This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json) Hash identifier: jLFACGB35Y5q7oNAdBVsCsUBSIY+RktHMDKQguDv39o= Subject key identifier: E1:D3:E2:3C:8E:1B:A5:E4:93:E1:B2:B2:34:19:72:8D:7A:41:1E:A5 Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90 Certificate serial: 019B3D59757F6BB5AFCE5D276C588FCAD67E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:00:31 +0000 Manifest this update: Sat 20 Dec 2025 20:00:31 +0000 Manifest next update: Sun 21 Dec 2025 20:00:31 +0000 Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: lHmRNmqf4ZqI3EzaGZpxDGYzD4iBtcz981G/cgVIXsA=) 2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:75:7f:6b:b5:af:ce:5d:27:6c:58:8f:ca:d6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90 Validity Not Before: Dec 20 20:00:31 2025 GMT Not After : Dec 21 20:00:31 2025 GMT Subject: CN=e1d3e23c8e1ba5e493e1b2b23419728d7a411ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:4d:a2:15:c3:48:72:d4:97:71:76:e5:c9: e9:cd:22:70:a1:04:d6:c4:b7:6e:8a:45:a3:19:62: 23:7c:bb:cc:b2:d8:7e:ca:39:0f:0c:88:d2:d4:f5: 18:f4:e9:e8:8e:e2:83:63:0f:82:a3:cb:2d:4c:b1: ee:82:40:85:fc:aa:5f:88:28:7a:1e:a9:5f:20:70: 66:16:d4:66:91:a1:19:92:80:c7:e7:dd:d0:5e:30: 21:ba:c3:a4:9d:77:19:e5:4c:98:da:d0:0e:ae:06: 36:46:09:26:74:ae:87:fc:3f:27:b6:1c:71:e7:3e: 80:40:2a:36:0f:92:b2:53:72:8c:03:e2:ec:9d:be: 88:40:79:02:15:25:8e:b4:d1:38:14:bd:55:6a:c0: a7:c8:62:fe:cd:ba:2c:41:64:21:8b:93:ba:15:99: d3:ed:c6:3d:b2:89:39:42:6a:de:3e:7d:03:69:ca: 7a:de:87:2b:83:54:be:73:71:1d:3d:5a:66:fb:d8: 02:d1:ce:19:ef:85:40:02:4b:f0:9f:52:43:48:a3: d2:3f:9e:15:3d:d1:40:fa:23:db:cc:43:ed:54:53: 74:f2:32:e3:c4:67:12:13:a8:d9:9f:d4:af:1c:95: 21:f3:59:b9:b5:5c:79:77:5d:dc:1b:a5:0c:f8:02: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:E2:3C:8E:1B:A5:E4:93:E1:B2:B2:34:19:72:8D:7A:41:1E:A5 X509v3 Authority Key Identifier: keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:21:0a:5f:04:07:35:0f:48:35:d0:d4:49:14:be:4c:80:9c: fa:77:42:31:e0:6e:4c:7b:7e:8d:ea:cb:58:27:cb:a8:78:87: 5f:03:40:33:e3:33:f8:ef:a4:21:f8:cd:5c:5b:cf:07:ab:a4: d3:f8:93:6f:73:ef:92:63:25:c9:8c:a9:44:f2:36:e0:98:1a: 5b:09:10:d7:b9:88:e5:58:a5:a9:65:c3:dd:11:d5:8a:d7:4f: 88:55:9d:3b:42:fd:f0:db:0d:d1:63:db:73:f0:b9:34:ac:68: bc:b7:5e:97:f1:14:77:fd:da:7a:08:17:e8:1c:d7:c6:cc:9e: e4:ad:12:f7:b7:b7:7c:18:33:ae:b7:78:16:91:c6:b0:3e:0d: 73:ec:2d:5c:19:97:d4:13:78:64:38:f5:1d:03:8b:49:fa:dc: 3e:aa:35:45:94:c3:c3:83:63:e2:e9:76:3a:8b:c5:1b:bb:a3: 89:fd:bf:92:68:2c:ce:b5:12:da:00:7f:e1:b8:c3:c2:58:4b: 04:c8:f2:19:aa:52:38:5d:fa:c5:e3:4e:50:88:5b:d2:e0:57: 06:01:c3:c2:ca:b8:40:1a:a8:d7:f7:bd:bd:26:be:90:f5:00: 40:6b:2d:14:5f:54:f3:3e:a4:35:a0:eb:4f:48:7f:b5:3c:8a: 65:a7:dd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXV/a7Wvzl0nbFiPytZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2 ZTZjOTAwHhcNMjUxMjIwMjAwMDMxWhcNMjUxMjIxMjAwMDMxWjAzMTEwLwYDVQQD EyhlMWQzZTIzYzhlMWJhNWU0OTNlMWIyYjIzNDE5NzI4ZDdhNDExZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59BNohXDSHLUl3F25cnpzSJwoQTW xLduikWjGWIjfLvMsth+yjkPDIjS1PUY9OnojuKDYw+Co8stTLHugkCF/KpfiCh6 HqlfIHBmFtRmkaEZkoDH593QXjAhusOknXcZ5UyY2tAOrgY2RgkmdK6H/D8nthxx 5z6AQCo2D5KyU3KMA+Lsnb6IQHkCFSWOtNE4FL1VasCnyGL+zbosQWQhi5O6FZnT 7cY9sok5QmrePn0Dacp63ocrg1S+c3EdPVpm+9gC0c4Z74VAAkvwn1JDSKPSP54V PdFA+iPbzEPtVFN08jLjxGcSE6jZn9SvHJUh81m5tVx5d13cG6UM+ALP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHT4jyOG6Xkk+GysjQZco16QR6lMB8GA1UdIwQY MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCEKXwQH NQ9INdDUSRS+TICc+ndCMeBuTHt+jerLWCfLqHiHXwNAM+Mz+O+kIfjNXFvPB6uk 0/iTb3PvkmMlyYypRPI24JgaWwkQ17mI5VilqWXD3RHVitdPiFWdO0L98NsN0WPb c/C5NKxovLdel/EUd/3aeggX6BzXxsye5K0S97e3fBgzrrd4FpHGsD4Nc+wtXBmX 1BN4ZDj1HQOLSfrcPqo1RZTDw4Nj4ul2OovFG7ujif2/kmgszrUS2gB/4bjDwlhL BMjyGapSOF36xeNOUIhb0uBXBgHDwsq4QBqo1/e9vSa+kPUAQGstFF9U8z6kNaDr T0h/tTyKZafd9g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:46 2025 by rpki-client