This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json) Hash identifier: PygvNUGGiEibwnelcJAc/5joanfQ3476a0VOVRz2Y/0= Subject key identifier: CB:75:98:EE:A5:50:C3:3C:49:8D:3E:21:74:32:9E:16:3F:6A:A6:A2 Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae Certificate serial: 019B1081B951078621764F4C03ECFECE7699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft Manifest number: 026E Signing time: Fri 12 Dec 2025 03:01:35 +0000 Manifest this update: Fri 12 Dec 2025 03:01:35 +0000 Manifest next update: Sat 13 Dec 2025 03:01:35 +0000 Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: IJnZdpV9lw1BG0PIlji7jBNXOZPgKRkoObcfjZz0r24=) 2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:b9:51:07:86:21:76:4f:4c:03:ec:fe:ce:76:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae Validity Not Before: Dec 12 03:01:35 2025 GMT Not After : Dec 13 03:01:35 2025 GMT Subject: CN=cb7598eea550c33c498d3e2174329e163f6aa6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:51:a8:a2:25:40:8a:2b:1d:cd:4c:18:a3:95: 01:82:10:b0:dc:f9:fa:26:7b:7d:fe:a3:be:4b:d4: e2:2e:d8:4e:3c:47:66:b9:23:a1:cd:da:41:d7:02: 2b:0c:78:93:23:45:bd:3c:d6:be:72:c3:e3:7b:a2: ba:47:74:e3:ee:bb:ae:41:54:13:32:43:40:84:b4: 68:06:9e:d4:61:32:08:25:71:f2:2a:5d:42:bd:ef: 88:8a:41:6e:8e:09:b9:ca:94:17:b4:1b:dd:25:fa: e0:25:75:e1:1d:db:bc:72:20:59:11:c0:96:29:b3: 4a:89:6d:61:2a:c3:a2:df:68:bb:62:69:44:6b:f9: 33:4a:ee:01:69:70:ca:1c:cd:a3:64:67:a3:dc:6f: d2:48:0a:e0:72:7f:22:1a:a7:f1:52:f5:71:a7:74: 6b:64:de:5e:2a:31:2a:fd:d1:8e:cb:7a:a2:04:3d: 4c:45:4e:8b:b0:15:42:e1:83:3e:72:53:bc:0a:f8: 2b:1a:ef:b7:d6:c6:41:6b:dd:72:bb:b2:de:b8:05: 02:cf:fc:46:f5:e1:be:23:ff:b6:19:f7:b4:36:48: 38:72:4a:49:89:a5:5a:fa:b9:fd:87:fc:7c:1b:69: 78:0f:89:05:73:71:85:80:1b:c1:2e:ed:63:d4:da: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:75:98:EE:A5:50:C3:3C:49:8D:3E:21:74:32:9E:16:3F:6A:A6:A2 X509v3 Authority Key Identifier: keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:da:ab:84:80:f1:36:71:44:98:fa:df:61:f1:5e:aa:62:92: 1e:c5:ed:f5:e3:d9:5a:27:18:b5:cb:41:91:ff:8b:89:bc:09: 3d:2f:62:2d:14:26:b6:f4:9d:c7:0e:79:d0:32:c5:5a:1a:de: cc:08:84:76:e4:bf:12:30:2e:ef:2d:4d:ad:49:e0:86:bc:51: e8:2f:25:d2:65:c1:55:75:ea:36:1c:01:76:44:4d:45:ae:37: 3a:ff:18:56:98:b3:63:14:b1:da:b4:7b:45:cb:d5:7a:0a:b2: 7b:dd:6b:e4:66:e3:e8:76:b7:ce:3f:22:3d:09:05:52:25:d2: 3b:f1:33:c9:54:7c:34:5a:f7:69:4d:88:7e:f0:61:6f:01:ca: 42:79:fb:32:aa:31:ca:2b:f3:1e:09:7a:2e:73:c7:fc:96:55: ab:32:c1:32:1b:89:64:5d:94:b9:22:87:0e:c3:52:f7:8d:58: 0e:a6:cd:a5:21:7b:de:05:e9:f7:17:49:1d:be:48:c0:0c:8b: 10:2c:5d:b1:f9:ed:46:0c:d3:21:fc:c0:42:83:70:db:b2:70: 84:83:16:3d:1a:58:af:4e:a9:9e:c6:e7:2c:a2:50:7c:c5:e8: aa:dd:2d:68:19:35:b3:42:08:37:e6:8f:9a:94:37:7a:80:22: 18:14:03:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgblRB4Yhdk9MA+z+znaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl Y2MyYWUwHhcNMjUxMjEyMDMwMTM1WhcNMjUxMjEzMDMwMTM1WjAzMTEwLwYDVQQD EyhjYjc1OThlZWE1NTBjMzNjNDk4ZDNlMjE3NDMyOWUxNjNmNmFhNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51GooiVAiisdzUwYo5UBghCw3Pn6 Jnt9/qO+S9TiLthOPEdmuSOhzdpB1wIrDHiTI0W9PNa+csPje6K6R3Tj7ruuQVQT MkNAhLRoBp7UYTIIJXHyKl1Cve+IikFujgm5ypQXtBvdJfrgJXXhHdu8ciBZEcCW KbNKiW1hKsOi32i7YmlEa/kzSu4BaXDKHM2jZGej3G/SSArgcn8iGqfxUvVxp3Rr ZN5eKjEq/dGOy3qiBD1MRU6LsBVC4YM+clO8CvgrGu+31sZBa91yu7LeuAUCz/xG 9eG+I/+2Gfe0Nkg4ckpJiaVa+rn9h/x8G2l4D4kFc3GFgBvBLu1j1NrBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt1mO6lUMM8SY0+IXQynhY/aqaiMB8GA1UdIwQY MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNqrhIDx NnFEmPrfYfFeqmKSHsXt9ePZWicYtctBkf+LibwJPS9iLRQmtvSdxw550DLFWhre zAiEduS/EjAu7y1NrUnghrxR6C8l0mXBVXXqNhwBdkRNRa43Ov8YVpizYxSx2rR7 RcvVegqye91r5Gbj6Ha3zj8iPQkFUiXSO/EzyVR8NFr3aU2IfvBhbwHKQnn7Mqox yivzHgl6LnPH/JZVqzLBMhuJZF2UuSKHDsNS941YDqbNpSF73gXp9xdJHb5IwAyL ECxdsfntRgzTIfzAQoNw27JwhIMWPRpYr06pnsbnLKJQfMXoqt0taBk1s0IIN+aP mpQ3eoAiGBQDzA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:46 2025 by rpki-client