This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json) Hash identifier: g7GfZuIN/r4nJlHhTm0bKA6bv9amebnbJ6WxwJMme6M= Subject key identifier: 8F:D6:5B:53:57:2A:FB:C4:9D:60:C0:6B:DE:5B:9A:1A:CC:F2:AD:DC Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99 Certificate serial: 019B2C2F8EF75EAEDEE857BB72F129CCB9EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 12:01:12 +0000 Manifest this update: Wed 17 Dec 2025 12:01:12 +0000 Manifest next update: Thu 18 Dec 2025 12:01:12 +0000 Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: V7uKHcjmHlokW/jJYT3LRJvT0FbQDQPpPA45Vm0Qs7M=) 2: b8vdOmpolmwnMi7asOpMYmI4_jA.roa (hash: 9A3fwbUf06Rc6Df5WmKqMxfDfFV1g3qJ0g03eRw6WqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:8e:f7:5e:ae:de:e8:57:bb:72:f1:29:cc:b9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04248504b54555a9443b02a33d351a902863bb99 Validity Not Before: Dec 17 12:01:12 2025 GMT Not After : Dec 18 12:01:12 2025 GMT Subject: CN=8fd65b53572afbc49d60c06bde5b9a1accf2addc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:d8:6b:d8:b6:0c:a8:df:58:f9:c0:c7:9b: a0:7c:ec:89:41:a2:01:75:1e:26:a7:10:13:35:97: f3:72:b3:cf:a7:4b:02:96:80:53:02:a2:15:45:0f: e3:8a:56:e7:88:a7:32:4a:1c:d7:2d:72:f2:94:97: 83:fa:63:f2:df:78:94:ec:d9:1e:92:1d:37:13:cf: 75:91:83:01:1d:16:59:18:87:05:c6:0e:8d:ae:a4: 7f:9e:e5:d6:28:99:96:12:7b:64:0a:30:03:63:6c: 61:5e:56:5a:74:18:fe:73:f4:02:5a:10:ea:fa:7c: ae:73:87:f2:fd:9b:13:3c:d5:e1:14:b9:9d:26:5a: 0f:9a:e0:fd:a5:9f:0c:2f:d3:dd:c7:aa:05:ac:5a: 49:ad:ec:c4:d3:8b:1b:6f:e9:77:14:ab:db:4a:0d: 7a:e6:9e:5c:fa:eb:90:5e:a0:a3:bc:ab:c7:0f:1f: 55:ee:04:1a:4f:2d:4d:64:e8:14:1f:f1:a9:27:c3: 55:34:22:55:33:64:7f:8f:d1:d5:a8:f0:03:ce:30: 1b:3d:82:38:48:19:3e:c1:74:1b:fc:f3:4e:3c:bb: 11:ac:44:26:a9:72:a3:fd:c1:a8:99:dd:3a:ae:64: 4f:52:dc:0a:08:f9:a8:43:83:ba:3d:2d:34:4a:51: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:5B:53:57:2A:FB:C4:9D:60:C0:6B:DE:5B:9A:1A:CC:F2:AD:DC X509v3 Authority Key Identifier: keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c2:d1:6c:06:9d:c1:e1:a2:6e:1f:ba:d7:4a:de:ff:ec:61: 2c:6e:2c:d2:63:17:de:2d:53:f5:24:30:ab:a7:67:b4:d7:98: 2c:6c:36:74:b9:e5:ce:92:a3:03:a6:86:32:54:d0:fc:13:93: b5:5e:ed:a5:50:f1:be:eb:28:b6:b4:01:5c:66:11:ec:d0:24: 45:88:55:b2:a7:3d:dd:99:21:25:76:5b:22:1f:e9:be:62:d3: 7c:52:a4:53:24:63:10:b5:0d:8d:d0:8a:3f:7d:57:15:af:1e: 15:90:9b:0e:be:ea:2b:a4:6a:ec:14:88:9d:7d:06:94:8b:6c: 9b:1d:a2:a6:30:df:70:9d:45:da:69:04:f7:0b:18:60:ea:89: e7:51:bc:a9:c9:45:1b:47:ca:c2:dd:b0:c9:aa:c9:77:a1:88: 29:bf:57:6b:07:72:ea:3b:93:bf:7e:be:41:4a:3b:d2:47:16: 73:74:8b:11:cc:2e:f4:99:ba:97:2e:88:ff:70:40:fd:53:00: 82:ff:8c:ba:6f:ea:3e:b2:04:11:f9:29:aa:59:aa:df:85:62: bd:6b:42:af:89:5b:9f:23:5d:08:d8:eb:7f:95:3d:74:51:09: 48:f0:9c:04:cf:59:6a:13:1d:42:00:d6:d6:68:36:0d:06:ca: dd:e3:5b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL473Xq7e6Fe7cvEpzLnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjQ4NTA0YjU0NTU1YTk0NDNiMDJhMzNkMzUxYTkwMjg2 M2JiOTkwHhcNMjUxMjE3MTIwMTEyWhcNMjUxMjE4MTIwMTEyWjAzMTEwLwYDVQQD Eyg4ZmQ2NWI1MzU3MmFmYmM0OWQ2MGMwNmJkZTViOWExYWNjZjJhZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6fYa9i2DKjfWPnAx5ugfOyJQaIB dR4mpxATNZfzcrPPp0sCloBTAqIVRQ/jilbniKcyShzXLXLylJeD+mPy33iU7Nke kh03E891kYMBHRZZGIcFxg6NrqR/nuXWKJmWEntkCjADY2xhXlZadBj+c/QCWhDq +nyuc4fy/ZsTPNXhFLmdJloPmuD9pZ8ML9Pdx6oFrFpJrezE04sbb+l3FKvbSg16 5p5c+uuQXqCjvKvHDx9V7gQaTy1NZOgUH/GpJ8NVNCJVM2R/j9HVqPADzjAbPYI4 SBk+wXQb/PNOPLsRrEQmqXKj/cGomd06rmRPUtwKCPmoQ4O6PS00SlH3NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/WW1NXKvvEnWDAa95bmhrM8q3cMB8GA1UdIwQY MBaAFAQkhQS1RVWpRDsCoz01GpAoY7uZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2Yt NDcwMTVhNjA3N2IyLzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2YtNDcwMTVhNjA3N2Iy LzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcLRbAad weGibh+610re/+xhLG4s0mMX3i1T9SQwq6dntNeYLGw2dLnlzpKjA6aGMlTQ/BOT tV7tpVDxvusotrQBXGYR7NAkRYhVsqc93ZkhJXZbIh/pvmLTfFKkUyRjELUNjdCK P31XFa8eFZCbDr7qK6Rq7BSInX0GlItsmx2ipjDfcJ1F2mkE9wsYYOqJ51G8qclF G0fKwt2wyarJd6GIKb9Xawdy6juTv36+QUo70kcWc3SLEcwu9Jm6ly6I/3BA/VMA gv+Mum/qPrIEEfkpqlmq34VivWtCr4lbnyNdCNjrf5U9dFEJSPCcBM9ZahMdQgDW 1mg2DQbK3eNbUQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:32 2025 by rpki-client