This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json) Hash identifier: TExZIOpmhgVYXTq2m8JV0ED32DY8ZGvVoQs+gOR6j2o= Subject key identifier: 96:07:95:13:B3:D9:5B:FC:79:EC:37:10:8C:E1:54:8A:0B:3E:6C:5B Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Certificate serial: 019B3AC68D5188FF46F005758A4BA75C0B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft Manifest number: 16CE Signing time: Sat 20 Dec 2025 08:00:49 +0000 Manifest this update: Sat 20 Dec 2025 08:00:49 +0000 Manifest next update: Sun 21 Dec 2025 08:00:49 +0000 Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: s9Osdqh9h3HYFKqdVqxad9g8hERT4HV0Y6kApxDYwL0=) 2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:8d:51:88:ff:46:f0:05:75:8a:4b:a7:5c:0b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Validity Not Before: Dec 20 08:00:49 2025 GMT Not After : Dec 21 08:00:49 2025 GMT Subject: CN=96079513b3d95bfc79ec37108ce1548a0b3e6c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:6b:d5:98:79:a8:55:94:56:a1:7e:f3:9f: 02:c2:23:69:9c:d5:a9:78:a6:10:0f:f7:1f:3a:30: ab:cf:1b:5d:be:dd:d5:b1:85:61:2f:51:c8:01:ed: f6:89:cf:3a:8f:7a:93:a7:e5:ad:ff:b8:04:d1:1b: af:64:61:e7:a2:de:95:64:a6:5d:0d:33:ed:db:08: 90:e9:2b:3c:e9:41:16:64:17:cc:c2:4d:d0:ee:78: ea:f9:a4:c1:1e:dd:1d:e6:2c:79:3d:39:85:df:5e: 78:a1:fd:7f:ef:a2:34:d0:29:49:2e:93:54:17:9b: 11:0b:97:cf:43:eb:b0:fb:3b:07:bc:71:4c:ac:4a: 70:43:30:d9:33:48:b6:78:54:b3:08:16:3a:f2:f6: a1:7c:0a:8b:1f:92:9c:16:da:15:a8:2e:73:2e:6f: 1f:a7:b3:41:0d:a6:0e:5c:05:7a:02:56:36:f4:c9: ac:86:f1:a2:b9:6b:61:a2:8d:30:05:42:8a:58:86: 2a:d2:0b:f5:b0:1f:31:63:85:49:2b:29:9d:7b:b3: 8a:13:b9:96:f5:0f:75:f2:da:98:5a:aa:41:67:9a: 81:ad:8f:cf:5a:f9:04:79:75:ed:e7:54:0e:be:4d: a2:90:db:f4:9c:af:5a:f3:8b:1b:a9:e7:20:32:fc: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:07:95:13:B3:D9:5B:FC:79:EC:37:10:8C:E1:54:8A:0B:3E:6C:5B X509v3 Authority Key Identifier: keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:c6:1d:d0:9d:69:87:09:cd:47:50:ee:51:d6:b3:10:53: f2:bd:f1:6c:61:da:56:4e:a1:5c:06:75:d9:c7:00:e6:62:af: a5:11:35:8c:b7:cd:11:7d:93:c5:f8:73:1d:2d:90:9d:4a:b4: bd:bf:17:06:7d:d3:3e:6f:f2:ec:ea:9c:9c:b3:82:be:6a:6e: e4:a4:1f:30:95:56:5d:52:cf:24:91:2d:6d:fc:2f:2d:13:2d: cc:2f:85:90:d7:c2:cf:db:74:e2:d8:a3:7f:7c:0d:45:86:54: b8:bf:c4:ed:2e:e3:61:a6:6f:6a:be:3e:1b:9c:9d:92:fe:d9: dd:1d:48:3f:8a:3a:62:89:e2:09:8f:87:c0:92:1c:6e:67:70: 16:ee:dd:ec:99:bc:0c:43:d1:84:22:5d:3a:75:8f:0c:d1:e5: 59:09:ef:d9:3a:ae:7a:a2:48:c3:3f:61:cb:de:e1:5f:f0:7c: ec:90:bd:9c:a3:f3:22:7e:03:1f:03:de:df:3b:b5:08:cb:95: bd:44:26:6a:5f:78:52:c2:15:9c:c7:9e:19:b8:8f:26:eb:a5: 87:a7:f0:07:70:2d:12:48:88:68:b0:21:1a:82:64:e3:c9:a0: d7:94:69:99:63:4e:3a:20:88:ef:41:d5:63:dc:59:95:ce:5c: aa:c7:d5:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xo1RiP9G8AV1ikunXAtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi Y2Q4NjMwHhcNMjUxMjIwMDgwMDQ5WhcNMjUxMjIxMDgwMDQ5WjAzMTEwLwYDVQQD Eyg5NjA3OTUxM2IzZDk1YmZjNzllYzM3MTA4Y2UxNTQ4YTBiM2U2YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc9r1Zh5qFWUVqF+858CwiNpnNWp eKYQD/cfOjCrzxtdvt3VsYVhL1HIAe32ic86j3qTp+Wt/7gE0RuvZGHnot6VZKZd DTPt2wiQ6Ss86UEWZBfMwk3Q7njq+aTBHt0d5ix5PTmF3154of1/76I00ClJLpNU F5sRC5fPQ+uw+zsHvHFMrEpwQzDZM0i2eFSzCBY68vahfAqLH5KcFtoVqC5zLm8f p7NBDaYOXAV6AlY29MmshvGiuWthoo0wBUKKWIYq0gv1sB8xY4VJKymde7OKE7mW 9Q918tqYWqpBZ5qBrY/PWvkEeXXt51QOvk2ikNv0nK9a84sbqecgMvziwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYHlROz2Vv8eew3EIzhVIoLPmxbMB8GA1UdIwQY MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXXGHdCd aYcJzUdQ7lHWsxBT8r3xbGHaVk6hXAZ12ccA5mKvpRE1jLfNEX2TxfhzHS2QnUq0 vb8XBn3TPm/y7OqcnLOCvmpu5KQfMJVWXVLPJJEtbfwvLRMtzC+FkNfCz9t04tij f3wNRYZUuL/E7S7jYaZvar4+G5ydkv7Z3R1IP4o6YoniCY+HwJIcbmdwFu7d7Jm8 DEPRhCJdOnWPDNHlWQnv2TqueqJIwz9hy97hX/B87JC9nKPzIn4DHwPe3zu1CMuV vUQmal94UsIVnMeeGbiPJuulh6fwB3AtEkiIaLAhGoJk48mg15RpmWNOOiCI70HV Y9xZlc5cqsfVGg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:15:50 2025 by rpki-client