This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json) Hash identifier: rIK45enMxb+89jMVvgJj5bUHdMxW6VWi44qcoI+wx1U= Subject key identifier: 24:5E:97:D0:33:4C:D6:F1:07:7C:E6:3D:D1:13:CA:C6:3D:E8:81:EA Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Certificate serial: 019AF12D8EE9DB7E71D0D01EEA576C99C908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: 85erP7MxKHNwtB8anpfllILeQa1OteGyt8BbBxEnX/4=) 2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8e:e9:db:7e:71:d0:d0:1e:ea:57:6c:99:c9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=245e97d0334cd6f1077ce63dd113cac63de881ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:c3:bf:27:88:03:aa:73:ef:0b:46:d0:80: d5:5c:33:62:36:7c:10:0e:b8:5d:46:cd:4e:9b:49: a8:7f:a3:b7:03:9a:17:2a:86:07:2a:42:20:60:0c: 3b:5d:85:80:e3:fb:9e:d9:ca:17:a8:73:9d:56:2c: 92:a2:cd:3c:59:a2:dc:90:e9:d2:b9:4c:32:7c:2a: 71:14:07:b9:73:ae:f8:50:62:c8:30:89:17:20:4e: 8d:01:47:5d:a6:f7:46:4a:b2:3e:a3:49:a3:85:d1: e0:6c:d0:72:11:a1:7e:ba:b5:f7:a1:f0:eb:a6:f8: 05:38:22:b6:07:8a:e2:5a:42:d3:d9:4c:43:80:a3: 88:6d:42:39:6b:e0:99:c2:60:4b:69:1f:a0:0f:c0: 52:06:c9:db:61:ad:a4:59:a2:6c:ac:19:aa:a4:41: 5e:e2:e4:bb:6e:c6:51:87:94:9f:bf:60:39:54:47: 6f:71:05:61:d9:14:78:9b:09:2a:67:a4:3f:41:ec: 25:7b:dd:b4:3b:a8:f0:fa:c9:08:41:c1:38:b0:91: a6:03:b1:a6:f4:c0:1f:a9:cb:2c:ef:b4:2b:18:88: 0d:7e:49:c7:12:ff:0b:b7:75:55:1b:1a:6f:d5:22: 83:41:61:21:2d:07:b7:b5:8e:40:49:a5:76:c3:d7: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:97:D0:33:4C:D6:F1:07:7C:E6:3D:D1:13:CA:C6:3D:E8:81:EA X509v3 Authority Key Identifier: keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e5:e7:fa:3b:97:ad:1b:0e:28:f7:db:71:9e:9d:4c:4f:5c: 6e:c9:99:da:24:b9:91:e3:ff:62:e2:76:0a:ca:dd:5d:ad:ae: 3e:02:22:2c:9e:fc:8b:bd:89:43:8b:6b:71:f7:f3:02:68:6d: a9:c6:22:65:9b:03:3d:80:09:26:75:12:f9:58:6c:92:40:4e: f0:a2:9f:13:ba:83:33:ae:3b:e4:38:af:13:78:40:ea:b3:4b: 48:9d:74:4e:86:bd:83:35:83:d2:28:fe:c6:66:c3:f7:6c:e3: c4:f0:33:5e:98:d2:cb:8d:b6:ac:d9:61:00:a1:bd:2d:f2:5d: d6:8a:92:21:92:cc:80:c3:7c:5e:34:12:86:99:54:23:5c:83: c3:8f:ff:9f:72:14:4c:c2:e5:a2:44:2a:9d:b8:96:f5:72:2a: 29:9b:73:d4:d4:6e:56:0b:45:05:09:3c:16:ee:d0:04:58:9f: aa:0a:78:b1:fb:6b:69:11:16:43:e2:cd:03:2b:a3:41:95:b7: 96:89:49:c8:e2:3f:df:4c:85:8e:fb:26:92:2a:8c:a3:d5:e7: c3:9b:ab:d0:81:85:75:e9:f6:5f:65:7d:c7:75:0d:d1:a1:0b: c5:a2:df:3c:38:c4:ba:a9:41:cd:42:b1:a8:e1:da:ab:f9:4f: c0:e9:4e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY7p235x0NAe6ldsmckIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl ODg1YTAwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EygyNDVlOTdkMDMzNGNkNmYxMDc3Y2U2M2RkMTEzY2FjNjNkZTg4MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQvDvyeIA6pz7wtG0IDVXDNiNnwQ DrhdRs1Om0mof6O3A5oXKoYHKkIgYAw7XYWA4/ue2coXqHOdViySos08WaLckOnS uUwyfCpxFAe5c674UGLIMIkXIE6NAUddpvdGSrI+o0mjhdHgbNByEaF+urX3ofDr pvgFOCK2B4riWkLT2UxDgKOIbUI5a+CZwmBLaR+gD8BSBsnbYa2kWaJsrBmqpEFe 4uS7bsZRh5Sfv2A5VEdvcQVh2RR4mwkqZ6Q/Qewle920O6jw+skIQcE4sJGmA7Gm 9MAfqcss77QrGIgNfknHEv8Lt3VVGxpv1SKDQWEhLQe3tY5ASaV2w9fbJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRel9AzTNbxB3zmPdETysY96IHqMB8GA1UdIwQY MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeXn+juX rRsOKPfbcZ6dTE9cbsmZ2iS5keP/YuJ2CsrdXa2uPgIiLJ78i72JQ4trcffzAmht qcYiZZsDPYAJJnUS+VhskkBO8KKfE7qDM6475DivE3hA6rNLSJ10Toa9gzWD0ij+ xmbD92zjxPAzXpjSy422rNlhAKG9LfJd1oqSIZLMgMN8XjQShplUI1yDw4//n3IU TMLlokQqnbiW9XIqKZtz1NRuVgtFBQk8Fu7QBFifqgp4sftraREWQ+LNAyujQZW3 lolJyOI/30yFjvsmkiqMo9Xnw5ur0IGFden2X2V9x3UN0aELxaLfPDjEuqlBzUKx qOHaq/lPwOlOTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:19 2025 by rpki-client