This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json) Hash identifier: /I4fbgYDbiM4RDXGGWHdjfJKdQ+P/9j8+XcQH9M6ZB4= Subject key identifier: 9A:45:88:DC:A6:93:9E:82:02:E6:03:2C:0C:3D:20:A7:BB:DA:6A:79 Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Certificate serial: 019AF5410248CDD203CDE246A36D6F48DE78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft Manifest number: 16AA Signing time: Sat 06 Dec 2025 20:01:09 +0000 Manifest this update: Sat 06 Dec 2025 20:01:09 +0000 Manifest next update: Sun 07 Dec 2025 20:01:09 +0000 Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: eHdhwstLv2ITK1HYJuzAzQa+PzJBkr48tllKizi2zxI=) 2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:02:48:cd:d2:03:cd:e2:46:a3:6d:6f:48:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Validity Not Before: Dec 6 20:01:09 2025 GMT Not After : Dec 7 20:01:09 2025 GMT Subject: CN=9a4588dca6939e8202e6032c0c3d20a7bbda6a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:64:8a:0e:3f:be:ac:19:4e:1a:ad:ef:03: bb:bc:48:cd:44:57:60:97:97:19:2a:aa:a7:8d:4f: 48:d6:c1:78:60:89:45:4c:c9:a3:4f:7a:10:e4:46: e0:c8:52:f3:4a:ae:5a:cd:d4:a4:ca:67:ad:2c:9a: 85:b8:25:1c:6e:03:6b:87:ae:a7:14:da:84:f5:3a: 78:42:e1:1d:81:c9:5f:5b:71:fb:0f:8c:09:80:ed: 51:13:0f:bf:68:86:e3:f4:3b:0c:b8:ba:04:00:d6: 07:61:43:5e:4e:88:bc:99:46:47:7e:26:85:53:1e: fb:8f:db:e5:0a:7b:d9:39:41:35:80:44:10:2e:1b: 13:37:21:cd:e2:23:d1:cd:ce:2a:57:38:65:26:d0: fe:b8:d4:bc:23:19:f7:64:c5:34:06:8e:60:25:71: c4:36:6e:04:bd:3e:8b:00:fe:25:64:3d:ab:69:e3: cb:a3:d9:e1:27:eb:34:6b:c8:8f:57:9e:b5:f0:74: 35:25:da:8d:3e:f2:72:53:1c:61:23:75:c4:ff:f5: ed:98:4d:e5:63:31:b7:33:af:fb:1f:8b:f1:d0:a8: 4d:8c:0a:0f:c2:48:77:2d:31:95:1f:9a:70:62:96: 7a:7d:df:f5:48:85:8e:47:a6:85:ae:7d:85:21:6a: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:45:88:DC:A6:93:9E:82:02:E6:03:2C:0C:3D:20:A7:BB:DA:6A:79 X509v3 Authority Key Identifier: keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:d4:0f:3e:34:08:bb:2f:72:cd:eb:2c:68:9e:9d:42:0e: e2:df:54:92:b8:20:9f:e3:44:f4:8f:d2:f3:6a:21:00:b7:d0: c7:b6:11:dd:fb:db:25:f3:86:ef:97:c1:27:d2:05:57:4a:5c: ee:e3:90:e9:9d:0f:2a:7d:da:2a:1b:09:1f:69:00:f2:ab:23: a8:65:99:a0:bd:a7:b5:b0:e1:52:f7:7e:19:f2:de:e6:a0:27: 36:b1:c9:8e:4c:89:6d:de:18:43:64:c5:5a:97:a0:62:cb:72: e8:93:ca:a9:21:16:47:c6:dc:17:55:11:0e:b0:e1:04:de:6a: eb:d7:90:da:c9:d2:75:bf:54:1f:b6:c0:3e:92:f7:ee:86:09: 94:da:58:4c:d8:3a:a2:68:b1:a3:6a:75:d4:0a:61:a5:0c:e8: 1b:b8:0e:7e:92:38:a7:4f:57:ce:77:cd:75:44:23:71:f5:23: b6:1c:ce:91:1a:97:13:2f:bd:0b:0a:c9:b3:e2:c9:6d:14:b5: dd:12:8b:5c:cb:d6:82:4b:ca:6f:9d:a0:73:76:47:17:0c:1e: 01:d1:a0:55:c1:f2:d3:44:a2:fe:3e:48:24:9c:0f:b8:4a:2b: fe:4b:4e:25:7f:2a:36:76:a0:43:3b:66:af:17:93:47:2d:74: 07:f3:4d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQJIzdIDzeJGo21vSN54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi Y2Q4NjMwHhcNMjUxMjA2MjAwMTA5WhcNMjUxMjA3MjAwMTA5WjAzMTEwLwYDVQQD Eyg5YTQ1ODhkY2E2OTM5ZTgyMDJlNjAzMmMwYzNkMjBhN2JiZGE2YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy75kig4/vqwZThqt7wO7vEjNRFdg l5cZKqqnjU9I1sF4YIlFTMmjT3oQ5EbgyFLzSq5azdSkymetLJqFuCUcbgNrh66n FNqE9Tp4QuEdgclfW3H7D4wJgO1REw+/aIbj9DsMuLoEANYHYUNeToi8mUZHfiaF Ux77j9vlCnvZOUE1gEQQLhsTNyHN4iPRzc4qVzhlJtD+uNS8Ixn3ZMU0Bo5gJXHE Nm4EvT6LAP4lZD2raePLo9nhJ+s0a8iPV5618HQ1JdqNPvJyUxxhI3XE//XtmE3l YzG3M6/7H4vx0KhNjAoPwkh3LTGVH5pwYpZ6fd/1SIWOR6aFrn2FIWoZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpFiNymk56CAuYDLAw9IKe72mp5MB8GA1UdIwQY MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelDUDz40 CLsvcs3rLGienUIO4t9Ukrggn+NE9I/S82ohALfQx7YR3fvbJfOG75fBJ9IFV0pc 7uOQ6Z0PKn3aKhsJH2kA8qsjqGWZoL2ntbDhUvd+GfLe5qAnNrHJjkyJbd4YQ2TF WpegYsty6JPKqSEWR8bcF1URDrDhBN5q69eQ2snSdb9UH7bAPpL37oYJlNpYTNg6 omixo2p11AphpQzoG7gOfpI4p09XznfNdUQjcfUjthzOkRqXEy+9CwrJs+LJbRS1 3RKLXMvWgkvKb52gc3ZHFwweAdGgVcHy00Si/j5IJJwPuEor/ktOJX8qNnagQztm rxeTRy10B/NNGg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:11 2025 by rpki-client