This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: E69+Htgoed2fKTMdzR+WV2ymOIVd6W5Pnv4ANJSv4V8= Subject key identifier: 1E:3C:1F:74:77:D5:17:0D:EF:19:B2:22:3A:D0:BE:DE:EF:F2:1E:CA Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B397DCE5E0EAF9BA35C9190229AB8422D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 17BC Signing time: Sat 20 Dec 2025 02:01:44 +0000 Manifest this update: Sat 20 Dec 2025 02:01:44 +0000 Manifest next update: Sun 21 Dec 2025 02:01:44 +0000 Files and hashes: 1: 0AYdj6RPn1eQ4OgEy6QCr1f5k2Q.roa (hash: L6DU942Jz6/lvfUIe3D2o0HomEkBYzu27lFzdIVqGEc=) 2: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 3: 9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa (hash: /bubvvyyCfe3wByISey49bBzc5BKqpBJ33FyIFj7ql0=) 4: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: 0g953RBLVsYOjltSvulA+vDwHejcEbNmtjxDPQx4Jp0=) 6: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 7: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 8: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 9: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 10: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 11: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 12: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 13: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 14: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 15: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 16: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:ce:5e:0e:af:9b:a3:5c:91:90:22:9a:b8:42:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Dec 20 02:01:44 2025 GMT Not After : Dec 21 02:01:44 2025 GMT Subject: CN=1e3c1f7477d5170def19b2223ad0bedeeff21eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:e6:56:de:b0:e0:12:73:bb:a6:17:b4:c2: 34:e4:56:d4:3a:27:5c:a1:4d:fd:24:3e:b0:53:b5: 53:d3:a5:ab:63:d0:b3:d9:36:a4:22:d3:7a:40:f0: 20:12:29:58:98:eb:4a:81:4c:03:8d:e1:58:9f:56: 5a:94:39:35:7f:b3:8b:38:a2:f7:29:f1:2c:48:a1: 53:a5:2b:5b:9f:a7:84:09:33:3a:4b:23:0c:7a:0a: 75:8a:1d:1a:c7:f9:4a:6b:97:45:92:7b:4d:8c:4d: 60:2b:7b:d4:0d:04:5c:ed:6f:d0:87:7f:a7:d9:25: 15:5d:39:3a:bd:19:08:ea:aa:1d:c4:8f:21:c2:e2: 46:ac:e2:5a:18:cf:78:27:8e:fb:22:d3:60:54:29: 1b:22:c8:de:04:92:75:41:4c:11:d5:f9:48:b9:36: ee:ea:a3:2c:b4:96:c3:6c:b7:21:97:f0:7c:8b:54: 5c:4b:3e:e6:65:05:1f:6e:50:54:a3:7e:f6:53:92: 5e:f0:61:4d:6f:53:f5:c9:d3:2e:12:28:d4:5c:f5: b6:70:d3:4f:a6:40:0d:f0:d1:f5:60:5c:75:71:d7: 4c:b8:27:73:71:56:e5:20:c7:fb:18:c1:6f:0c:13: cb:00:0c:58:be:6b:86:45:7d:2e:b1:cc:19:40:ac: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3C:1F:74:77:D5:17:0D:EF:19:B2:22:3A:D0:BE:DE:EF:F2:1E:CA X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3e:43:d8:6e:1d:ab:9d:f8:66:f8:9b:ba:90:9c:14:08:09: 68:23:d6:f5:ed:c1:8b:71:80:40:73:e5:b6:bd:f5:66:60:9d: 5a:f6:83:1d:91:f8:67:a1:f2:ed:1b:eb:a7:5a:17:44:4f:01: b9:f7:f6:fd:c1:07:a4:58:2a:b0:f4:e5:ec:eb:64:12:17:e5: 34:a6:06:58:34:0e:43:92:5e:d5:3b:a2:0d:57:4e:f0:84:20: fd:4c:02:af:59:2c:ae:a3:fe:04:74:04:6b:7e:58:0a:ea:fa: f7:d4:45:12:08:6d:c6:f2:ef:71:de:e1:51:62:c0:c6:b4:54: dc:d0:37:9b:fe:3f:65:b8:17:f6:9f:b3:99:43:2c:26:8e:9a: 4c:63:5e:a7:b9:f7:26:c9:2d:c0:8e:b8:35:b4:46:07:ca:9c: 95:0d:a4:23:b6:76:4b:88:5a:ea:b7:48:91:f0:f3:71:e3:9c: ff:a7:f5:ef:ea:89:5a:55:5a:6e:3c:60:c6:30:51:5b:a3:52: 4f:5d:64:67:3b:4b:fe:e8:c9:a0:65:12:0b:24:ed:75:5b:a5: 9b:90:78:0b:4c:9a:fa:8f:f5:40:94:53:79:ee:99:e1:75:22: 94:8d:ef:4f:10:24:09:ac:a1:7d:c5:42:db:39:b7:67:98:3b: 49:0c:7d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fc5eDq+bo1yRkCKauEItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUxMjIwMDIwMTQ0WhcNMjUxMjIxMDIwMTQ0WjAzMTEwLwYDVQQD EygxZTNjMWY3NDc3ZDUxNzBkZWYxOWIyMjIzYWQwYmVkZWVmZjIxZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvADmVt6w4BJzu6YXtMI05FbUOidc oU39JD6wU7VT06WrY9Cz2TakItN6QPAgEilYmOtKgUwDjeFYn1ZalDk1f7OLOKL3 KfEsSKFTpStbn6eECTM6SyMMegp1ih0ax/lKa5dFkntNjE1gK3vUDQRc7W/Qh3+n 2SUVXTk6vRkI6qodxI8hwuJGrOJaGM94J477ItNgVCkbIsjeBJJ1QUwR1flIuTbu 6qMstJbDbLchl/B8i1RcSz7mZQUfblBUo372U5Je8GFNb1P1ydMuEijUXPW2cNNP pkAN8NH1YFx1cddMuCdzcVblIMf7GMFvDBPLAAxYvmuGRX0uscwZQKxCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB48H3R31RcN7xmyIjrQvt7v8h7KMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT5D2G4d q534ZvibupCcFAgJaCPW9e3Bi3GAQHPltr31ZmCdWvaDHZH4Z6Hy7Rvrp1oXRE8B uff2/cEHpFgqsPTl7OtkEhflNKYGWDQOQ5Je1TuiDVdO8IQg/UwCr1ksrqP+BHQE a35YCur699RFEghtxvLvcd7hUWLAxrRU3NA3m/4/ZbgX9p+zmUMsJo6aTGNep7n3 JsktwI64NbRGB8qclQ2kI7Z2S4ha6rdIkfDzceOc/6f17+qJWlVabjxgxjBRW6NS T11kZztL/ujJoGUSCyTtdVulm5B4C0ya+o/1QJRTee6Z4XUilI3vTxAkCayhfcVC 2zm3Z5g7SQx94g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:12:54 2025 by rpki-client