This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json) Hash identifier: TF2e3/JB0ZYIh/gmfXKwYZl6AYwUKlHoS/I7xwAcpII= Subject key identifier: 8C:E4:7E:A2:65:07:ED:0F:1B:48:2C:EA:96:C7:BD:38:00:A1:B5:74 Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90 Certificate serial: 019B1E73EF4F15E14044B14F10F1C7663F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 20:01:12 +0000 Manifest this update: Sun 14 Dec 2025 20:01:12 +0000 Manifest next update: Mon 15 Dec 2025 20:01:12 +0000 Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: ReMcRMzFgx6eYgxMciampjkVoIo5wQDSJbmSSZ9EOgY=) 2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:ef:4f:15:e1:40:44:b1:4f:10:f1:c7:66:3f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90 Validity Not Before: Dec 14 20:01:12 2025 GMT Not After : Dec 15 20:01:12 2025 GMT Subject: CN=8ce47ea26507ed0f1b482cea96c7bd3800a1b574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:9f:2a:a7:11:1b:cb:9b:60:1b:fb:7b:0f: 1c:26:fc:3a:7c:1c:be:a0:31:f5:56:9f:ec:a5:82: 43:09:94:2e:70:f2:13:d0:58:c4:8e:d7:79:a6:10: 54:f0:33:d3:69:0b:6d:cf:dd:14:85:dd:85:39:08: 2f:13:0b:09:01:41:2e:ea:bc:75:0d:b0:67:f0:d2: f4:65:65:e4:c4:70:9c:19:3b:df:b5:50:82:ed:8a: 07:42:a5:5d:25:b4:1a:b3:b2:83:1d:9a:83:59:82: 05:e8:db:ad:2c:fa:c9:dc:0d:fc:fe:bf:51:9c:b7: c1:dc:7b:41:a9:1a:de:cf:d5:69:07:e2:5f:e4:91: f8:e0:11:36:86:f5:c5:e5:0e:ff:1a:80:57:3e:c7: 48:84:d8:44:9a:e1:96:5d:af:b9:20:c6:e7:db:8b: 2f:7e:fa:3a:b2:f8:70:cf:a6:ae:ea:fc:1e:c0:4e: 3b:a3:86:6f:b4:e7:13:9f:cd:c3:6a:15:60:05:55: 1c:d0:4b:7e:6e:88:46:23:0e:8b:7a:71:a8:a4:6d: a1:42:c0:0b:01:eb:3b:65:1a:1d:e3:b4:48:cf:e0: b8:f7:a9:02:73:41:f1:c4:f8:54:fc:3b:00:77:9f: 0e:47:c2:cf:84:f7:b7:2d:4d:a7:18:6f:31:29:63: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E4:7E:A2:65:07:ED:0F:1B:48:2C:EA:96:C7:BD:38:00:A1:B5:74 X509v3 Authority Key Identifier: keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c6:59:f6:c2:b2:29:13:cb:e4:41:8c:9c:ec:54:7b:7c:fb: 05:c5:30:6a:f9:6d:fc:23:df:50:9b:11:a8:b5:b5:75:4d:e2: 38:e6:42:a2:76:b8:db:6d:88:c8:8f:69:b0:25:0c:16:01:7d: f0:92:2f:06:d6:97:91:4c:a9:0a:2f:44:f4:b2:b0:87:cc:02: ee:eb:70:0e:e4:f4:36:11:51:63:05:4c:43:7c:ea:13:5a:f9: 87:6b:c5:aa:1b:0f:1b:d5:65:49:30:a8:ad:53:3a:24:7d:b6: 96:d5:8c:af:5e:8c:6a:db:7d:d1:28:e3:86:5a:98:d1:2e:cb: 0b:ea:b1:7a:1f:7b:2e:4b:95:30:03:08:81:fa:df:d7:0e:a8: 38:7a:da:81:42:24:38:e3:ef:29:b1:a2:2c:87:d8:71:f7:48: ba:68:f0:54:5a:ea:83:ca:6c:c4:4b:86:a9:56:e1:6a:d2:4c: 21:fb:d2:fc:11:ce:7d:62:73:52:a5:6c:1c:91:92:3d:ea:01: 75:b8:68:8f:f3:19:a9:b4:7f:40:a5:1a:38:c5:e0:0c:09:e1: 40:92:53:5c:85:f4:8b:84:a1:0c:d7:b4:9a:a8:b4:50:3e:93: 7e:fc:1f:f5:61:5a:7d:df:41:63:7f:75:0e:ef:ce:50:d5:f1: 2f:f5:88:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec+9PFeFARLFPEPHHZj8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2 ZTZjOTAwHhcNMjUxMjE0MjAwMTEyWhcNMjUxMjE1MjAwMTEyWjAzMTEwLwYDVQQD Eyg4Y2U0N2VhMjY1MDdlZDBmMWI0ODJjZWE5NmM3YmQzODAwYTFiNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNGfKqcRG8ubYBv7ew8cJvw6fBy+ oDH1Vp/spYJDCZQucPIT0FjEjtd5phBU8DPTaQttz90Uhd2FOQgvEwsJAUEu6rx1 DbBn8NL0ZWXkxHCcGTvftVCC7YoHQqVdJbQas7KDHZqDWYIF6NutLPrJ3A38/r9R nLfB3HtBqRrez9VpB+Jf5JH44BE2hvXF5Q7/GoBXPsdIhNhEmuGWXa+5IMbn24sv fvo6svhwz6au6vwewE47o4ZvtOcTn83DahVgBVUc0Et+bohGIw6LenGopG2hQsAL Aes7ZRod47RIz+C496kCc0HxxPhU/DsAd58OR8LPhPe3LU2nGG8xKWOQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzkfqJlB+0PG0gs6pbHvTgAobV0MB8GA1UdIwQY MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsZZ9sKy KRPL5EGMnOxUe3z7BcUwavlt/CPfUJsRqLW1dU3iOOZCona4222IyI9psCUMFgF9 8JIvBtaXkUypCi9E9LKwh8wC7utwDuT0NhFRYwVMQ3zqE1r5h2vFqhsPG9VlSTCo rVM6JH22ltWMr16Matt90SjjhlqY0S7LC+qxeh97LkuVMAMIgfrf1w6oOHragUIk OOPvKbGiLIfYcfdIumjwVFrqg8psxEuGqVbhatJMIfvS/BHOfWJzUqVsHJGSPeoB dbhoj/MZqbR/QKUaOMXgDAnhQJJTXIX0i4ShDNe0mqi0UD6Tfvwf9WFafd9BY391 Du/OUNXxL/WI2Q== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:05 2025 by rpki-client