This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: zpN0+Botd6d8E6rpMscy4gkm1CXdydVngzXJL/wAoxo= Subject key identifier: 4B:F8:6E:07:7F:67:86:9A:A4:B1:8D:47:39:45:B5:DB:76:B5:3E:11 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B4EBBD3D6F4111E78500C78203F664A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 17C7 Signing time: Wed 24 Dec 2025 05:01:30 +0000 Manifest this update: Wed 24 Dec 2025 05:01:30 +0000 Manifest next update: Thu 25 Dec 2025 05:01:30 +0000 Files and hashes: 1: 0AYdj6RPn1eQ4OgEy6QCr1f5k2Q.roa (hash: L6DU942Jz6/lvfUIe3D2o0HomEkBYzu27lFzdIVqGEc=) 2: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 3: 9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa (hash: /bubvvyyCfe3wByISey49bBzc5BKqpBJ33FyIFj7ql0=) 4: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: 3pNqSmKWmqHeSI3+7Z1u427dZ7O2xab6hbRNitSGgrI=) 6: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 7: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 8: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 9: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 10: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 11: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 12: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 13: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 14: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 15: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 16: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:d3:d6:f4:11:1e:78:50:0c:78:20:3f:66:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Dec 24 05:01:30 2025 GMT Not After : Dec 25 05:01:30 2025 GMT Subject: CN=4bf86e077f67869aa4b18d473945b5db76b53e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:09:39:7b:0c:d8:db:3e:b0:2b:77:e5:c6: a3:3b:60:72:3c:05:95:d8:ae:b7:02:9a:6a:c8:ac: c8:fe:c8:67:7f:ca:1d:0a:37:46:2d:b0:42:e7:ab: 27:00:46:e7:51:5c:d2:f2:d2:42:3a:6f:7f:2c:3c: 4f:2e:12:39:42:be:93:b8:d6:e1:cb:64:ee:9d:1f: 9b:97:6c:fb:27:89:91:d2:01:fc:67:96:76:4c:4a: 87:85:d9:8a:62:f1:39:ba:fb:ae:05:41:86:1f:5c: 9d:0a:b8:46:ad:4b:d7:90:cf:3d:ab:f9:32:8a:96: 3b:2c:d6:60:05:40:9b:4d:09:6d:f0:9e:73:fb:e3: a9:ae:21:ff:22:b0:cf:73:c4:cd:9e:ac:c2:b2:e8: 08:cb:43:3e:ed:97:9a:fc:c7:54:e7:7c:19:eb:3b: 27:62:42:04:2d:9d:34:6a:1b:6b:16:e4:22:51:49: 74:b3:6c:e2:05:b0:d1:d1:97:80:0c:dc:68:dc:36: 21:aa:1f:ed:a2:b0:70:25:5e:0b:05:13:06:4b:dd: 66:29:b9:3b:15:5d:88:e1:fc:21:da:44:51:3d:a0: b5:dd:b1:39:6a:d8:f6:8e:48:23:12:bb:18:6f:3e: c2:7a:fa:61:2a:13:9c:59:61:51:0e:d9:45:54:9d: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:6E:07:7F:67:86:9A:A4:B1:8D:47:39:45:B5:DB:76:B5:3E:11 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:57:14:ba:41:70:ba:c7:4a:6d:8e:fc:d5:b9:92:51:ed:a6: 75:eb:48:2a:09:9e:bd:35:a8:6f:31:14:a0:77:d0:3d:6c:73: 9c:f0:27:96:65:cc:6c:df:a2:7c:bb:63:ef:32:b1:ae:40:d8: 77:8d:7f:68:15:98:0a:a6:01:28:64:70:e5:07:ad:94:34:7c: d5:90:46:14:f3:4c:2f:67:81:8d:6e:08:5d:8c:78:92:88:5f: 0e:67:f0:a5:82:b0:03:0b:ac:1c:70:d0:81:a8:9f:44:26:2c: 6f:94:59:a8:82:0c:cf:b9:7e:41:39:e3:68:81:49:01:5e:ae: 06:c0:05:49:c8:7b:6d:a6:74:9d:eb:95:2a:e6:f5:14:13:0f: b4:b3:53:bf:85:28:6e:22:b2:7e:81:7b:80:e3:13:68:62:6f: 92:26:51:1c:ca:66:3e:fe:d2:50:83:7a:e6:26:b7:91:4d:6b: aa:a0:b2:69:8f:cc:46:ae:8a:06:ac:41:47:b4:03:00:c7:96: 9f:25:53:ed:08:ae:e1:08:95:82:6c:04:c3:3a:46:f2:ee:22: 68:b1:6d:16:39:bc:8c:4b:ca:45:44:07:bd:0a:43:6e:56:8a: e5:88:72:8e:71:07:64:1a:a0:e1:58:c0:65:2e:4e:01:b9:c0: 84:3f:07:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu9PW9BEeeFAMeCA/ZkptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUxMjI0MDUwMTMwWhcNMjUxMjI1MDUwMTMwWjAzMTEwLwYDVQQD Eyg0YmY4NmUwNzdmNjc4NjlhYTRiMThkNDczOTQ1YjVkYjc2YjUzZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol8JOXsM2Ns+sCt35cajO2ByPAWV 2K63AppqyKzI/shnf8odCjdGLbBC56snAEbnUVzS8tJCOm9/LDxPLhI5Qr6TuNbh y2TunR+bl2z7J4mR0gH8Z5Z2TEqHhdmKYvE5uvuuBUGGH1ydCrhGrUvXkM89q/ky ipY7LNZgBUCbTQlt8J5z++OpriH/IrDPc8TNnqzCsugIy0M+7Zea/MdU53wZ6zsn YkIELZ00ahtrFuQiUUl0s2ziBbDR0ZeADNxo3DYhqh/torBwJV4LBRMGS91mKbk7 FV2I4fwh2kRRPaC13bE5atj2jkgjErsYbz7CevphKhOcWWFRDtlFVJ1xcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv4bgd/Z4aapLGNRzlFtdt2tT4RMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVcUukFw usdKbY781bmSUe2mdetIKgmevTWobzEUoHfQPWxznPAnlmXMbN+ifLtj7zKxrkDY d41/aBWYCqYBKGRw5QetlDR81ZBGFPNML2eBjW4IXYx4kohfDmfwpYKwAwusHHDQ gaifRCYsb5RZqIIMz7l+QTnjaIFJAV6uBsAFSch7baZ0neuVKub1FBMPtLNTv4Uo biKyfoF7gOMTaGJvkiZRHMpmPv7SUIN65ia3kU1rqqCyaY/MRq6KBqxBR7QDAMeW nyVT7Qiu4QiVgmwEwzpG8u4iaLFtFjm8jEvKRUQHvQpDblaK5YhyjnEHZBqg4VjA ZS5OAbnAhD8H5g== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:30 2025 by rpki-client