This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json) Hash identifier: QcV9s5/Ea9qm5QXt0R5laiuml1Zt0V5EeEg3ok0u4p4= Subject key identifier: FC:19:C3:7F:86:B0:DE:15:B5:F2:B5:BC:50:DA:02:24:DE:AF:A6:34 Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Certificate serial: 019B2552ADF93A68EE5385FFF4BEC499E727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 04:02:14 +0000 Manifest this update: Tue 16 Dec 2025 04:02:14 +0000 Manifest next update: Wed 17 Dec 2025 04:02:14 +0000 Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: hdvCZCzPcSk+U6DBB0yI+ZMZRihFYAQbfiVq/FRm3Co=) 2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:ad:f9:3a:68:ee:53:85:ff:f4:be:c4:99:e7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Validity Not Before: Dec 16 04:02:14 2025 GMT Not After : Dec 17 04:02:14 2025 GMT Subject: CN=fc19c37f86b0de15b5f2b5bc50da0224deafa634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:c1:91:55:06:60:36:b0:ec:b9:ac:b4:2b: 82:4c:3f:4d:5a:2e:22:6d:84:39:98:69:e0:99:35: 4b:63:b9:a5:27:f6:15:3e:eb:05:6f:54:55:d4:78: ce:25:2b:f2:c1:60:60:97:ca:50:9e:e9:c9:92:17: 57:56:3b:b8:3b:82:fe:c7:a9:f9:2d:05:cc:71:a3: 86:04:b3:0d:d5:f9:06:c8:45:26:46:8a:3e:b3:73: fd:da:1f:e3:12:7b:7e:4d:c9:58:91:e8:4b:ae:d7: 60:d1:85:14:48:b4:a4:55:e0:c9:61:c0:86:9b:3e: e1:5c:ad:1d:42:81:95:ec:0c:04:d9:0a:36:3c:7c: e0:84:50:b5:7d:8b:c2:47:17:06:5c:64:66:bf:7c: 97:d8:e4:15:fd:f2:35:30:92:2a:ed:74:3d:40:04: da:af:1e:16:8a:bd:11:a7:e2:fa:e1:5f:84:a5:2e: 7d:68:eb:f1:84:15:d0:8f:df:77:e5:19:e0:9d:e4: d7:c1:e8:0f:44:94:46:a0:87:45:08:3a:f4:af:05: 5d:ce:d2:fe:15:a4:d7:d8:c5:df:0d:f4:65:2d:c1: 03:28:1c:11:12:b2:78:2d:8e:4c:ab:4c:ca:86:6d: a3:8d:6d:20:fd:87:4f:a2:d6:cc:e1:c1:6d:ac:c2: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:C3:7F:86:B0:DE:15:B5:F2:B5:BC:50:DA:02:24:DE:AF:A6:34 X509v3 Authority Key Identifier: keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e4:b7:66:04:f2:c3:04:6e:31:bf:bf:8c:59:63:6d:6e:30: 17:2e:81:d1:25:b4:25:25:53:b7:db:27:f2:26:f2:ee:7c:39: e6:58:fa:30:d1:de:3f:55:57:5f:8a:b2:cc:5d:ab:6b:16:a5: 25:b6:ea:9b:37:66:36:67:72:93:8e:56:6a:15:a8:06:cb:e4: 19:d2:d1:98:f6:a5:37:17:e9:64:a2:44:01:02:4b:94:0f:fa: cf:d0:79:b5:7e:d2:28:12:16:fb:38:a9:81:4a:58:d3:6d:d7: 70:a4:58:29:48:7e:33:d3:f0:94:45:41:15:49:fb:ad:35:59: 8d:48:60:1d:85:5c:19:9e:de:dc:1d:c2:b6:20:4a:09:f4:8e: 1a:ee:7d:34:b7:8f:82:70:ec:b0:f5:2e:f2:33:d8:33:f8:a1: 82:78:54:42:41:ed:73:ef:5e:30:23:e5:82:20:a1:2a:15:8e: f8:d2:1b:96:16:06:74:54:7d:dc:a7:7a:58:24:14:fe:e1:6c: bd:eb:94:ee:39:20:7f:62:f5:1b:eb:81:5d:2a:bf:a3:38:41: cd:6c:b4:43:24:fc:65:78:77:b5:36:c9:1f:c7:e6:15:f9:76: 7d:70:70:d6:f7:42:11:58:6f:fa:57:ca:b8:c9:03:38:5a:0a: 04:d2:95:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUq35OmjuU4X/9L7EmecnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi ZDFiYWMwHhcNMjUxMjE2MDQwMjE0WhcNMjUxMjE3MDQwMjE0WjAzMTEwLwYDVQQD EyhmYzE5YzM3Zjg2YjBkZTE1YjVmMmI1YmM1MGRhMDIyNGRlYWZhNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tbBkVUGYDaw7LmstCuCTD9NWi4i bYQ5mGngmTVLY7mlJ/YVPusFb1RV1HjOJSvywWBgl8pQnunJkhdXVju4O4L+x6n5 LQXMcaOGBLMN1fkGyEUmRoo+s3P92h/jEnt+TclYkehLrtdg0YUUSLSkVeDJYcCG mz7hXK0dQoGV7AwE2Qo2PHzghFC1fYvCRxcGXGRmv3yX2OQV/fI1MJIq7XQ9QATa rx4Wir0Rp+L64V+EpS59aOvxhBXQj9935RngneTXwegPRJRGoIdFCDr0rwVdztL+ FaTX2MXfDfRlLcEDKBwRErJ4LY5Mq0zKhm2jjW0g/YdPotbM4cFtrMKeHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwZw3+GsN4VtfK1vFDaAiTer6Y0MB8GA1UdIwQY MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4 LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOS3ZgTy wwRuMb+/jFljbW4wFy6B0SW0JSVTt9sn8iby7nw55lj6MNHeP1VXX4qyzF2raxal JbbqmzdmNmdyk45WahWoBsvkGdLRmPalNxfpZKJEAQJLlA/6z9B5tX7SKBIW+zip gUpY023XcKRYKUh+M9PwlEVBFUn7rTVZjUhgHYVcGZ7e3B3CtiBKCfSOGu59NLeP gnDssPUu8jPYM/ihgnhUQkHtc+9eMCPlgiChKhWO+NIblhYGdFR93Kd6WCQU/uFs veuU7jkgf2L1G+uBXSq/ozhBzWy0QyT8ZXh3tTbJH8fmFfl2fXBw1vdCEVhv+lfK uMkDOFoKBNKVEQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:27:30 2025 by rpki-client