This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json) Hash identifier: bCVtabuVCXFrcQZeoj4PFwKaimW0ahKwoQOWDZEvSXo= Subject key identifier: F3:59:AD:63:03:DA:E6:5F:32:3B:03:80:E8:92:B9:32:0C:BA:4D:4D Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b Certificate serial: 019B2EF9369C6AA71BB53C8149ACD0743658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft Manifest number: 0AC1 Signing time: Thu 18 Dec 2025 01:00:42 +0000 Manifest this update: Thu 18 Dec 2025 01:00:42 +0000 Manifest next update: Fri 19 Dec 2025 01:00:42 +0000 Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: OhepK71ygk+3RysjAxJOIteGEU80ZjxLpjUaEgzzSTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:36:9c:6a:a7:1b:b5:3c:81:49:ac:d0:74:36:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b Validity Not Before: Dec 18 01:00:42 2025 GMT Not After : Dec 19 01:00:42 2025 GMT Subject: CN=f359ad6303dae65f323b0380e892b9320cba4d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:35:34:fe:95:21:7d:30:be:22:6e:f9:60: 5f:17:1a:87:16:c7:63:dc:d6:a9:1a:4c:68:c6:0f: 52:fc:e9:3e:a7:6f:a6:12:f2:55:d1:11:5c:91:7d: 7b:0b:97:d1:c2:bf:c0:c2:e3:f7:cf:c8:9c:c3:bb: bf:3e:09:06:2e:7a:d3:3c:55:f5:59:47:c7:13:37: 64:29:0d:3d:29:fc:28:8d:5e:56:5e:12:10:b6:ec: ab:ef:34:3d:e1:7b:51:1b:0b:6a:4e:a1:46:72:05: 5e:17:f9:b4:a5:41:12:45:97:ba:d6:f2:8f:a6:6c: 23:a4:14:35:2f:5c:a3:e8:8c:0d:5b:df:bc:04:a4: 77:00:ff:20:e4:a1:cd:4c:d5:89:24:08:df:ef:0e: a4:a4:b9:6e:9d:0b:d9:7f:2a:1a:9a:9d:25:d7:d7: ac:94:24:14:cc:5e:f2:89:7f:76:30:5e:0b:d5:38: a3:bb:bb:85:52:f7:62:eb:df:db:c3:c4:e0:12:cb: 7f:35:18:57:3e:17:34:fc:bd:ad:60:e9:fa:89:ce: 49:70:25:16:ba:d8:c8:ae:2a:ce:a6:2d:ef:38:0c: e0:52:d6:17:68:a8:3e:7d:91:23:9e:e3:80:3f:72: 7e:e7:ea:7f:7f:1e:b4:78:24:ea:ae:f2:59:ba:3e: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:AD:63:03:DA:E6:5F:32:3B:03:80:E8:92:B9:32:0C:BA:4D:4D X509v3 Authority Key Identifier: keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4c:33:ca:00:a4:85:73:41:bd:df:f2:00:ba:07:42:4b:dd: 17:96:85:44:24:72:ee:35:04:da:46:40:a9:fe:68:26:ff:27: 80:09:c4:fa:1a:3a:3b:7c:f6:66:a8:ec:5a:95:bb:56:dd:3d: 54:17:16:13:be:16:58:ee:00:81:f0:fd:6b:4c:99:ef:c3:0c: 0d:9c:09:80:99:3d:39:9b:54:f8:f1:52:f8:6a:49:2d:ca:98: f3:ca:e2:5c:ae:34:4a:73:21:3b:ab:84:1f:5c:8e:55:c8:6a: 6b:c9:3f:89:a6:e7:59:9e:aa:44:5c:d2:b6:e7:e1:ef:33:1e: 9d:22:17:3c:6f:29:4c:98:6a:db:7e:53:24:f7:58:cb:81:55: 73:e0:48:3e:28:c7:de:4f:99:9c:ab:18:e6:71:09:05:73:ba: d3:8a:6b:08:f5:a8:5e:29:a7:9b:35:2b:a7:75:70:e5:83:4b: 44:de:46:59:43:66:13:91:ae:01:ef:a7:68:fe:cf:92:32:5a: db:47:1c:15:73:65:f0:75:6f:a9:45:52:62:9b:5c:9e:2b:1e: 06:30:60:8e:b4:68:57:69:11:1e:35:e9:05:5b:03:50:73:72: 4a:d8:de:b7:55:e2:01:45:0a:b4:be:cc:6f:81:0f:98:95:5a: 07:31:96:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+TacaqcbtTyBSazQdDZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTQ4NTdmNTIxYmUyMWUxMjY3MzlkYWQ3NzNiNGU2YTE4 YWM2OWIwHhcNMjUxMjE4MDEwMDQyWhcNMjUxMjE5MDEwMDQyWjAzMTEwLwYDVQQD EyhmMzU5YWQ2MzAzZGFlNjVmMzIzYjAzODBlODkyYjkzMjBjYmE0ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oY1NP6VIX0wviJu+WBfFxqHFsdj 3NapGkxoxg9S/Ok+p2+mEvJV0RFckX17C5fRwr/AwuP3z8icw7u/PgkGLnrTPFX1 WUfHEzdkKQ09KfwojV5WXhIQtuyr7zQ94XtRGwtqTqFGcgVeF/m0pUESRZe61vKP pmwjpBQ1L1yj6IwNW9+8BKR3AP8g5KHNTNWJJAjf7w6kpLlunQvZfyoamp0l19es lCQUzF7yiX92MF4L1Tiju7uFUvdi69/bw8TgEst/NRhXPhc0/L2tYOn6ic5JcCUW utjIrirOpi3vOAzgUtYXaKg+fZEjnuOAP3J+5+p/fx60eCTqrvJZuj7qpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNZrWMD2uZfMjsDgOiSuTIMuk1NMB8GA1UdIwQY MBaAFAaUhX9SG+IeEmc52tdztOahisabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2Yt ODhhZmJkNGEzZGQyLzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2YtODhhZmJkNGEzZGQy LzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUwzygCk hXNBvd/yALoHQkvdF5aFRCRy7jUE2kZAqf5oJv8ngAnE+ho6O3z2ZqjsWpW7Vt09 VBcWE74WWO4AgfD9a0yZ78MMDZwJgJk9OZtU+PFS+GpJLcqY88riXK40SnMhO6uE H1yOVchqa8k/iabnWZ6qRFzStufh7zMenSIXPG8pTJhq235TJPdYy4FVc+BIPijH 3k+ZnKsY5nEJBXO604prCPWoXimnmzUrp3Vw5YNLRN5GWUNmE5GuAe+naP7PkjJa 20ccFXNl8HVvqUVSYptcniseBjBgjrRoV2kRHjXpBVsDUHNyStjet1XiAUUKtL7M b4EPmJVaBzGWSA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:40 2025 by rpki-client