This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json) Hash identifier: 7AuitlArpdLfhOiBrBCZfGnfkb8ntMIOB1DEDn86vlo= Subject key identifier: AB:D5:0F:C8:E5:ED:8F:67:80:1C:3E:5B:50:F6:33:F7:4F:36:08:51 Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Certificate serial: 019B405BA4A960335C5962D798C7BB67618E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft Manifest number: 120C Signing time: Sun 21 Dec 2025 10:01:46 +0000 Manifest this update: Sun 21 Dec 2025 10:01:46 +0000 Manifest next update: Mon 22 Dec 2025 10:01:46 +0000 Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: 1zi5lnrJVGn7s0r1e4J4XhAR1+b36JxQ+Y0mZfP7McE=) 2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:a4:a9:60:33:5c:59:62:d7:98:c7:bb:67:61:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Validity Not Before: Dec 21 10:01:46 2025 GMT Not After : Dec 22 10:01:46 2025 GMT Subject: CN=abd50fc8e5ed8f67801c3e5b50f633f74f360851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:d5:ff:ed:80:9e:2f:a4:f2:a8:73:5d:72: 7f:97:c3:23:c2:d3:29:1d:28:ba:98:eb:5b:8d:50: 17:15:d3:7d:9a:34:4d:22:61:b5:22:4f:16:92:33: 84:21:3e:27:3a:b5:22:e4:6c:c0:17:7e:02:f2:3b: 04:a7:e1:e3:dc:17:ae:c3:d5:2a:d3:80:01:ca:fe: 5b:8c:0e:f2:29:e7:13:a7:68:1c:d8:51:5e:bb:dc: 0c:df:01:d7:73:0e:5b:97:e1:ae:e5:17:3d:72:fb: 67:a9:d5:39:b4:78:6a:a0:20:38:2d:d4:dd:13:47: df:b3:44:01:93:a3:60:49:a3:d9:f5:ca:a5:07:bf: d0:0d:24:01:04:a1:a7:2f:72:d6:92:9a:36:b0:08: 47:98:46:26:70:48:82:a2:3f:7f:2e:d9:42:d0:7c: 4a:a1:c7:01:69:07:7a:a6:f0:65:70:d8:f1:5a:8d: ad:5a:81:e7:b1:ff:cd:8f:2c:b2:1f:fc:ea:cf:40: f6:c2:29:ce:c1:ba:ec:7f:62:a2:33:c5:88:c4:6c: e6:e4:14:3e:f5:6f:59:ae:63:1e:58:da:10:3f:e0: 4a:ea:ec:ed:df:e8:c6:f5:8d:bb:aa:27:c6:1a:5c: 1b:72:9b:e0:aa:79:eb:ef:cd:0a:ec:48:5b:2d:20: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:0F:C8:E5:ED:8F:67:80:1C:3E:5B:50:F6:33:F7:4F:36:08:51 X509v3 Authority Key Identifier: keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:80:1c:ba:75:cb:dd:75:56:51:28:06:b4:63:ca:7e:b6:22: 85:ff:32:d6:df:b1:ac:ce:4e:13:1a:4e:25:94:cb:9e:d6:13: 28:71:7e:4a:26:5b:2d:3c:70:f4:e7:b3:8b:2f:a5:2a:f3:09: 85:d0:8a:ef:77:86:85:c4:ca:ca:86:9d:ae:51:c8:ad:5c:3f: b1:a3:fe:52:29:b1:00:70:97:a9:7b:0e:57:19:6e:a0:d3:8d: a2:88:7a:51:28:58:8c:86:19:79:3e:be:5b:01:6d:15:59:c9: 67:a1:12:2b:cc:89:aa:03:dc:e7:ba:c1:ec:21:00:ca:c7:65: cf:b6:76:a2:15:8d:54:90:91:46:bb:8c:75:7e:65:76:da:64: 84:27:fe:40:36:db:af:3b:a5:f8:41:fb:96:76:84:93:f2:d3: 7e:fc:80:98:be:c8:13:af:6c:0a:64:40:5b:42:54:cc:f3:34: 97:84:41:b1:f8:7f:6e:02:c8:ff:72:cb:70:40:e0:fe:6a:87: 19:5d:bb:45:98:53:03:f5:22:f7:ad:e3:56:d8:c4:df:ee:bc: ad:4d:0f:45:8e:ea:23:59:bc:d7:71:3c:30:7d:12:d3:8f:62: 10:d8:75:01:66:94:8c:1f:f4:df:f9:d4:c0:03:f5:d0:3d:6c: 54:0e:d5:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW6SpYDNcWWLXmMe7Z2GOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj ZGQ0ZjYwHhcNMjUxMjIxMTAwMTQ2WhcNMjUxMjIyMTAwMTQ2WjAzMTEwLwYDVQQD EyhhYmQ1MGZjOGU1ZWQ4ZjY3ODAxYzNlNWI1MGY2MzNmNzRmMzYwODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxnV/+2Ani+k8qhzXXJ/l8MjwtMp HSi6mOtbjVAXFdN9mjRNImG1Ik8WkjOEIT4nOrUi5GzAF34C8jsEp+Hj3Beuw9Uq 04AByv5bjA7yKecTp2gc2FFeu9wM3wHXcw5bl+Gu5Rc9cvtnqdU5tHhqoCA4LdTd E0ffs0QBk6NgSaPZ9cqlB7/QDSQBBKGnL3LWkpo2sAhHmEYmcEiCoj9/LtlC0HxK occBaQd6pvBlcNjxWo2tWoHnsf/NjyyyH/zqz0D2winOwbrsf2KiM8WIxGzm5BQ+ 9W9ZrmMeWNoQP+BK6uzt3+jG9Y27qifGGlwbcpvgqnnr780K7EhbLSChJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvVD8jl7Y9ngBw+W1D2M/dPNghRMB8GA1UdIwQY MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt ZGI4NWJhNDA2YzUxLzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYAcunXL 3XVWUSgGtGPKfrYihf8y1t+xrM5OExpOJZTLntYTKHF+SiZbLTxw9Oeziy+lKvMJ hdCK73eGhcTKyoadrlHIrVw/saP+UimxAHCXqXsOVxluoNONooh6UShYjIYZeT6+ WwFtFVnJZ6ESK8yJqgPc57rB7CEAysdlz7Z2ohWNVJCRRruMdX5ldtpkhCf+QDbb rzul+EH7lnaEk/LTfvyAmL7IE69sCmRAW0JUzPM0l4RBsfh/bgLI/3LLcEDg/mqH GV27RZhTA/Ui963jVtjE3+68rU0PRY7qI1m813E8MH0S049iENh1AWaUjB/03/nU wAP10D1sVA7Vjg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:53:56 2025 by rpki-client