This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json) Hash identifier: R2F4QvPh6XATX4HwMvRd1bWQP3bNo5AJkbuoOdpYP+I= Subject key identifier: 07:96:05:80:48:D6:78:6C:3E:81:BA:84:A9:F4:C6:06:29:5D:35:ED Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Certificate serial: 019AF208CD2243CD11E0D662B9715B13C22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft Manifest number: 11E2 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: nSUC+bWMJxbfbzoYZL+SlIP7esQdE58nx6R4hR7z1+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cd:22:43:cd:11:e0:d6:62:b9:71:5b:13:c2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=0796058048d6786c3e81ba84a9f4c606295d35ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:f1:d0:ef:c7:f0:b1:1f:02:75:d8:e8:f7: 12:b0:75:3b:5e:b5:99:6e:3c:4a:6d:39:1a:a5:34: 2b:d0:c7:5d:82:2b:6d:5d:27:87:60:7a:7a:34:f9: 7e:d2:e7:55:49:55:7a:62:2b:74:10:ca:97:2d:9c: 3b:ab:a4:0e:68:37:87:e5:39:56:48:6f:88:ac:02: 78:78:42:e2:d0:71:08:48:fd:ec:e6:bc:c2:39:5d: 22:2f:f2:5a:65:8d:81:75:71:41:94:51:60:7d:84: 95:1a:31:f3:eb:e4:35:33:0c:db:7a:43:71:94:c0: 71:ca:57:9d:c8:80:51:8c:25:13:df:39:8f:17:b4: 8d:6a:94:6e:2c:f8:15:05:b9:b3:de:f0:02:23:9e: cd:96:92:67:a9:f9:85:07:16:1a:91:2c:38:48:80: 81:81:40:2a:ae:fe:f6:cd:e2:06:eb:c6:de:34:24: fb:a4:f2:19:05:47:8b:e9:08:35:be:a8:7a:19:f3: 88:1d:a4:f6:61:03:18:03:2e:2c:45:59:ca:42:2b: 47:9f:45:53:cb:d4:1b:f7:f7:84:1b:2c:15:bd:16: e6:32:3d:ff:c1:87:71:3d:d0:d3:36:ff:80:0c:db: bc:36:45:09:b0:cc:44:a8:9e:34:8d:e3:f6:00:65: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:05:80:48:D6:78:6C:3E:81:BA:84:A9:F4:C6:06:29:5D:35:ED X509v3 Authority Key Identifier: keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:86:19:61:2e:fa:c9:0a:e8:95:6d:d7:94:d8:75:5f:50:41: ed:35:bb:92:af:45:b3:9b:a4:73:d2:90:d5:97:58:23:78:13: 92:33:b3:c0:65:6f:f0:e3:2d:58:0a:41:6f:b5:43:58:61:05: 38:63:4c:8a:e3:c5:56:18:32:69:b3:08:39:6e:0a:78:e1:16: 9f:50:ff:21:62:d3:a3:37:9e:74:fe:b6:65:07:e3:0d:b4:02: 5e:29:f9:16:6a:f4:12:d2:cf:1b:01:56:01:aa:a1:d9:98:6f: 9c:d8:eb:07:91:e5:08:3c:97:41:66:8c:4b:7f:c2:d6:1e:26: 19:10:2b:cd:3e:a1:fe:2d:1d:da:45:bc:83:28:0e:8f:f8:b7: d7:75:86:6f:cb:4b:6c:e0:91:8c:9a:da:45:54:fd:30:e5:84: 8b:07:c0:bd:11:7d:c0:37:c8:62:60:dc:39:78:97:aa:ec:ed: f8:f4:78:39:59:88:e0:6f:24:83:77:d5:ba:cf:3d:b1:9c:5a: b0:c7:23:19:f9:08:74:59:b7:3e:50:18:f9:4e:b1:24:bf:d0: 31:e5:9c:39:a5:1d:65:89:aa:7d:68:e2:0e:1d:84:0f:9b:72: 98:b0:a3:a4:c8:a0:51:d3:f1:91:32:67:18:2e:65:f3:0c:a3: 98:f2:b5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM0iQ80R4NZiuXFbE8IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj ZGQ0ZjYwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygwNzk2MDU4MDQ4ZDY3ODZjM2U4MWJhODRhOWY0YzYwNjI5NWQzNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zLx0O/H8LEfAnXY6PcSsHU7XrWZ bjxKbTkapTQr0MddgittXSeHYHp6NPl+0udVSVV6Yit0EMqXLZw7q6QOaDeH5TlW SG+IrAJ4eELi0HEISP3s5rzCOV0iL/JaZY2BdXFBlFFgfYSVGjHz6+Q1MwzbekNx lMBxyledyIBRjCUT3zmPF7SNapRuLPgVBbmz3vACI57NlpJnqfmFBxYakSw4SICB gUAqrv72zeIG68beNCT7pPIZBUeL6Qg1vqh6GfOIHaT2YQMYAy4sRVnKQitHn0VT y9Qb9/eEGywVvRbmMj3/wYdxPdDTNv+ADNu8NkUJsMxEqJ40jeP2AGU6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeWBYBI1nhsPoG6hKn0xgYpXTXtMB8GA1UdIwQY MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt ZGI4NWJhNDA2YzUxLzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoYZYS76 yQrolW3XlNh1X1BB7TW7kq9Fs5ukc9KQ1ZdYI3gTkjOzwGVv8OMtWApBb7VDWGEF OGNMiuPFVhgyabMIOW4KeOEWn1D/IWLTozeedP62ZQfjDbQCXin5Fmr0EtLPGwFW Aaqh2ZhvnNjrB5HlCDyXQWaMS3/C1h4mGRArzT6h/i0d2kW8gygOj/i313WGb8tL bOCRjJraRVT9MOWEiwfAvRF9wDfIYmDcOXiXquzt+PR4OVmI4G8kg3fVus89sZxa sMcjGfkIdFm3PlAY+U6xJL/QMeWcOaUdZYmqfWjiDh2ED5tymLCjpMigUdPxkTJn GC5l8wyjmPK1Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:10 2025 by rpki-client