This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: HeoQ/8V2OoWDTJeTbExarDs202/AyfvXHa2qFOL9S/g= Subject key identifier: 81:72:AC:8C:DF:94:E4:86:0B:52:A3:57:87:0F:75:67:25:B2:57:EF Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B3D90D07499F63DA703F82E2177EF3AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 1025 Signing time: Sat 20 Dec 2025 21:00:58 +0000 Manifest this update: Sat 20 Dec 2025 21:00:58 +0000 Manifest next update: Sun 21 Dec 2025 21:00:58 +0000 Files and hashes: 1: 3nKPvfyefhBBthk-LrRdD-jfvW0.roa (hash: 1vR7bznA03xVBTq7D8itXQ6xNZUvjtjklTS5nPcHTr0=) 2: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=) 3: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=) 4: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=) 5: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=) 6: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: pMF/1m2okmAEfcBElZ7tCZcntkIT6fFOMXI8nrcgU30=) 7: gnZzs6ma6bupZv_QFfeHC2w5vfs.roa (hash: tmmh6VOJ4XQ6zqxdY06hmFVr0WRGDB+DoX6nJefrwl4=) 8: qdAA7q69Q1-iHrB71QL2uIwgL4w.roa (hash: iSApU3MrBQxUv9YTKIjLYJmrBm6GZCpJuQa46wrbtrQ=) 9: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=) 10: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d0:74:99:f6:3d:a7:03:f8:2e:21:77:ef:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Dec 20 21:00:58 2025 GMT Not After : Dec 21 21:00:58 2025 GMT Subject: CN=8172ac8cdf94e4860b52a357870f756725b257ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:f8:f7:2b:f1:ac:a7:ac:62:a0:50:cd:92: a7:2c:e2:07:8d:03:33:28:bf:fe:1a:13:51:d9:8e: 52:9d:ec:d3:4b:02:6d:3d:31:82:29:fd:92:5f:75: 60:36:83:76:7a:22:36:11:d3:62:4e:5e:71:00:d4: c4:46:c9:f2:af:a1:1b:7f:ca:7c:02:1c:cd:61:f1: 89:aa:66:9a:82:ac:33:16:eb:60:40:77:6b:02:db: 4e:26:4c:6a:df:2a:d3:51:b6:1a:0b:38:a9:dd:bd: 49:8e:5f:71:1a:c7:67:ad:ed:7a:95:ee:df:fa:c2: c0:7f:8c:17:f1:23:82:a8:2d:f6:ff:2d:11:a1:5c: ea:4b:e8:8a:98:23:e8:64:1d:d9:e9:21:6f:c4:97: ec:9e:0d:07:05:f7:3d:8d:3b:14:6b:0b:72:97:f1: 7c:0f:9f:24:17:b0:d4:4a:14:cb:cb:49:1d:93:ad: 3d:15:02:bc:7a:c7:d4:db:92:22:17:eb:55:ee:6a: 89:02:33:37:28:3a:5d:63:3b:bb:b0:e5:40:49:ae: d4:5f:62:50:3a:6f:fa:83:4c:33:17:da:9a:87:a8: 0b:1e:a7:f1:e6:e7:d2:29:ea:3d:6a:d9:bc:b2:0a: fa:fb:c1:3a:1b:48:75:35:87:5c:7a:74:75:0e:a7: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:72:AC:8C:DF:94:E4:86:0B:52:A3:57:87:0F:75:67:25:B2:57:EF X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c8:9a:5f:5a:0f:4c:52:c4:5c:58:aa:18:19:79:8c:c9:f1: 25:b3:51:3a:6b:fc:4c:51:4c:6d:05:3c:eb:8b:b0:54:e3:41: 51:7b:74:27:37:08:fb:15:ad:c2:4e:27:f1:71:c4:d3:f2:5f: 33:43:c8:db:94:42:02:21:7d:9f:8b:6f:0e:7c:e3:bc:82:b4: 37:8c:ef:78:1f:92:3a:99:c7:83:ba:3c:7a:c9:4c:06:1e:2e: d5:aa:4a:bf:e2:cb:be:fa:0b:64:09:3c:4b:41:d6:51:56:96: c1:af:d3:13:14:ad:32:4d:78:9e:9d:73:7d:19:94:f7:ff:46: ae:68:5b:92:b6:40:bd:eb:46:a8:94:d8:83:9a:f2:b5:2c:a6: 84:54:ee:d7:ec:48:db:15:77:ce:92:e7:1f:30:64:bd:d2:be: 05:7c:6c:1c:60:f4:aa:54:1a:bc:d2:e9:48:22:cb:13:ae:cf: 0a:5e:20:da:7e:12:aa:72:66:ae:c4:e0:5a:b7:c5:b3:2b:f8: 2e:eb:aa:dc:db:19:fe:b5:10:f8:30:58:65:7d:a4:80:08:70: 71:70:9c:f9:08:fc:8f:62:e0:e7:c2:68:b1:1b:8e:67:25:ca: 4a:a6:25:dd:7a:1b:23:7c:86:c2:2a:1b:a1:41:65:ce:e1:ac: 20:d8:69:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNB0mfY9pwP4LiF37zqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjUxMjIwMjEwMDU4WhcNMjUxMjIxMjEwMDU4WjAzMTEwLwYDVQQD Eyg4MTcyYWM4Y2RmOTRlNDg2MGI1MmEzNTc4NzBmNzU2NzI1YjI1N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJf49yvxrKesYqBQzZKnLOIHjQMz KL/+GhNR2Y5SnezTSwJtPTGCKf2SX3VgNoN2eiI2EdNiTl5xANTERsnyr6Ebf8p8 AhzNYfGJqmaagqwzFutgQHdrAttOJkxq3yrTUbYaCzip3b1Jjl9xGsdnre16le7f +sLAf4wX8SOCqC32/y0RoVzqS+iKmCPoZB3Z6SFvxJfsng0HBfc9jTsUawtyl/F8 D58kF7DUShTLy0kdk609FQK8esfU25IiF+tV7mqJAjM3KDpdYzu7sOVASa7UX2JQ Om/6g0wzF9qah6gLHqfx5ufSKeo9atm8sgr6+8E6G0h1NYdcenR1Dqdk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFyrIzflOSGC1KjV4cPdWclslfvMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmciaX1oP TFLEXFiqGBl5jMnxJbNROmv8TFFMbQU864uwVONBUXt0JzcI+xWtwk4n8XHE0/Jf M0PI25RCAiF9n4tvDnzjvIK0N4zveB+SOpnHg7o8eslMBh4u1apKv+LLvvoLZAk8 S0HWUVaWwa/TExStMk14np1zfRmU9/9GrmhbkrZAvetGqJTYg5rytSymhFTu1+xI 2xV3zpLnHzBkvdK+BXxsHGD0qlQavNLpSCLLE67PCl4g2n4SqnJmrsTgWrfFsyv4 Luuq3NsZ/rUQ+DBYZX2kgAhwcXCc+Qj8j2Lg58JosRuOZyXKSqYl3XobI3yGwiob oUFlzuGsINhp9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:34 2025 by rpki-client