This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json) Hash identifier: wf35AYYDK7LMoGpFudWmuJzDZROSTSSbVXEPDnRX+T8= Subject key identifier: 66:32:E2:82:10:B9:DF:32:12:56:A4:E7:EF:5F:88:88:11:3F:8B:29 Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Certificate serial: 019B6AD73814F36D705A6433118574DCD1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 16:00:47 +0000 Manifest this update: Mon 29 Dec 2025 16:00:47 +0000 Manifest next update: Tue 30 Dec 2025 16:00:47 +0000 Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: 4R8legRGyxzAVLN92Q7l0Y/TTB8LOnNZVWD/opRisUE=) 2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:38:14:f3:6d:70:5a:64:33:11:85:74:dc:d1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Validity Not Before: Dec 29 16:00:47 2025 GMT Not After : Dec 30 16:00:47 2025 GMT Subject: CN=6632e28210b9df321256a4e7ef5f8888113f8b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:e1:b1:a6:de:75:f6:01:e4:b5:23:89:74: ab:69:cf:83:31:c0:08:09:46:65:3d:25:d7:88:e5: dd:1c:b5:01:41:ef:6b:3d:60:1c:7b:b7:fe:91:7f: 0e:d3:cb:79:61:8b:9d:c6:fd:e6:f8:67:14:82:cd: e9:af:a4:00:5b:0f:b7:90:6e:6c:aa:6f:e1:71:8f: 06:37:69:16:2c:82:c2:ae:41:ee:ec:07:a1:64:d2: 35:9e:19:65:a9:ad:b1:8a:95:60:39:b3:5a:50:5d: 75:ee:6c:dc:5d:c6:76:dc:29:01:fe:7f:5b:aa:3a: 08:6a:7b:a6:7e:b7:43:57:0c:b8:f1:13:7f:35:f0: f0:f7:ff:07:cc:51:25:54:d6:de:27:86:4c:22:32: 67:31:bd:ed:99:dc:ad:26:58:88:f3:8b:d7:89:48: 18:86:43:14:63:2d:5d:7a:3e:37:86:20:2d:24:54: 8a:2a:3c:fe:72:0f:99:92:69:d2:a2:09:17:03:da: 9f:0e:39:05:98:34:30:a2:43:76:bb:d8:b7:df:f9: de:d6:85:1d:a8:65:2d:a5:47:83:13:8c:86:e7:44: d8:d6:0b:88:11:1b:74:a6:94:ac:53:85:05:50:ee: f3:90:e1:09:1f:1f:9c:0a:10:dd:1a:6c:bc:23:29: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:E2:82:10:B9:DF:32:12:56:A4:E7:EF:5F:88:88:11:3F:8B:29 X509v3 Authority Key Identifier: keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ad:f8:a0:1a:ff:8f:ff:cb:ae:39:75:0b:6c:7d:bc:70:41: 53:f8:28:25:86:8b:c8:1b:f9:ff:cd:41:97:3e:34:b3:13:94: 22:74:86:c1:76:4b:a5:6e:57:83:5d:81:7a:11:fa:2a:18:b9: 4a:46:1d:6f:73:59:90:bf:1a:4c:7d:95:0c:55:69:1d:5b:59: 3f:31:a9:88:30:48:4a:5f:b2:a3:02:01:82:3b:1a:a2:df:96: 8b:cd:6a:56:13:c0:75:e9:d7:92:36:a2:c2:da:9b:45:b0:cc: c1:29:b6:99:5f:bf:0f:93:e3:17:3f:c1:b5:55:4c:dc:3e:a1: ac:ef:ee:97:28:0a:d3:57:ce:f6:c2:c6:ef:92:ec:c5:d5:03: c3:ce:09:c7:31:d9:7d:92:1a:d1:3f:6e:44:d2:8f:91:bd:2d: e3:f6:1f:e9:4d:72:68:c0:33:5b:e4:8f:7e:6e:b3:68:90:70: 98:bc:f4:65:07:ff:0f:9d:04:16:c5:09:4a:09:6b:a3:8f:08: de:7a:fc:3c:32:8e:7b:ac:d8:2a:6e:0e:74:52:9d:bd:eb:13: a3:97:6e:00:aa:d1:00:b3:61:e2:a0:db:2e:39:c1:bb:07:4d: 20:8b:78:e9:6c:e1:08:53:79:e0:4f:5d:54:76:fa:88:9d:b8: ec:9c:4c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1zgU821wWmQzEYV03NHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk NDExYjYwHhcNMjUxMjI5MTYwMDQ3WhcNMjUxMjMwMTYwMDQ3WjAzMTEwLwYDVQQD Eyg2NjMyZTI4MjEwYjlkZjMyMTI1NmE0ZTdlZjVmODg4ODExM2Y4YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9vhsabedfYB5LUjiXSrac+DMcAI CUZlPSXXiOXdHLUBQe9rPWAce7f+kX8O08t5YYudxv3m+GcUgs3pr6QAWw+3kG5s qm/hcY8GN2kWLILCrkHu7AehZNI1nhllqa2xipVgObNaUF117mzcXcZ23CkB/n9b qjoIanumfrdDVwy48RN/NfDw9/8HzFElVNbeJ4ZMIjJnMb3tmdytJliI84vXiUgY hkMUYy1dej43hiAtJFSKKjz+cg+ZkmnSogkXA9qfDjkFmDQwokN2u9i33/ne1oUd qGUtpUeDE4yG50TY1guIERt0ppSsU4UFUO7zkOEJHx+cChDdGmy8IymP8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYy4oIQud8yElak5+9fiIgRP4spMB8GA1UdIwQY MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR634oBr/ j//Lrjl1C2x9vHBBU/goJYaLyBv5/81Blz40sxOUInSGwXZLpW5Xg12BehH6Khi5 SkYdb3NZkL8aTH2VDFVpHVtZPzGpiDBISl+yowIBgjsaot+Wi81qVhPAdenXkjai wtqbRbDMwSm2mV+/D5PjFz/BtVVM3D6hrO/ulygK01fO9sLG75LsxdUDw84JxzHZ fZIa0T9uRNKPkb0t4/Yf6U1yaMAzW+SPfm6zaJBwmLz0ZQf/D50EFsUJSglro48I 3nr8PDKOe6zYKm4OdFKdvesTo5duAKrRALNh4qDbLjnBuwdNIIt46WzhCFN54E9d VHb6iJ247JxMhw== -----END CERTIFICATE-----Generated at Mon Dec 29 18:01:01 2025 by rpki-client