This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json) Hash identifier: Bionta6RQHb2PNw/9zZKVfEuwUTe/bnjpr5vgQihWrE= Subject key identifier: DD:6B:F6:11:F2:D3:DA:2D:AA:2B:FD:D9:31:71:3D:6C:07:B8:FA:2E Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4 Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4 Certificate serial: 019B3B6B5510E45EF59DFFEC5FE8F943B6A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft Manifest number: 0970 Signing time: Sat 20 Dec 2025 11:00:48 +0000 Manifest this update: Sat 20 Dec 2025 11:00:48 +0000 Manifest next update: Sun 21 Dec 2025 11:00:48 +0000 Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: WP7La9xNwBp/le5t1BbvA6TtdRVWVldNQKuwYokZGSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:55:10:e4:5e:f5:9d:ff:ec:5f:e8:f9:43:b6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4 Validity Not Before: Dec 20 11:00:48 2025 GMT Not After : Dec 21 11:00:48 2025 GMT Subject: CN=dd6bf611f2d3da2daa2bfdd931713d6c07b8fa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:0b:1c:5e:c1:20:b9:1d:51:e9:a8:22:11: 3d:5a:b5:c8:0d:dc:76:91:32:4f:26:15:cc:c0:e8: ec:2a:a5:bd:3c:a5:c6:0e:19:68:44:4e:f2:1f:fa: 0d:c4:f4:07:7c:7c:e8:f6:53:3a:de:65:1b:08:6c: ed:5b:3c:0a:3c:e8:a1:a9:7e:24:f1:ad:07:b4:f7: 04:1c:b5:64:ac:0a:c3:7c:5e:14:a6:f2:f7:e3:6f: c2:6f:d7:3f:57:a1:76:4c:2b:8c:95:3f:18:ad:76: 38:9c:96:89:ad:63:f2:80:01:44:5f:00:e5:cb:ea: 82:50:47:64:97:03:a2:c7:7b:fb:e2:04:14:ef:8f: 9c:02:53:a4:aa:e8:66:9f:e3:7b:69:76:0a:2b:b7: 97:db:4f:3d:5f:d5:eb:6e:da:9d:2c:ff:30:9d:55: d0:e6:10:e7:e0:d9:d6:2b:6b:5f:3f:90:fe:aa:b6: 02:5d:ed:c7:9a:b8:3c:96:9e:a8:d3:5e:33:ff:40: 3a:59:31:42:88:13:a6:e9:54:19:17:d8:af:88:b0: c5:ee:54:9a:50:8d:e6:5c:73:57:9f:6a:3f:b7:da: fe:f2:0c:28:60:cf:2a:16:ac:cb:55:04:67:59:18: 9e:45:7a:03:9c:0e:05:54:78:59:89:f3:0a:f6:ec: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:F6:11:F2:D3:DA:2D:AA:2B:FD:D9:31:71:3D:6C:07:B8:FA:2E X509v3 Authority Key Identifier: keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:de:4b:2d:5a:e1:4f:14:46:05:e6:9d:99:a1:7b:39:86:c1: c6:dd:1d:d1:ef:6e:99:21:6b:a6:f4:91:b4:f1:48:b2:25:1a: 75:36:d1:7e:55:0d:e5:94:1f:12:43:73:0d:f1:e5:84:75:6b: 46:78:41:99:48:eb:14:b2:1b:c0:a3:03:b8:4c:2e:02:30:10: 4c:88:1a:7a:76:81:7a:8d:26:2c:f5:0f:78:de:cc:d7:20:4d: af:35:b5:74:94:ab:a2:48:3d:50:1c:1d:65:b8:42:c1:2b:2e: 74:3c:f9:84:0c:8f:08:41:bd:93:3c:48:ba:97:b2:2c:ca:fd: 78:f2:3e:00:fe:2a:9b:ab:ba:4d:23:06:4a:aa:7e:22:c5:63: 4a:a4:00:54:90:70:d2:95:a4:25:7a:9a:72:22:6b:af:38:5e: 99:0b:41:7a:b7:e6:30:7e:5f:ee:6b:66:c2:8d:85:9e:1e:73: 05:9d:8f:b0:26:75:72:5d:c7:00:12:40:c9:b1:6b:81:14:39: f8:44:06:5d:61:d6:4c:53:a7:55:91:7d:8d:7d:e4:7c:6b:b9: 8d:fb:d1:75:4c:76:68:d8:60:de:f1:8e:00:64:5a:7f:43:e0: 22:80:bf:1d:a8:fd:22:93:9d:0d:90:b3:a2:66:0c:86:28:c8: 0e:ef:d6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1UQ5F71nf/sX+j5Q7aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh ZTU4YTQwHhcNMjUxMjIwMTEwMDQ4WhcNMjUxMjIxMTEwMDQ4WjAzMTEwLwYDVQQD EyhkZDZiZjYxMWYyZDNkYTJkYWEyYmZkZDkzMTcxM2Q2YzA3YjhmYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgULHF7BILkdUemoIhE9WrXIDdx2 kTJPJhXMwOjsKqW9PKXGDhloRE7yH/oNxPQHfHzo9lM63mUbCGztWzwKPOihqX4k 8a0HtPcEHLVkrArDfF4UpvL342/Cb9c/V6F2TCuMlT8YrXY4nJaJrWPygAFEXwDl y+qCUEdklwOix3v74gQU74+cAlOkquhmn+N7aXYKK7eX2089X9XrbtqdLP8wnVXQ 5hDn4NnWK2tfP5D+qrYCXe3Hmrg8lp6o014z/0A6WTFCiBOm6VQZF9iviLDF7lSa UI3mXHNXn2o/t9r+8gwoYM8qFqzLVQRnWRieRXoDnA4FVHhZifMK9uzVRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1r9hHy09otqiv92TFxPWwHuPouMB8GA1UdIwQY MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2 LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd5LLVrh TxRGBeadmaF7OYbBxt0d0e9umSFrpvSRtPFIsiUadTbRflUN5ZQfEkNzDfHlhHVr RnhBmUjrFLIbwKMDuEwuAjAQTIgaenaBeo0mLPUPeN7M1yBNrzW1dJSrokg9UBwd ZbhCwSsudDz5hAyPCEG9kzxIupeyLMr9ePI+AP4qm6u6TSMGSqp+IsVjSqQAVJBw 0pWkJXqaciJrrzhemQtBerfmMH5f7mtmwo2Fnh5zBZ2PsCZ1cl3HABJAybFrgRQ5 +EQGXWHWTFOnVZF9jX3kfGu5jfvRdUx2aNhg3vGOAGRaf0PgIoC/Haj9IpOdDZCz omYMhijIDu/WCQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:32 2025 by rpki-client