This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json) Hash identifier: maJRKCAlM8krITMfpJ6eWnqVSAdpV+ikxnYbwIgRrfA= Subject key identifier: F6:B2:D8:F9:92:E6:2E:BE:F3:76:15:DC:38:73:DC:1F:DA:DB:A3:EE Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa Certificate serial: 019B59ACC1AC355A6D716A1FC46DADF4C192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft Manifest number: D3 Signing time: Fri 26 Dec 2025 08:00:52 +0000 Manifest this update: Fri 26 Dec 2025 08:00:52 +0000 Manifest next update: Sat 27 Dec 2025 08:00:52 +0000 Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: pFBB0OT6zw+o4RLMnT3kSx03W0XKNZBu1LSnD/fvnf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:c1:ac:35:5a:6d:71:6a:1f:c4:6d:ad:f4:c1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa Validity Not Before: Dec 26 08:00:52 2025 GMT Not After : Dec 27 08:00:52 2025 GMT Subject: CN=f6b2d8f992e62ebef37615dc3873dc1fdadba3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:70:8d:0d:60:70:a9:6a:38:06:06:b2:cd: ca:34:fb:30:1f:49:88:3e:3d:51:b9:c6:ba:f6:90: 31:50:cd:fc:c5:a8:c0:7a:ec:43:90:5a:ce:26:57: 16:84:75:98:26:87:73:16:e2:4f:50:22:13:ce:55: 77:34:66:c5:05:4d:77:65:f7:2f:90:10:5c:0f:bb: a7:de:66:9d:38:51:17:b0:87:9d:f9:d1:63:26:b0: c0:2b:b2:33:a3:f9:f3:6e:d2:f9:3d:ea:f0:7d:7d: 05:f6:7a:84:72:7b:6c:1e:72:f8:34:13:87:c9:55: a6:2b:35:f7:9e:2b:a3:46:0e:51:6d:ca:bc:33:16: 3e:a5:ac:31:7e:6d:59:f3:c2:7d:98:e3:ab:68:17: dd:31:dd:02:a3:a2:5c:9e:62:80:28:d1:47:c3:90: 83:91:a6:f9:0d:68:00:cf:c1:86:c3:bb:08:51:31: 5b:ce:3e:14:53:17:76:23:ad:39:4f:27:62:3a:70: e5:b7:34:95:ff:a5:bb:18:18:97:43:99:b3:88:57: 74:4b:94:b6:bb:28:18:71:ee:93:2f:51:35:08:38: d4:fc:14:9d:ef:c5:d6:c6:3a:6d:a5:bd:54:eb:ff: 05:11:0a:07:4d:ac:5a:bf:0b:7a:d8:95:ee:e3:29: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:D8:F9:92:E6:2E:BE:F3:76:15:DC:38:73:DC:1F:DA:DB:A3:EE X509v3 Authority Key Identifier: keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ba:96:64:13:a8:94:19:2d:50:f8:8f:3c:4d:a6:96:81:18: 40:04:ce:90:5e:44:69:4b:eb:6d:08:5b:89:18:04:f5:56:ed: 50:eb:e1:cb:89:0d:81:58:b0:6c:f0:24:8b:ba:a3:0c:1c:c3: 55:04:d5:c9:25:29:c4:10:19:94:8d:aa:71:57:14:8d:1e:ff: 76:c0:4c:28:eb:ec:11:aa:52:ac:c7:e2:8e:b5:5e:76:fd:ba: 93:a7:72:ee:48:16:d6:03:48:a7:61:68:22:dd:b8:24:a4:a5: ee:04:19:f2:4a:3a:3a:ea:7d:5e:d7:29:d5:ec:9d:e2:9f:3a: 8c:37:0b:e7:2e:e6:ca:e8:6c:44:d0:ce:46:69:31:d6:96:ae: c7:17:f6:62:72:b3:9b:0a:ab:5c:27:16:51:d9:f6:e4:3a:ba: c8:13:27:b0:4d:c2:05:bc:0d:44:4b:1b:41:d8:59:bf:09:50: 01:b0:e4:93:0f:56:2b:a3:e1:67:40:57:e6:cf:38:7e:32:25: bc:ec:62:2b:af:27:82:15:6f:8a:3c:55:a3:c7:5d:58:ec:93: b6:2e:49:71:fe:50:a2:8a:88:75:f6:85:bc:fe:d3:38:59:4c: d1:88:fb:02:96:4e:9c:db:1f:aa:d5:29:b0:0b:3c:a8:50:f5: c5:f0:61:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMGsNVptcWofxG2t9MGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1 YWZiYWEwHhcNMjUxMjI2MDgwMDUyWhcNMjUxMjI3MDgwMDUyWjAzMTEwLwYDVQQD EyhmNmIyZDhmOTkyZTYyZWJlZjM3NjE1ZGMzODczZGMxZmRhZGJhM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVwjQ1gcKlqOAYGss3KNPswH0mI Pj1Ruca69pAxUM38xajAeuxDkFrOJlcWhHWYJodzFuJPUCITzlV3NGbFBU13Zfcv kBBcD7un3madOFEXsIed+dFjJrDAK7Izo/nzbtL5PerwfX0F9nqEcntsHnL4NBOH yVWmKzX3niujRg5Rbcq8MxY+pawxfm1Z88J9mOOraBfdMd0Co6JcnmKAKNFHw5CD kab5DWgAz8GGw7sIUTFbzj4UUxd2I605TydiOnDltzSV/6W7GBiXQ5mziFd0S5S2 uygYce6TL1E1CDjU/BSd78XWxjptpb1U6/8FEQoHTaxavwt62JXu4ylZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPay2PmS5i6+83YV3Dhz3B/a26PuMB8GA1UdIwQY MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt ZDJkYTUxN2E5NmZkLzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrqWZBOo lBktUPiPPE2mloEYQATOkF5EaUvrbQhbiRgE9VbtUOvhy4kNgViwbPAki7qjDBzD VQTVySUpxBAZlI2qcVcUjR7/dsBMKOvsEapSrMfijrVedv26k6dy7kgW1gNIp2Fo It24JKSl7gQZ8ko6Oup9Xtcp1eyd4p86jDcL5y7myuhsRNDORmkx1pauxxf2YnKz mwqrXCcWUdn25Dq6yBMnsE3CBbwNREsbQdhZvwlQAbDkkw9WK6PhZ0BX5s84fjIl vOxiK68nghVvijxVo8ddWOyTti5Jcf5QooqIdfaFvP7TOFlM0Yj7ApZOnNsfqtUp sAs8qFD1xfBhVQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:01 2025 by rpki-client