This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json) Hash identifier: PC+01OiRkD78O1U+FlfBc4q4NJ8dThExC8LdW8jAv/g= Subject key identifier: 74:18:CC:87:7F:8E:7F:97:96:E3:E4:20:E1:15:E4:04:82:06:FE:68 Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Certificate serial: 019AF12E2B5213A9DB43D43554E3FF32B23E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft Manifest number: 0AB1 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=) 2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=) 3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: ocmT9UeVdDuLZGywP+hZjYkzvipLUP6XW6+JkhVQqzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2b:52:13:a9:db:43:d4:35:54:e3:ff:32:b2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=7418cc877f8e7f9796e3e420e115e4048206fe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:0f:d7:b8:c0:d5:ec:da:f2:dd:90:f9:ad: 3d:dc:13:46:94:c4:2b:70:68:eb:8d:36:4d:ba:33: f5:78:0a:d4:79:e8:23:0e:46:98:89:1e:46:de:9c: 96:43:be:5d:e6:4d:42:02:cc:0b:fa:04:06:06:1b: e1:39:3e:4b:4d:5c:34:20:65:51:3a:70:d1:35:c6: 7e:53:ac:37:e1:d3:d1:f1:3f:2a:da:0b:0c:e2:e8: ab:d5:65:20:21:f3:af:69:6b:40:6b:71:68:62:d3: 7f:23:bd:ad:f7:3a:4c:b3:3f:f2:e0:c7:96:52:1c: 8f:ad:21:15:ed:5a:7c:2e:f5:0b:0f:9b:0b:79:81: 57:15:7f:9d:b5:1f:d8:64:0e:9e:cf:85:12:07:a7: 83:69:0e:65:63:de:1d:e2:60:3b:07:df:5d:85:9e: e3:ba:a0:a5:e3:1a:0b:76:44:44:68:19:2d:4f:e1: 43:89:07:71:7f:e3:01:8c:a2:58:35:3b:f1:a3:f0: 65:ce:c5:a4:19:79:62:08:31:f1:5e:84:00:20:52: 6a:9f:6d:af:d9:11:6a:bc:f8:41:ac:ee:e0:47:5c: 45:ef:f2:3e:f6:c0:02:58:a3:cc:d2:db:9f:46:67: 4c:53:72:ad:58:11:11:e4:62:3f:b5:93:de:0a:65: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:18:CC:87:7F:8E:7F:97:96:E3:E4:20:E1:15:E4:04:82:06:FE:68 X509v3 Authority Key Identifier: keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:10:06:7e:47:8d:cb:4a:7e:87:d5:41:36:74:8d:c6:df:51: b3:3e:43:7b:3e:9f:ce:5a:b4:b8:1f:90:31:51:71:40:5d:bf: 18:0d:83:b2:1f:15:7d:f5:43:a4:ff:06:55:3e:d7:52:49:05: 94:60:67:d5:c1:af:81:48:e9:a5:dc:92:86:b8:ee:23:81:18: 10:61:de:8f:d3:77:0c:aa:cb:50:28:9e:3d:b5:08:ab:36:99: 23:56:a4:7c:56:39:fe:01:a6:a2:d7:1c:d8:d5:d9:e2:c6:69: c6:79:d0:4d:52:05:31:ad:a9:3b:7d:8c:61:b7:c0:c6:b8:f8: 4c:92:0e:06:b9:1e:3b:7e:61:e8:58:2c:f8:ff:3a:50:57:e5: 28:cd:af:d8:22:38:4b:07:71:d8:91:96:b8:65:4f:2e:9c:1a: a1:c5:4f:09:37:20:9d:ce:bb:de:f1:6e:b2:5e:fd:fb:8a:33: 51:b2:09:53:4c:0c:55:a7:69:b6:8e:9b:31:da:02:4e:13:5d: 74:7a:7d:40:d5:51:e9:20:30:95:0a:77:bf:73:15:20:d4:b6: f9:96:b8:a7:45:c1:03:cf:08:61:83:36:9f:40:46:79:30:bd: 0d:20:3e:82:c0:3b:59:d7:b2:af:51:37:b4:bd:f8:eb:a2:57: 07:33:2b:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLitSE6nbQ9Q1VOP/MrI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx YWM3OWUwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD Eyg3NDE4Y2M4NzdmOGU3Zjk3OTZlM2U0MjBlMTE1ZTQwNDgyMDZmZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovYP17jA1eza8t2Q+a093BNGlMQr cGjrjTZNujP1eArUeegjDkaYiR5G3pyWQ75d5k1CAswL+gQGBhvhOT5LTVw0IGVR OnDRNcZ+U6w34dPR8T8q2gsM4uir1WUgIfOvaWtAa3FoYtN/I72t9zpMsz/y4MeW UhyPrSEV7Vp8LvULD5sLeYFXFX+dtR/YZA6ez4USB6eDaQ5lY94d4mA7B99dhZ7j uqCl4xoLdkREaBktT+FDiQdxf+MBjKJYNTvxo/BlzsWkGXliCDHxXoQAIFJqn22v 2RFqvPhBrO7gR1xF7/I+9sACWKPM0tufRmdMU3KtWBER5GI/tZPeCmVQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQYzId/jn+XluPkIOEV5ASCBv5oMB8GA1UdIwQY MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBAGfkeN y0p+h9VBNnSNxt9Rsz5Dez6fzlq0uB+QMVFxQF2/GA2Dsh8VffVDpP8GVT7XUkkF lGBn1cGvgUjppdyShrjuI4EYEGHej9N3DKrLUCiePbUIqzaZI1akfFY5/gGmotcc 2NXZ4sZpxnnQTVIFMa2pO32MYbfAxrj4TJIOBrkeO35h6Fgs+P86UFflKM2v2CI4 Swdx2JGWuGVPLpwaocVPCTcgnc673vFusl79+4ozUbIJU0wMVadpto6bMdoCThNd dHp9QNVR6SAwlQp3v3MVINS2+Za4p0XBA88IYYM2n0BGeTC9DSA+gsA7Wdeyr1E3 tL3466JXBzMrhg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:50 2025 by rpki-client