This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json) Hash identifier: N8TT180qgsniIgtLeiAgXBkruKCvU4akuoQEqyKW70U= Subject key identifier: 26:4E:D4:D0:44:55:C9:42:E4:7D:B5:0E:6C:4C:AA:3E:C3:43:A2:55 Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Certificate serial: 019B70A392DA037AAE0EEB50D6F113AB70E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft Manifest number: 0872 Signing time: Tue 30 Dec 2025 19:02:06 +0000 Manifest this update: Tue 30 Dec 2025 19:02:06 +0000 Manifest next update: Wed 31 Dec 2025 19:02:06 +0000 Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: omXIg46ROZTUa5eVK8uTcKphQ6rN9/Ug2wlHfAO66VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:92:da:03:7a:ae:0e:eb:50:d6:f1:13:ab:70:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Validity Not Before: Dec 30 19:02:06 2025 GMT Not After : Dec 31 19:02:06 2025 GMT Subject: CN=264ed4d04455c942e47db50e6c4caa3ec343a255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:e8:18:7f:82:b2:98:20:9f:d3:6f:13:eb: df:31:07:37:ea:b1:97:ca:21:eb:ee:66:98:09:45: 99:0e:d0:3a:88:52:d4:59:7b:99:fe:28:6b:75:2a: 25:f9:fa:b2:cf:ff:53:3c:b0:8b:0e:cb:39:3c:de: b5:04:e4:74:83:66:88:be:9b:57:a1:88:1d:e8:e4: 26:aa:df:16:13:f9:2f:a0:9a:0d:9c:90:e1:d7:8f: d2:e1:6c:e4:79:67:2b:71:52:c8:aa:b6:78:1f:8b: 78:85:84:6d:73:0c:ce:9a:b7:b3:60:ed:77:8d:d6: 1e:b8:8c:4e:ef:01:64:b8:69:8b:ed:4a:ef:d4:33: 57:9c:dc:58:fe:f9:b1:9a:d7:66:01:17:63:01:0f: 0a:bc:12:40:07:71:2c:a7:a5:c0:83:66:45:82:a2: 4c:a2:e7:1c:ed:d1:95:38:7f:be:2a:a6:a3:12:43: db:2b:35:5c:de:3c:96:62:48:ca:ea:5f:51:54:fd: 98:91:f2:17:b2:82:d7:00:2c:4f:15:4b:67:ad:ce: 10:c2:f2:ee:19:c8:c1:84:49:0a:6a:2c:24:2c:e5: 3f:95:18:a0:cb:3e:b7:b8:bb:79:3d:4a:b5:d1:fa: a1:58:ee:83:61:8c:89:5d:44:27:68:bf:e0:0c:7b: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4E:D4:D0:44:55:C9:42:E4:7D:B5:0E:6C:4C:AA:3E:C3:43:A2:55 X509v3 Authority Key Identifier: keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:17:aa:99:17:87:57:7a:ae:4a:7d:87:da:4f:f3:de:07:1c: 73:1d:83:53:5b:5e:d6:e8:15:56:58:a3:1a:36:46:27:ae:60: dc:f2:47:8f:b2:55:19:55:5d:ef:c5:bc:10:e9:04:eb:0a:07: 60:c9:05:33:ee:cd:5a:26:a5:c9:b6:13:60:ed:c0:87:5c:15: 61:21:40:0e:82:7e:f9:27:12:65:64:ad:fe:2c:27:19:8a:d7: 82:5a:12:d3:5d:86:8a:86:9b:0b:05:cb:70:ea:83:91:60:b6: 62:ae:6c:fe:00:86:ab:e4:36:a6:c9:bb:0b:c3:b2:24:04:2e: 6c:32:f0:31:73:53:a8:0e:c3:21:75:6d:37:21:64:42:39:62: d0:23:68:17:82:83:48:d3:a8:25:a4:b1:a3:2e:ce:ad:c6:bb: a6:8f:a9:f6:70:05:5c:99:93:47:b5:df:47:66:5b:78:5e:ae: 3c:42:60:15:45:cb:d5:69:d2:2b:4b:45:2e:03:78:a3:71:24: 52:4d:77:73:fe:c3:48:83:ff:7e:10:bb:61:00:8a:24:7c:be: b3:f5:b6:74:b2:c1:d6:c9:39:c9:70:01:41:02:24:88:fd:ee: f4:91:15:50:cb:cf:17:04:57:10:9e:1c:e4:c0:f0:21:f9:79: ef:dc:a7:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo5LaA3quDutQ1vETq3DhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh ZmY4ZTYwHhcNMjUxMjMwMTkwMjA2WhcNMjUxMjMxMTkwMjA2WjAzMTEwLwYDVQQD EygyNjRlZDRkMDQ0NTVjOTQyZTQ3ZGI1MGU2YzRjYWEzZWMzNDNhMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ/oGH+Cspggn9NvE+vfMQc36rGX yiHr7maYCUWZDtA6iFLUWXuZ/ihrdSol+fqyz/9TPLCLDss5PN61BOR0g2aIvptX oYgd6OQmqt8WE/kvoJoNnJDh14/S4WzkeWcrcVLIqrZ4H4t4hYRtcwzOmrezYO13 jdYeuIxO7wFkuGmL7Urv1DNXnNxY/vmxmtdmARdjAQ8KvBJAB3Esp6XAg2ZFgqJM oucc7dGVOH++KqajEkPbKzVc3jyWYkjK6l9RVP2YkfIXsoLXACxPFUtnrc4QwvLu GcjBhEkKaiwkLOU/lRigyz63uLt5PUq10fqhWO6DYYyJXUQnaL/gDHuKUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZO1NBEVclC5H21DmxMqj7DQ6JVMB8GA1UdIwQY MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQheqmReH V3quSn2H2k/z3gcccx2DU1te1ugVVlijGjZGJ65g3PJHj7JVGVVd78W8EOkE6woH YMkFM+7NWialybYTYO3Ah1wVYSFADoJ++ScSZWSt/iwnGYrXgloS012GioabCwXL cOqDkWC2Yq5s/gCGq+Q2psm7C8OyJAQubDLwMXNTqA7DIXVtNyFkQjli0CNoF4KD SNOoJaSxoy7Orca7po+p9nAFXJmTR7XfR2ZbeF6uPEJgFUXL1WnSK0tFLgN4o3Ek Uk13c/7DSIP/fhC7YQCKJHy+s/W2dLLB1sk5yXABQQIkiP3u9JEVUMvPFwRXEJ4c 5MDwIfl579yn7g== -----END CERTIFICATE-----Generated at Wed Dec 31 00:23:31 2025 by rpki-client