This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json) Hash identifier: P8V5ASZ0CSVilBOTuS4cjql+AXdw7lPi+VPgVpG3gJo= Subject key identifier: 0B:57:75:7F:47:00:82:CA:95:56:1A:94:0C:45:E2:51:44:58:81:E3 Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Certificate serial: 019B38A173F9519D90280FCD9699B06FEA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft Manifest number: 0855 Signing time: Fri 19 Dec 2025 22:01:03 +0000 Manifest this update: Fri 19 Dec 2025 22:01:03 +0000 Manifest next update: Sat 20 Dec 2025 22:01:03 +0000 Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: 7I/AadK8DFA9Z57154Q/r1kYi8QgCLbSHIsZOJI0B6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:73:f9:51:9d:90:28:0f:cd:96:99:b0:6f:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Validity Not Before: Dec 19 22:01:03 2025 GMT Not After : Dec 20 22:01:03 2025 GMT Subject: CN=0b57757f470082ca95561a940c45e251445881e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:a7:95:da:c9:8d:d2:81:83:71:c4:c5:a6: 88:b7:ed:6f:89:9f:62:81:c7:2c:b1:f1:49:4a:41: c5:1c:88:0b:82:bc:0e:12:2f:b7:4b:a5:cb:d7:d4: 0a:1b:8f:3b:47:0d:c7:7c:08:5e:68:1d:ba:bc:e0: 30:8f:79:00:d5:09:42:3a:13:9e:94:a7:61:0d:21: f6:9a:e5:89:44:b2:f9:c6:77:63:6a:72:d4:4c:39: fa:eb:80:20:0a:6a:96:e3:02:7e:c7:67:da:12:67: 70:ab:13:93:a1:04:93:38:ef:20:87:3b:e2:47:0f: 1b:55:cf:99:16:a6:ba:82:94:65:7f:24:5d:6f:0b: a2:fa:90:c4:b7:7a:28:a1:e7:94:38:3d:47:ab:9f: ac:f5:58:40:1f:84:c4:95:78:a8:48:a5:81:56:7a: 8a:da:a3:88:51:d5:5f:04:9b:dd:25:cc:85:ff:2d: 72:8a:9b:35:1c:a8:de:e8:8e:f6:75:c7:d2:af:b7: 81:9b:5a:73:90:99:3c:f9:03:33:21:d7:a5:a8:7b: c1:5a:c1:45:ad:4a:6f:dc:f9:06:68:14:fc:d8:f5: d7:d8:5d:bc:d6:ff:dd:fa:6b:22:7f:3f:4a:28:73: d7:16:45:82:32:b8:c8:ad:96:e9:c5:b8:ed:60:83: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:75:7F:47:00:82:CA:95:56:1A:94:0C:45:E2:51:44:58:81:E3 X509v3 Authority Key Identifier: keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7e:da:4c:f1:c2:35:bd:18:ef:83:75:58:0f:10:04:af:8f: 71:80:ca:b8:ae:64:9b:6d:1c:54:c8:36:ad:d9:64:86:5e:51: 12:3a:21:48:bd:a9:6c:fb:df:67:4b:ca:e0:a4:00:a1:2f:31: a3:48:cb:55:3a:f2:a7:7c:43:7a:f5:84:ee:c1:63:70:92:18: 81:69:4f:8b:df:9f:58:1f:f9:72:22:cc:2e:b4:8a:c7:d5:ab: 05:26:e8:32:04:97:6a:76:dc:eb:38:d1:3c:71:66:fb:3f:60: 24:40:3e:a1:32:e7:88:a6:78:c0:fd:ef:55:59:d8:7c:5e:62: 3a:93:25:e7:d6:39:fa:bc:45:0c:1e:ad:5a:2c:d7:60:0d:84: ed:6f:53:f6:67:ab:ad:cc:8b:b5:9d:a0:a8:c0:30:76:5b:9c: 3e:3d:8b:79:95:7c:a6:3e:e3:13:c5:cd:62:6b:5a:54:e8:67: 3c:a6:b2:03:6f:f1:ae:c2:99:78:2f:14:be:32:16:09:6c:fe: 2f:41:60:69:d6:a4:31:49:65:fb:70:04:b8:80:73:02:c4:36: 6f:f2:dc:c9:34:c9:28:37:ed:c2:53:71:ab:f0:64:ca:38:5a: da:5e:43:6d:e4:26:0c:f1:d0:83:58:96:6b:99:0c:00:e0:f6: b7:59:0b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oXP5UZ2QKA/Nlpmwb+osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh ZmY4ZTYwHhcNMjUxMjE5MjIwMTAzWhcNMjUxMjIwMjIwMTAzWjAzMTEwLwYDVQQD EygwYjU3NzU3ZjQ3MDA4MmNhOTU1NjFhOTQwYzQ1ZTI1MTQ0NTg4MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviunldrJjdKBg3HExaaIt+1viZ9i gccssfFJSkHFHIgLgrwOEi+3S6XL19QKG487Rw3HfAheaB26vOAwj3kA1QlCOhOe lKdhDSH2muWJRLL5xndjanLUTDn664AgCmqW4wJ+x2faEmdwqxOToQSTOO8ghzvi Rw8bVc+ZFqa6gpRlfyRdbwui+pDEt3oooeeUOD1Hq5+s9VhAH4TElXioSKWBVnqK 2qOIUdVfBJvdJcyF/y1yips1HKje6I72dcfSr7eBm1pzkJk8+QMzIdelqHvBWsFF rUpv3PkGaBT82PXX2F281v/d+msifz9KKHPXFkWCMrjIrZbpxbjtYIM3pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtXdX9HAILKlVYalAxF4lFEWIHjMB8GA1UdIwQY MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM37aTPHC Nb0Y74N1WA8QBK+PcYDKuK5km20cVMg2rdlkhl5REjohSL2pbPvfZ0vK4KQAoS8x o0jLVTryp3xDevWE7sFjcJIYgWlPi9+fWB/5ciLMLrSKx9WrBSboMgSXanbc6zjR PHFm+z9gJEA+oTLniKZ4wP3vVVnYfF5iOpMl59Y5+rxFDB6tWizXYA2E7W9T9mer rcyLtZ2gqMAwdlucPj2LeZV8pj7jE8XNYmtaVOhnPKayA2/xrsKZeC8UvjIWCWz+ L0FgadakMUll+3AEuIBzAsQ2b/LcyTTJKDftwlNxq/Bkyjha2l5DbeQmDPHQg1iW a5kMAOD2t1kLCg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:45 2025 by rpki-client