This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: YD55VYPM/f+Udu/KGQ6XKRYVkkz4Y2sElzrqx/qRDMQ= Subject key identifier: B2:4E:13:23:F7:22:C7:A0:6C:EF:65:08:F9:D4:AD:14:18:41:2D:8D Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B5A52004809CA3AF832E4CBAE622217D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:21 +0000 Manifest this update: Fri 26 Dec 2025 11:01:21 +0000 Manifest next update: Sat 27 Dec 2025 11:01:21 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: rx8kbQ5+ZmPjTZobZUMNJDtuAdUMGdYN4bFw/dpHUec=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:00:48:09:ca:3a:f8:32:e4:cb:ae:62:22:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 26 11:01:21 2025 GMT Not After : Dec 27 11:01:21 2025 GMT Subject: CN=b24e1323f722c7a06cef6508f9d4ad1418412d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:38:dc:eb:c1:ba:26:e3:26:37:6f:19:9f: d9:87:e7:a4:ce:f8:31:cb:0a:86:13:8e:05:9e:1c: ba:16:97:e5:bb:b9:5e:89:ad:9e:64:d4:17:fc:e7: 24:1c:d7:db:73:8f:34:0c:2d:8f:a5:fa:d8:99:4d: 02:f2:54:65:54:18:ba:22:be:07:19:d2:a1:e3:94: 6d:1f:99:83:57:41:0a:f9:da:10:74:a8:c2:ee:48: 50:30:27:1c:9e:5a:e3:90:1d:95:50:6f:7c:04:b6: ac:0a:71:47:5f:bf:a1:a5:46:4f:e8:81:68:ff:d5: 54:c8:94:4c:4e:9b:0a:73:c7:7f:c6:69:ad:8c:5d: 15:77:73:e3:cf:35:6c:73:51:ff:fb:61:75:ea:dd: 4f:03:ed:6a:aa:2a:68:b9:f7:71:28:3d:32:58:ae: f4:24:22:68:1c:21:8e:5b:ae:6c:a7:26:e0:9a:e3: a6:83:3a:3e:c1:51:47:ad:7d:7f:69:4f:57:11:0e: 31:95:79:3a:99:7e:5c:8d:51:b6:02:a5:34:ba:e5: 27:97:57:2a:91:55:2e:ec:c4:7b:1b:71:3a:42:54: 78:b1:d5:0f:65:20:21:98:f4:7b:26:ac:3c:03:8f: 8d:5b:75:0c:6e:84:13:1d:78:05:42:5d:b5:5a:ac: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:13:23:F7:22:C7:A0:6C:EF:65:08:F9:D4:AD:14:18:41:2D:8D X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4c:76:09:20:c3:c2:8f:3b:71:65:84:da:30:40:c3:02:51: 31:38:ba:03:fc:8b:9d:c8:a1:5c:9b:44:85:c1:7b:11:18:01: 5a:ff:48:9d:f5:8c:f8:37:4b:87:cb:f1:ec:64:10:c1:99:ac: 96:71:28:f6:f3:0b:3a:77:da:0b:27:08:19:80:56:5a:e5:ed: 96:18:1d:c7:98:79:cb:ba:ea:64:46:46:32:05:2e:44:ef:04: 16:7f:d9:bf:39:57:86:6e:b4:2c:d4:c4:0e:ba:73:1e:c3:b6: 17:40:9d:10:77:82:fc:6e:d7:30:40:07:d0:4e:8a:72:0c:e6: 52:f1:77:00:58:c7:9d:66:b5:16:a7:d8:1a:14:16:f6:94:24: cc:ce:ef:43:5f:62:07:27:11:fd:23:46:20:88:59:eb:e2:6f: cb:6d:a5:9f:ac:93:7a:34:31:ae:cb:ab:2c:5b:ed:da:f3:e0: 1e:25:bd:14:f8:eb:37:2a:5a:b4:6f:55:cc:0a:ea:db:ac:d5: f1:72:9f:78:7a:50:6e:fa:73:29:a6:db:d4:0c:96:2c:c5:54: 71:38:fd:4f:39:5f:75:9d:c1:45:fa:9e:8a:81:28:11:0b:41: 5e:a9:30:32:c5:3a:b4:f8:42:26:eb:40:bb:dc:f0:48:25:73: f6:44:33:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgBICco6+DLky65iIhfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjI2MTEwMTIxWhcNMjUxMjI3MTEwMTIxWjAzMTEwLwYDVQQD EyhiMjRlMTMyM2Y3MjJjN2EwNmNlZjY1MDhmOWQ0YWQxNDE4NDEyZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFg43OvBuibjJjdvGZ/Zh+ekzvgx ywqGE44Fnhy6Fpflu7leia2eZNQX/OckHNfbc480DC2PpfrYmU0C8lRlVBi6Ir4H GdKh45RtH5mDV0EK+doQdKjC7khQMCccnlrjkB2VUG98BLasCnFHX7+hpUZP6IFo /9VUyJRMTpsKc8d/xmmtjF0Vd3PjzzVsc1H/+2F16t1PA+1qqipoufdxKD0yWK70 JCJoHCGOW65spybgmuOmgzo+wVFHrX1/aU9XEQ4xlXk6mX5cjVG2AqU0uuUnl1cq kVUu7MR7G3E6QlR4sdUPZSAhmPR7Jqw8A4+NW3UMboQTHXgFQl21Wqy3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJOEyP3IsegbO9lCPnUrRQYQS2NMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUx2CSDD wo87cWWE2jBAwwJRMTi6A/yLncihXJtEhcF7ERgBWv9InfWM+DdLh8vx7GQQwZms lnEo9vMLOnfaCycIGYBWWuXtlhgdx5h5y7rqZEZGMgUuRO8EFn/ZvzlXhm60LNTE DrpzHsO2F0CdEHeC/G7XMEAH0E6KcgzmUvF3AFjHnWa1FqfYGhQW9pQkzM7vQ19i BycR/SNGIIhZ6+Jvy22ln6yTejQxrsurLFvt2vPgHiW9FPjrNypatG9VzArq26zV 8XKfeHpQbvpzKabb1AyWLMVUcTj9TzlfdZ3BRfqeioEoEQtBXqkwMsU6tPhCJutA u9zwSCVz9kQz1A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client