This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json) Hash identifier: o3eRhqsUypmeZnDNHMpASYc7mcsTfrU/XOuXtQvmxEM= Subject key identifier: C8:A2:1D:02:8F:AC:BA:94:9C:2E:60:9C:04:ED:80:C0:3C:F5:43:3A Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019B0F004A087034C00613845E967A460CD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft Manifest number: 152E Signing time: Thu 11 Dec 2025 20:00:35 +0000 Manifest this update: Thu 11 Dec 2025 20:00:35 +0000 Manifest next update: Fri 12 Dec 2025 20:00:35 +0000 Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=) 2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=) 3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: E+/QC5p/15u5AemlsEyohm1vQNmXUpNZKVlK/KuJJEE=) 4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=) 5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:4a:08:70:34:c0:06:13:84:5e:96:7a:46:0c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Dec 11 20:00:35 2025 GMT Not After : Dec 12 20:00:35 2025 GMT Subject: CN=c8a21d028facba949c2e609c04ed80c03cf5433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:43:ee:72:3c:e2:e0:7d:a7:b7:2f:5a:1a: a1:63:e6:7e:a7:68:6e:c8:18:19:62:49:51:d6:e1: fe:1f:77:3a:46:93:33:6b:4d:e2:ae:6c:cf:fe:fa: f6:0a:4c:c8:4f:6a:80:cc:fd:9b:d1:16:c1:1d:14: 00:a1:9c:2e:3d:86:a1:25:6e:91:e7:df:28:15:6e: 11:d6:66:d3:b6:05:1e:e6:70:ac:a9:b2:a1:3e:87: 0b:38:51:b7:1c:f0:d6:24:d5:91:89:6a:24:20:e4: fe:38:f3:a8:43:d9:01:f2:23:ef:95:4e:59:3b:29: 84:ab:e1:05:2e:8d:d3:7f:15:53:8a:63:b5:33:e6: 4b:21:42:02:25:58:a5:9e:d1:14:6d:02:dd:d8:5c: e5:7b:b5:ab:ed:03:1a:a1:9f:ac:93:0f:4a:43:85: 63:5e:de:64:48:c1:72:ae:73:d1:b4:f2:f9:28:41: ba:43:73:86:14:0a:b4:a7:b6:6e:33:e2:ce:19:43: db:11:f3:b7:67:8f:9c:1a:05:c6:8f:cd:b5:0a:f1: 06:c3:b5:cd:ed:fc:30:81:59:75:c1:ff:80:c3:70: 49:29:54:04:86:6f:12:fd:74:fc:14:b9:05:1b:b6: c8:f5:b7:e9:7b:ca:b8:71:4e:ae:c8:e6:47:a2:36: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A2:1D:02:8F:AC:BA:94:9C:2E:60:9C:04:ED:80:C0:3C:F5:43:3A X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:2c:ec:9b:8f:79:2f:3f:b4:a8:d8:31:fc:d4:4d:39:b8: 8c:de:c5:1e:2f:5a:50:65:9b:47:ec:b7:7c:9e:df:1b:e4:75: fb:79:27:59:8b:47:02:cc:12:80:80:0b:0a:0f:9b:88:34:62: b9:d9:5e:8b:e4:e0:81:8a:bf:74:a1:62:2e:d4:44:62:37:cc: 78:52:80:70:a6:8d:05:05:be:f6:ab:51:69:15:eb:36:97:52: 13:5f:d8:10:b7:6f:0e:63:7b:d4:80:ff:06:a7:9a:db:98:85: f4:cb:2f:3c:c8:c9:11:53:5d:e4:3b:1f:66:17:4d:b1:39:57: c2:e7:df:4f:17:ac:55:cb:a6:63:bc:1f:fb:0f:bb:41:9c:1c: 0d:6b:24:70:9f:20:29:82:f6:eb:c3:72:6b:62:e9:53:45:2d: 16:d2:20:03:bf:28:a2:c5:6b:83:4a:3f:8d:9b:2a:43:66:ce: ce:15:a1:f1:43:9e:51:58:8b:8e:1a:ca:28:97:13:9b:03:d7: 7f:e6:0a:ee:78:ec:69:eb:3f:b5:13:3c:06:d6:7e:9e:32:5a: 09:b6:b9:eb:c8:b1:6a:21:9b:c4:d8:e2:da:b9:e9:ef:6c:a6: ba:e5:20:1e:fb:21:86:29:a2:e4:d8:2d:45:f4:9f:3c:ec:44: fe:63:34:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAEoIcDTABhOEXpZ6RgzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjUxMjExMjAwMDM1WhcNMjUxMjEyMjAwMDM1WjAzMTEwLwYDVQQD EyhjOGEyMWQwMjhmYWNiYTk0OWMyZTYwOWMwNGVkODBjMDNjZjU0MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsVD7nI84uB9p7cvWhqhY+Z+p2hu yBgZYklR1uH+H3c6RpMza03irmzP/vr2CkzIT2qAzP2b0RbBHRQAoZwuPYahJW6R 598oFW4R1mbTtgUe5nCsqbKhPocLOFG3HPDWJNWRiWokIOT+OPOoQ9kB8iPvlU5Z OymEq+EFLo3TfxVTimO1M+ZLIUICJVilntEUbQLd2Fzle7Wr7QMaoZ+skw9KQ4Vj Xt5kSMFyrnPRtPL5KEG6Q3OGFAq0p7ZuM+LOGUPbEfO3Z4+cGgXGj821CvEGw7XN 7fwwgVl1wf+Aw3BJKVQEhm8S/XT8FLkFG7bI9bfpe8q4cU6uyOZHojas8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiiHQKPrLqUnC5gnATtgMA89UM6MB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWUs7JuP eS8/tKjYMfzUTTm4jN7FHi9aUGWbR+y3fJ7fG+R1+3knWYtHAswSgIALCg+biDRi udlei+TggYq/dKFiLtREYjfMeFKAcKaNBQW+9qtRaRXrNpdSE1/YELdvDmN71ID/ Bqea25iF9MsvPMjJEVNd5DsfZhdNsTlXwuffTxesVcumY7wf+w+7QZwcDWskcJ8g KYL268Nya2LpU0UtFtIgA78oosVrg0o/jZsqQ2bOzhWh8UOeUViLjhrKKJcTmwPX f+YK7njsaes/tRM8BtZ+njJaCba568ixaiGbxNji2rnp72ymuuUgHvshhimi5Ngt RfSfPOxE/mM01A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:08 2025 by rpki-client