This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json) Hash identifier: hQeHPqjBoisoqSjRmCHR53jGLdPmBpTQc37UxKQum9E= Subject key identifier: 5E:26:9C:6D:79:C5:49:49:3D:A4:FB:F9:02:C2:0B:AC:70:79:75:F5 Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019B3FB63065ABA4DBC5A7A546A71FF34AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft Manifest number: 171B Signing time: Sun 21 Dec 2025 07:01:03 +0000 Manifest this update: Sun 21 Dec 2025 07:01:03 +0000 Manifest next update: Mon 22 Dec 2025 07:01:03 +0000 Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: HaGZBvg30b5o6mmy1uXOssDn65Et3TQcTfXQ+/pGK1g=) 2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:30:65:ab:a4:db:c5:a7:a5:46:a7:1f:f3:4a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Dec 21 07:01:03 2025 GMT Not After : Dec 22 07:01:03 2025 GMT Subject: CN=5e269c6d79c549493da4fbf902c20bac707975f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:45:77:92:72:11:47:b3:5f:3d:10:b9:d3:8f: d3:18:54:40:8a:2c:5f:4f:64:96:c6:3d:fa:9e:e3: cf:85:f5:13:a2:8c:5f:7b:ac:bf:73:39:03:11:c9: 52:27:a2:64:1c:64:7a:e9:80:ff:ef:bf:b8:5d:e6: 08:02:9d:2a:af:49:dd:88:ba:90:25:5d:71:0c:b3: c7:79:ee:88:9f:8c:26:ad:6c:f0:0a:78:67:de:78: 9c:73:50:96:03:62:a8:06:91:bc:44:90:07:24:fd: 6a:cc:69:66:d2:7f:cf:17:44:4c:94:02:5b:1d:40: c4:03:ab:7a:e5:f2:88:63:ea:94:bf:00:27:f5:6d: eb:5c:54:6d:99:34:81:70:99:5d:cb:86:e0:1f:04: fc:a3:60:3d:b9:f2:09:c9:fa:99:ed:33:4c:6b:81: a2:98:2e:11:2b:7c:bd:10:6d:c1:a7:29:51:46:d4: 93:87:ff:ea:62:83:03:75:7e:b0:80:66:6d:5f:e7: 27:8e:35:93:35:86:98:66:b4:25:36:69:96:87:6a: ce:dc:ca:b8:73:a0:81:63:29:1f:58:9d:24:de:18: fd:57:7e:f7:52:eb:0a:76:28:a0:0c:67:10:e3:35: a8:37:f4:fd:82:37:da:37:71:f8:91:28:27:57:c2: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:26:9C:6D:79:C5:49:49:3D:A4:FB:F9:02:C2:0B:AC:70:79:75:F5 X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:86:4a:b9:48:f1:a0:ae:86:8a:25:1c:14:78:f4:1b:f3: 64:eb:08:48:83:5f:cd:1d:51:9e:5c:63:e5:70:40:f9:24:6d: a9:e1:6e:92:ec:f9:23:bb:be:94:b0:d6:64:93:85:ea:3d:71: 71:74:c5:cf:f0:ee:48:48:2e:17:74:71:2a:9f:87:4c:dc:82: c0:ce:c4:6b:c2:65:f1:95:96:1f:59:c5:56:ce:f1:d0:cb:15: b3:cf:7a:d6:6a:d6:01:f0:35:ff:67:71:20:62:2d:12:a3:1e: e6:cd:95:50:f2:fd:84:b4:8f:d6:a7:f5:35:6e:30:6e:a5:f1: 39:43:90:f2:31:a6:2e:55:40:91:c8:ac:cf:dc:a1:f5:85:52: 3e:81:5e:e0:95:67:5e:75:50:93:58:4d:47:e6:f0:8c:37:51: da:70:6d:30:af:9c:67:9e:86:42:30:fb:9e:ca:36:06:3c:78: 3f:95:88:57:e1:17:b1:48:f0:17:0b:1c:93:16:ef:7c:3f:47: c5:4c:b0:27:5b:ef:76:4e:9b:48:e8:7a:df:21:8d:c7:95:80: b9:1e:bd:97:6e:db:a1:dd:de:9e:b5:13:dd:db:79:5d:9a:50: 13:49:18:cc:88:08:e7:04:75:5f:70:31:e4:45:0a:65:60:f0: 1a:4e:aa:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tjBlq6TbxaelRqcf80rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjUxMjIxMDcwMTAzWhcNMjUxMjIyMDcwMTAzWjAzMTEwLwYDVQQD Eyg1ZTI2OWM2ZDc5YzU0OTQ5M2RhNGZiZjkwMmMyMGJhYzcwNzk3NWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UV3knIRR7NfPRC504/TGFRAiixf T2SWxj36nuPPhfUTooxfe6y/czkDEclSJ6JkHGR66YD/77+4XeYIAp0qr0ndiLqQ JV1xDLPHee6In4wmrWzwCnhn3nicc1CWA2KoBpG8RJAHJP1qzGlm0n/PF0RMlAJb HUDEA6t65fKIY+qUvwAn9W3rXFRtmTSBcJldy4bgHwT8o2A9ufIJyfqZ7TNMa4Gi mC4RK3y9EG3BpylRRtSTh//qYoMDdX6wgGZtX+cnjjWTNYaYZrQlNmmWh2rO3Mq4 c6CBYykfWJ0k3hj9V373UusKdiigDGcQ4zWoN/T9gjfaN3H4kSgnV8Lc7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4mnG15xUlJPaT7+QLCC6xweXX1MB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2OGSrlI 8aCuhoolHBR49BvzZOsISINfzR1Rnlxj5XBA+SRtqeFukuz5I7u+lLDWZJOF6j1x cXTFz/DuSEguF3RxKp+HTNyCwM7Ea8Jl8ZWWH1nFVs7x0MsVs8961mrWAfA1/2dx IGItEqMe5s2VUPL9hLSP1qf1NW4wbqXxOUOQ8jGmLlVAkcisz9yh9YVSPoFe4JVn XnVQk1hNR+bwjDdR2nBtMK+cZ56GQjD7nso2Bjx4P5WIV+EXsUjwFwsckxbvfD9H xUywJ1vvdk6bSOh63yGNx5WAuR69l27bod3enrUT3dt5XZpQE0kYzIgI5wR1X3Ax 5EUKZWDwGk6qiA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:44 2025 by rpki-client