This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json) Hash identifier: k31qdyVCWcBX9SBo+yjRqN8uRMZ3c3kwZ5TDAGZ/kZA= Subject key identifier: 83:7F:42:40:BE:43:C8:75:8A:BF:3E:75:06:19:03:9F:78:29:E4:08 Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99 Certificate serial: 019AF240211458A899D1E555DEBF1CBDB890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: ZtSuhUAmrfsS2sw6esQsjo5KRgOTjLbXaLyzKsPEgq0=) 2: b8vdOmpolmwnMi7asOpMYmI4_jA.roa (hash: 9A3fwbUf06Rc6Df5WmKqMxfDfFV1g3qJ0g03eRw6WqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:21:14:58:a8:99:d1:e5:55:de:bf:1c:bd:b8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04248504b54555a9443b02a33d351a902863bb99 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=837f4240be43c8758abf3e750619039f7829e408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:aa:59:bf:e2:2e:e5:2b:61:8d:67:c0:fb: 0a:38:fa:00:40:90:ea:5c:20:55:05:e8:68:50:f7: f9:15:20:c5:fd:96:a4:8d:f2:c6:97:a4:f0:3d:67: f6:e9:de:fd:fb:5b:f5:dd:aa:4f:5e:2d:4d:f0:af: 3d:37:2c:bf:ba:cb:93:da:79:7d:1b:05:5a:19:c4: 88:48:8d:9b:08:b8:99:1d:a8:2a:dd:78:7e:1f:a0: de:24:17:07:5b:cf:48:9b:5a:7d:3a:96:85:f8:ee: 4c:3d:d9:22:a3:2f:f0:68:00:5f:a8:33:6b:ee:0f: 1d:f4:3f:11:f1:ff:f2:8e:1e:55:e0:81:13:33:24: bd:58:99:c8:f4:2f:3a:b1:4a:6c:1c:c3:af:53:e8: 5f:22:6e:4c:35:d3:74:ea:ec:f8:a8:11:5a:df:08: fe:d5:cd:1a:14:ce:c3:6d:b0:68:a2:92:08:40:91: f9:0e:a2:d1:b4:e1:22:cc:74:4a:a9:fc:7f:66:ed: cc:73:b1:43:3e:94:3f:54:ad:e4:4f:cc:eb:bc:d7: c4:99:6b:8d:53:34:5a:f8:b3:25:f2:59:77:20:3c: b9:05:60:c8:70:4a:1e:f0:91:83:08:d4:e1:b2:16: c9:51:19:67:57:21:9d:cd:98:9f:50:a5:f7:d4:2f: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7F:42:40:BE:43:C8:75:8A:BF:3E:75:06:19:03:9F:78:29:E4:08 X509v3 Authority Key Identifier: keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:99:7c:34:63:a6:b3:d2:9b:a8:4b:bf:88:ab:1b:ac:8b:88: 3a:19:90:25:7b:26:ee:64:f5:a4:00:bb:2b:ea:db:de:4a:2d: bd:42:9f:19:8d:55:ce:23:24:6c:ea:07:aa:50:27:a7:bc:df: c9:97:86:a4:bc:d7:c4:b0:51:81:be:40:73:b1:7f:23:23:7d: 04:b6:b9:39:72:23:98:11:8e:49:d7:32:d1:ef:33:42:32:ba: ec:c7:5f:19:42:65:25:98:bb:65:85:d8:2b:40:d8:5d:80:a8: b0:42:7e:16:d3:0d:de:10:84:57:da:a0:85:40:7a:67:9d:5c: a4:84:be:a2:de:a9:52:c6:9f:fc:ae:ba:09:76:30:65:9b:3b: 54:bc:be:db:43:8e:cf:db:46:3d:6f:68:4b:cb:34:48:c0:67: d0:5e:91:ea:ac:b7:3c:52:cb:45:62:88:22:f8:e2:fd:e0:27: 99:3e:9a:24:7b:26:35:7c:ae:a5:85:13:4d:96:7a:82:01:65: 15:b2:18:a6:b4:a3:70:8c:d6:d8:c1:1a:c5:80:38:b4:d5:0d: 4e:3a:ed:9e:a1:32:a3:8d:c8:d2:78:0f:fa:de:1f:c6:05:96: 00:5c:e5:b6:cf:95:54:9e:07:84:18:62:bc:a9:1f:48:1a:7c: 2d:c2:0e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCEUWKiZ0eVV3r8cvbiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjQ4NTA0YjU0NTU1YTk0NDNiMDJhMzNkMzUxYTkwMjg2 M2JiOTkwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD Eyg4MzdmNDI0MGJlNDNjODc1OGFiZjNlNzUwNjE5MDM5Zjc4MjllNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDeqWb/iLuUrYY1nwPsKOPoAQJDq XCBVBehoUPf5FSDF/ZakjfLGl6TwPWf26d79+1v13apPXi1N8K89Nyy/usuT2nl9 GwVaGcSISI2bCLiZHagq3Xh+H6DeJBcHW89Im1p9OpaF+O5MPdkioy/waABfqDNr 7g8d9D8R8f/yjh5V4IETMyS9WJnI9C86sUpsHMOvU+hfIm5MNdN06uz4qBFa3wj+ 1c0aFM7DbbBoopIIQJH5DqLRtOEizHRKqfx/Zu3Mc7FDPpQ/VK3kT8zrvNfEmWuN UzRa+LMl8ll3IDy5BWDIcEoe8JGDCNThshbJURlnVyGdzZifUKX31C9HTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN/QkC+Q8h1ir8+dQYZA594KeQIMB8GA1UdIwQY MBaAFAQkhQS1RVWpRDsCoz01GpAoY7uZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2Yt NDcwMTVhNjA3N2IyLzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2YtNDcwMTVhNjA3N2Iy LzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZl8NGOm s9KbqEu/iKsbrIuIOhmQJXsm7mT1pAC7K+rb3kotvUKfGY1VziMkbOoHqlAnp7zf yZeGpLzXxLBRgb5Ac7F/IyN9BLa5OXIjmBGOSdcy0e8zQjK67MdfGUJlJZi7ZYXY K0DYXYCosEJ+FtMN3hCEV9qghUB6Z51cpIS+ot6pUsaf/K66CXYwZZs7VLy+20OO z9tGPW9oS8s0SMBn0F6R6qy3PFLLRWKIIvji/eAnmT6aJHsmNXyupYUTTZZ6ggFl FbIYprSjcIzW2MEaxYA4tNUNTjrtnqEyo43I0ngP+t4fxgWWAFzlts+VVJ4HhBhi vKkfSBp8LcIOfg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:03 2025 by rpki-client