This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json) Hash identifier: YnW8ZwNCCyXCLzBPb3wKEZBG3vAuxrtaXZVSiep2UdU= Subject key identifier: BE:FB:4D:9B:24:94:74:C7:31:4F:88:54:0B:73:0A:22:3E:B0:80:10 Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019B4EBB7CCFC9203F46B046E7325FFFE4F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft Manifest number: 154F Signing time: Wed 24 Dec 2025 05:01:08 +0000 Manifest this update: Wed 24 Dec 2025 05:01:08 +0000 Manifest next update: Thu 25 Dec 2025 05:01:08 +0000 Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=) 2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=) 3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: fiiyVjuClrXVn9kfgfUTjOpYMgR6ciFoedVczzsTELU=) 4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=) 5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:7c:cf:c9:20:3f:46:b0:46:e7:32:5f:ff:e4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Dec 24 05:01:08 2025 GMT Not After : Dec 25 05:01:08 2025 GMT Subject: CN=befb4d9b249474c7314f88540b730a223eb08010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:59:e8:37:9e:c1:43:53:a5:e7:8a:d3:63: b6:d3:d9:e8:11:40:8a:a6:f7:81:19:09:b0:da:8d: 1d:38:97:14:44:31:a1:c2:83:c5:57:3f:45:8a:92: ff:2e:b4:14:0f:87:6d:6f:26:e8:a3:4c:ea:16:45: 4e:cd:c4:b8:02:6d:8d:85:ef:c9:b6:c4:37:68:e9: 24:b9:c5:b5:13:c2:66:d6:41:09:be:8c:79:ab:12: 61:d8:99:0d:e6:04:15:22:cf:ab:36:71:d3:30:ac: 94:73:37:5c:aa:19:8d:de:fe:3b:e8:0b:3e:f3:e5: 2e:9e:d1:c3:39:fe:d4:67:04:cd:6a:6c:29:be:59: 8c:41:0c:83:92:8a:04:6c:0a:58:dc:fa:e3:85:59: 86:18:1d:00:e1:8f:10:43:44:95:10:fd:95:74:1e: aa:f2:f6:84:fe:f6:ed:d6:d1:d8:72:7f:45:1a:fe: f9:75:90:07:59:e9:f4:25:dd:64:14:08:d0:f9:36: a0:7e:da:c8:f2:9e:fa:bf:7f:26:3e:b3:6d:fa:30: 71:21:6e:46:c8:73:83:0f:29:a5:fb:d8:37:3b:86: 39:53:8a:e3:ba:eb:09:7a:57:69:df:71:ca:2e:1b: 01:0d:53:bf:df:d0:fa:88:f4:94:a7:2e:d8:45:19: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FB:4D:9B:24:94:74:C7:31:4F:88:54:0B:73:0A:22:3E:B0:80:10 X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:26:25:04:5a:dc:81:d5:f5:82:43:50:a6:4d:ea:b4:2a:cb: 2f:50:e2:e4:b6:f9:e7:42:23:92:3b:21:ac:71:9b:31:99:e1: 0b:01:85:c3:3d:3d:a7:13:0e:db:31:62:49:cf:7e:0b:6f:03: 8e:47:c8:eb:a2:c7:ab:2e:c0:5a:f9:ae:a8:af:49:98:57:1f: cd:bc:c1:c4:a9:ab:10:98:db:c6:43:42:65:fa:de:44:1f:6a: 02:36:dd:20:ec:df:5c:68:71:a2:90:ce:7f:0b:a2:89:f7:2c: 60:be:34:22:9f:1b:7a:7c:da:f3:c0:b0:e9:7a:65:74:a8:d0: 6e:73:90:e4:42:5c:fa:81:1e:59:e9:89:12:92:95:e8:53:ea: e9:de:b7:c5:12:6c:66:38:83:da:89:fd:0b:6c:79:ce:79:09: 4e:ba:8b:bc:ee:df:9c:e9:1b:eb:78:7f:9d:9d:e1:2d:c5:87: 17:9b:15:b9:96:b4:1c:9d:66:56:ff:12:69:0f:b9:57:b6:c8: a0:13:04:22:31:7e:9b:2f:9c:70:92:0c:71:80:98:9d:33:4d: 91:5d:de:02:b5:50:88:60:06:03:89:4e:a2:28:23:80:b3:1b: 1c:33:43:84:b7:3e:8c:58:d6:0a:0e:4b:fe:90:e2:17:30:99: ea:33:84:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu3zPySA/RrBG5zJf/+T0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjUxMjI0MDUwMTA4WhcNMjUxMjI1MDUwMTA4WjAzMTEwLwYDVQQD EyhiZWZiNGQ5YjI0OTQ3NGM3MzE0Zjg4NTQwYjczMGEyMjNlYjA4MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5Z6DeewUNTpeeK02O209noEUCK pveBGQmw2o0dOJcURDGhwoPFVz9FipL/LrQUD4dtbyboo0zqFkVOzcS4Am2Nhe/J tsQ3aOkkucW1E8Jm1kEJvox5qxJh2JkN5gQVIs+rNnHTMKyUczdcqhmN3v476As+ 8+UuntHDOf7UZwTNamwpvlmMQQyDkooEbApY3PrjhVmGGB0A4Y8QQ0SVEP2VdB6q 8vaE/vbt1tHYcn9FGv75dZAHWen0Jd1kFAjQ+TagftrI8p76v38mPrNt+jBxIW5G yHODDyml+9g3O4Y5U4rjuusJeldp33HKLhsBDVO/39D6iPSUpy7YRRl5hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL77TZsklHTHMU+IVAtzCiI+sIAQMB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyYlBFrc gdX1gkNQpk3qtCrLL1Di5Lb550IjkjshrHGbMZnhCwGFwz09pxMO2zFiSc9+C28D jkfI66LHqy7AWvmuqK9JmFcfzbzBxKmrEJjbxkNCZfreRB9qAjbdIOzfXGhxopDO fwuiifcsYL40Ip8benza88Cw6XpldKjQbnOQ5EJc+oEeWemJEpKV6FPq6d63xRJs ZjiD2on9C2x5znkJTrqLvO7fnOkb63h/nZ3hLcWHF5sVuZa0HJ1mVv8SaQ+5V7bI oBMEIjF+my+ccJIMcYCYnTNNkV3eArVQiGAGA4lOoigjgLMbHDNDhLc+jFjWCg5L /pDiFzCZ6jOEdw== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:13 2025 by rpki-client