This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json) Hash identifier: 3KIedk7Xxw2WMEOOZwdE9CZhv0PiK4UDR72OIk+PzI4= Subject key identifier: 64:A9:F6:E8:80:65:8E:B9:BA:2C:FD:40:EE:9F:DC:B0:B8:0A:69:2A Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc Certificate serial: 019B3BA2B60ACCC70D0D48940DEC3011CBF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 12:01:17 +0000 Manifest this update: Sat 20 Dec 2025 12:01:17 +0000 Manifest next update: Sun 21 Dec 2025 12:01:17 +0000 Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: s1rnvdqlnX/wjST3Zvfuz6J5Xn1hFkzV1/ojWtAJRZw=) 2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=) 3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b6:0a:cc:c7:0d:0d:48:94:0d:ec:30:11:cb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc Validity Not Before: Dec 20 12:01:17 2025 GMT Not After : Dec 21 12:01:17 2025 GMT Subject: CN=64a9f6e880658eb9ba2cfd40ee9fdcb0b80a692a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:1c:8c:f6:55:0d:43:27:cd:62:99:bd:58: 14:51:d8:12:39:34:e9:6e:48:72:7a:93:35:e1:34: 5d:6b:29:6b:67:cd:55:36:54:de:4e:b6:5b:89:49: 60:c0:3d:66:54:7a:92:bb:71:34:03:37:c6:f7:57: 85:be:97:91:da:d4:5c:41:c8:60:a7:d3:0d:27:0b: 83:30:1e:96:de:57:b9:9b:d1:1a:1c:b4:2c:98:cc: 3b:b1:f3:bd:1d:17:fd:7e:ef:4f:4d:db:f1:bf:dd: 80:33:08:cf:5d:cb:d7:fe:3f:6d:b2:b6:80:b1:81: 4f:e1:06:af:c1:a1:cb:7a:b6:3a:30:3a:38:45:bd: 7b:20:38:67:7f:98:87:45:61:12:e2:78:87:aa:41: 2e:08:56:fa:6f:39:a9:94:8d:c4:0f:3a:c1:cd:b8: 21:b3:40:3b:f9:3e:c4:1e:76:fc:f6:dc:cd:71:f5: 07:4e:42:23:86:db:47:68:82:6a:47:f0:f4:c1:04: 3e:b5:ba:8e:89:96:7e:68:85:49:a9:2e:d9:68:6a: 85:d8:24:88:85:e7:0a:41:e9:26:cc:86:24:56:b2: 93:5d:0b:66:32:f3:a3:bf:8e:3a:68:65:d4:8c:9d: 82:df:a9:72:54:d9:08:85:58:7e:dd:6e:68:a7:c7: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:F6:E8:80:65:8E:B9:BA:2C:FD:40:EE:9F:DC:B0:B8:0A:69:2A X509v3 Authority Key Identifier: keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:49:fa:39:b0:25:41:68:11:d5:71:07:77:48:fe:1e:07:31: af:3f:9f:1a:d0:b5:d0:60:c3:f0:13:20:67:6c:eb:98:59:95: d4:8b:10:c6:d1:58:f8:59:5d:3a:43:9e:5b:cf:e2:0e:cf:68: a6:a0:0d:ba:3e:58:5c:9f:68:58:83:78:0a:98:fb:cb:1a:6a: 52:49:df:ca:9e:a9:75:2d:40:74:a4:23:a5:da:20:4c:34:0b: fe:f0:ad:35:54:47:07:c0:4e:29:a5:4e:fe:c1:28:ae:62:ff: d8:51:48:6f:84:d8:36:e0:06:d4:8f:e7:0c:36:74:d5:90:db: 65:4f:14:33:16:ed:83:8d:f3:28:19:3e:12:5d:fb:4a:a6:a5: 04:74:7f:92:35:81:66:53:0a:90:13:17:7d:1f:b8:40:e3:0a: d0:da:5d:a5:d1:54:5f:e9:a7:6f:3b:eb:90:f1:d8:93:fa:6a: f3:de:ff:db:b9:e8:61:4b:31:de:68:ed:12:9d:09:46:6a:da: e6:5d:23:72:50:a6:4b:f2:70:3c:62:38:77:94:bb:61:ca:1c: 85:64:f3:3e:44:23:56:6b:de:4b:4e:db:bd:85:a9:3f:5e:20: e9:d2:ca:ae:fc:29:8e:fc:7e:f9:1b:d8:6a:cb:76:38:69:c3: ce:50:be:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orYKzMcNDUiUDewwEcvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4 YTZhYmMwHhcNMjUxMjIwMTIwMTE3WhcNMjUxMjIxMTIwMTE3WjAzMTEwLwYDVQQD Eyg2NGE5ZjZlODgwNjU4ZWI5YmEyY2ZkNDBlZTlmZGNiMGI4MGE2OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW0cjPZVDUMnzWKZvVgUUdgSOTTp bkhyepM14TRdaylrZ81VNlTeTrZbiUlgwD1mVHqSu3E0AzfG91eFvpeR2tRcQchg p9MNJwuDMB6W3le5m9EaHLQsmMw7sfO9HRf9fu9PTdvxv92AMwjPXcvX/j9tsraA sYFP4QavwaHLerY6MDo4Rb17IDhnf5iHRWES4niHqkEuCFb6bzmplI3EDzrBzbgh s0A7+T7EHnb89tzNcfUHTkIjhttHaIJqR/D0wQQ+tbqOiZZ+aIVJqS7ZaGqF2CSI hecKQekmzIYkVrKTXQtmMvOjv446aGXUjJ2C36lyVNkIhVh+3W5op8e2PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSp9uiAZY65uiz9QO6f3LC4CmkqMB8GA1UdIwQY MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEn6ObAl QWgR1XEHd0j+Hgcxrz+fGtC10GDD8BMgZ2zrmFmV1IsQxtFY+FldOkOeW8/iDs9o pqANuj5YXJ9oWIN4Cpj7yxpqUknfyp6pdS1AdKQjpdogTDQL/vCtNVRHB8BOKaVO /sEormL/2FFIb4TYNuAG1I/nDDZ01ZDbZU8UMxbtg43zKBk+El37SqalBHR/kjWB ZlMKkBMXfR+4QOMK0NpdpdFUX+mnbzvrkPHYk/pq897/27noYUsx3mjtEp0JRmra 5l0jclCmS/JwPGI4d5S7YcochWTzPkQjVmveS07bvYWpP14g6dLKrvwpjvx++RvY ast2OGnDzlC+Ag== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:59 2025 by rpki-client