLeGf3OnZ99lIYpHdhZ/yNFdZldw641SdjiHcKz1ft pQsIotrkTtVgudlI1ZVbrRXF4zam6oAM7L74ZDw0BeJ3lbnuZD0bCi7TA0POhXsw wccU5/zV+HidMg== -----END CERTIFICATE-----Generated at Thu Nov 20 14:32:32 2025 by rpki-client