This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json) Hash identifier: +Uz0LpyTJlrTzCFQgNntJc7zVPyw1mk0PinEauehzXo= Subject key identifier: D8:72:40:15:5C:8E:01:B0:0B:49:B9:D5:6D:DA:96:17:58:96:E7:A8 Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Certificate serial: 019B59E48C99E4D047BE09ED7EC866CC550A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft Manifest number: 04B8 Signing time: Fri 26 Dec 2025 09:01:48 +0000 Manifest this update: Fri 26 Dec 2025 09:01:48 +0000 Manifest next update: Sat 27 Dec 2025 09:01:48 +0000 Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: /VomdBIwPMU2hwndZf7RgMuv9O/YQCuDXLr+6gM3aLM=) 2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:8c:99:e4:d0:47:be:09:ed:7e:c8:66:cc:55:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Validity Not Before: Dec 26 09:01:48 2025 GMT Not After : Dec 27 09:01:48 2025 GMT Subject: CN=d87240155c8e01b00b49b9d56dda96175896e7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:80:d0:77:ec:5d:01:75:be:ae:df:13:50: 35:4d:dc:fb:5c:d5:e8:f5:d7:13:76:e8:a7:ec:f5: af:d9:70:16:3e:cc:e9:18:80:55:cd:73:29:83:a0: ef:8b:49:1e:87:7f:fa:20:cc:ac:3e:4d:65:cc:a9: 22:5c:75:0c:27:ca:cd:11:c8:d4:61:ef:c8:88:12: ba:cf:ba:86:a0:ee:d4:ab:0c:40:af:a4:87:ee:a4: 23:c8:1e:56:5c:59:12:44:c2:ad:d3:60:bb:69:89: ac:99:93:a1:f6:03:52:52:7c:d4:19:19:f3:6e:37: eb:af:62:38:07:da:7d:2a:bc:90:fc:b5:ef:d4:04: 62:aa:7c:48:f6:63:36:75:8d:a1:05:9d:29:6b:85: 72:19:20:f9:23:63:fa:90:ec:fc:78:7f:07:bf:fb: 6d:6d:84:4d:ad:e3:e9:39:c7:04:a9:ae:14:f2:e2: e9:71:80:32:65:33:7a:1d:59:9c:2a:83:a7:21:f5: 69:af:3c:29:c4:90:69:d6:dd:2d:fe:a8:38:a4:cd: 02:7d:f9:c7:44:5b:01:27:bf:40:b9:1c:11:00:c2: 15:3a:63:34:34:79:33:1e:ff:f8:13:95:65:e5:c2: c6:77:d5:46:54:04:74:7f:f6:bd:b4:b2:70:64:16: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:40:15:5C:8E:01:B0:0B:49:B9:D5:6D:DA:96:17:58:96:E7:A8 X509v3 Authority Key Identifier: keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8f:e0:27:8e:66:3e:49:dc:68:af:d8:ba:2b:e2:32:61:cb: da:06:4f:a8:60:b5:f5:22:7d:93:ef:d2:74:4a:0e:f0:01:6a: 31:29:c3:1b:24:d1:cd:02:7c:ba:57:3f:4c:14:44:07:e0:4b: 99:e7:be:57:f5:76:a7:b1:b9:9e:f4:a8:1b:c7:f0:42:52:17: df:24:1b:3d:ac:b2:7e:31:eb:7e:8a:fd:e0:89:20:03:a3:79: cd:b3:9f:01:da:b8:2d:af:56:66:bf:21:f0:c6:ae:91:b8:48: c9:ff:cc:c3:e0:32:2d:76:15:c8:f0:5d:62:67:41:26:9a:66: d1:f0:95:fc:eb:f7:7b:37:47:5e:11:c6:d5:70:83:f5:fe:88: 99:cc:96:6e:ac:08:9f:aa:72:b4:24:37:bc:dd:a6:49:dd:c0: 64:a0:e4:ec:29:18:54:76:f8:01:f0:9b:ff:17:49:bc:c3:4b: 0a:58:98:9b:15:28:c5:44:e5:a8:2e:fc:6e:22:7a:2d:67:80: aa:6d:12:3c:31:26:0d:1e:97:31:a1:de:df:9d:bf:bb:f2:5b: a3:e1:26:88:6e:f2:35:b7:4f:e2:4f:a8:7b:95:2c:a5:12:36: 38:85:ec:4e:f4:c4:ec:10:3f:4f:5b:e3:47:68:5b:53:e6:0d: 16:7b:4f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5IyZ5NBHvgntfshmzFUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx MTQ2NjMwHhcNMjUxMjI2MDkwMTQ4WhcNMjUxMjI3MDkwMTQ4WjAzMTEwLwYDVQQD EyhkODcyNDAxNTVjOGUwMWIwMGI0OWI5ZDU2ZGRhOTYxNzU4OTZlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi36A0HfsXQF1vq7fE1A1Tdz7XNXo 9dcTduin7PWv2XAWPszpGIBVzXMpg6Dvi0keh3/6IMysPk1lzKkiXHUMJ8rNEcjU Ye/IiBK6z7qGoO7UqwxAr6SH7qQjyB5WXFkSRMKt02C7aYmsmZOh9gNSUnzUGRnz bjfrr2I4B9p9KryQ/LXv1ARiqnxI9mM2dY2hBZ0pa4VyGSD5I2P6kOz8eH8Hv/tt bYRNrePpOccEqa4U8uLpcYAyZTN6HVmcKoOnIfVprzwpxJBp1t0t/qg4pM0CffnH RFsBJ79AuRwRAMIVOmM0NHkzHv/4E5Vl5cLGd9VGVAR0f/a9tLJwZBbFGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhyQBVcjgGwC0m51W3alhdYlueoMB8GA1UdIwQY MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt Y2JmMmEzYjZhMjg0LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0 LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmo/gJ45m PkncaK/YuiviMmHL2gZPqGC19SJ9k+/SdEoO8AFqMSnDGyTRzQJ8ulc/TBREB+BL mee+V/V2p7G5nvSoG8fwQlIX3yQbPayyfjHrfor94IkgA6N5zbOfAdq4La9WZr8h 8MaukbhIyf/Mw+AyLXYVyPBdYmdBJppm0fCV/Ov3ezdHXhHG1XCD9f6ImcyWbqwI n6pytCQ3vN2mSd3AZKDk7CkYVHb4AfCb/xdJvMNLCliYmxUoxUTlqC78biJ6LWeA qm0SPDEmDR6XMaHe352/u/Jbo+EmiG7yNbdP4k+oe5UspRI2OIXsTvTE7BA/T1vj R2hbU+YNFntP3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client