This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json) Hash identifier: Q4bjpUloOHO4waSolxOxIreuT/RBSbkzuFYt5zE9Egk= Subject key identifier: 8B:8D:C2:17:C0:C9:88:4B:96:C7:A2:2C:32:86:97:3E:8D:12:9B:19 Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Certificate serial: 019AF2767D7E963D306BAA702179685D3CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=) 2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: 4CkSdlvHX7rW3FfQj74sWOlhJLyzqIafNwYKOVGQ7bw=) 3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=) 4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7d:7e:96:3d:30:6b:aa:70:21:79:68:5d:3c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=8b8dc217c0c9884b96c7a22c3286973e8d129b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:20:26:a1:82:c8:c1:e6:35:e2:76:8c:72: 04:ff:3d:b0:fa:08:eb:10:fb:ef:b9:60:20:d5:6b: c2:1f:d5:5c:5b:5f:58:a1:b4:18:45:e0:14:02:8d: 76:ab:f1:3e:d2:6a:80:5d:0c:4a:00:e9:9f:e3:79: 35:ee:e4:f1:85:b0:d0:db:6c:67:cd:73:bd:3d:f9: 89:1d:e4:65:1e:c4:9f:24:d2:c9:8f:cd:95:aa:16: 4b:1a:ae:2b:66:e0:0a:53:24:dc:a5:30:ea:71:fb: 1f:1f:8c:39:34:7a:91:f8:6d:a6:3d:ea:22:18:00: 33:b5:6f:11:ee:5d:06:f8:b5:b7:6d:ab:05:e4:03: 81:ab:35:fc:f6:9f:b5:53:76:6d:b9:ea:90:e2:7d: 62:8d:89:79:8d:9b:59:7b:fc:fc:f1:e2:bc:2a:32: df:99:51:5b:69:bb:33:42:bc:8c:33:15:47:4d:80: 2c:13:12:64:8c:ee:64:17:4e:13:23:80:9d:67:61: dd:e3:ce:8f:4a:ee:41:81:c1:4e:7a:7f:fd:37:b5: 37:89:a0:3c:f6:80:4a:26:3f:a8:58:f2:d1:84:45: e2:06:c2:56:fb:35:3f:73:ae:2e:ea:d7:c7:58:3a: c6:65:ca:46:85:46:d7:cb:7b:28:fd:91:bf:69:d4: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:C2:17:C0:C9:88:4B:96:C7:A2:2C:32:86:97:3E:8D:12:9B:19 X509v3 Authority Key Identifier: keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:2c:29:37:b3:9c:2a:79:a6:cb:6d:26:a3:4f:ca:9b:37: 6b:eb:43:fd:60:68:ad:af:a6:6c:8a:bb:99:01:12:4a:40:01: 46:18:c9:84:4f:08:28:f2:ad:01:ff:8a:b1:7c:0e:fa:68:20: 85:c3:fd:e7:e4:e3:7e:8e:a5:b3:4b:55:54:16:e9:32:1d:3b: 5b:fe:3f:ea:4d:70:44:db:da:13:78:a0:7e:47:9d:fb:36:f3: 9d:fa:10:c6:9b:2a:e4:41:d3:fc:0c:53:8e:f8:22:fe:7b:59: 25:90:6d:32:a6:27:11:34:0a:df:74:93:1a:5a:46:55:f1:3e: 50:62:f3:99:9b:d7:e7:ea:59:df:2b:02:d9:66:90:71:06:fe: f9:a8:24:ea:56:fb:63:6b:66:c9:ce:25:e7:74:f2:d0:21:3d: 77:31:c7:a8:55:9e:64:a2:ec:2b:5e:a4:72:2c:6f:c0:a3:26: fb:31:e4:8d:e2:69:bb:dc:b1:1f:f5:f6:17:cf:c9:ef:fd:5a: ad:21:77:86:2b:cf:b3:9c:2e:e3:62:6e:b5:44:49:00:ea:88: 17:e6:26:f6:36:87:23:37:12:79:3d:a2:7f:0b:a2:14:ff:2a: 60:81:e4:cf:d7:99:96:16:a1:ee:17:8e:56:c6:a9:e2:21:ad: 80:65:0d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn1+lj0wa6pwIXloXTynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi NGUxZDMwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD Eyg4YjhkYzIxN2MwYzk4ODRiOTZjN2EyMmMzMjg2OTczZThkMTI5YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMEgJqGCyMHmNeJ2jHIE/z2w+gjr EPvvuWAg1WvCH9VcW19YobQYReAUAo12q/E+0mqAXQxKAOmf43k17uTxhbDQ22xn zXO9PfmJHeRlHsSfJNLJj82VqhZLGq4rZuAKUyTcpTDqcfsfH4w5NHqR+G2mPeoi GAAztW8R7l0G+LW3basF5AOBqzX89p+1U3ZtueqQ4n1ijYl5jZtZe/z88eK8KjLf mVFbabszQryMMxVHTYAsExJkjO5kF04TI4CdZ2Hd486PSu5BgcFOen/9N7U3iaA8 9oBKJj+oWPLRhEXiBsJW+zU/c64u6tfHWDrGZcpGhUbXy3so/ZG/adQZhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuNwhfAyYhLlseiLDKGlz6NEpsZMB8GA1UdIwQY MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt ZmJiODA4NTNjMWJlLzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ0sKTez nCp5psttJqNPyps3a+tD/WBora+mbIq7mQESSkABRhjJhE8IKPKtAf+KsXwO+mgg hcP95+Tjfo6ls0tVVBbpMh07W/4/6k1wRNvaE3igfked+zbznfoQxpsq5EHT/AxT jvgi/ntZJZBtMqYnETQK33STGlpGVfE+UGLzmZvX5+pZ3ysC2WaQcQb++agk6lb7 Y2tmyc4l53Ty0CE9dzHHqFWeZKLsK16kcixvwKMm+zHkjeJpu9yxH/X2F8/J7/1a rSF3hivPs5wu42JutURJAOqIF+Ym9jaHIzcSeT2ifwuiFP8qYIHkz9eZlhah7heO Vsap4iGtgGUNsg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:59 2025 by rpki-client