This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json) Hash identifier: XbjVSZTAbpPahwrDchTXdRwTqwOVGcNC7y9iNi0mwH0= Subject key identifier: 4F:65:D8:BB:07:86:CC:41:EF:71:C9:A3:20:A1:A9:18:28:25:86:C3 Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a Certificate serial: 019AF1D1FB098FD9F737A04C6B56612ADC11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: XEUoSRdit6u7iA3dPwft+qTnD53qlxObyzQPq4RYWSo=) 2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:09:8f:d9:f7:37:a0:4c:6b:56:61:2a:dc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=4f65d8bb0786cc41ef71c9a320a1a918282586c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:41:40:f6:72:f5:43:4b:71:54:3a:c2:19: 3f:c4:77:87:03:43:af:8e:f2:35:73:8a:94:0f:e2: 66:55:86:62:39:b4:ab:41:66:9a:9a:d1:c7:40:38: 6d:b2:7a:8b:f5:7c:0b:13:b0:42:09:91:8f:44:71: 81:ea:aa:b3:dc:77:49:84:8a:d2:63:85:50:d3:3f: 1a:4b:39:38:8d:1d:4f:25:3d:e8:e2:54:79:9b:51: 9d:c5:51:a8:9a:95:06:49:94:8d:ae:e1:86:d1:53: d2:41:e5:5d:4b:53:d6:f8:fc:db:58:97:9b:d0:d2: 1b:b7:dd:a2:ae:ca:e7:a8:cc:e5:69:7d:2e:51:ec: 93:92:44:e2:f9:32:5e:f5:65:76:57:3b:19:5c:63: 00:90:f6:60:8d:49:d2:3e:84:dd:8d:2f:55:e8:d9: 56:e8:bf:6d:20:c1:2d:a3:02:49:2b:8c:1e:30:dd: 31:3b:0d:b4:8d:c3:e4:10:5d:5a:f5:c4:2b:73:b0: ca:fd:d4:ca:13:29:17:a2:33:c0:ea:de:a0:ec:3b: e7:e7:d3:ee:6a:33:86:f7:00:40:01:7f:66:c6:f2: cc:4f:04:82:5f:83:a1:ab:16:93:b3:a3:a6:d0:c9: cc:3c:a7:11:a7:df:1e:4e:8e:f6:09:93:65:e2:b6: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:65:D8:BB:07:86:CC:41:EF:71:C9:A3:20:A1:A9:18:28:25:86:C3 X509v3 Authority Key Identifier: keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e1:95:bf:c4:c5:4a:e7:f6:54:4e:ca:11:35:23:c3:20:43: fc:4d:e6:6a:a7:bf:f8:49:06:66:2f:38:5f:40:32:c5:2d:95: e2:5c:c7:88:70:08:65:74:f0:3b:36:d2:5c:da:80:7a:79:3e: 1a:68:40:33:b9:cc:48:bb:f5:f2:74:df:e1:bf:89:ee:c0:dd: 6e:99:2d:82:83:ad:4b:fd:b2:5c:44:79:e9:cb:9d:32:bd:75: 4f:29:0a:11:ea:0b:3f:f2:af:ec:65:80:d9:86:79:d4:3b:60: 48:37:b1:df:7e:ab:24:f6:1d:fe:03:5f:8d:e6:7d:67:fc:ea: cc:68:1f:d2:43:35:c9:75:14:6c:a9:7b:f5:93:80:3a:a9:50: 1a:0a:1c:8a:4d:46:3a:97:4c:ab:d0:74:2d:d3:ad:ec:0f:4c: 65:36:37:cf:64:4d:a5:91:8c:46:6d:63:83:02:4f:4f:75:c7: 83:b6:b0:af:ed:96:86:4b:4f:37:7c:a5:5f:86:4a:d9:01:6d: b4:85:2f:34:25:8a:8d:66:11:38:05:cc:34:e2:ac:9b:72:26: d2:62:1e:8b:c9:4b:f6:24:70:06:b1:4a:0c:ff:31:a5:2b:11: e3:12:b5:aa:3e:40:4a:f3:e9:0c:42:7f:11:ea:3a:20:5c:ba: f9:73:90:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fsJj9n3N6BMa1ZhKtwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz ODUyNWEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg0ZjY1ZDhiYjA3ODZjYzQxZWY3MWM5YTMyMGExYTkxODI4MjU4NmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37lBQPZy9UNLcVQ6whk/xHeHA0Ov jvI1c4qUD+JmVYZiObSrQWaamtHHQDhtsnqL9XwLE7BCCZGPRHGB6qqz3HdJhIrS Y4VQ0z8aSzk4jR1PJT3o4lR5m1GdxVGompUGSZSNruGG0VPSQeVdS1PW+PzbWJeb 0NIbt92irsrnqMzlaX0uUeyTkkTi+TJe9WV2VzsZXGMAkPZgjUnSPoTdjS9V6NlW 6L9tIMEtowJJK4weMN0xOw20jcPkEF1a9cQrc7DK/dTKEykXojPA6t6g7Dvn59Pu ajOG9wBAAX9mxvLMTwSCX4OhqxaTs6Om0MnMPKcRp98eTo72CZNl4rZwgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9l2LsHhsxB73HJoyChqRgoJYbDMB8GA1UdIwQY MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt ZDQxYWM4MWQxY2M0LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0 LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOGVv8TF Suf2VE7KETUjwyBD/E3maqe/+EkGZi84X0AyxS2V4lzHiHAIZXTwOzbSXNqAenk+ GmhAM7nMSLv18nTf4b+J7sDdbpktgoOtS/2yXER56cudMr11TykKEeoLP/Kv7GWA 2YZ51DtgSDex336rJPYd/gNfjeZ9Z/zqzGgf0kM1yXUUbKl79ZOAOqlQGgocik1G OpdMq9B0LdOt7A9MZTY3z2RNpZGMRm1jgwJPT3XHg7awr+2WhktPN3ylX4ZK2QFt tIUvNCWKjWYROAXMNOKsm3Im0mIei8lL9iRwBrFKDP8xpSsR4xK1qj5ASvPpDEJ/ Eeo6IFy6+XOQOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:35 2025 by rpki-client