This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json) Hash identifier: GNeX15iKmRvfnZEoS3tg6OQTRlaNfrSsetv5cZLjuEA= Subject key identifier: 77:26:2A:08:86:AF:4A:9D:ED:CD:76:F4:DB:3B:F8:CC:C1:EA:DA:75 Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Certificate serial: 019B05C6DA22B471D1F3B53A0BF08C410388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft Manifest number: 0AA8 Signing time: Wed 10 Dec 2025 01:01:16 +0000 Manifest this update: Wed 10 Dec 2025 01:01:16 +0000 Manifest next update: Thu 11 Dec 2025 01:01:16 +0000 Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: nSecGxdkLyXdWyuqC7EeRa6UgZY7YEEDXvDE/mp7wsc=) 2: aaJq10NBNFtvWoQuCDfpNSfnYu0.roa (hash: ShW6y/0OofG8gWfm3Z3goLVgotABbmN4Tjp6HEhaoAQ=) 3: qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa (hash: 2EMpyRudbmzblcQQ/7M2y7TOTZvbf6HTjZbDCcTPW3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:da:22:b4:71:d1:f3:b5:3a:0b:f0:8c:41:03:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Validity Not Before: Dec 10 01:01:16 2025 GMT Not After : Dec 11 01:01:16 2025 GMT Subject: CN=77262a0886af4a9dedcd76f4db3bf8ccc1eada75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:07:4c:a9:a2:d5:a1:5b:d6:55:96:bf:1f: 66:ad:30:38:69:5e:6a:80:8a:4f:c7:94:21:74:b7: 52:c9:78:07:b1:37:cc:43:cc:f8:42:ef:bd:74:68: 5d:e6:8c:ee:fa:61:6a:2f:4e:e3:5c:28:60:58:3b: bd:d7:12:64:72:69:ef:2b:5d:60:e4:64:42:4f:a6: 66:c2:f5:a2:e0:cf:7a:58:45:7d:f3:08:14:9f:b5: 3f:e8:1f:55:c0:b5:ee:c3:57:dd:ff:18:02:ed:e7: 68:d8:86:45:88:e6:ad:06:7c:f5:d7:62:5c:03:e3: 5e:d0:04:5f:d1:56:c4:87:65:a2:77:97:b1:f2:f4: c5:9b:9b:54:77:df:ac:c4:2e:66:1b:99:ab:88:44: 46:a1:f3:ed:e6:a3:b6:ee:db:7b:78:e0:80:39:23: da:46:e7:5d:fd:e6:6c:a6:da:16:34:9b:da:af:83: 9e:76:f9:d2:3a:87:98:c5:2f:2b:44:61:34:f5:0b: 91:3b:f0:ab:d4:7d:91:f9:39:07:f3:d7:75:99:13: 90:7a:d2:8c:74:bf:85:35:60:ae:03:09:1f:2e:63: 7a:c9:46:c9:b4:11:97:42:0b:73:0d:e3:4d:ec:b0: 1b:8c:d2:aa:e5:08:8b:40:06:52:13:07:aa:a1:42: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:26:2A:08:86:AF:4A:9D:ED:CD:76:F4:DB:3B:F8:CC:C1:EA:DA:75 X509v3 Authority Key Identifier: keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5d:81:25:62:c9:e7:31:71:15:58:48:28:98:e3:65:96:69: a1:7b:9a:e1:d4:af:71:98:cb:ce:61:79:e6:a9:76:be:7b:6e: 25:b5:55:dd:61:63:75:d8:37:5e:27:ec:f5:f5:99:6b:d6:0a: 04:66:81:03:e8:06:58:bb:e5:ef:e1:43:24:9e:a4:0d:2b:98: d7:20:f7:9f:32:3b:bb:17:c6:3f:14:6a:0c:55:4f:10:97:44: 53:9b:44:62:40:78:ae:ac:df:3f:fe:1e:17:1a:10:e7:b0:fa: bb:c6:a9:fc:4b:a9:20:15:95:c2:51:3f:f6:54:f3:e3:42:0c: 87:95:2d:18:4d:fb:0f:bd:74:a6:42:c3:ab:ed:f0:59:d3:9d: 17:e3:36:6c:69:dc:46:02:4c:85:5f:df:63:aa:13:b9:bb:e4: 0c:26:00:a0:db:ea:9e:3c:2c:7e:ce:37:50:94:55:10:6e:40: a0:3d:99:2f:26:8b:aa:0b:3e:df:de:42:1c:ee:47:81:7b:4c: 0b:d8:fb:64:fc:fc:d4:c3:c6:74:e7:e3:3d:36:91:ee:ed:e6: 9a:45:3b:73:21:b5:72:05:f1:e9:fc:c5:0a:41:55:a2:79:9a: fd:5b:15:eb:dc:b0:27:7c:98:91:5e:89:48:13:06:d8:0b:bd: 74:1d:38:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxtoitHHR87U6C/CMQQOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjE2ZWVjNTE0YjA3ZGNlMjlkMzAxM2ExOTBiMmVlNWZj YjFmOTQwHhcNMjUxMjEwMDEwMTE2WhcNMjUxMjExMDEwMTE2WjAzMTEwLwYDVQQD Eyg3NzI2MmEwODg2YWY0YTlkZWRjZDc2ZjRkYjNiZjhjY2MxZWFkYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0UHTKmi1aFb1lWWvx9mrTA4aV5q gIpPx5QhdLdSyXgHsTfMQ8z4Qu+9dGhd5ozu+mFqL07jXChgWDu91xJkcmnvK11g 5GRCT6ZmwvWi4M96WEV98wgUn7U/6B9VwLXuw1fd/xgC7edo2IZFiOatBnz112Jc A+Ne0ARf0VbEh2Wid5ex8vTFm5tUd9+sxC5mG5mriERGofPt5qO27tt7eOCAOSPa Rudd/eZsptoWNJvar4OedvnSOoeYxS8rRGE09QuRO/Cr1H2R+TkH89d1mROQetKM dL+FNWCuAwkfLmN6yUbJtBGXQgtzDeNN7LAbjNKq5QiLQAZSEweqoUKbYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcmKgiGr0qd7c129Ns7+MzB6tp1MB8GA1UdIwQY MBaAFAYhbuxRSwfc4p0wE6GQsu5fyx+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMt MTg4ZGNmZjBlNDA1LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMtMTg4ZGNmZjBlNDA1 LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX12BJWLJ 5zFxFVhIKJjjZZZpoXua4dSvcZjLzmF55ql2vntuJbVV3WFjddg3Xifs9fWZa9YK BGaBA+gGWLvl7+FDJJ6kDSuY1yD3nzI7uxfGPxRqDFVPEJdEU5tEYkB4rqzfP/4e FxoQ57D6u8ap/EupIBWVwlE/9lTz40IMh5UtGE37D710pkLDq+3wWdOdF+M2bGnc RgJMhV/fY6oTubvkDCYAoNvqnjwsfs43UJRVEG5AoD2ZLyaLqgs+395CHO5HgXtM C9j7ZPz81MPGdOfjPTaR7u3mmkU7cyG1cgXx6fzFCkFVonma/VsV69ywJ3yYkV6J SBMG2Au9dB04cA== -----END CERTIFICATE-----Generated at Wed Dec 10 05:53:55 2025 by rpki-client