This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json) Hash identifier: /VpTX3kuXnXvD6jCul2VlANtfVthEPCd0kmb8H1VE+M= Subject key identifier: 51:F5:A2:CC:33:70:A5:B7:26:5B:50:A4:3C:4C:AF:9A:AB:39:68:83 Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a Certificate serial: 019B2BC1F2143B2A11EB4F9BC47E4913FC6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 10:01:29 +0000 Manifest this update: Wed 17 Dec 2025 10:01:29 +0000 Manifest next update: Thu 18 Dec 2025 10:01:29 +0000 Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: Yog9l993CQQe21ZuO00IWpnQ3sVPN1q8w2YCeaCAL3o=) 2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:f2:14:3b:2a:11:eb:4f:9b:c4:7e:49:13:fc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a Validity Not Before: Dec 17 10:01:29 2025 GMT Not After : Dec 18 10:01:29 2025 GMT Subject: CN=51f5a2cc3370a5b7265b50a43c4caf9aab396883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:a2:bc:78:7a:00:52:b8:95:a9:44:80:9b: 4c:7d:87:7b:29:2e:15:9f:b1:69:57:3e:c7:46:a6: 37:40:46:53:2e:8b:76:04:c5:f3:9c:a0:0b:64:9a: c5:7d:7c:64:ad:c4:eb:c6:1c:75:b0:0a:9d:b3:71: 11:86:f9:54:c0:ef:77:46:e9:d0:e9:27:f2:42:dd: 9b:09:47:ce:b4:5d:ca:04:e4:31:2c:23:65:17:bb: 82:ee:ba:32:4f:a8:bd:f3:a2:99:fd:5f:bb:0b:4d: 1f:e5:79:a8:04:36:67:a7:5f:b8:93:c4:18:29:ed: 0a:c1:98:44:43:af:9b:14:04:96:75:e4:18:2f:bd: 6b:e4:c0:3d:be:85:04:bf:a1:40:f0:16:26:e4:80: a6:a7:c1:a2:ad:c9:13:97:31:ac:3c:f6:ae:92:e5: d3:f8:17:cc:88:d1:fe:c2:2c:9d:97:10:e0:88:45: f9:20:98:f5:a5:c5:cc:be:ee:8c:e9:b5:83:9b:26: f4:76:a5:16:57:31:dc:06:6e:da:19:8a:b5:31:45: 20:01:97:1f:81:6a:e7:2b:60:62:5e:ad:8e:0e:c8: 15:ba:ba:7e:42:3a:48:ef:ed:56:2e:19:2e:a5:27: 97:1f:38:b9:e6:e2:97:07:0a:18:07:18:d1:60:8f: 84:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:A2:CC:33:70:A5:B7:26:5B:50:A4:3C:4C:AF:9A:AB:39:68:83 X509v3 Authority Key Identifier: keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c5:f2:dd:3d:49:f0:2e:46:88:4f:b3:95:3f:8e:7f:6f:9f: d2:14:df:3a:e8:2b:f3:77:a4:4d:3f:08:66:3a:a1:b2:ca:99: 0b:2a:95:b4:dd:83:3d:95:91:cf:61:a0:88:ed:40:0f:65:f3: 50:0e:05:3a:f7:5d:7d:22:60:12:ab:53:9c:3e:74:fb:7c:9a: 38:54:52:f5:c0:aa:d7:32:a9:ba:2b:21:e3:0f:97:39:cd:b8: 28:7c:9e:7a:5c:63:4e:5c:25:a5:1f:78:da:ee:7d:44:0b:24: 88:da:fb:44:18:cc:28:83:1d:c6:d7:6e:b1:4c:c1:47:74:be: 89:30:95:91:fd:8f:99:fc:be:86:57:62:c6:b1:11:ee:02:8c: 4c:eb:ec:3f:3c:83:15:41:06:a1:2d:50:79:1c:e2:52:cc:f3: 2e:79:be:16:31:b5:e2:c2:e2:3b:a3:c7:a4:57:ba:fb:96:17: e2:29:7e:8c:5d:a0:08:37:9d:6c:e1:b6:06:15:a9:62:c0:99: 19:fc:41:93:ff:f4:e0:45:08:70:af:99:a9:75:70:45:cb:53: c0:a4:8b:dc:38:9f:a1:44:7c:26:65:59:02:63:de:bf:23:67: ce:4b:06:41:15:9c:13:a5:6d:c2:ca:16:4c:6e:2b:c2:5c:be: 93:ad:e8:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwfIUOyoR60+bxH5JE/xuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz ODUyNWEwHhcNMjUxMjE3MTAwMTI5WhcNMjUxMjE4MTAwMTI5WjAzMTEwLwYDVQQD Eyg1MWY1YTJjYzMzNzBhNWI3MjY1YjUwYTQzYzRjYWY5YWFiMzk2ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwOivHh6AFK4lalEgJtMfYd7KS4V n7FpVz7HRqY3QEZTLot2BMXznKALZJrFfXxkrcTrxhx1sAqds3ERhvlUwO93RunQ 6SfyQt2bCUfOtF3KBOQxLCNlF7uC7royT6i986KZ/V+7C00f5XmoBDZnp1+4k8QY Ke0KwZhEQ6+bFASWdeQYL71r5MA9voUEv6FA8BYm5ICmp8GirckTlzGsPPaukuXT +BfMiNH+wiydlxDgiEX5IJj1pcXMvu6M6bWDmyb0dqUWVzHcBm7aGYq1MUUgAZcf gWrnK2BiXq2ODsgVurp+QjpI7+1WLhkupSeXHzi55uKXBwoYBxjRYI+EfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH1oswzcKW3JltQpDxMr5qrOWiDMB8GA1UdIwQY MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt ZDQxYWM4MWQxY2M0LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0 LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsXy3T1J 8C5GiE+zlT+Of2+f0hTfOugr83ekTT8IZjqhssqZCyqVtN2DPZWRz2GgiO1AD2Xz UA4FOvddfSJgEqtTnD50+3yaOFRS9cCq1zKpuish4w+XOc24KHyeelxjTlwlpR94 2u59RAskiNr7RBjMKIMdxtdusUzBR3S+iTCVkf2Pmfy+hldixrER7gKMTOvsPzyD FUEGoS1QeRziUszzLnm+FjG14sLiO6PHpFe6+5YX4il+jF2gCDedbOG2BhWpYsCZ GfxBk//04EUIcK+ZqXVwRctTwKSL3DifoUR8JmVZAmPevyNnzksGQRWcE6VtwsoW TG4rwly+k63oTA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:42:27 2025 by rpki-client