This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: q2ZtQBAOl+EcOaI0AmyoeprdJ0Z8BVFQkbwp/YGwkZc= Subject key identifier: FF:02:F3:07:CA:65:7C:EE:E9:23:C1:79:DF:EC:C8:9C:8E:9D:04:BE Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019AF3529089EAAC968C778D80BF0358D469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 0y9lGQypECxSmtrjT1uX8Hd0yPKWUSY06smWz6K7WVM=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:90:89:ea:ac:96:8c:77:8d:80:bf:03:58:d4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=ff02f307ca657ceee923c179dfecc89c8e9d04be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:d8:ad:60:17:cd:13:17:3f:ed:6a:46:66: 53:70:77:11:ca:ce:3d:14:13:bc:98:05:8d:3e:f4: 72:23:a2:95:ba:a5:23:07:eb:43:21:2f:d2:17:50: fa:5b:e3:0d:34:fb:60:4d:44:ae:d2:08:be:97:c0: 0f:91:ad:74:ec:7f:2a:dc:91:82:8b:de:5a:ee:6b: 00:3b:6f:11:5e:1a:60:d3:95:08:86:db:1d:8f:66: d7:30:c5:5c:a2:96:0b:d7:06:37:c9:5a:6a:e3:0b: 80:7d:8c:b3:ed:32:92:f2:86:ff:85:f4:5e:39:2f: 4e:af:8c:65:cd:b3:ad:51:85:33:76:6b:11:44:9b: 41:4e:8d:35:9f:2f:f2:22:81:70:4f:e5:12:46:df: 81:85:ad:bd:a4:a2:6d:8c:43:e9:87:ff:b6:6e:4e: f8:02:13:ac:0b:71:64:5f:7e:3a:4a:97:e0:9f:18: fc:67:db:91:b0:a3:d9:6d:23:cd:ff:12:17:b3:62: ea:93:e0:6f:a3:61:b5:8e:4a:1a:dc:8d:2b:56:85: a7:0c:64:99:3c:2e:51:db:ed:ad:c0:c7:ed:61:80: 8a:06:55:62:72:fe:da:b1:8a:8f:7b:50:4e:dc:9e: 32:e6:61:31:36:17:a8:34:77:0a:79:1b:4c:8b:41: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:F3:07:CA:65:7C:EE:E9:23:C1:79:DF:EC:C8:9C:8E:9D:04:BE X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b8:35:04:c0:ec:1f:d5:bf:0f:75:3a:93:71:15:01:39:07: bf:63:b6:c5:3e:0c:6d:7c:cc:53:f0:84:41:f0:3d:da:a8:c3: 46:a9:26:59:19:2f:e1:52:3d:c9:76:68:6c:07:01:52:90:da: c0:8d:97:b8:17:0c:40:1d:0c:c3:74:6a:99:41:f8:2f:23:d2: 3b:da:66:62:6e:d1:7a:46:48:a7:e6:2c:9f:09:36:52:55:c6: 1f:39:d2:14:4d:0b:64:39:ab:f6:2f:70:22:9a:62:e7:1b:8e: 1d:23:ee:46:ee:d1:32:f0:df:c3:dc:11:a2:bb:ed:2b:0e:de: 5f:4b:75:01:60:98:80:53:11:4b:7b:b5:8e:3e:30:63:c9:4b: 8e:45:5e:89:ba:c4:5d:04:68:2e:60:b3:59:f1:aa:ea:01:1b: 18:4c:08:c6:fe:e2:7d:f4:38:69:02:f5:96:66:fd:11:a5:49: 46:33:4a:3d:d8:97:28:49:df:1b:23:3c:2f:95:c0:9e:69:f3: 7b:bf:e5:fb:1f:0e:af:74:b4:09:10:73:c9:3b:cb:19:4b:69: de:17:35:16:e7:6d:f5:9c:be:a4:f8:76:a2:c9:26:84:50:5e: 23:35:30:d3:aa:81:32:7f:7c:6a:46:fb:78:72:ba:c6:e1:30: 18:9f:77:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpCJ6qyWjHeNgL8DWNRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD EyhmZjAyZjMwN2NhNjU3Y2VlZTkyM2MxNzlkZmVjYzg5YzhlOWQwNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5TYrWAXzRMXP+1qRmZTcHcRys49 FBO8mAWNPvRyI6KVuqUjB+tDIS/SF1D6W+MNNPtgTUSu0gi+l8APka107H8q3JGC i95a7msAO28RXhpg05UIhtsdj2bXMMVcopYL1wY3yVpq4wuAfYyz7TKS8ob/hfRe OS9Or4xlzbOtUYUzdmsRRJtBTo01ny/yIoFwT+USRt+Bha29pKJtjEPph/+2bk74 AhOsC3FkX346Spfgnxj8Z9uRsKPZbSPN/xIXs2Lqk+Bvo2G1jkoa3I0rVoWnDGSZ PC5R2+2twMftYYCKBlVicv7asYqPe1BO3J4y5mExNheoNHcKeRtMi0HBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8C8wfKZXzu6SPBed/syJyOnQS+MB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7g1BMDs H9W/D3U6k3EVATkHv2O2xT4MbXzMU/CEQfA92qjDRqkmWRkv4VI9yXZobAcBUpDa wI2XuBcMQB0Mw3RqmUH4LyPSO9pmYm7RekZIp+Ysnwk2UlXGHznSFE0LZDmr9i9w Ippi5xuOHSPuRu7RMvDfw9wRorvtKw7eX0t1AWCYgFMRS3u1jj4wY8lLjkVeibrE XQRoLmCzWfGq6gEbGEwIxv7iffQ4aQL1lmb9EaVJRjNKPdiXKEnfGyM8L5XAnmnz e7/l+x8Or3S0CRBzyTvLGUtp3hc1Fudt9Zy+pPh2oskmhFBeIzUw06qBMn98akb7 eHK6xuEwGJ93HA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:41 2025 by rpki-client