This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: T4M03dHdHUmemGEK88MzGH/wLgePlxtQYoLz6VA9BW8= Subject key identifier: 92:EC:A3:2D:70:68:F9:69:AC:70:DC:52:84:13:DD:EC:31:29:EC:6B Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B4ADF2322F7D30058B472E6408FD2C051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 11:01:35 +0000 Manifest this update: Tue 23 Dec 2025 11:01:35 +0000 Manifest next update: Wed 24 Dec 2025 11:01:35 +0000 Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=) 2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: IEjE9CaDuhUAKxvMmj9UlWPTdAGXsjQmuWrBSUcY2MQ=) 3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=) 4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=) 5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=) 6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:23:22:f7:d3:00:58:b4:72:e6:40:8f:d2:c0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Dec 23 11:01:35 2025 GMT Not After : Dec 24 11:01:35 2025 GMT Subject: CN=92eca32d7068f969ac70dc528413ddec3129ec6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:c2:a4:1d:b4:81:ff:e2:9e:eb:d9:34:67: f1:dc:75:0c:84:a5:78:dc:2c:e6:0b:01:26:f7:0e: 97:ac:a6:a8:e0:74:06:81:fa:c9:1f:d8:26:b8:f2: 7f:df:6b:c2:a8:5e:c0:db:43:62:39:d8:57:e0:e9: b4:9d:ea:62:38:32:f3:88:5e:0a:75:ce:a9:6a:a4: e4:e4:2f:d2:12:38:08:d7:ec:c9:b5:1f:a5:e2:8d: 63:12:ed:23:e8:fe:0b:2a:0e:05:33:64:39:a2:23: 6a:ad:97:b2:11:9e:b0:f1:d5:d1:35:f7:71:d1:e9: 69:71:23:1a:1b:3c:70:87:be:4b:b4:60:b6:e0:ad: a9:de:f5:ef:3e:2e:11:2d:1f:4f:42:13:76:ee:c2: f0:36:25:dc:1e:a1:50:a3:9a:dc:72:8f:89:d8:f9: 50:a9:73:bc:0f:57:51:06:b7:89:3b:ea:f2:5c:d7: 65:9c:bc:55:d3:2a:84:c7:ba:fb:f7:88:c0:2b:5c: 0d:13:c3:43:b3:27:8e:8e:b1:e4:c9:84:1a:1e:b8: f5:d8:5b:99:e1:97:78:8c:9e:98:8c:01:12:63:dc: 35:00:6a:a8:bb:cb:80:c0:03:17:f8:7c:7f:6b:70: 42:5d:f9:b0:b3:dd:fc:35:c1:1c:39:50:e8:07:d5: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:A3:2D:70:68:F9:69:AC:70:DC:52:84:13:DD:EC:31:29:EC:6B X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a0:c0:af:be:3d:bc:06:47:28:53:df:78:ed:6d:59:1f:c9: a6:00:23:52:89:c9:06:a5:f1:99:29:0c:00:91:d9:e3:94:fc: 56:ee:13:8c:21:8f:25:3f:47:94:f5:13:37:fe:70:da:32:09: 9b:97:3e:e0:db:28:94:f3:6f:a8:87:85:29:f8:53:6f:98:75: 98:0c:67:e0:ef:54:0f:9c:5e:c0:9f:5f:02:23:32:8d:5f:ef: 1f:87:f7:8b:e1:1b:43:b4:51:27:ac:98:8e:2d:dc:48:de:81: 25:40:c2:b7:f4:c5:24:7b:fb:cc:0f:28:05:4d:56:45:62:20: ed:c7:3c:a4:30:61:3c:25:64:cc:7f:1b:e9:3d:bd:a3:a4:43: b0:23:bd:5f:3b:7d:c5:fe:af:e1:a5:9f:c9:97:14:04:7d:b5: c9:8f:20:75:f7:8a:e5:f0:75:2e:83:f6:d2:ec:42:64:24:7c: 23:16:6a:c7:a6:c2:9f:10:44:e0:e2:f1:ba:4f:f2:2d:c9:ed: 88:5e:d4:1d:90:eb:45:a8:5d:b4:33:20:5b:82:72:81:e9:79: 61:06:86:4f:da:95:dd:86:c5:2f:3c:a2:28:93:2b:b5:bc:12: c0:f5:5b:8d:8b:ff:b7:56:49:ad:c0:d3:40:d4:64:a8:d5:35: 09:8b:8e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3yMi99MAWLRy5kCP0sBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjUxMjIzMTEwMTM1WhcNMjUxMjI0MTEwMTM1WjAzMTEwLwYDVQQD Eyg5MmVjYTMyZDcwNjhmOTY5YWM3MGRjNTI4NDEzZGRlYzMxMjllYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sTCpB20gf/inuvZNGfx3HUMhKV4 3CzmCwEm9w6XrKao4HQGgfrJH9gmuPJ/32vCqF7A20NiOdhX4Om0nepiODLziF4K dc6paqTk5C/SEjgI1+zJtR+l4o1jEu0j6P4LKg4FM2Q5oiNqrZeyEZ6w8dXRNfdx 0elpcSMaGzxwh75LtGC24K2p3vXvPi4RLR9PQhN27sLwNiXcHqFQo5rcco+J2PlQ qXO8D1dRBreJO+ryXNdlnLxV0yqEx7r794jAK1wNE8NDsyeOjrHkyYQaHrj12FuZ 4Zd4jJ6YjAESY9w1AGqou8uAwAMX+Hx/a3BCXfmws938NcEcOVDoB9VaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLsoy1waPlprHDcUoQT3ewxKexrMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6DAr749 vAZHKFPfeO1tWR/JpgAjUonJBqXxmSkMAJHZ45T8Vu4TjCGPJT9HlPUTN/5w2jIJ m5c+4NsolPNvqIeFKfhTb5h1mAxn4O9UD5xewJ9fAiMyjV/vH4f3i+EbQ7RRJ6yY ji3cSN6BJUDCt/TFJHv7zA8oBU1WRWIg7cc8pDBhPCVkzH8b6T29o6RDsCO9Xzt9 xf6v4aWfyZcUBH21yY8gdfeK5fB1LoP20uxCZCR8IxZqx6bCnxBE4OLxuk/yLcnt iF7UHZDrRahdtDMgW4Jygel5YQaGT9qV3YbFLzyiKJMrtbwSwPVbjYv/t1ZJrcDT QNRkqNU1CYuOQg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:03:59 2025 by rpki-client