This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json) Hash identifier: VAiNSJVG+XodQcLYcqH/GQmvtSdu2DH6KQdsbpyfL/w= Subject key identifier: 69:8F:09:44:8C:E1:40:36:29:0A:C8:9D:BC:27:99:91:57:EC:3B:94 Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Certificate serial: 019B26D27AC7D279AE05EDF24A8ACADB4B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 11:01:26 +0000 Manifest this update: Tue 16 Dec 2025 11:01:26 +0000 Manifest next update: Wed 17 Dec 2025 11:01:26 +0000 Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: 7cKheuegcYCBpJn5QaqGDJSZM4zkjQwCTe4zzGyC+i0=) 2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=) 3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:7a:c7:d2:79:ae:05:ed:f2:4a:8a:ca:db:4b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Validity Not Before: Dec 16 11:01:26 2025 GMT Not After : Dec 17 11:01:26 2025 GMT Subject: CN=698f09448ce14036290ac89dbc27999157ec3b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:b3:4f:d0:f5:ca:3d:39:34:8f:d1:c2:72: b9:4f:93:42:4d:18:73:b9:3a:07:af:c0:ec:49:b9: 51:b1:36:6a:26:b8:d7:6d:12:e2:43:b3:d0:bb:e3: 70:63:a9:6c:aa:df:34:81:cb:d8:47:30:1f:31:2b: a4:4b:49:01:62:a1:07:c2:30:e7:5b:b7:21:50:1e: aa:94:ea:32:b5:40:bc:3b:07:6e:91:9e:36:54:a1: 49:5a:14:d3:2d:5f:33:10:33:ee:e9:44:a2:1b:4f: 8a:9d:4f:16:b8:6c:36:39:34:4a:1c:37:79:81:71: e6:17:43:fc:9f:2f:43:82:8e:6a:c1:92:bd:48:d1: 9d:6e:98:36:77:bf:ad:32:41:ee:da:7c:5b:a3:71: 8d:5a:ea:0f:d7:0d:42:01:b9:47:b0:c4:0a:49:80: 5c:5f:36:f3:6c:ed:ef:0f:16:be:ee:c3:a3:5a:95: 7f:4f:12:a1:3f:67:7b:67:a5:2a:df:35:41:a1:8e: b5:1a:0b:3e:09:41:ff:da:69:c1:2e:c1:1d:4f:f5: 0e:b7:9e:c4:b9:d5:f8:0b:aa:9d:b8:58:81:f7:ff: 88:89:aa:3c:1f:91:25:8d:83:83:6c:90:ac:03:8b: f8:87:20:a5:18:b4:3e:04:0b:6d:a1:6d:fb:e7:6d: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8F:09:44:8C:E1:40:36:29:0A:C8:9D:BC:27:99:91:57:EC:3B:94 X509v3 Authority Key Identifier: keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:c6:a4:ed:a1:9c:cc:47:ea:68:0b:40:40:06:7c:58:27: 12:e7:33:a2:ec:e0:b0:a5:02:14:30:00:fa:f1:36:bd:11:c7: 3a:eb:ce:b4:d7:40:84:b3:49:bc:9a:d6:a7:e4:72:36:cf:58: 22:2e:84:08:e8:f3:31:14:44:c3:cb:d5:db:64:b6:ec:5c:bb: 98:db:f1:54:03:24:2e:c2:2d:6a:70:61:3b:e7:8e:aa:97:76: ee:a0:f6:8f:44:76:a0:46:4a:48:4c:15:fd:b3:01:69:a7:0d: 2d:65:6d:b4:fc:fa:39:5e:bc:70:8b:84:64:37:36:b0:d9:5d: 44:47:e9:c7:6b:b1:1e:1a:b3:cb:4f:27:3f:3d:fb:ce:84:f2: e8:0b:55:49:55:ad:f2:94:aa:41:ed:4a:0f:56:63:39:e1:3f: 0b:22:68:63:2f:63:16:2c:c9:97:42:58:2e:af:31:d6:5a:6e: 6a:c8:71:a2:c8:92:10:df:1b:93:2f:7a:49:3f:59:1f:db:0b: dc:ef:37:0e:5b:22:a8:37:da:34:78:f3:3e:0b:62:c6:a4:e4: 12:49:89:4e:b7:7e:79:c0:e6:e7:ea:f7:7c:ae:ef:7b:eb:0c: 0b:53:7a:9c:a5:98:61:73:72:c5:31:09:46:de:1e:2c:11:66: 4d:50:d4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0nrH0nmuBe3ySorK20sVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3 YmM5NmMwHhcNMjUxMjE2MTEwMTI2WhcNMjUxMjE3MTEwMTI2WjAzMTEwLwYDVQQD Eyg2OThmMDk0NDhjZTE0MDM2MjkwYWM4OWRiYzI3OTk5MTU3ZWMzYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG+zT9D1yj05NI/RwnK5T5NCTRhz uToHr8DsSblRsTZqJrjXbRLiQ7PQu+NwY6lsqt80gcvYRzAfMSukS0kBYqEHwjDn W7chUB6qlOoytUC8OwdukZ42VKFJWhTTLV8zEDPu6USiG0+KnU8WuGw2OTRKHDd5 gXHmF0P8ny9Dgo5qwZK9SNGdbpg2d7+tMkHu2nxbo3GNWuoP1w1CAblHsMQKSYBc XzbzbO3vDxa+7sOjWpV/TxKhP2d7Z6Uq3zVBoY61Ggs+CUH/2mnBLsEdT/UOt57E udX4C6qduFiB9/+Iiao8H5EljYODbJCsA4v4hyClGLQ+BAttoW37520aewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmPCUSM4UA2KQrInbwnmZFX7DuUMB8GA1UdIwQY MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt MjU1ZjBjNTFiYmUwLzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiHGpO2h nMxH6mgLQEAGfFgnEuczouzgsKUCFDAA+vE2vRHHOuvOtNdAhLNJvJrWp+RyNs9Y Ii6ECOjzMRREw8vV22S27Fy7mNvxVAMkLsItanBhO+eOqpd27qD2j0R2oEZKSEwV /bMBaacNLWVttPz6OV68cIuEZDc2sNldREfpx2uxHhqzy08nPz37zoTy6AtVSVWt 8pSqQe1KD1ZjOeE/CyJoYy9jFizJl0JYLq8x1lpuashxosiSEN8bky96ST9ZH9sL 3O83DlsiqDfaNHjzPgtixqTkEkmJTrd+ecDm5+r3fK7ve+sMC1N6nKWYYXNyxTEJ Rt4eLBFmTVDUHw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:18:33 2025 by rpki-client