This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: +/OPBKBSiU4OhSG69U3+qYpX4J9ZEQ4dlcpFShtAt3I= Subject key identifier: 89:0A:8D:97:FF:65:63:6E:96:4F:EE:B1:2B:D1:DB:D7:44:D1:B3:06 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B465CCE8B72E7093EB51EEC4286BEFC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1792 Signing time: Mon 22 Dec 2025 14:00:45 +0000 Manifest this update: Mon 22 Dec 2025 14:00:45 +0000 Manifest next update: Tue 23 Dec 2025 14:00:45 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: Zc240DgofUb/ZFAV2Um1kcWLVmVGIBO4r7sWKUCbJjs=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:ce:8b:72:e7:09:3e:b5:1e:ec:42:86:be:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Dec 22 14:00:45 2025 GMT Not After : Dec 23 14:00:45 2025 GMT Subject: CN=890a8d97ff65636e964feeb12bd1dbd744d1b306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:26:6d:45:31:74:28:6a:88:aa:96:f6:f9: 0e:29:f3:df:44:c4:1c:7c:0c:ca:68:13:07:81:a5: 63:42:bf:33:7a:85:b9:7f:54:ae:0a:e1:e2:af:71: 79:29:4e:4f:62:b6:2f:19:ea:7b:93:14:da:c1:51: 8a:6a:7a:34:f1:ee:b0:aa:e2:3a:6f:57:5c:6a:4e: 4e:4c:c0:66:76:1e:cf:92:1f:1d:1e:b3:d4:ce:08: 00:1c:06:b2:25:79:ee:6b:e1:dc:b0:7f:3c:7f:b1: 03:19:4c:ee:bd:79:e4:a0:1a:6e:3d:96:0b:6a:2d: 71:3b:8b:73:70:75:86:31:a3:9b:53:d0:73:8c:76: e4:54:c6:6c:a4:86:95:9a:d0:cb:e6:b5:4e:71:12: 91:b2:ba:9b:14:fb:0d:07:79:18:fb:ec:d6:a5:d5: 62:b4:f0:47:94:91:7c:43:24:b6:9f:30:6a:ac:21: a8:01:d6:91:16:e6:02:78:89:59:2b:24:42:84:82: e1:68:6b:c8:d9:f5:8a:5a:9f:74:98:12:e2:a7:ac: 64:7e:89:99:fc:93:6b:fe:0d:00:57:67:bc:87:b2: f9:34:ba:b1:a0:e5:d8:4f:41:8b:35:99:3a:7e:9e: fd:2e:41:09:9b:28:64:ed:20:12:41:83:3e:84:8c: bb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:8D:97:FF:65:63:6E:96:4F:EE:B1:2B:D1:DB:D7:44:D1:B3:06 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:15:bc:bf:11:32:94:e5:82:85:25:ae:9f:bd:37:5b:3a:de: 1f:51:9b:e4:92:b0:c8:f1:e6:59:0d:cf:bc:da:3f:4a:1d:97: ad:60:84:27:82:be:82:21:8b:77:cb:cb:f5:31:b6:85:fe:30: b7:21:36:0b:25:9d:b3:6f:f9:21:b1:58:0f:1e:d7:a6:3b:e5: f1:bb:9a:4d:70:99:f9:7e:cd:3f:26:79:85:77:e1:c1:a2:72: 7f:8c:d8:31:ab:fa:c9:e2:7a:7c:1a:01:d2:5c:80:5e:b3:c9: bf:4d:af:22:46:1e:99:fe:c8:4f:c9:f8:0d:a8:3c:90:a1:61: 88:9f:3f:d2:bd:3d:35:53:3d:dd:80:d0:1b:21:26:eb:b0:e0: e6:44:dd:55:1d:85:65:3b:29:5c:9a:7d:3d:48:cd:29:e7:77: 74:5c:6b:ce:85:fe:c8:d0:82:5f:f8:57:f6:c2:e3:82:2b:0e: 17:53:97:96:a0:67:55:b4:f7:30:61:55:25:33:34:96:c6:38: 26:64:48:eb:0e:92:a7:73:02:c9:71:fb:93:ea:77:0c:f4:bc: ec:35:d1:83:3c:29:16:5a:0d:96:1c:fb:88:e1:0b:68:a0:3e: 77:40:25:5b:87:38:de:f4:9f:67:be:42:87:ae:22:09:db:ba: ba:0e:a2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXM6LcucJPrUe7EKGvvwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMjIyMTQwMDQ1WhcNMjUxMjIzMTQwMDQ1WjAzMTEwLwYDVQQD Eyg4OTBhOGQ5N2ZmNjU2MzZlOTY0ZmVlYjEyYmQxZGJkNzQ0ZDFiMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bkmbUUxdChqiKqW9vkOKfPfRMQc fAzKaBMHgaVjQr8zeoW5f1SuCuHir3F5KU5PYrYvGep7kxTawVGKano08e6wquI6 b1dcak5OTMBmdh7Pkh8dHrPUzggAHAayJXnua+HcsH88f7EDGUzuvXnkoBpuPZYL ai1xO4tzcHWGMaObU9BzjHbkVMZspIaVmtDL5rVOcRKRsrqbFPsNB3kY++zWpdVi tPBHlJF8QyS2nzBqrCGoAdaRFuYCeIlZKyRChILhaGvI2fWKWp90mBLip6xkfomZ /JNr/g0AV2e8h7L5NLqxoOXYT0GLNZk6fp79LkEJmyhk7SASQYM+hIy7ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkKjZf/ZWNulk/usSvR29dE0bMGMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchW8vxEy lOWChSWun703WzreH1Gb5JKwyPHmWQ3PvNo/Sh2XrWCEJ4K+giGLd8vL9TG2hf4w tyE2CyWds2/5IbFYDx7Xpjvl8buaTXCZ+X7NPyZ5hXfhwaJyf4zYMav6yeJ6fBoB 0lyAXrPJv02vIkYemf7IT8n4Dag8kKFhiJ8/0r09NVM93YDQGyEm67Dg5kTdVR2F ZTspXJp9PUjNKed3dFxrzoX+yNCCX/hX9sLjgisOF1OXlqBnVbT3MGFVJTM0lsY4 JmRI6w6Sp3MCyXH7k+p3DPS87DXRgzwpFloNlhz7iOELaKA+d0AlW4c43vSfZ75C h64iCdu6ug6iDA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:29:09 2025 by rpki-client