This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json) Hash identifier: +aTuX4UdInNrsDmc7A8yRRQnWSy4MNYO4dbfmVpl7Pg= Subject key identifier: 4D:A0:50:3E:CF:2A:83:C8:38:C8:A8:21:05:BB:9B:BC:04:C2:43:FA Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Certificate serial: 019B1C17A07D0EC48BAB139A84DC95745310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft Manifest number: 177D Signing time: Sun 14 Dec 2025 09:01:08 +0000 Manifest this update: Sun 14 Dec 2025 09:01:08 +0000 Manifest next update: Mon 15 Dec 2025 09:01:08 +0000 Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: CYomfXi5IrvYiSQiJNWHd9CdjVX4TDsp/VA5oIvPoAo=) 2: e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa (hash: nilHfeTYPJt56v6fPn3HSV0r3VH6M1R/PsNJkl8uQHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:a0:7d:0e:c4:8b:ab:13:9a:84:dc:95:74:53:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Validity Not Before: Dec 14 09:01:08 2025 GMT Not After : Dec 15 09:01:08 2025 GMT Subject: CN=4da0503ecf2a83c838c8a82105bb9bbc04c243fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:a3:84:80:58:fc:67:7b:3c:0f:5d:f9:42: 68:ec:05:b3:5f:0c:c1:31:86:0c:28:78:58:c1:d3: 44:92:34:9e:20:bc:4a:5e:44:ce:64:48:d6:7c:90: 27:71:bb:8b:a8:74:bb:63:41:3a:2e:f9:4f:6d:03: 34:37:6e:a2:5f:16:78:55:0b:a8:f9:f5:4d:2e:ee: db:89:87:f9:4e:d6:19:a6:71:df:72:84:ef:48:1a: 75:58:fb:d9:9c:71:6a:2a:b1:b5:75:8e:06:77:b5: a8:a4:aa:65:e9:a7:4d:8e:78:a2:1f:cf:9d:30:72: 5e:fd:ef:0c:db:52:0b:a5:23:1c:2e:ad:02:80:21: 04:f8:8e:e6:76:a9:2f:0d:47:23:2c:77:5b:87:da: e1:20:97:5d:be:c5:4e:6f:fd:4b:19:fd:46:54:be: f0:bb:8c:d1:06:f7:a3:f0:9f:99:01:43:07:d0:fd: 8e:2f:21:4d:a7:d8:84:54:2e:10:fa:ae:c9:76:23: 27:2a:65:52:ac:ef:09:80:6b:21:5c:76:bc:95:6d: f1:06:8b:61:25:f6:5c:e1:cf:06:4b:a1:da:8c:b3: 64:b8:77:f2:85:41:af:b8:54:8e:c3:a3:24:43:5b: 73:d2:49:b2:ef:87:fb:b2:e3:d8:bf:d2:f7:8c:ee: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A0:50:3E:CF:2A:83:C8:38:C8:A8:21:05:BB:9B:BC:04:C2:43:FA X509v3 Authority Key Identifier: keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:db:d1:4b:8d:64:d0:2b:4a:56:04:7c:98:5f:ef:f3:60:43: 11:e9:ca:64:03:71:19:5e:ab:5d:9a:59:11:fc:03:38:be:91: c8:14:06:3f:94:e9:7c:9c:88:d7:97:42:ce:62:65:a2:de:e7: 93:45:bf:52:8d:66:0f:52:2e:12:d4:2a:9d:fe:95:be:4b:8b: a8:61:d4:9c:85:13:ee:76:3d:15:35:48:74:a9:b4:98:55:51: 5e:6f:40:c1:a0:ac:51:f4:f9:31:62:be:3c:76:2a:20:8f:0f: 5c:76:70:c0:48:e8:2f:69:1e:5e:0d:ea:32:8a:6e:e9:db:95: 51:db:43:cb:2d:e5:71:77:ad:f6:fd:01:14:be:d2:ec:cc:59: a4:09:7a:84:6e:fa:4d:20:a3:75:d5:f5:01:be:5c:aa:b0:75: 8e:c6:59:62:f8:0d:dc:1c:01:cc:cc:76:3f:47:d1:4e:32:95: 9a:1f:48:ae:ff:62:b9:80:47:34:9c:70:79:15:cd:e6:e7:3a: 35:1c:23:43:76:e7:c7:f8:36:da:87:53:d8:b5:a6:07:35:57: 87:38:f0:62:53:14:9b:db:3c:ad:cb:8c:7d:66:6a:09:8d:06: 2d:92:50:92:2b:f8:a1:83:dc:d9:97:b8:42:b7:c2:59:3a:73: f1:42:db:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF6B9DsSLqxOahNyVdFMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5 ZGRlYjYwHhcNMjUxMjE0MDkwMTA4WhcNMjUxMjE1MDkwMTA4WjAzMTEwLwYDVQQD Eyg0ZGEwNTAzZWNmMmE4M2M4MzhjOGE4MjEwNWJiOWJiYzA0YzI0M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q6jhIBY/Gd7PA9d+UJo7AWzXwzB MYYMKHhYwdNEkjSeILxKXkTOZEjWfJAncbuLqHS7Y0E6LvlPbQM0N26iXxZ4VQuo +fVNLu7biYf5TtYZpnHfcoTvSBp1WPvZnHFqKrG1dY4Gd7WopKpl6adNjniiH8+d MHJe/e8M21ILpSMcLq0CgCEE+I7mdqkvDUcjLHdbh9rhIJddvsVOb/1LGf1GVL7w u4zRBvej8J+ZAUMH0P2OLyFNp9iEVC4Q+q7JdiMnKmVSrO8JgGshXHa8lW3xBoth JfZc4c8GS6HajLNkuHfyhUGvuFSOw6MkQ1tz0kmy74f7suPYv9L3jO7z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2gUD7PKoPIOMioIQW7m7wEwkP6MB8GA1UdIwQY MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt NWM5OWI2ODNkYjBkLzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtvRS41k 0CtKVgR8mF/v82BDEenKZANxGV6rXZpZEfwDOL6RyBQGP5TpfJyI15dCzmJlot7n k0W/Uo1mD1IuEtQqnf6VvkuLqGHUnIUT7nY9FTVIdKm0mFVRXm9AwaCsUfT5MWK+ PHYqII8PXHZwwEjoL2keXg3qMopu6duVUdtDyy3lcXet9v0BFL7S7MxZpAl6hG76 TSCjddX1Ab5cqrB1jsZZYvgN3BwBzMx2P0fRTjKVmh9Irv9iuYBHNJxweRXN5uc6 NRwjQ3bnx/g22odT2LWmBzVXhzjwYlMUm9s8rcuMfWZqCY0GLZJQkiv4oYPc2Ze4 QrfCWTpz8ULb6Q== -----END CERTIFICATE-----Generated at Sun Dec 14 13:22:07 2025 by rpki-client