This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json) Hash identifier: z+6FqVJGBJCVgzc6P8zFjPkxT8ezcFncmchLeLf83GE= Subject key identifier: FC:09:43:8A:E1:33:31:4F:0A:FB:B8:78:87:43:E1:9D:C1:EE:93:BA Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68 Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168 Certificate serial: 2FBEA15AE61113DBBB5E670F99C134E45295A8C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft Manifest number: 037F Signing time: Fri 05 Dec 2025 17:20:46 +0000 Manifest this update: Fri 05 Dec 2025 17:15:46 +0000 Manifest next update: Sat 06 Dec 2025 17:55:46 +0000 Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: kITVb4aEdef3ihvcaTJ86N0tbV8G73VQJDvh7/lG6D0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:be:a1:5a:e6:11:13:db:bb:5e:67:0f:99:c1:34:e4:52:95:a8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168 Validity Not Before: Dec 5 17:15:46 2025 GMT Not After : Dec 6 17:55:46 2025 GMT Subject: CN=FC09438AE133314F0AFBB8788743E19DC1EE93BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:9e:f9:2a:41:20:c7:ef:ae:3c:8a:03:36: 3b:8f:8c:57:ba:82:50:86:15:b3:84:51:64:4f:d2: 59:ca:48:43:51:6b:09:aa:5d:5d:c1:7e:b3:71:a6: 31:91:56:5d:8b:80:7c:14:1e:9a:95:cf:9b:3a:79: 4e:7e:2d:3a:a2:23:1a:b1:ed:f7:8f:9d:43:97:ce: 89:d0:01:85:a3:6c:24:67:00:7b:7c:2a:92:0d:bc: 1d:0f:9d:59:2e:4e:63:ea:95:1f:a8:c2:72:3e:41: 68:2f:28:ca:fd:95:a3:7e:4c:a1:41:8c:7d:f5:37: 97:4a:4d:f1:be:79:44:ee:0d:2f:ad:1f:96:22:4a: 5a:1f:8a:a4:7e:4f:48:23:0b:a8:17:24:09:1a:4b: 86:53:ce:86:45:66:c8:01:12:54:bd:fe:33:b2:35: 77:21:6b:fa:7e:34:e9:bf:c0:cb:89:c1:d3:84:93: ac:64:6e:a2:fe:af:18:18:0d:b6:b8:d3:0b:a0:76: 57:7b:ce:72:8a:67:1b:a5:0a:45:21:bb:0f:00:72: 8e:e5:e2:e5:40:8e:47:ee:d9:ed:20:c5:05:d7:d7: 02:db:d1:19:34:e6:f8:8f:3c:45:f1:d2:6b:63:c6: 9f:34:54:c2:dd:67:7d:19:3b:dd:c0:e4:85:7f:cb: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:09:43:8A:E1:33:31:4F:0A:FB:B8:78:87:43:E1:9D:C1:EE:93:BA X509v3 Authority Key Identifier: keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b6:c5:fc:e3:7f:13:a4:b8:ae:07:5b:61:ab:a3:5e:69:09: d2:7c:00:d2:b2:a3:42:bd:41:b1:fe:c1:98:d0:b0:88:07:ac: 7f:e2:80:e3:ed:a7:07:5a:9c:05:80:51:6c:ae:fc:c2:48:08: 3b:21:0b:15:3b:00:d9:d6:81:87:43:de:12:bf:0a:89:52:f1: d9:23:54:ff:1a:86:8d:54:99:58:18:94:e8:19:e3:2d:62:66: 1f:ae:81:a0:98:fa:b9:0b:f6:d4:af:4f:4c:e9:7d:2f:d0:e8: 20:ad:14:47:c8:20:eb:76:ea:8c:bf:49:ff:5c:9e:80:c3:62: fb:73:e3:77:84:1a:8e:df:ce:c4:22:5e:f4:3d:c4:fb:5b:5a: f9:76:3d:ac:4a:af:37:e2:16:f3:96:3d:b9:9a:fd:35:7e:58: 64:fb:f1:06:8d:8f:18:c0:68:c0:5e:a8:58:0b:72:fb:4b:22: 94:9d:ee:da:05:e7:d5:49:af:98:92:89:13:f2:2e:6b:2d:7c: d7:32:96:3b:9b:77:0f:6c:c1:e5:af:fa:f6:03:64:f1:b9:05: bb:34:90:7e:a3:11:c4:39:d3:07:0c:da:bd:92:14:8c:54:9d: ea:4c:47:63:62:1c:f0:f0:08:42:43:f6:e4:ce:74:f4:32:3e: 7c:cf:77:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUL76hWuYRE9u7XmcPmcE05FKVqMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmMwOWYxNTA4ZTFiYzExYmVlY2I4MDhlNWIwMWU2ZjVk YjhkODE2ODAeFw0yNTEyMDUxNzE1NDZaFw0yNTEyMDYxNzU1NDZaMDMxMTAvBgNV BAMTKEZDMDk0MzhBRTEzMzMxNEYwQUZCQjg3ODg3NDNFMTlEQzFFRTkzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgp75KkEgx++uPIoDNjuPjFe6 glCGFbOEUWRP0lnKSENRawmqXV3BfrNxpjGRVl2LgHwUHpqVz5s6eU5+LTqiIxqx 7fePnUOXzonQAYWjbCRnAHt8KpINvB0PnVkuTmPqlR+ownI+QWgvKMr9laN+TKFB jH31N5dKTfG+eUTuDS+tH5YiSlofiqR+T0gjC6gXJAkaS4ZTzoZFZsgBElS9/jOy NXcha/p+NOm/wMuJwdOEk6xkbqL+rxgYDba40wugdld7znKKZxulCkUhuw8Aco7l 4uVAjkfu2e0gxQXX1wLb0Rk05viPPEXx0mtjxp80VMLdZ30ZO93A5IV/y8fDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/AlDiuEzMU8K+7h4h0PhncHuk7owHwYDVR0j BBgwFoAUvAnxUI4bwRvuy4COWwHm9duNgWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw YTk1LzAvQkMwOUYxNTA4RTFCQzExQkVFQ0I4MDhFNUIwMUU2RjVEQjhEODE2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZBbnhVSTRid1J2dXk0Q09Xd0htOWR1 TmdXZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2IzMDMyMi05 NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUvMC9CQzA5RjE1MDhFMUJDMTFCRUVD QjgwOEU1QjAxRTZGNURCOEQ4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLbF/ON/E6S4rgdbYauj XmkJ0nwA0rKjQr1Bsf7BmNCwiAesf+KA4+2nB1qcBYBRbK78wkgIOyELFTsA2daB h0PeEr8KiVLx2SNU/xqGjVSZWBiU6BnjLWJmH66BoJj6uQv21K9PTOl9L9DoIK0U R8gg63bqjL9J/1yegMNi+3Pjd4Qajt/OxCJe9D3E+1ta+XY9rEqvN+IW85Y9uZr9 NX5YZPvxBo2PGMBowF6oWAty+0silJ3u2gXn1UmvmJKJE/Iuay181zKWO5t3D2zB 5a/69gNk8bkFuzSQfqMRxDnTBwzavZIUjFSd6kxHY2Ic8PAIQkP25M509DI+fM93 vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:35 2025 by rpki-client