This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json) Hash identifier: /+PRchU979L9IMxRavI8fSjKD24jrfB4IdqCWGKvSPk= Subject key identifier: E6:CD:12:DF:FA:F6:6E:A9:FE:97:61:FA:3D:0E:0F:BC:AE:0C:87:21 Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Certificate serial: 019AF2765E8DC7A0A864F3C4151353669068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft Manifest number: 0A9E Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: 3ofKCds+jAwMPH4DTC3lYywNwQJBkIplcO1Z6kEI8qk=) 2: aaJq10NBNFtvWoQuCDfpNSfnYu0.roa (hash: ShW6y/0OofG8gWfm3Z3goLVgotABbmN4Tjp6HEhaoAQ=) 3: qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa (hash: 2EMpyRudbmzblcQQ/7M2y7TOTZvbf6HTjZbDCcTPW3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5e:8d:c7:a0:a8:64:f3:c4:15:13:53:66:90:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=e6cd12dffaf66ea9fe9761fa3d0e0fbcae0c8721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:06:57:84:40:cf:8e:7e:7c:c0:7c:5f:02: 16:5b:d3:22:6e:3f:67:63:40:70:f3:d9:cc:9a:0d: 4c:21:7a:f6:76:84:b9:cd:17:92:8c:36:ad:69:99: c9:ef:a7:43:4d:99:6b:7f:e3:ec:3b:54:96:c7:21: 95:d9:65:1e:e5:b5:6c:ed:20:22:94:b0:d4:41:58: 09:72:49:cb:87:00:31:c1:cf:5c:a7:42:0d:2d:3f: 7e:26:0a:d3:0a:0e:25:cd:9b:95:25:96:9e:1b:92: 89:11:fc:73:1f:59:a1:54:d0:40:fa:88:59:f1:4b: 31:c0:23:7c:51:26:aa:5b:fc:34:d5:d9:33:c9:4d: c8:f2:a6:cb:85:83:09:59:83:f6:fd:4d:5e:38:0f: 14:9d:13:5f:61:e1:32:e3:43:10:10:25:d4:f0:74: 96:df:27:d1:ea:81:b0:c6:9a:89:37:52:7c:ee:9c: 3e:4e:d2:59:fc:b3:e1:47:13:ef:a7:04:76:06:f5: 1c:1b:6c:a8:17:bb:5f:a5:de:c4:ab:d3:a4:06:6f: 98:fb:cb:01:80:3c:90:0c:e6:59:09:90:32:79:62: c1:0d:b0:67:8d:8a:25:b0:c5:66:6d:63:e8:9d:48: f4:ec:8a:c6:7e:58:2c:e7:4f:9c:7e:20:fb:4f:11: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:12:DF:FA:F6:6E:A9:FE:97:61:FA:3D:0E:0F:BC:AE:0C:87:21 X509v3 Authority Key Identifier: keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3f:ab:e0:6e:eb:19:19:df:da:16:4f:53:4a:2f:ac:c0:85: 99:d5:34:29:7e:22:94:d2:f7:d9:80:b8:75:fa:c7:ca:37:30: c2:5d:7d:cf:2e:40:ed:9f:2d:16:de:87:61:fe:98:69:08:9c: 66:9c:f3:2c:1b:ed:66:a4:ed:cb:f6:a6:2d:10:45:74:23:fd: d2:fd:89:ce:bf:79:c1:ee:4d:1f:c3:e5:38:4d:59:a6:11:dc: 23:e2:fd:b0:9e:33:7f:22:3b:54:ac:a8:86:f1:d0:43:b3:05: b6:0b:de:e2:65:d9:ed:3d:71:65:1e:3f:0e:93:85:20:fc:29: d4:08:a5:9d:18:35:bb:13:6d:5f:c5:68:12:eb:a7:02:43:cb: 09:16:e3:df:e0:2e:c4:14:59:03:5e:2a:fe:65:e7:bd:a5:d2: a7:e1:67:5e:97:0e:2d:ba:2d:a3:f6:e2:03:dd:1d:b5:2a:b6: 76:20:b6:ff:47:84:18:99:b4:a2:a5:bd:81:7d:63:4d:93:10: 6f:1e:86:8d:8b:dc:2a:f8:f2:00:b8:75:0e:9c:ee:13:26:7a: 2d:6d:a4:d3:01:d9:21:0c:61:28:24:1c:8f:4e:6a:94:35:6b: 34:36:ca:56:3d:a8:50:02:93:9c:2b:08:6e:e8:d0:10:de:e5: 6d:99:e5:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl6Nx6CoZPPEFRNTZpBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjE2ZWVjNTE0YjA3ZGNlMjlkMzAxM2ExOTBiMmVlNWZj YjFmOTQwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD EyhlNmNkMTJkZmZhZjY2ZWE5ZmU5NzYxZmEzZDBlMGZiY2FlMGM4NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNQGV4RAz45+fMB8XwIWW9Mibj9n Y0Bw89nMmg1MIXr2doS5zReSjDataZnJ76dDTZlrf+PsO1SWxyGV2WUe5bVs7SAi lLDUQVgJcknLhwAxwc9cp0INLT9+JgrTCg4lzZuVJZaeG5KJEfxzH1mhVNBA+ohZ 8UsxwCN8USaqW/w01dkzyU3I8qbLhYMJWYP2/U1eOA8UnRNfYeEy40MQECXU8HSW 3yfR6oGwxpqJN1J87pw+TtJZ/LPhRxPvpwR2BvUcG2yoF7tfpd7Eq9OkBm+Y+8sB gDyQDOZZCZAyeWLBDbBnjYolsMVmbWPonUj07IrGflgs50+cfiD7TxHwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObNEt/69m6p/pdh+j0OD7yuDIchMB8GA1UdIwQY MBaAFAYhbuxRSwfc4p0wE6GQsu5fyx+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMt MTg4ZGNmZjBlNDA1LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMtMTg4ZGNmZjBlNDA1 LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj+r4G7r GRnf2hZPU0ovrMCFmdU0KX4ilNL32YC4dfrHyjcwwl19zy5A7Z8tFt6HYf6YaQic ZpzzLBvtZqTty/amLRBFdCP90v2Jzr95we5NH8PlOE1ZphHcI+L9sJ4zfyI7VKyo hvHQQ7MFtgve4mXZ7T1xZR4/DpOFIPwp1AilnRg1uxNtX8VoEuunAkPLCRbj3+Au xBRZA14q/mXnvaXSp+FnXpcOLboto/biA90dtSq2diC2/0eEGJm0oqW9gX1jTZMQ bx6GjYvcKvjyALh1DpzuEyZ6LW2k0wHZIQxhKCQcj05qlDVrNDbKVj2oUAKTnCsI bujQEN7lbZnlWg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:00 2025 by rpki-client