This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json) Hash identifier: q40bqUk36DCiysMQbMISL4By5haumU/sS0wWc3+q6GM= Subject key identifier: 2E:A1:B7:8A:9F:8D:EA:65:B5:52:9C:7C:62:FC:9D:B6:CF:2D:14:C6 Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Certificate serial: 019AF12E0473FD6B69AF9AC8F809478FBE6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft Manifest number: 0830 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: ULPC57QAFK99P5uMFHwWvSIf+IFPfFTwpf8WZ5/in4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:04:73:fd:6b:69:af:9a:c8:f8:09:47:8f:be:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=2ea1b78a9f8dea65b5529c7c62fc9db6cf2d14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:c0:fc:9c:c4:33:55:bf:39:b2:1a:f2:86: d7:72:12:e1:1e:a3:06:60:65:d8:e1:dc:16:30:3e: 53:e1:ab:03:e0:c3:90:84:8c:a1:0a:61:6f:f1:05: e4:a4:54:2e:bf:47:61:f8:82:ac:62:c1:99:e8:64: 83:77:48:93:6f:64:da:aa:fc:b2:e0:6f:ec:d3:6f: d8:1a:6a:79:86:3d:ed:93:0b:1a:18:f9:19:86:32: d9:65:6e:fa:3e:36:6a:35:01:60:c2:5c:b6:9a:6a: bb:90:4d:75:57:64:84:3f:9b:fe:f3:7c:f1:ef:b2: 38:ae:32:d6:7e:07:96:b4:ac:be:6c:e5:96:71:2b: 92:55:52:4c:a5:aa:2d:1f:15:c5:f0:45:07:ca:7d: a0:85:85:73:8b:61:bd:36:d9:ed:dd:63:96:c9:7d: 46:18:a0:8c:4c:87:89:43:5c:78:84:57:de:54:4d: 3f:32:d7:02:5e:ce:35:ff:74:8b:59:91:86:b8:22: 40:4c:af:be:f1:93:50:e8:46:3b:ed:72:94:9d:40: 95:eb:fd:d1:ea:73:04:20:3a:fa:c8:8a:ff:18:b3: a1:e4:a4:83:ca:46:45:e4:3d:4b:a3:ff:ea:10:53: c9:dd:ab:1a:9c:ee:27:ed:2c:c1:3b:f7:99:e0:22: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A1:B7:8A:9F:8D:EA:65:B5:52:9C:7C:62:FC:9D:B6:CF:2D:14:C6 X509v3 Authority Key Identifier: keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:11:c8:66:4f:93:66:fd:47:58:15:af:93:3b:72:a6:e6:7a: 97:06:15:2b:fd:3c:51:10:36:3b:de:8b:65:8f:d6:40:11:bb: 73:c9:ad:f6:af:d6:c9:19:d0:52:1f:96:d0:28:2b:f5:e9:8d: ce:a2:dd:c0:a0:46:f0:5e:62:a2:e3:3d:63:10:c8:95:e4:e4: a4:a3:70:41:9c:ba:cc:5b:14:bc:da:58:44:9c:ce:90:35:76: 08:75:b8:bc:df:d3:72:25:63:72:dd:57:65:ed:eb:5b:d1:70: cc:88:72:b9:ef:88:f4:2f:57:6f:c2:10:00:c0:b3:68:01:2d: 3a:9f:f6:5f:d7:96:9b:21:16:43:13:40:ac:74:73:20:5a:33: c9:24:d3:79:97:36:ac:35:ec:33:e1:02:56:bb:23:13:fa:b4: 3b:bc:6e:9c:77:70:12:a1:dd:7b:11:0f:d5:e7:b6:68:63:dc: cd:2d:c0:c3:b5:2b:7c:17:df:e3:f8:91:11:0a:b6:b1:39:c6: 6f:2f:02:51:00:0c:42:13:d6:b9:68:02:4a:8e:a9:a7:7e:dd: 95:95:e2:cd:08:08:0c:e8:ce:28:7c:65:c0:18:5b:1d:ce:0e: 1c:30:3c:91:e8:9e:e0:42:ac:ae:c2:a1:43:0e:bd:f8:e7:6c: 5b:85:2b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgRz/Wtpr5rI+AlHj75rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh ZmY4ZTYwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD EygyZWExYjc4YTlmOGRlYTY1YjU1MjljN2M2MmZjOWRiNmNmMmQxNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSfA/JzEM1W/ObIa8obXchLhHqMG YGXY4dwWMD5T4asD4MOQhIyhCmFv8QXkpFQuv0dh+IKsYsGZ6GSDd0iTb2Taqvyy 4G/s02/YGmp5hj3tkwsaGPkZhjLZZW76PjZqNQFgwly2mmq7kE11V2SEP5v+83zx 77I4rjLWfgeWtKy+bOWWcSuSVVJMpaotHxXF8EUHyn2ghYVzi2G9Ntnt3WOWyX1G GKCMTIeJQ1x4hFfeVE0/MtcCXs41/3SLWZGGuCJATK++8ZNQ6EY77XKUnUCV6/3R 6nMEIDr6yIr/GLOh5KSDykZF5D1Lo//qEFPJ3asanO4n7SzBO/eZ4CKmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6ht4qfjepltVKcfGL8nbbPLRTGMB8GA1UdIwQY MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRHIZk+T Zv1HWBWvkztypuZ6lwYVK/08URA2O96LZY/WQBG7c8mt9q/WyRnQUh+W0Cgr9emN zqLdwKBG8F5iouM9YxDIleTkpKNwQZy6zFsUvNpYRJzOkDV2CHW4vN/TciVjct1X Ze3rW9FwzIhyue+I9C9Xb8IQAMCzaAEtOp/2X9eWmyEWQxNArHRzIFozySTTeZc2 rDXsM+ECVrsjE/q0O7xunHdwEqHdexEP1ee2aGPczS3Aw7UrfBff4/iREQq2sTnG by8CUQAMQhPWuWgCSo6pp37dlZXizQgIDOjOKHxlwBhbHc4OHDA8keie4EKsrsKh Qw69+OdsW4UrNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:10 2025 by rpki-client