This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json) Hash identifier: PMUh7BDaflhpNTCQqqkFfzg2PReGwi93MkMtaqakBMc= Subject key identifier: 19:96:CA:B4:42:5B:22:C2:E3:8B:FD:55:B8:0B:F2:02:5D:2B:10:C3 Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435 Certificate serial: 019B4A71B943010CD905262FD99D7183A030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft Manifest number: 178C Signing time: Tue 23 Dec 2025 09:02:05 +0000 Manifest this update: Tue 23 Dec 2025 09:02:05 +0000 Manifest next update: Wed 24 Dec 2025 09:02:05 +0000 Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=) 2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: I7CwGizdDCNDHTI329QvYXcE9prf2JO7fbTT/Pr3gz4=) 3: k__UhnPKWcjHuJiJic_hiOzOOL4.roa (hash: lnfFRBzAMUiKh2QArhufVYpsAWn1dH06S8OGOg5j/0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:b9:43:01:0c:d9:05:26:2f:d9:9d:71:83:a0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435 Validity Not Before: Dec 23 09:02:05 2025 GMT Not After : Dec 24 09:02:05 2025 GMT Subject: CN=1996cab4425b22c2e38bfd55b80bf2025d2b10c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:9e:ab:f2:9d:6e:c0:d0:b5:7f:c9:9f:6d: d9:6b:8c:89:38:ab:b1:60:b2:ce:19:86:e6:92:c6: b0:13:6f:1f:07:92:a7:b0:4b:ef:34:3b:f1:e1:dc: f9:ee:c3:e7:d8:00:be:bd:bd:ac:88:0e:b8:84:dc: 81:24:47:31:37:d5:1d:ae:95:b4:09:80:ab:f8:9d: 91:88:cd:8a:03:ce:77:69:a3:14:cf:a5:c4:6e:b8: 32:c5:1a:de:d9:cd:17:8d:ec:7c:fd:6e:e4:0c:10: 2a:93:0e:e0:6c:8c:c4:1e:92:64:9b:c6:29:5a:4d: 6d:8d:4d:a8:64:e6:5c:0c:79:00:8d:0c:bc:6c:8c: 42:f4:1b:44:9d:93:f8:59:54:d0:10:a4:de:3f:96: 55:22:73:4d:e3:0c:57:bf:60:a7:fd:d9:bb:ac:9f: b7:7e:0d:10:eb:b0:3e:54:1e:55:42:71:7e:3b:80: b4:ec:6c:30:7e:b5:58:d8:a2:ce:bd:4b:b6:19:e0: 16:24:6d:5a:12:4a:19:76:0e:72:a4:18:db:26:a0: 89:8b:8a:4e:ac:cb:f5:d3:de:53:a4:04:bd:df:82: 5d:52:eb:28:72:59:fb:93:db:b6:cf:00:2a:2e:f9: dd:92:6b:2b:16:e1:ab:56:07:ae:61:65:d2:ec:81: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:CA:B4:42:5B:22:C2:E3:8B:FD:55:B8:0B:F2:02:5D:2B:10:C3 X509v3 Authority Key Identifier: keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c8:14:cb:fb:4e:9a:59:cb:6a:03:8a:4b:8e:3d:85:92:62: 33:a7:43:10:15:5c:44:ec:fe:3f:2b:eb:47:9c:eb:8c:f4:94: b7:b2:55:27:8c:c2:b9:42:3d:33:61:da:60:9d:b8:dc:aa:0f: 0b:23:b7:55:e9:2e:1f:18:75:ae:d5:e0:a3:f8:7c:98:4e:4a: 78:ef:ae:78:c5:6b:cf:87:b9:ff:40:70:5d:50:42:4b:c7:97: 47:ab:42:c6:a1:26:b2:d1:0e:62:7d:92:ac:14:f0:25:60:b2: c9:6c:c4:e1:1b:14:51:1f:09:fa:84:d6:ed:d8:62:51:c6:4f: 6c:6b:51:d9:f3:45:55:3f:b5:a9:83:97:b7:c6:a4:f8:77:0d: 3d:e7:85:41:3f:73:09:eb:eb:f5:aa:e1:77:9c:4c:ae:83:ff: d6:77:2a:88:dd:d0:6a:f4:93:67:4b:c2:21:6a:a7:45:be:ae: 72:ce:8c:83:a6:ea:4a:df:10:18:9f:2e:9b:4c:56:60:df:7c: 3f:ea:fe:dc:65:75:c6:6a:5d:ee:3d:81:a8:b2:f4:26:31:f2: a2:78:c0:03:45:c9:9b:4a:2c:69:b7:04:41:93:06:03:48:f9: c1:42:c0:61:f0:28:0a:7c:18:ea:2e:7b:3c:97:00:b1:fe:60: 05:9a:82:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcblDAQzZBSYv2Z1xg6AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3 YjE0MzUwHhcNMjUxMjIzMDkwMjA1WhcNMjUxMjI0MDkwMjA1WjAzMTEwLwYDVQQD EygxOTk2Y2FiNDQyNWIyMmMyZTM4YmZkNTViODBiZjIwMjVkMmIxMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ6eq/KdbsDQtX/Jn23Za4yJOKux YLLOGYbmksawE28fB5KnsEvvNDvx4dz57sPn2AC+vb2siA64hNyBJEcxN9UdrpW0 CYCr+J2RiM2KA853aaMUz6XEbrgyxRre2c0Xjex8/W7kDBAqkw7gbIzEHpJkm8Yp Wk1tjU2oZOZcDHkAjQy8bIxC9BtEnZP4WVTQEKTeP5ZVInNN4wxXv2Cn/dm7rJ+3 fg0Q67A+VB5VQnF+O4C07GwwfrVY2KLOvUu2GeAWJG1aEkoZdg5ypBjbJqCJi4pO rMv1095TpAS934JdUusocln7k9u2zwAqLvndkmsrFuGrVgeuYWXS7IFEFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmWyrRCWyLC44v9VbgL8gJdKxDDMB8GA1UdIwQY MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsgUy/tO mlnLagOKS449hZJiM6dDEBVcROz+PyvrR5zrjPSUt7JVJ4zCuUI9M2HaYJ243KoP CyO3VekuHxh1rtXgo/h8mE5KeO+ueMVrz4e5/0BwXVBCS8eXR6tCxqEmstEOYn2S rBTwJWCyyWzE4RsUUR8J+oTW7dhiUcZPbGtR2fNFVT+1qYOXt8ak+HcNPeeFQT9z Cevr9arhd5xMroP/1ncqiN3QavSTZ0vCIWqnRb6ucs6Mg6bqSt8QGJ8um0xWYN98 P+r+3GV1xmpd7j2BqLL0JjHyonjAA0XJm0osabcEQZMGA0j5wULAYfAoCnwY6i57 PJcAsf5gBZqCFg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:09 2025 by rpki-client