This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json) Hash identifier: 2ByekENx0jklN1MnXb6cpPJ1ec9nG0nqfxT20TPp3AY= Subject key identifier: 05:EB:96:FF:F8:35:97:FC:78:09:40:FB:F2:4E:01:9C:BA:DC:43:A4 Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af Certificate serial: 019B1B3BF2BFC3D9A99D3BEF2663A7DFBED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft Manifest number: 177C Signing time: Sun 14 Dec 2025 05:01:12 +0000 Manifest this update: Sun 14 Dec 2025 05:01:12 +0000 Manifest next update: Mon 15 Dec 2025 05:01:12 +0000 Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: 2b3VqwvJreYSMmVvfHBvm5jvzqncY57sny26bj1uFYE=) 2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:f2:bf:c3:d9:a9:9d:3b:ef:26:63:a7:df:be:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af Validity Not Before: Dec 14 05:01:12 2025 GMT Not After : Dec 15 05:01:12 2025 GMT Subject: CN=05eb96fff83597fc780940fbf24e019cbadc43a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:14:4d:e2:c6:bc:3e:b4:77:03:b6:d4:90: aa:05:30:cd:30:5d:d9:3e:91:c2:78:ea:ef:09:cf: 08:4c:69:9e:a4:2c:15:be:bf:59:b2:2d:83:75:d9: ef:81:3a:95:b3:68:2e:a1:c6:cb:ce:27:db:3e:1d: 63:ae:cf:97:20:01:87:16:d8:11:1f:6f:d0:7b:32: 77:e8:9b:99:2b:96:83:bb:72:d5:f0:b4:7a:b0:63: 1e:ad:7a:52:c3:b6:61:b2:c1:b0:f8:29:f3:15:2b: b9:3d:71:33:14:6a:6d:1f:a8:4d:56:c7:b3:f3:31: e5:72:67:4f:72:af:97:b5:84:3e:2a:f1:07:51:3e: 6a:5c:f2:6e:25:f3:ef:b2:6a:5a:d3:91:c1:b8:28: 04:55:03:4f:a2:b4:f5:6f:be:51:d6:98:d9:6b:75: 8c:1a:1f:5f:0b:44:3e:73:c3:7a:ed:93:95:7b:23: 79:b4:58:eb:49:22:d3:1d:e1:bd:e7:54:de:fe:2e: bd:5b:50:01:7f:a9:68:a0:cb:e7:aa:63:d8:de:28: 93:11:e7:42:52:be:bb:84:14:c1:72:9d:ee:cc:31: e6:94:c9:52:25:b1:01:05:d9:ca:6b:ae:f1:f5:20: c6:88:2c:ba:8b:f5:92:45:d5:2d:30:eb:60:35:60: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EB:96:FF:F8:35:97:FC:78:09:40:FB:F2:4E:01:9C:BA:DC:43:A4 X509v3 Authority Key Identifier: keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6b:3c:47:a7:cd:e0:7f:43:07:40:b5:b9:e4:db:e7:58:c6: a2:0d:4f:34:42:ce:0e:e3:25:b2:d8:16:22:e4:26:97:51:ee: b6:4f:98:64:47:ba:d2:bf:65:7d:7e:21:4e:da:93:ee:1d:4f: 16:f5:4d:8e:9f:78:ad:fa:9a:f1:8f:39:65:fe:64:a9:14:9f: f1:6a:6f:c5:51:f9:67:8e:e7:a2:9d:85:f7:21:c3:ab:5b:8c: b7:be:7e:99:68:65:6f:db:a6:54:4a:74:1f:c7:42:46:47:94: 20:f9:93:3d:bd:80:62:ce:e2:a4:4d:3d:d3:16:37:e1:d7:d9: 09:01:fc:43:f0:a0:09:d7:81:0e:c7:60:f8:01:8c:7c:c3:b3: b2:f3:e2:fe:5d:83:2a:98:dd:da:2d:4a:1c:f7:62:ca:3d:19: 97:70:f8:44:b1:54:14:36:d0:31:fe:a8:0d:fe:4d:c2:de:f2: 6b:96:14:e7:c0:3a:c3:66:b7:cc:4d:fa:68:24:0b:09:75:3d: 4d:da:97:38:ff:1b:39:61:2b:6c:8d:1e:b4:c8:2f:ee:be:56: 5b:be:b2:25:0b:f2:8a:fd:12:fc:3b:80:49:6d:80:5a:28:23: 33:71:02:ac:d2:1d:8a:fa:c8:21:08:de:76:65:bf:9b:54:db: eb:36:38:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO/K/w9mpnTvvJmOn377WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk ZTUzYWYwHhcNMjUxMjE0MDUwMTEyWhcNMjUxMjE1MDUwMTEyWjAzMTEwLwYDVQQD EygwNWViOTZmZmY4MzU5N2ZjNzgwOTQwZmJmMjRlMDE5Y2JhZGM0M2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0oUTeLGvD60dwO21JCqBTDNMF3Z PpHCeOrvCc8ITGmepCwVvr9Zsi2DddnvgTqVs2guocbLzifbPh1jrs+XIAGHFtgR H2/QezJ36JuZK5aDu3LV8LR6sGMerXpSw7ZhssGw+CnzFSu5PXEzFGptH6hNVsez 8zHlcmdPcq+XtYQ+KvEHUT5qXPJuJfPvsmpa05HBuCgEVQNPorT1b75R1pjZa3WM Gh9fC0Q+c8N67ZOVeyN5tFjrSSLTHeG951Te/i69W1ABf6looMvnqmPY3iiTEedC Ur67hBTBcp3uzDHmlMlSJbEBBdnKa67x9SDGiCy6i/WSRdUtMOtgNWAmSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXrlv/4NZf8eAlA+/JOAZy63EOkMB8GA1UdIwQY MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5 LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWs8R6fN 4H9DB0C1ueTb51jGog1PNELODuMlstgWIuQml1Hutk+YZEe60r9lfX4hTtqT7h1P FvVNjp94rfqa8Y85Zf5kqRSf8WpvxVH5Z47nop2F9yHDq1uMt75+mWhlb9umVEp0 H8dCRkeUIPmTPb2AYs7ipE090xY34dfZCQH8Q/CgCdeBDsdg+AGMfMOzsvPi/l2D Kpjd2i1KHPdiyj0Zl3D4RLFUFDbQMf6oDf5Nwt7ya5YU58A6w2a3zE36aCQLCXU9 TdqXOP8bOWErbI0etMgv7r5WW76yJQvyiv0S/DuASW2AWigjM3ECrNIdivrIIQje dmW/m1Tb6zY4uw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:45 2025 by rpki-client