This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json) Hash identifier: ojOiROea04RbAo0AFzBicXWO3cH/6jDmPTJTyiL8yNU= Subject key identifier: 8A:9E:82:3F:FD:C9:45:C5:E5:FD:29:10:DE:4E:38:2A:67:13:AE:9A Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b Certificate serial: 019B04B41A1B55AD532E41BBC889A0853BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft Manifest number: 1770 Signing time: Tue 09 Dec 2025 20:01:10 +0000 Manifest this update: Tue 09 Dec 2025 20:01:10 +0000 Manifest next update: Wed 10 Dec 2025 20:01:10 +0000 Files and hashes: 1: 8kdm1ZAPNcZedXP01TafIjBXKRs.roa (hash: itb59cI824fq1EKKCsVfc6XjwoFA0+TxsZlQLnTiMW4=) 2: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: bAiEjRWr7ZPmczYW/5Tw9kqHDMTRTBykWdGNpJZFvmg=) 3: BzQdBmIbyF6srfLktxhc6qg79ec.roa (hash: H3iHKo9W+PVcnPUcadk8PCSHKjUzykftyfuq0bLuwdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:b4:1a:1b:55:ad:53:2e:41:bb:c8:89:a0:85:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b Validity Not Before: Dec 9 20:01:10 2025 GMT Not After : Dec 10 20:01:10 2025 GMT Subject: CN=8a9e823ffdc945c5e5fd2910de4e382a6713ae9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:fe:c6:36:90:80:48:3a:fe:a5:23:ba:42: 9b:4f:f7:3a:68:4a:ee:96:f9:ad:ac:e6:18:2c:47: 65:7f:d4:19:b8:58:55:7d:96:ed:2a:ae:57:7f:fb: 15:00:36:1a:29:58:21:a9:cb:51:e2:cd:6e:56:b5: 59:d4:30:14:04:4d:5b:0a:91:81:16:ca:ab:03:58: 41:f9:b5:e8:f8:65:9f:97:76:d5:ac:c4:b4:8e:bc: 68:24:70:f4:8f:5e:34:9e:66:49:ff:02:11:78:17: 78:9c:95:5a:97:52:c8:31:d5:6b:f6:dc:39:0e:83: 58:f3:3e:7e:a5:80:99:3b:72:64:f9:ae:07:09:b9: d5:ac:6a:fb:03:eb:3d:21:ce:66:e3:6d:fe:9b:9b: f3:91:e1:5e:a5:ba:19:2d:d6:ed:6d:7d:4e:5f:6d: e0:8b:82:57:9f:02:76:66:99:a2:77:a7:4b:6c:98: 0f:96:40:ce:88:2a:31:7b:3f:99:5e:15:9a:9d:7a: 4c:d9:68:1c:9a:f4:15:ed:80:cb:e7:bb:7e:b5:a3: 1c:e1:00:f9:97:bf:0a:95:a3:6e:44:1e:b4:92:bc: 16:70:57:cb:4b:02:a7:ae:c6:b5:5c:9a:fe:75:af: f2:cd:65:aa:d3:92:15:73:f6:4c:d8:4b:23:bc:3d: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:82:3F:FD:C9:45:C5:E5:FD:29:10:DE:4E:38:2A:67:13:AE:9A X509v3 Authority Key Identifier: keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:14:32:8c:5c:57:ab:4f:33:af:d9:58:f0:3b:61:05:18:6e: 53:4b:e2:4d:e9:e8:6b:45:98:a3:d9:b7:63:98:e6:07:43:c4: 8a:a5:90:6f:fd:13:49:ff:43:e9:fe:f6:15:ca:17:15:44:7c: bb:0b:8e:b1:cc:0b:a1:28:8d:e6:8a:23:37:48:df:19:1e:e1: a5:7a:a5:29:dd:18:38:b8:7e:4c:db:a3:3b:93:f2:7c:58:50: 81:4d:e4:11:54:2f:be:15:6d:2f:aa:33:cf:1c:76:3a:a6:16: a8:4a:63:0a:82:74:b2:e5:05:9a:b3:7f:45:b3:ea:93:31:80: 62:3a:3e:4b:19:d1:ef:21:c0:11:b7:ba:e5:97:4d:06:f9:44: 26:1f:22:d8:95:b9:43:54:8e:6e:4f:8c:ce:73:7c:76:71:94: e0:17:34:a2:5d:32:6c:15:b2:72:4d:4b:28:d4:00:a7:f1:78: ba:50:59:e3:57:8f:21:83:17:9f:3f:e8:66:39:1c:a5:76:ec: 24:15:15:3c:83:70:89:ec:b0:9f:a8:a0:99:4f:a7:ba:6d:15: 74:56:74:31:f9:73:f8:03:bc:d8:88:0a:ad:47:5a:cb:6d:09: ec:fd:22:c5:90:bf:ba:6a:9e:ff:47:72:2a:e3:ef:f2:20:4f: d8:3c:31:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEtBobVa1TLkG7yImghTvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4 NDE3NmIwHhcNMjUxMjA5MjAwMTEwWhcNMjUxMjEwMjAwMTEwWjAzMTEwLwYDVQQD Eyg4YTllODIzZmZkYzk0NWM1ZTVmZDI5MTBkZTRlMzgyYTY3MTNhZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj3+xjaQgEg6/qUjukKbT/c6aEru lvmtrOYYLEdlf9QZuFhVfZbtKq5Xf/sVADYaKVghqctR4s1uVrVZ1DAUBE1bCpGB FsqrA1hB+bXo+GWfl3bVrMS0jrxoJHD0j140nmZJ/wIReBd4nJVal1LIMdVr9tw5 DoNY8z5+pYCZO3Jk+a4HCbnVrGr7A+s9Ic5m423+m5vzkeFepboZLdbtbX1OX23g i4JXnwJ2Zpmid6dLbJgPlkDOiCoxez+ZXhWanXpM2WgcmvQV7YDL57t+taMc4QD5 l78KlaNuRB60krwWcFfLSwKnrsa1XJr+da/yzWWq05IVc/ZM2EsjvD0o/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqegj/9yUXF5f0pEN5OOCpnE66aMB8GA1UdIwQY MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt ZTFhY2EwMTA2MmZmLzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRQyjFxX q08zr9lY8DthBRhuU0viTenoa0WYo9m3Y5jmB0PEiqWQb/0TSf9D6f72FcoXFUR8 uwuOscwLoSiN5oojN0jfGR7hpXqlKd0YOLh+TNujO5PyfFhQgU3kEVQvvhVtL6oz zxx2OqYWqEpjCoJ0suUFmrN/RbPqkzGAYjo+SxnR7yHAEbe65ZdNBvlEJh8i2JW5 Q1SObk+MznN8dnGU4Bc0ol0ybBWyck1LKNQAp/F4ulBZ41ePIYMXnz/oZjkcpXbs JBUVPINwieywn6igmU+num0VdFZ0Mflz+AO82IgKrUday20J7P0ixZC/umqe/0dy KuPv8iBP2Dwxig== -----END CERTIFICATE-----Generated at Wed Dec 10 05:12:31 2025 by rpki-client