This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json) Hash identifier: 8ShVtkvmB8R3IvpkI1A+ZOmt0a0jG6M4YeWS+rKFx7k= Subject key identifier: C3:57:D2:7C:F6:24:9B:49:1A:58:78:F4:67:AE:8B:7A:8A:BB:FA:FB Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b Certificate serial: 019AF12CB6677424A76D9EECC5A943BBB694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft Manifest number: 0AA1 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: cO03YjBW4Pmq4b//U32vWef7L59xOA3Srj2rIcTe7m4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b6:67:74:24:a7:6d:9e:ec:c5:a9:43:bb:b6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=c357d27cf6249b491a5878f467ae8b7a8abbfafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:ae:db:c7:05:da:ba:b5:34:ae:6b:57:2f: a5:64:11:c6:4a:c8:45:a1:59:8e:3a:db:2f:42:1a: 79:bc:da:47:9a:6e:a5:c5:0b:ca:8b:90:19:52:23: 7b:df:99:4f:ab:f3:e0:c2:77:8a:a2:79:53:ec:64: 1b:4c:62:bd:fc:a3:49:97:ba:2d:3f:f8:5b:a3:f4: 60:27:c8:2e:c8:49:50:fd:71:d2:cb:7f:19:25:3a: 89:00:16:89:3f:71:39:c3:7d:42:f4:5f:16:ea:91: 12:0f:8c:a3:fc:83:a5:12:4c:20:8a:13:c6:ad:59: 60:28:62:f9:ef:aa:e8:1a:d0:e9:bb:71:e9:ac:d7: ea:f9:92:5a:08:76:7e:ae:47:94:22:ff:26:fa:b5: e7:22:03:2b:6f:8e:39:fa:5f:f5:95:cc:c3:f4:a4: 1f:54:7e:93:3d:5e:79:38:cd:dc:1e:35:b4:7b:64: dd:94:d9:1c:ef:13:be:e2:05:e9:7d:81:cc:57:27: af:9e:5e:f8:82:a8:b0:06:3f:39:36:3d:25:56:ac: f7:04:42:19:ac:c3:dd:14:b7:b2:d9:3a:cf:a2:37: dc:4a:52:df:3a:d4:b6:63:6c:84:1a:ea:67:22:bd: de:a9:7d:6d:29:4b:cb:ab:52:13:81:d0:17:dd:46: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:D2:7C:F6:24:9B:49:1A:58:78:F4:67:AE:8B:7A:8A:BB:FA:FB X509v3 Authority Key Identifier: keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:ee:d1:92:c9:91:32:8c:d3:83:20:e1:67:dc:73:84:0b: ac:73:dc:4c:c8:04:b3:3a:25:af:a1:bc:73:1f:f5:ad:2b:2c: 85:3e:a8:5f:1c:2d:76:c1:0b:ee:bd:2d:b6:1f:ad:f6:12:b7: 94:fb:b5:0f:80:cd:5a:a8:e4:77:37:60:48:cb:0a:a2:e0:ea: 87:d6:b8:41:1f:14:df:f9:4e:02:61:d5:f2:48:3b:58:a2:f7: ae:43:01:fa:d8:c0:83:85:10:48:8e:2a:b5:86:17:55:07:a1: df:41:41:1f:92:69:4a:10:6e:8d:c9:5b:94:1c:92:d6:fe:ec: 39:38:83:da:0c:e5:ec:20:5c:6f:5b:02:8a:8b:9d:66:4d:f2: c3:86:b8:bf:89:00:dd:ae:38:66:4b:e5:f1:bb:23:08:7b:a7: 0e:86:fe:9a:af:03:10:95:d0:1d:10:47:43:47:ea:14:d7:84: a6:ff:d3:86:a7:0d:f8:6b:9b:90:12:89:59:0e:13:14:5f:19: d9:dc:c9:34:9c:8e:df:f1:0f:16:e8:31:31:15:c2:06:8f:27: d8:bd:9c:cf:bb:a8:ae:e9:9c:a1:c4:05:6a:f5:54:a8:a0:d9: 54:52:e9:f1:35:e3:1f:df:9b:c3:af:89:a8:a0:38:76:92:00: cb:ff:7d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLZndCSnbZ7sxalDu7aUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTQ4NTdmNTIxYmUyMWUxMjY3MzlkYWQ3NzNiNGU2YTE4 YWM2OWIwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD EyhjMzU3ZDI3Y2Y2MjQ5YjQ5MWE1ODc4ZjQ2N2FlOGI3YThhYmJmYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0yu28cF2rq1NK5rVy+lZBHGSshF oVmOOtsvQhp5vNpHmm6lxQvKi5AZUiN735lPq/PgwneKonlT7GQbTGK9/KNJl7ot P/hbo/RgJ8guyElQ/XHSy38ZJTqJABaJP3E5w31C9F8W6pESD4yj/IOlEkwgihPG rVlgKGL576roGtDpu3HprNfq+ZJaCHZ+rkeUIv8m+rXnIgMrb445+l/1lczD9KQf VH6TPV55OM3cHjW0e2TdlNkc7xO+4gXpfYHMVyevnl74gqiwBj85Nj0lVqz3BEIZ rMPdFLey2TrPojfcSlLfOtS2Y2yEGupnIr3eqX1tKUvLq1ITgdAX3UbqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNX0nz2JJtJGlh49Geui3qKu/r7MB8GA1UdIwQY MBaAFAaUhX9SG+IeEmc52tdztOahisabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2Yt ODhhZmJkNGEzZGQyLzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2YtODhhZmJkNGEzZGQy LzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedju0ZLJ kTKM04Mg4Wfcc4QLrHPcTMgEszolr6G8cx/1rSsshT6oXxwtdsEL7r0tth+t9hK3 lPu1D4DNWqjkdzdgSMsKouDqh9a4QR8U3/lOAmHV8kg7WKL3rkMB+tjAg4UQSI4q tYYXVQeh30FBH5JpShBujclblByS1v7sOTiD2gzl7CBcb1sCioudZk3yw4a4v4kA 3a44Zkvl8bsjCHunDob+mq8DEJXQHRBHQ0fqFNeEpv/ThqcN+GubkBKJWQ4TFF8Z 2dzJNJyO3/EPFugxMRXCBo8n2L2cz7uorumcocQFavVUqKDZVFLp8TXjH9+bw6+J qKA4dpIAy/99xg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:46 2025 by rpki-client