This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: Q6IoqbgBFUIRdE565+pqI+o+Nmgghnn2B+bvTPR5wJA= Subject key identifier: 33:C5:7C:DC:A7:8D:30:EA:6C:0A:F8:0A:07:B3:71:59:8C:93:07:25 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B0F0099208CB9CAC6329710F4B164F207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 17A6 Signing time: Thu 11 Dec 2025 20:00:56 +0000 Manifest this update: Thu 11 Dec 2025 20:00:56 +0000 Manifest next update: Fri 12 Dec 2025 20:00:56 +0000 Files and hashes: 1: 0AYdj6RPn1eQ4OgEy6QCr1f5k2Q.roa (hash: L6DU942Jz6/lvfUIe3D2o0HomEkBYzu27lFzdIVqGEc=) 2: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 3: 9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa (hash: /bubvvyyCfe3wByISey49bBzc5BKqpBJ33FyIFj7ql0=) 4: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: dqyW3yhk/YiQP4fdXJlRblQoC1bcIZZ5IMDfYmjI6hM=) 6: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 7: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 8: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 9: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 10: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 11: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 12: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 13: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 14: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 15: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 16: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:99:20:8c:b9:ca:c6:32:97:10:f4:b1:64:f2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Dec 11 20:00:56 2025 GMT Not After : Dec 12 20:00:56 2025 GMT Subject: CN=33c57cdca78d30ea6c0af80a07b371598c930725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:c4:5b:ed:cc:d2:61:69:c8:72:5b:0f:5d: 1b:c3:3e:29:9d:8c:fa:11:9a:0d:f4:20:86:f2:46: 94:91:64:9c:f3:ae:57:5a:19:44:61:eb:21:53:d0: 4b:b5:56:05:32:8c:f6:1f:c1:1c:df:4c:19:9a:f0: b7:ae:51:dc:2f:3b:b8:9c:af:ac:57:c0:28:fb:7c: 29:bb:7e:93:15:f2:6a:cb:c1:b0:a7:81:fa:11:7c: f1:13:b1:38:05:85:be:1e:4b:47:e5:38:61:79:70: 8f:32:b5:3b:6d:9b:41:cb:fd:01:6b:3b:15:26:cc: 6f:c0:8c:18:72:17:8e:7e:67:2c:9f:b3:22:a6:54: 6e:51:7f:55:36:60:33:ab:94:58:0b:b7:83:a2:6f: 4e:36:2b:14:d2:51:7f:c3:06:70:3d:d0:a3:07:9a: 60:86:d2:35:af:dc:47:9d:9b:56:73:ab:c9:9c:46: ff:e1:ab:96:af:e5:0d:4b:f6:3d:6d:c6:ed:cf:7b: 3f:e6:82:91:7a:04:dd:ac:0c:3b:1b:82:12:02:ae: f3:5f:fd:a9:55:f7:4d:7d:35:39:1c:f2:28:b1:f2: 1a:3e:60:a4:e1:de:9d:54:2b:27:2e:0a:a6:19:82: e7:05:19:25:1f:51:af:a0:d0:5e:dd:ee:2e:97:be: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:7C:DC:A7:8D:30:EA:6C:0A:F8:0A:07:B3:71:59:8C:93:07:25 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:30:28:23:d2:4a:99:94:1c:3c:3e:fb:45:aa:6c:ec:f5:f1: 7b:36:a2:20:f9:5d:38:b2:c9:57:40:b3:1a:00:71:3b:3b:59: f7:75:44:5d:6b:fc:3d:5d:b4:27:29:fb:5c:86:85:20:aa:81: da:e9:04:9a:3b:e2:4e:72:b1:9a:8c:ce:98:4c:46:56:ce:5a: f4:bf:5a:a6:b3:44:ee:1e:24:48:d9:80:67:87:bc:b2:b4:30: 2d:b0:d7:01:d7:6f:a5:cd:79:aa:52:2b:dc:c1:d8:5d:b5:f2: 46:2e:b9:d1:2a:97:5c:94:1a:53:98:2e:35:29:ce:14:3e:08: d6:f3:27:cc:01:7a:29:d6:4b:64:31:9c:11:af:c0:15:5e:4a: b8:04:ee:19:ca:08:1d:67:67:80:86:6b:a3:8a:56:8a:46:32: c0:b0:7c:f6:1d:b7:ba:0f:42:0d:26:23:3f:44:e7:fd:8f:60: 25:49:0c:8c:b7:04:75:0f:cd:90:2c:99:59:93:ce:16:ea:75: 84:e3:86:bf:4f:d7:12:be:b9:46:a1:6b:22:9a:43:c9:17:74: ec:b8:d2:43:c5:34:24:5f:8c:cd:1f:b0:5a:b8:ef:27:7e:b9: 62:02:67:e9:33:76:47:15:70:e4:ff:c4:03:de:6e:d5:a4:cb: e0:87:48:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJkgjLnKxjKXEPSxZPIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUxMjExMjAwMDU2WhcNMjUxMjEyMjAwMDU2WjAzMTEwLwYDVQQD EygzM2M1N2NkY2E3OGQzMGVhNmMwYWY4MGEwN2IzNzE1OThjOTMwNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRbEW+3M0mFpyHJbD10bwz4pnYz6 EZoN9CCG8kaUkWSc865XWhlEYeshU9BLtVYFMoz2H8Ec30wZmvC3rlHcLzu4nK+s V8Ao+3wpu36TFfJqy8Gwp4H6EXzxE7E4BYW+HktH5ThheXCPMrU7bZtBy/0BazsV JsxvwIwYcheOfmcsn7MiplRuUX9VNmAzq5RYC7eDom9ONisU0lF/wwZwPdCjB5pg htI1r9xHnZtWc6vJnEb/4auWr+UNS/Y9bcbtz3s/5oKRegTdrAw7G4ISAq7zX/2p VfdNfTU5HPIosfIaPmCk4d6dVCsnLgqmGYLnBRklH1GvoNBe3e4ul76RDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPFfNynjTDqbAr4CgezcVmMkwclMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjAoI9JK mZQcPD77Raps7PXxezaiIPldOLLJV0CzGgBxOztZ93VEXWv8PV20Jyn7XIaFIKqB 2ukEmjviTnKxmozOmExGVs5a9L9aprNE7h4kSNmAZ4e8srQwLbDXAddvpc15qlIr 3MHYXbXyRi650SqXXJQaU5guNSnOFD4I1vMnzAF6KdZLZDGcEa/AFV5KuATuGcoI HWdngIZro4pWikYywLB89h23ug9CDSYjP0Tn/Y9gJUkMjLcEdQ/NkCyZWZPOFup1 hOOGv0/XEr65RqFrIppDyRd07LjSQ8U0JF+MzR+wWrjvJ365YgJn6TN2RxVw5P/E A95u1aTL4IdIuQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:56 2025 by rpki-client