This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: i4sY7JOdeRj0DUKT6lSFdFqgCW2Bv+N2Gk6Cnftc49s= Subject key identifier: 86:C4:F3:5E:F9:2E:80:8D:6F:23:1A:73:57:32:9E:64:34:1D:9E:6A Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019AF23FD4034C351890CA5A15F739E5DFD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 0FFE Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: 3nKPvfyefhBBthk-LrRdD-jfvW0.roa (hash: 1vR7bznA03xVBTq7D8itXQ6xNZUvjtjklTS5nPcHTr0=) 2: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=) 3: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=) 4: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=) 5: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=) 6: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: d8tEevRH+05rKGq2g3Ke2+RzrKlPIfwftBlaIYrYGUs=) 7: gnZzs6ma6bupZv_QFfeHC2w5vfs.roa (hash: tmmh6VOJ4XQ6zqxdY06hmFVr0WRGDB+DoX6nJefrwl4=) 8: qdAA7q69Q1-iHrB71QL2uIwgL4w.roa (hash: iSApU3MrBQxUv9YTKIjLYJmrBm6GZCpJuQa46wrbtrQ=) 9: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=) 10: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:03:4c:35:18:90:ca:5a:15:f7:39:e5:df:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=86c4f35ef92e808d6f231a7357329e64341d9e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:b7:cc:a9:1a:19:48:9c:ba:c5:b6:ce:88: fc:1c:b1:98:d5:a7:06:36:00:14:ad:59:32:2b:3b: ab:5a:38:fe:f0:44:e3:15:5c:f8:80:db:58:8b:ca: fe:8a:a0:bd:dc:10:1b:98:d1:aa:f0:ba:24:b7:32: 68:dc:a3:de:6a:4f:b6:5b:df:b0:15:ec:93:c5:b8: 9e:d6:74:d4:00:1a:3b:b6:1c:a0:31:e3:17:c1:c6: a2:71:74:a3:ca:7c:68:51:16:8b:7a:58:92:7d:22: e2:4d:c9:59:ea:a6:ee:84:bb:fa:19:e2:1d:5f:a8: cb:91:97:e5:b7:a7:f1:28:65:f3:19:c3:5c:6d:98: 63:93:11:e8:83:9f:05:f2:f7:67:62:39:0e:de:69: 1f:13:c0:44:85:04:73:67:bd:0f:e1:64:46:74:e1: 79:ed:58:0e:77:84:be:db:ea:38:31:09:d8:c8:7b: 0f:61:06:ad:a5:39:d1:39:12:a4:b8:9d:e5:08:22: d6:63:32:4b:77:92:2d:00:51:6b:06:2b:f1:f4:d1: 8e:0a:e0:31:76:1c:d8:2d:e5:18:86:0f:69:45:5a: 6d:8e:aa:19:ca:15:5d:c3:d7:a5:6c:6e:f2:ad:16: 1c:23:4b:4c:0f:2e:3a:74:9f:60:fd:7f:07:d5:51: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:F3:5E:F9:2E:80:8D:6F:23:1A:73:57:32:9E:64:34:1D:9E:6A X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:43:22:c4:6b:ae:36:0f:99:7c:19:87:8f:6b:52:4c:29:87: f4:b1:bc:0c:0f:4c:c6:fc:b8:ac:57:f5:f2:17:4d:17:1d:86: 66:87:72:aa:dd:67:aa:b9:ff:93:d4:cb:d1:f1:d7:01:e0:2c: 18:09:83:da:73:fd:b6:5d:22:b4:9f:ca:ac:ad:3d:47:a2:12: 4b:85:f9:01:a6:4b:e1:e5:db:5a:c5:b0:5c:de:7e:2f:b8:fb: 46:35:8f:b5:2c:e7:66:fd:5e:e7:2a:3a:ea:63:7c:c6:f2:59: c3:59:29:89:a8:c3:ec:ac:58:36:6e:b0:14:39:fb:85:ec:eb: 73:fb:9b:a0:87:74:51:16:07:96:24:2b:0f:e8:67:5e:7a:96: 56:17:76:57:18:29:97:6d:53:68:5f:81:04:00:be:d0:9e:37: 0a:a5:fb:54:80:77:74:b4:db:16:99:42:c4:2b:01:2f:77:af: 96:fa:b3:0b:a2:66:2f:06:72:2a:50:cc:6a:48:99:c9:c8:82: 47:31:fe:1d:13:67:b8:b2:32:33:2c:60:47:64:1b:bc:d2:20: 07:2b:06:22:dc:53:92:f9:cc:6a:19:ff:be:5f:2b:a9:7e:b6: 41:28:74:1e:54:e6:f2:41:5c:95:fe:69:ea:c0:8b:a3:9e:b4: 16:a0:55:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9QDTDUYkMpaFfc55d/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg4NmM0ZjM1ZWY5MmU4MDhkNmYyMzFhNzM1NzMyOWU2NDM0MWQ5ZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGq3zKkaGUicusW2zoj8HLGY1acG NgAUrVkyKzurWjj+8ETjFVz4gNtYi8r+iqC93BAbmNGq8LoktzJo3KPeak+2W9+w FeyTxbie1nTUABo7thygMeMXwcaicXSjynxoURaLeliSfSLiTclZ6qbuhLv6GeId X6jLkZflt6fxKGXzGcNcbZhjkxHog58F8vdnYjkO3mkfE8BEhQRzZ70P4WRGdOF5 7VgOd4S+2+o4MQnYyHsPYQatpTnRORKkuJ3lCCLWYzJLd5ItAFFrBivx9NGOCuAx dhzYLeUYhg9pRVptjqoZyhVdw9elbG7yrRYcI0tMDy46dJ9g/X8H1VHa3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbE8175LoCNbyMac1cynmQ0HZ5qMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUMixGuu Ng+ZfBmHj2tSTCmH9LG8DA9Mxvy4rFf18hdNFx2GZodyqt1nqrn/k9TL0fHXAeAs GAmD2nP9tl0itJ/KrK09R6ISS4X5AaZL4eXbWsWwXN5+L7j7RjWPtSznZv1e5yo6 6mN8xvJZw1kpiajD7KxYNm6wFDn7hezrc/uboId0URYHliQrD+hnXnqWVhd2Vxgp l21TaF+BBAC+0J43CqX7VIB3dLTbFplCxCsBL3evlvqzC6JmLwZyKlDMakiZyciC RzH+HRNnuLIyMyxgR2QbvNIgBysGItxTkvnMahn/vl8rqX62QSh0HlTm8kFclf5p 6sCLo560FqBVfg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:08 2025 by rpki-client