This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json) Hash identifier: 7bIvi0uyJgun8U1d6UenpNXOeHnYFjkdBiL6MRWdegg= Subject key identifier: 15:69:35:73:B6:49:A4:70:22:0B:F7:BA:3B:38:13:DA:78:E4:29:25 Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Certificate serial: 019B3EA388D0C3B2EC5BF32698AA15E2F01D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft Manifest number: 16D0 Signing time: Sun 21 Dec 2025 02:01:03 +0000 Manifest this update: Sun 21 Dec 2025 02:01:03 +0000 Manifest next update: Mon 22 Dec 2025 02:01:03 +0000 Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: BPvaE0+jSLo4siWZIe7lrLgo4Sztnpf/0vbXFVvLtAw=) 2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:88:d0:c3:b2:ec:5b:f3:26:98:aa:15:e2:f0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Validity Not Before: Dec 21 02:01:03 2025 GMT Not After : Dec 22 02:01:03 2025 GMT Subject: CN=15693573b649a470220bf7ba3b3813da78e42925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:34:66:69:c1:0f:4d:d1:61:a1:73:5e:20: 3e:38:46:50:a3:b8:62:66:5f:a7:87:84:5f:7a:9c: 43:25:3e:58:04:c5:de:f5:ae:1a:ec:40:4a:9d:b6: 77:61:ae:a4:cf:5c:87:2e:0d:3a:8e:fb:58:58:4e: 37:64:e4:76:3f:14:bf:0f:73:c2:35:b5:5e:04:d6: 56:76:c2:2e:19:97:c6:22:ab:f2:3b:f8:47:22:9a: 87:a1:23:4f:c5:7e:fa:53:6f:92:17:be:b4:99:41: 9a:24:5a:14:12:f9:10:57:97:ca:8a:fd:1e:7a:6b: 65:94:38:9c:d9:c7:8c:31:5b:77:61:15:c2:ff:db: d4:61:d8:91:18:c0:12:a3:61:f6:82:84:85:45:a2: d0:0b:2c:aa:d2:63:62:51:f5:db:d4:f1:d5:93:ee: 10:b2:29:18:c8:96:1e:10:ad:9b:5f:93:d8:a7:9b: eb:ac:d0:bb:ab:89:a7:f0:23:c0:c3:f4:4f:77:d6: fb:90:c7:de:5f:da:40:37:4e:48:ea:33:12:1d:62: a3:ab:35:df:4a:2f:50:20:0e:55:c6:60:89:36:ef: 0e:68:1f:27:68:29:aa:37:70:b2:6c:b3:b3:3a:00: 69:13:a3:57:fd:7f:53:72:93:f7:d6:c6:4a:6d:62: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:35:73:B6:49:A4:70:22:0B:F7:BA:3B:38:13:DA:78:E4:29:25 X509v3 Authority Key Identifier: keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:00:07:93:99:2d:42:40:5b:d4:bf:c2:9b:24:73:e4:38:ea: 09:39:3c:6f:14:30:7a:2b:7b:5e:70:2e:7f:64:93:ff:ac:f5: 84:00:a7:55:ad:ee:21:9b:4d:9f:17:f7:61:00:c9:d1:4f:b4: 16:05:8e:09:72:ed:fc:34:28:0b:1c:3c:c5:53:70:24:d1:21: 0e:02:30:6e:39:bc:1a:3f:7d:4c:b3:e2:c7:fe:43:7e:6e:bb: 23:c9:9b:19:7c:21:34:dd:16:27:1e:bc:63:b8:fd:93:c5:8a: 85:07:27:ec:d0:0e:48:a6:94:23:a9:72:05:ac:34:70:fa:6b: 24:be:0b:13:c0:81:7d:cf:dd:1c:a2:f3:91:92:8c:3c:ca:b7: 11:d7:34:84:f8:25:50:66:61:3d:a6:17:e5:10:6c:29:d8:fc: 0e:d6:ca:3a:64:19:6c:89:54:45:03:3e:34:12:8b:08:1d:5d: 93:b7:45:70:f7:6e:e6:0f:78:34:ba:6e:dd:96:7d:85:2b:7f: e0:6b:f4:40:d6:02:49:42:e1:27:1e:8e:67:5f:c6:48:aa:32: 34:17:23:db:b0:6e:21:fe:16:da:e8:97:f1:b0:b5:9b:78:22: aa:d5:bc:02:91:2b:1e:23:73:21:62:e0:a8:38:c7:b5:88:46: 5b:cd:8a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4jQw7LsW/MmmKoV4vAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi Y2Q4NjMwHhcNMjUxMjIxMDIwMTAzWhcNMjUxMjIyMDIwMTAzWjAzMTEwLwYDVQQD EygxNTY5MzU3M2I2NDlhNDcwMjIwYmY3YmEzYjM4MTNkYTc4ZTQyOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlic0ZmnBD03RYaFzXiA+OEZQo7hi Zl+nh4RfepxDJT5YBMXe9a4a7EBKnbZ3Ya6kz1yHLg06jvtYWE43ZOR2PxS/D3PC NbVeBNZWdsIuGZfGIqvyO/hHIpqHoSNPxX76U2+SF760mUGaJFoUEvkQV5fKiv0e emtllDic2ceMMVt3YRXC/9vUYdiRGMASo2H2goSFRaLQCyyq0mNiUfXb1PHVk+4Q sikYyJYeEK2bX5PYp5vrrNC7q4mn8CPAw/RPd9b7kMfeX9pAN05I6jMSHWKjqzXf Si9QIA5VxmCJNu8OaB8naCmqN3CybLOzOgBpE6NX/X9TcpP31sZKbWKzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVpNXO2SaRwIgv3ujs4E9p45CklMB8GA1UdIwQY MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgAHk5kt QkBb1L/CmyRz5DjqCTk8bxQweit7XnAuf2ST/6z1hACnVa3uIZtNnxf3YQDJ0U+0 FgWOCXLt/DQoCxw8xVNwJNEhDgIwbjm8Gj99TLPix/5Dfm67I8mbGXwhNN0WJx68 Y7j9k8WKhQcn7NAOSKaUI6lyBaw0cPprJL4LE8CBfc/dHKLzkZKMPMq3Edc0hPgl UGZhPaYX5RBsKdj8DtbKOmQZbIlURQM+NBKLCB1dk7dFcPdu5g94NLpu3ZZ9hSt/ 4Gv0QNYCSULhJx6OZ1/GSKoyNBcj27BuIf4W2uiX8bC1m3giqtW8ApErHiNzIWLg qDjHtYhGW82KHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:49 2025 by rpki-client