This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json) Hash identifier: habFcirt+6VHxVmqHgJUfcVQBnLibUaXxe4OAr20nr8= Subject key identifier: A5:9D:23:22:91:26:BF:B7:F7:69:C7:59:75:F4:D8:67:FD:07:12:59 Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Certificate serial: 019B51BCEB3DC4D111F441CF071760D08ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 19:01:34 +0000 Manifest this update: Wed 24 Dec 2025 19:01:34 +0000 Manifest next update: Thu 25 Dec 2025 19:01:34 +0000 Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: 9o0sB9Z5ezovQXOfSKl1gaNf2EIOFUTGB6Xxinq6/XQ=) 2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:eb:3d:c4:d1:11:f4:41:cf:07:17:60:d0:8a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Validity Not Before: Dec 24 19:01:34 2025 GMT Not After : Dec 25 19:01:34 2025 GMT Subject: CN=a59d23229126bfb7f769c75975f4d867fd071259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:65:21:b9:74:30:3a:89:fc:47:44:7e:d1: 6c:58:6e:5d:69:6b:ff:af:65:ca:44:0e:a9:8c:b6: 6f:a0:a3:68:ae:e5:66:e3:21:16:3b:ea:45:de:fe: f8:9a:29:0f:0b:42:a7:13:03:c6:e0:d1:2c:78:14: 16:c7:b0:53:1c:3a:9c:00:5a:61:21:a2:aa:6d:54: 18:ea:b4:19:8f:b8:54:b1:5d:e4:f2:7d:81:2b:ed: f1:04:7b:f6:72:00:9e:73:bc:2f:a7:90:d0:22:91: ab:f8:65:d7:b9:55:c8:9f:3c:d0:6e:6b:fe:ba:3d: d6:a2:fb:61:56:45:b6:5d:32:4e:bd:b0:18:6e:93: 3c:fa:21:c6:d0:89:6f:31:05:91:f0:aa:c7:91:e0: a7:5a:67:ab:7e:32:c1:57:42:3f:56:c7:bd:a0:ba: 69:d9:9b:3f:ed:16:ab:59:f3:28:8b:a3:66:a7:82: 5b:23:af:45:02:8a:20:8a:68:f4:6d:8a:d9:46:d5: 8c:82:18:e8:35:71:5c:e5:34:06:5d:5c:6b:f3:4e: b0:7b:c8:16:e4:7a:20:60:13:65:13:dd:05:f0:f0: 2c:1a:1b:41:71:e0:05:9b:09:f1:e1:b2:37:53:02: 73:28:96:e8:d2:b6:4a:a6:f1:9c:ec:c3:c9:65:f6: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:23:22:91:26:BF:B7:F7:69:C7:59:75:F4:D8:67:FD:07:12:59 X509v3 Authority Key Identifier: keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f4:9b:9b:18:5d:32:b5:80:87:68:4d:62:cd:42:6e:99:b2: 76:3c:de:2c:9d:b9:24:5a:8d:2c:6b:d0:97:8e:a7:78:8f:b9: e1:08:0a:c9:8e:01:7f:0e:03:6f:03:15:d1:b3:b5:79:94:af: 22:0d:ff:9c:40:32:a7:9a:43:dc:99:d2:d3:e9:06:d3:2d:14: eb:0d:e7:4c:87:ef:e2:86:70:6d:84:e7:a4:79:ce:22:7e:e1: 6b:c8:dc:63:88:bc:40:0a:f7:d3:03:f3:7d:a2:ea:eb:a3:5d: 62:d3:f2:10:88:56:46:5f:d7:5a:2f:95:65:7b:25:28:52:e3: 37:b4:11:fb:0e:90:05:92:87:91:71:f5:61:e8:51:5b:ee:ea: 17:49:5f:88:dc:01:59:fd:ad:cc:fe:dd:80:44:91:59:7f:36: 80:4f:75:86:14:94:13:43:ce:22:3a:b7:9b:8d:8d:8f:b8:b1: d9:1e:0a:8b:fc:d5:b1:f6:02:37:87:e4:35:23:1b:93:d4:92: fb:15:4d:10:71:27:8c:37:92:08:ac:75:44:03:fb:dd:9b:a4: 06:ff:48:80:84:2f:0b:b1:78:16:f0:09:30:52:7b:43:c0:ab: 39:45:88:59:ba:95:10:06:93:ae:75:12:d3:90:55:c0:4a:e2: c5:51:49:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvOs9xNER9EHPBxdg0IrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl ODg1YTAwHhcNMjUxMjI0MTkwMTM0WhcNMjUxMjI1MTkwMTM0WjAzMTEwLwYDVQQD EyhhNTlkMjMyMjkxMjZiZmI3Zjc2OWM3NTk3NWY0ZDg2N2ZkMDcxMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApltlIbl0MDqJ/EdEftFsWG5daWv/ r2XKRA6pjLZvoKNoruVm4yEWO+pF3v74mikPC0KnEwPG4NEseBQWx7BTHDqcAFph IaKqbVQY6rQZj7hUsV3k8n2BK+3xBHv2cgCec7wvp5DQIpGr+GXXuVXInzzQbmv+ uj3WovthVkW2XTJOvbAYbpM8+iHG0IlvMQWR8KrHkeCnWmerfjLBV0I/Vse9oLpp 2Zs/7RarWfMoi6Nmp4JbI69FAoogimj0bYrZRtWMghjoNXFc5TQGXVxr806we8gW 5HogYBNlE90F8PAsGhtBceAFmwnx4bI3UwJzKJbo0rZKpvGc7MPJZfasTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWdIyKRJr+392nHWXX02Gf9BxJZMB8GA1UdIwQY MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfSbmxhd MrWAh2hNYs1CbpmydjzeLJ25JFqNLGvQl46neI+54QgKyY4Bfw4DbwMV0bO1eZSv Ig3/nEAyp5pD3JnS0+kG0y0U6w3nTIfv4oZwbYTnpHnOIn7ha8jcY4i8QAr30wPz faLq66NdYtPyEIhWRl/XWi+VZXslKFLjN7QR+w6QBZKHkXH1YehRW+7qF0lfiNwB Wf2tzP7dgESRWX82gE91hhSUE0POIjq3m42Nj7ix2R4Ki/zVsfYCN4fkNSMbk9SS +xVNEHEnjDeSCKx1RAP73ZukBv9IgIQvC7F4FvAJMFJ7Q8CrOUWIWbqVEAaTrnUS 05BVwErixVFJdA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:53 2025 by rpki-client