This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: nwdtiPmeX7kXaSaO1MTiHk5WEiDTIVv8B4KZrAKhvM4= Subject key identifier: 7E:AE:81:1B:3F:1F:FF:1E:18:09:35:68:8F:A0:53:7A:84:42:87:33 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B1C851FE28D27EC3B9624F04D8C845D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 11:00:44 +0000 Manifest this update: Sun 14 Dec 2025 11:00:44 +0000 Manifest next update: Mon 15 Dec 2025 11:00:44 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: MGeCboHG1pIkUkggwNpUUZ61GTZ6Uid+EHbwPI5LQr8=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:1f:e2:8d:27:ec:3b:96:24:f0:4d:8c:84:5d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 14 11:00:44 2025 GMT Not After : Dec 15 11:00:44 2025 GMT Subject: CN=7eae811b3f1fff1e180935688fa0537a84428733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:3f:25:b1:88:93:a5:95:ce:4a:02:cf:8f: 57:03:fa:ce:4c:53:c0:75:19:c8:f5:f4:87:44:31: ec:3b:4d:fd:81:09:68:7b:9a:e1:17:b8:a8:eb:74: 29:41:85:49:3c:2c:de:20:43:f4:aa:36:97:e2:29: 90:f3:65:d9:f9:74:5e:2f:3d:c9:23:3f:c2:fc:15: 0a:b7:b5:53:6b:36:c7:f7:23:ec:79:c8:2d:c2:43: d0:4e:53:9a:98:8e:c7:fa:8e:a4:86:f9:95:43:61: a5:b7:52:62:12:f6:42:aa:17:5c:01:c3:b2:4f:9c: a5:c4:43:8c:6e:2d:06:a0:60:f1:58:69:fc:33:88: 71:0e:fc:b7:88:5b:0d:7b:29:f5:f1:7e:33:c7:be: de:9c:ee:cf:22:d2:de:c1:af:10:24:d2:ce:85:82: 27:27:e0:7c:c8:d7:29:a7:e8:a8:dd:ec:5b:71:93: 12:25:c8:88:7f:76:fb:83:d8:4a:92:09:2c:d9:63: 94:05:6e:50:d5:96:84:e7:f5:d4:b8:64:df:b3:66: 4f:77:98:da:97:e1:c3:9c:c0:28:27:e3:4c:b1:cd: 8c:1d:b2:b1:d3:2a:f5:22:c7:50:33:6a:61:57:37: e1:e0:97:50:f9:0e:d5:45:9a:38:e2:f4:db:fd:93: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AE:81:1B:3F:1F:FF:1E:18:09:35:68:8F:A0:53:7A:84:42:87:33 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5e:64:db:a5:7f:fd:fa:32:0d:da:17:f0:b6:1d:e7:40:0f: 43:0f:d4:ec:35:ec:79:d5:c3:38:60:79:2c:92:f2:ae:4d:4f: cd:0d:80:64:97:f3:1a:f3:c7:ba:4f:92:02:03:98:dd:5e:ff: b2:54:29:df:0e:66:4d:21:12:38:f0:f4:a4:71:94:0b:8f:2f: b6:01:0f:68:d0:27:3b:01:9f:17:1c:96:40:b2:80:9a:b9:cd: 72:92:d3:c1:bc:81:40:ee:6f:52:1f:0e:df:67:6d:ba:94:1b: 78:6c:86:a7:98:4d:74:b2:26:3c:3e:65:dd:55:77:98:93:6b: fa:17:9e:ea:ed:72:a2:0b:c5:73:9d:59:af:9e:06:1f:58:c6: db:9e:55:53:84:b4:9b:b7:3c:29:28:7c:74:c2:34:48:a6:26: d8:b9:e6:01:81:da:8a:1b:ca:ca:41:db:a8:6f:c7:d4:5a:f9: 2b:c1:5d:e4:ec:08:3e:e8:4e:4e:bd:8f:8c:41:55:64:0a:7f: c9:74:61:52:c1:88:ba:a7:58:9f:3e:b1:e0:fe:56:5d:2f:b7: 0d:30:73:6c:55:e9:2e:e0:3a:be:85:90:bd:ae:89:a3:ec:2c: 9c:3b:10:74:3e:8e:fc:91:0c:fa:9f:fe:44:e7:a2:2a:15:de: e9:49:db:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschR/ijSfsO5Yk8E2MhF1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjE0MTEwMDQ0WhcNMjUxMjE1MTEwMDQ0WjAzMTEwLwYDVQQD Eyg3ZWFlODExYjNmMWZmZjFlMTgwOTM1Njg4ZmEwNTM3YTg0NDI4NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRA/JbGIk6WVzkoCz49XA/rOTFPA dRnI9fSHRDHsO039gQloe5rhF7io63QpQYVJPCzeIEP0qjaX4imQ82XZ+XReLz3J Iz/C/BUKt7VTazbH9yPsecgtwkPQTlOamI7H+o6khvmVQ2Glt1JiEvZCqhdcAcOy T5ylxEOMbi0GoGDxWGn8M4hxDvy3iFsNeyn18X4zx77enO7PItLewa8QJNLOhYIn J+B8yNcpp+io3exbcZMSJciIf3b7g9hKkgks2WOUBW5Q1ZaE5/XUuGTfs2ZPd5ja l+HDnMAoJ+NMsc2MHbKx0yr1IsdQM2phVzfh4JdQ+Q7VRZo44vTb/ZO/0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6ugRs/H/8eGAk1aI+gU3qEQoczMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI15k26V/ /foyDdoX8LYd50APQw/U7DXsedXDOGB5LJLyrk1PzQ2AZJfzGvPHuk+SAgOY3V7/ slQp3w5mTSESOPD0pHGUC48vtgEPaNAnOwGfFxyWQLKAmrnNcpLTwbyBQO5vUh8O 32dtupQbeGyGp5hNdLImPD5l3VV3mJNr+hee6u1yogvFc51Zr54GH1jG255VU4S0 m7c8KSh8dMI0SKYm2LnmAYHaihvKykHbqG/H1Fr5K8Fd5OwIPuhOTr2PjEFVZAp/ yXRhUsGIuqdYnz6x4P5WXS+3DTBzbFXpLuA6voWQva6Jo+wsnDsQdD6O/JEM+p/+ ROeiKhXe6UnbwA== -----END CERTIFICATE-----Generated at Sun Dec 14 18:56:20 2025 by rpki-client