This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json) Hash identifier: 42DqgnHEm0GI0tM3V5MKmEtS2KeiJmNFWulr2/yuLsg= Subject key identifier: B6:84:9F:6C:C9:A8:97:0B:E7:72:8E:1C:C3:EA:F9:A6:F4:AD:53:BF Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019B397DB28124A733E9567AA13DE2BB45A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft Manifest number: 1544 Signing time: Sat 20 Dec 2025 02:01:37 +0000 Manifest this update: Sat 20 Dec 2025 02:01:37 +0000 Manifest next update: Sun 21 Dec 2025 02:01:37 +0000 Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=) 2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=) 3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: G1tHtK5O3SFNLvU1pbUWciK4/0U0qwFd9sk3ac8ghDo=) 4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=) 5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b2:81:24:a7:33:e9:56:7a:a1:3d:e2:bb:45:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Dec 20 02:01:37 2025 GMT Not After : Dec 21 02:01:37 2025 GMT Subject: CN=b6849f6cc9a8970be7728e1cc3eaf9a6f4ad53bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:9d:34:b6:57:0c:5c:3d:be:8f:28:5c:fc: 52:93:91:b8:bc:e6:62:f9:d2:cb:79:67:61:6f:1a: eb:91:73:e7:1e:78:fd:43:e5:ea:7e:37:a0:95:f6: b6:62:25:99:8e:2b:a6:f6:3d:84:c9:32:33:bb:93: f5:22:9b:2e:6a:d6:a8:b8:c8:22:7c:cb:86:c0:e7: 08:47:61:9d:8d:dd:85:d3:1e:52:13:64:5c:64:1c: 1b:04:99:a8:6c:60:27:99:c9:75:63:19:22:c3:29: df:34:38:00:98:83:d4:65:bb:28:2c:94:19:86:31: f7:7d:4a:dc:fb:11:90:de:25:06:a0:46:28:68:1a: 67:c6:ad:26:b6:b8:26:3e:22:d8:8e:23:4b:98:57: 53:dc:c2:31:bd:15:04:4c:94:33:af:9a:8e:b2:6a: 95:27:dd:4f:e6:87:27:ba:3c:2d:57:05:77:ac:66: 8d:98:61:4f:80:f3:99:4a:3d:4d:76:b8:9a:bc:2e: 1d:c8:ea:00:6f:7a:cd:34:d5:c5:15:de:ba:20:7d: 7a:dc:f8:99:4a:68:6b:f4:25:fa:bb:4a:d4:02:7f: 26:76:90:33:18:e7:6c:c8:ca:14:77:be:d6:20:8f: 59:b0:8e:d3:a0:fe:22:84:27:e4:a2:a7:50:6a:6f: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:9F:6C:C9:A8:97:0B:E7:72:8E:1C:C3:EA:F9:A6:F4:AD:53:BF X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9f:16:74:04:b7:b3:b5:b9:e4:b9:85:af:56:35:d2:68:b6: 1e:a5:bf:98:9e:57:d5:f8:8e:b1:9a:ab:ff:d7:39:44:03:41: 0e:e7:7b:95:23:17:56:54:3d:b0:05:4a:95:e1:dd:c1:65:89: e5:62:02:ca:ad:12:0c:3d:3b:d4:8d:d6:1a:b1:79:3e:6d:d5: 7e:a8:8c:52:b9:c5:e4:bb:6c:b2:c8:44:33:23:83:c1:03:7a: bc:f7:58:45:2d:45:62:c1:2d:24:28:11:b3:65:51:ad:0f:75: 4f:4d:49:fa:18:4b:18:de:3b:92:fd:4e:93:62:22:1f:30:81: e9:22:f0:ac:eb:93:ec:d6:7f:37:d1:0d:d3:9a:35:9b:ad:4e: 12:5f:03:db:c7:85:6c:fd:2e:f2:ae:2b:9c:10:f3:92:46:dc: af:14:5f:7d:81:e8:fe:6a:7e:e4:6c:65:90:4d:fa:c4:15:3e: 13:8b:09:1d:98:70:c0:ec:39:da:15:16:46:df:20:f1:9b:af: 65:c5:91:2b:eb:c5:92:8f:b1:30:26:88:cb:80:52:b9:ce:de: db:64:f6:e5:9f:e2:bb:c4:3d:09:66:f9:5c:5b:85:0e:6b:b4: a2:b7:9b:0f:36:eb:f9:91:31:e7:ac:8a:08:ca:97:1f:ff:cc: 31:25:7f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbKBJKcz6VZ6oT3iu0WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjUxMjIwMDIwMTM3WhcNMjUxMjIxMDIwMTM3WjAzMTEwLwYDVQQD EyhiNjg0OWY2Y2M5YTg5NzBiZTc3MjhlMWNjM2VhZjlhNmY0YWQ1M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGSdNLZXDFw9vo8oXPxSk5G4vOZi +dLLeWdhbxrrkXPnHnj9Q+Xqfjeglfa2YiWZjium9j2EyTIzu5P1IpsuataouMgi fMuGwOcIR2Gdjd2F0x5SE2RcZBwbBJmobGAnmcl1YxkiwynfNDgAmIPUZbsoLJQZ hjH3fUrc+xGQ3iUGoEYoaBpnxq0mtrgmPiLYjiNLmFdT3MIxvRUETJQzr5qOsmqV J91P5ocnujwtVwV3rGaNmGFPgPOZSj1NdriavC4dyOoAb3rNNNXFFd66IH163PiZ Smhr9CX6u0rUAn8mdpAzGOdsyMoUd77WII9ZsI7ToP4ihCfkoqdQam8LgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaEn2zJqJcL53KOHMPq+ab0rVO/MB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj58WdAS3 s7W55LmFr1Y10mi2HqW/mJ5X1fiOsZqr/9c5RANBDud7lSMXVlQ9sAVKleHdwWWJ 5WICyq0SDD071I3WGrF5Pm3VfqiMUrnF5LtssshEMyODwQN6vPdYRS1FYsEtJCgR s2VRrQ91T01J+hhLGN47kv1Ok2IiHzCB6SLwrOuT7NZ/N9EN05o1m61OEl8D28eF bP0u8q4rnBDzkkbcrxRffYHo/mp+5GxlkE36xBU+E4sJHZhwwOw52hUWRt8g8Zuv ZcWRK+vFko+xMCaIy4BSuc7e22T25Z/iu8Q9CWb5XFuFDmu0orebDzbr+ZEx56yK CMqXH//MMSV/eg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:05:31 2025 by rpki-client