This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json) Hash identifier: U72XDobn8cl38W5PqwT5Kn05yEBKOsO2svH66ahUfMw= Subject key identifier: 8E:A7:81:39:63:4F:4B:4B:E7:8D:BF:7B:B7:AA:3B:41:07:15:47:BA Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed Certificate serial: 019B3FED5D3A45A4F5CE939387FB7E10A0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 08:01:19 +0000 Manifest this update: Sun 21 Dec 2025 08:01:19 +0000 Manifest next update: Mon 22 Dec 2025 08:01:19 +0000 Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=) 2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: lL2tRirl83uRfUe/M6DgvlSp6Wp1xTeRRuImHm26no4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:5d:3a:45:a4:f5:ce:93:93:87:fb:7e:10:a0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed Validity Not Before: Dec 21 08:01:19 2025 GMT Not After : Dec 22 08:01:19 2025 GMT Subject: CN=8ea78139634f4b4be78dbf7bb7aa3b41071547ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:c0:34:16:97:94:e9:da:22:5c:c7:ce:16: cd:de:67:d5:20:6e:91:18:d9:d2:2b:23:94:0b:e9: 68:a1:97:cd:33:cc:e5:30:3e:81:b7:ca:f6:4a:9a: b1:67:4d:7f:07:d3:4a:38:2b:e2:04:fd:82:7e:11: 57:56:02:70:85:e3:af:f7:ae:5e:9c:3f:f2:1e:42: ff:d4:62:5c:09:ca:a6:f9:40:22:38:fa:5d:85:90: 99:44:65:b7:4c:18:64:01:9a:4a:0c:ee:b4:ab:f2: 1b:0e:67:58:40:02:55:7e:be:97:03:e8:16:8c:b4: 73:b8:a1:81:34:cc:2d:cd:28:cb:77:07:91:8a:c9: ce:0a:25:ee:8f:bd:3e:b6:45:4e:77:70:13:47:f4: 86:00:16:c7:62:db:39:56:55:cc:c7:75:87:d0:2c: d4:9e:c6:9d:83:cf:70:05:e1:28:c8:8f:f3:24:64: 55:4f:12:c4:46:e2:2c:a5:aa:61:5b:cd:b1:74:2f: 61:24:98:18:bf:0b:42:12:ab:2b:9f:58:ec:d5:50: 35:c4:3d:7b:1a:f6:83:8b:a9:a9:b6:06:b7:86:b3: 9b:2b:fe:d9:ec:c9:ee:9e:ef:f8:e4:18:55:e6:49: ac:8a:63:b2:fa:7e:be:18:bf:c5:13:a4:79:a6:76: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A7:81:39:63:4F:4B:4B:E7:8D:BF:7B:B7:AA:3B:41:07:15:47:BA X509v3 Authority Key Identifier: keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d8:b8:a1:e3:df:af:c8:14:89:24:78:e6:5c:19:a4:a6:97: b9:4e:20:6e:f2:af:20:a5:8f:ca:81:1c:be:76:5a:d3:d7:a5: 48:d6:5a:c5:53:e8:bf:a3:b1:3c:03:3c:71:c4:74:86:bd:27: 79:5f:a9:91:2f:1f:be:97:3b:c2:5f:a9:d1:c0:20:76:b1:37: 0e:5b:13:6d:13:af:cd:13:3f:1e:61:33:74:af:16:b3:4a:2e: 58:5f:8a:a6:cb:86:13:ea:71:8a:84:5a:56:85:7b:3e:f8:a8: 08:99:e3:66:d1:66:4f:5f:b4:09:fc:2f:6f:bc:85:5a:32:36: a7:3f:69:30:df:ff:f6:79:71:0a:d7:73:50:18:00:b2:4d:b7: 70:73:f2:78:56:e2:e4:5a:2e:a7:78:5d:f6:53:99:49:1b:5e: b2:ab:2a:7d:70:2b:ba:89:74:dc:09:30:a6:03:e0:bc:08:06: 63:5f:b8:b9:d9:b1:99:d1:a2:01:a2:2c:7f:33:4a:9f:11:d6: 4b:07:4e:cb:75:14:16:0f:4b:3e:ed:ba:aa:d9:48:35:c6:50: 88:df:ca:ff:22:f1:c2:be:76:8a:fd:69:20:3a:1a:29:ee:89: 60:26:1c:f4:b3:45:2f:28:25:00:cd:52:ce:09:b6:55:6d:cf: 8c:51:b4:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7V06RaT1zpOTh/t+EKDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjBjMWFhZTAzYzI3NGYwMjk0MjhlZWEwYTQ0MjQyMDhk NGYzZWQwHhcNMjUxMjIxMDgwMTE5WhcNMjUxMjIyMDgwMTE5WjAzMTEwLwYDVQQD Eyg4ZWE3ODEzOTYzNGY0YjRiZTc4ZGJmN2JiN2FhM2I0MTA3MTU0N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzvANBaXlOnaIlzHzhbN3mfVIG6R GNnSKyOUC+looZfNM8zlMD6Bt8r2SpqxZ01/B9NKOCviBP2CfhFXVgJwheOv965e nD/yHkL/1GJcCcqm+UAiOPpdhZCZRGW3TBhkAZpKDO60q/IbDmdYQAJVfr6XA+gW jLRzuKGBNMwtzSjLdweRisnOCiXuj70+tkVOd3ATR/SGABbHYts5VlXMx3WH0CzU nsadg89wBeEoyI/zJGRVTxLERuIspaphW82xdC9hJJgYvwtCEqsrn1js1VA1xD17 GvaDi6mptga3hrObK/7Z7Mnunu/45BhV5kmsimOy+n6+GL/FE6R5pnbZgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6ngTljT0tL542/e7eqO0EHFUe6MB8GA1UdIwQY MBaAFG8gwargPCdPApQo7qCkQkII1PPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUt MDk1ZDBiZDI1NTVmLzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUtMDk1ZDBiZDI1NTVm LzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndi4oePf r8gUiSR45lwZpKaXuU4gbvKvIKWPyoEcvnZa09elSNZaxVPov6OxPAM8ccR0hr0n eV+pkS8fvpc7wl+p0cAgdrE3DlsTbROvzRM/HmEzdK8Ws0ouWF+KpsuGE+pxioRa VoV7PvioCJnjZtFmT1+0Cfwvb7yFWjI2pz9pMN//9nlxCtdzUBgAsk23cHPyeFbi 5Foup3hd9lOZSRtesqsqfXAruol03AkwpgPgvAgGY1+4udmxmdGiAaIsfzNKnxHW SwdOy3UUFg9LPu26qtlINcZQiN/K/yLxwr52iv1pIDoaKe6JYCYc9LNFLyglAM1S zgm2VW3PjFG0Iw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:32 2025 by rpki-client