This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json) Hash identifier: X+y6nNfrEw32Ti06SaQVfTkAJxA/aTpOlJusdRXTobQ= Subject key identifier: 1A:52:52:A6:16:A4:5E:57:40:44:72:E9:5C:9D:C1:FD:A5:D6:3A:17 Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08 Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408 Certificate serial: 019B5D53FA867B5575878385BD05E063E652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft Manifest number: 16B6 Signing time: Sat 27 Dec 2025 01:02:23 +0000 Manifest this update: Sat 27 Dec 2025 01:02:23 +0000 Manifest next update: Sun 28 Dec 2025 01:02:23 +0000 Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: ryTSObDlw0qIhCt2w48fFLUJqB+9fkd/gr1nsZ3bYPw=) 2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:fa:86:7b:55:75:87:83:85:bd:05:e0:63:e6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f59aedc28296e291724f7937de788e27216408 Validity Not Before: Dec 27 01:02:23 2025 GMT Not After : Dec 28 01:02:23 2025 GMT Subject: CN=1a5252a616a45e57404472e95c9dc1fda5d63a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:20:80:a5:66:44:fa:9d:be:d8:23:91:b8: 6c:92:7a:33:43:7b:fc:4a:86:ab:4a:3b:e5:bb:cc: 15:8f:33:5e:ab:12:96:6a:80:83:31:1b:22:cb:20: 71:6a:1f:0e:3f:8a:1e:2c:63:ac:25:d3:10:ff:8c: 5c:00:6b:2b:10:f5:fe:f3:a0:ea:b4:88:fc:9b:7f: 3a:5d:72:1c:a9:f5:01:fa:37:98:1b:1d:b6:87:f8: 08:a3:f3:79:0a:19:1f:25:d5:7b:7c:65:19:e3:ea: 90:43:e1:0d:17:07:4a:b5:4b:83:3b:7d:5f:05:7d: f3:bb:d0:cb:67:a1:f7:96:51:17:90:36:39:d5:ae: d9:58:fb:c7:bb:58:b8:43:c5:8d:41:a1:51:7c:1b: ae:27:11:0f:3a:6a:6f:27:10:4c:c7:14:26:3b:35: 24:84:c2:5d:d7:f3:24:74:81:0a:df:ad:38:4b:66: 83:7d:fe:3e:d4:ca:17:c6:ab:78:f0:bd:42:d5:17: 61:45:ea:e1:7c:62:5b:f3:de:26:e7:19:b2:ae:c6: 73:68:81:27:1a:a6:cb:b3:6b:50:ba:27:ad:a0:ce: 1d:80:5f:2f:bc:ab:d8:6c:1a:d9:3e:f8:30:44:b1: 15:f4:15:b9:41:e5:98:d2:45:3a:19:8e:b0:45:2b: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:52:A6:16:A4:5E:57:40:44:72:E9:5C:9D:C1:FD:A5:D6:3A:17 X509v3 Authority Key Identifier: keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:41:3a:7b:17:0c:5a:a8:09:9e:3e:5e:c9:89:4e:5e:71:58: 7d:08:23:ca:db:02:f3:ef:44:32:61:a0:fb:78:83:b6:04:7a: db:ce:67:1f:28:ba:ce:58:51:49:3d:df:73:8a:c9:2c:0d:29: bb:88:3d:d9:b3:99:ff:a5:8d:ec:02:65:c1:7b:ec:d4:ac:07: 9d:38:b7:de:95:31:c0:8f:dc:8d:92:4e:12:2a:7d:6e:e3:85: 67:3e:2f:b5:7c:fc:12:9c:92:66:21:da:61:8c:55:d0:96:a3: a6:a2:68:72:b0:af:d5:14:f5:6f:38:71:b6:69:88:0c:16:26: 6b:d1:dc:92:ff:17:05:db:33:d6:ac:c0:e0:8c:c3:51:5d:2c: 07:5e:be:e0:84:6b:9d:4a:d9:04:2d:80:40:00:e1:c7:71:e7: 51:9d:0f:35:5e:6b:9e:e4:67:86:5c:aa:17:2c:81:e0:3b:a3: 73:61:cc:cd:0d:06:8f:c5:b6:2d:d6:58:bd:66:dc:e6:4f:4b: 84:e5:6f:e4:de:16:69:58:0c:32:72:a9:24:37:5e:81:75:fd: 27:31:e7:21:88:16:c7:44:be:fd:51:27:a0:f8:33:20:db:33: e5:e2:5a:88:41:c5:85:46:c7:3b:01:c4:9f:a1:60:c2:0d:0e: 8e:c4:88:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU/qGe1V1h4OFvQXgY+ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy MTY0MDgwHhcNMjUxMjI3MDEwMjIzWhcNMjUxMjI4MDEwMjIzWjAzMTEwLwYDVQQD EygxYTUyNTJhNjE2YTQ1ZTU3NDA0NDcyZTk1YzlkYzFmZGE1ZDYzYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H8ggKVmRPqdvtgjkbhsknozQ3v8 SoarSjvlu8wVjzNeqxKWaoCDMRsiyyBxah8OP4oeLGOsJdMQ/4xcAGsrEPX+86Dq tIj8m386XXIcqfUB+jeYGx22h/gIo/N5ChkfJdV7fGUZ4+qQQ+ENFwdKtUuDO31f BX3zu9DLZ6H3llEXkDY51a7ZWPvHu1i4Q8WNQaFRfBuuJxEPOmpvJxBMxxQmOzUk hMJd1/MkdIEK3604S2aDff4+1MoXxqt48L1C1RdhRerhfGJb894m5xmyrsZzaIEn GqbLs2tQuietoM4dgF8vvKvYbBrZPvgwRLEV9BW5QeWY0kU6GY6wRSuNVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpSUqYWpF5XQERy6Vydwf2l1joXMB8GA1UdIwQY MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEE6excM WqgJnj5eyYlOXnFYfQgjytsC8+9EMmGg+3iDtgR6285nHyi6zlhRST3fc4rJLA0p u4g92bOZ/6WN7AJlwXvs1KwHnTi33pUxwI/cjZJOEip9buOFZz4vtXz8EpySZiHa YYxV0JajpqJocrCv1RT1bzhxtmmIDBYma9Hckv8XBdsz1qzA4IzDUV0sB16+4IRr nUrZBC2AQADhx3HnUZ0PNV5rnuRnhlyqFyyB4Dujc2HMzQ0Gj8W2LdZYvWbc5k9L hOVv5N4WaVgMMnKpJDdegXX9JzHnIYgWx0S+/VEnoPgzINsz5eJaiEHFhUbHOwHE n6Fgwg0OjsSIRQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:31 2025 by rpki-client