This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json) Hash identifier: HI2X5GKBR0Gho+cc8E2msZ3S4gbtxXyHZyN3WbLFuOk= Subject key identifier: D6:52:18:C9:0C:11:37:8A:6C:54:0D:C0:89:C8:14:E9:7C:B2:2E:7A Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a Certificate serial: 019B3D234E03471AD2E17E11B0439C3EBF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 19:01:22 +0000 Manifest this update: Sat 20 Dec 2025 19:01:22 +0000 Manifest next update: Sun 21 Dec 2025 19:01:22 +0000 Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: JVk2EYloV1kVUp+GHbguHJR+YI1MZaRdr/L0kmYXCDs=) 2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:4e:03:47:1a:d2:e1:7e:11:b0:43:9c:3e:bf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a Validity Not Before: Dec 20 19:01:22 2025 GMT Not After : Dec 21 19:01:22 2025 GMT Subject: CN=d65218c90c11378a6c540dc089c814e97cb22e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:84:13:64:cf:9e:46:75:e0:6e:9f:e6:62: e9:9d:19:d1:4e:ea:b5:6c:a1:ea:b8:bc:8b:79:2f: 5b:2b:8a:ae:b5:e3:b9:b5:33:1f:08:ce:21:67:68: 77:b9:ee:6e:63:8a:54:fe:5f:19:4f:2d:e9:ee:bc: fe:7c:fb:f1:9b:7f:7c:fd:2e:ac:0c:33:38:91:33: 21:18:8d:65:ba:8a:a6:9e:b5:c2:98:f9:a3:46:c8: ac:e2:41:e8:69:81:fa:09:53:25:28:63:6a:54:a9: 89:a5:8d:51:41:d5:08:b3:31:a1:5a:0b:e0:9a:a3: ab:7e:b8:c9:e6:e3:49:cf:fc:e1:5a:c0:a6:0c:ec: 7f:2c:8a:a4:ea:84:13:bb:3d:83:57:b9:23:e1:ae: fa:eb:e2:42:38:cc:c0:5c:35:f8:0a:5c:ed:90:10: fc:60:a5:f9:e5:af:e4:9a:23:bf:1b:79:53:d9:51: 0d:c7:53:f9:74:33:a7:fe:a7:09:fe:fa:7b:6a:61: 42:59:50:6c:9e:ca:9a:7c:79:df:c7:85:6d:16:98: f3:1a:84:55:d8:7a:e1:7a:a3:42:3d:7e:4c:e8:d2: 2f:14:6d:bf:ef:8b:1e:98:1f:bb:73:b6:85:aa:bc: 1b:57:01:72:6e:96:5b:44:ac:47:dc:10:10:df:b7: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:52:18:C9:0C:11:37:8A:6C:54:0D:C0:89:C8:14:E9:7C:B2:2E:7A X509v3 Authority Key Identifier: keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:69:3f:45:4e:bd:68:f7:4f:35:5c:29:fc:7e:c4:80:51:27: 65:98:f7:60:51:0a:6d:15:23:19:ca:c8:2b:6e:2e:eb:ee:2a: bc:d3:d6:b7:7f:52:ff:26:25:3a:ca:f2:a0:e5:63:5c:81:fa: fd:4f:e3:02:a2:72:05:90:43:60:1d:f3:34:cf:de:93:9b:01: 96:c9:b7:55:09:d7:d5:fb:1b:d6:26:09:e9:39:3f:53:7a:6e: dd:9e:b5:bb:bc:03:f2:a6:94:7d:f7:a7:32:d6:e5:64:81:8b: 2e:9b:fa:f9:15:98:fc:6b:d0:a0:41:c4:b8:ac:7b:74:d8:5b: 1f:e6:76:0e:3f:f0:59:d8:96:fc:b0:bf:2c:5e:6b:b7:1a:f4: ed:80:e6:bc:42:ec:12:62:db:74:fb:46:ce:ac:a1:63:f5:95: 3d:49:8d:1f:14:a5:17:7e:37:8a:7a:50:aa:97:cf:22:16:8e: 82:d5:d4:bd:96:97:74:f5:e3:11:af:c2:52:e3:85:9a:b9:6e: cd:f5:4e:1c:21:c6:74:ab:a3:58:d3:6c:ca:fd:66:b3:96:cd: 0c:a7:95:69:35:d8:ce:73:34:06:94:08:a5:4d:be:2a:b5:27: c1:d6:d5:c9:39:7a:c1:2c:d3:2c:83:5d:4c:68:5d:ab:e7:97: 31:44:a4:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I04DRxrS4X4RsEOcPr8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz ODUyNWEwHhcNMjUxMjIwMTkwMTIyWhcNMjUxMjIxMTkwMTIyWjAzMTEwLwYDVQQD EyhkNjUyMThjOTBjMTEzNzhhNmM1NDBkYzA4OWM4MTRlOTdjYjIyZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB+EE2TPnkZ14G6f5mLpnRnRTuq1 bKHquLyLeS9bK4quteO5tTMfCM4hZ2h3ue5uY4pU/l8ZTy3p7rz+fPvxm398/S6s DDM4kTMhGI1luoqmnrXCmPmjRsis4kHoaYH6CVMlKGNqVKmJpY1RQdUIszGhWgvg mqOrfrjJ5uNJz/zhWsCmDOx/LIqk6oQTuz2DV7kj4a766+JCOMzAXDX4ClztkBD8 YKX55a/kmiO/G3lT2VENx1P5dDOn/qcJ/vp7amFCWVBsnsqafHnfx4VtFpjzGoRV 2HrheqNCPX5M6NIvFG2/74semB+7c7aFqrwbVwFybpZbRKxH3BAQ37cdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZSGMkMETeKbFQNwInIFOl8si56MB8GA1UdIwQY MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt ZDQxYWM4MWQxY2M0LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0 LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGk/RU69 aPdPNVwp/H7EgFEnZZj3YFEKbRUjGcrIK24u6+4qvNPWt39S/yYlOsryoOVjXIH6 /U/jAqJyBZBDYB3zNM/ek5sBlsm3VQnX1fsb1iYJ6Tk/U3pu3Z61u7wD8qaUffen MtblZIGLLpv6+RWY/GvQoEHEuKx7dNhbH+Z2Dj/wWdiW/LC/LF5rtxr07YDmvELs EmLbdPtGzqyhY/WVPUmNHxSlF343inpQqpfPIhaOgtXUvZaXdPXjEa/CUuOFmrlu zfVOHCHGdKujWNNsyv1ms5bNDKeVaTXYznM0BpQIpU2+KrUnwdbVyTl6wSzTLINd TGhdq+eXMUSkbA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:17 2025 by rpki-client