This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json) Hash identifier: xyG+3PjwK/5BpuSJDuManxXX3BtCX7zPf1AjzVxihfw= Subject key identifier: B5:7E:B1:D4:79:ED:6F:A0:68:BF:8D:F2:99:24:A6:31:E6:96:16:90 Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Certificate serial: 019B649EA0ECA442E85B27AC398AAA332E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 11:01:16 +0000 Manifest this update: Sun 28 Dec 2025 11:01:16 +0000 Manifest next update: Mon 29 Dec 2025 11:01:16 +0000 Files and hashes: 1: 3v4XT_Zkb0JR6zbO2RFLVtIvqcM.roa (hash: aLhicbgV4nIT1UVqMuVw+q4GdC1H71gXhIrWh3frlJs=) 2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: nBxFbSOQQu47N+Dd7AfWfs8gCw3uq67bGz/aeOnV7wE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:a0:ec:a4:42:e8:5b:27:ac:39:8a:aa:33:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Validity Not Before: Dec 28 11:01:16 2025 GMT Not After : Dec 29 11:01:16 2025 GMT Subject: CN=b57eb1d479ed6fa068bf8df29924a631e6961690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:be:9d:60:7c:3b:63:d6:2a:d6:56:c1:19: 4d:09:26:b1:2e:41:03:23:a3:de:c6:29:5f:3a:3c: 10:6e:8e:e8:75:ba:8b:6d:be:d6:4b:69:35:4c:e3: c0:13:15:ba:df:05:41:00:96:5f:02:bf:f1:c6:ff: 44:cc:e6:6c:41:52:74:2c:87:5e:34:a4:27:81:44: 83:f7:e0:a3:0c:e6:82:55:e2:3b:47:fe:74:6f:39: 33:e4:d4:f5:4f:2e:38:a3:a6:7e:a8:68:6d:b1:6d: de:d6:21:3c:0a:0f:3e:70:9b:17:e2:7d:57:e7:2f: e4:ff:5d:14:88:d0:51:13:0e:3e:b6:a2:03:1c:af: 6b:7c:83:73:07:c3:c6:42:48:29:ff:11:ef:0e:e0: f5:f7:c3:90:69:23:a8:0f:cf:27:b9:86:52:9b:80: ec:43:bc:54:0e:9b:6a:9d:a9:d5:54:0d:ec:e3:38: aa:6f:d2:2a:46:9c:c8:14:34:fe:e9:74:0b:73:dd: 82:bd:b0:4b:94:da:89:ef:b3:56:9e:6e:8c:7d:62: 3a:19:c4:24:bf:c9:d5:f8:9a:ad:08:da:91:3e:b3: 2c:e8:06:86:e9:9a:10:9d:57:d4:b1:44:c5:89:16: 05:12:d9:c0:27:47:3f:f3:1d:e5:70:82:84:1d:c6: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7E:B1:D4:79:ED:6F:A0:68:BF:8D:F2:99:24:A6:31:E6:96:16:90 X509v3 Authority Key Identifier: keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f2:c4:6a:31:c4:aa:e1:1e:af:06:f7:f5:58:e6:02:94:dc: 4c:9a:77:ab:92:08:df:14:bb:d9:8a:e7:f6:02:ea:49:ee:ce: 2a:1f:10:ec:d9:61:48:4e:3a:5c:b7:82:21:5a:53:1e:4d:f5: d4:32:29:68:e1:cb:12:3b:3d:0f:4e:a1:d1:8a:b9:42:55:51: dc:a7:93:f8:7d:a1:3e:fa:f9:78:81:7a:72:a4:dd:a0:76:63: 51:39:7a:c7:b1:d9:ac:b3:70:37:5d:96:5c:36:33:d3:2e:8d: 67:df:7e:66:9b:41:8d:6b:b4:2a:cf:d4:c1:94:58:b8:c6:0e: 42:1c:0e:5e:3c:4f:8f:05:bc:9f:39:da:14:78:66:d3:5a:b1: 92:c0:65:6e:38:f6:0c:64:68:28:2d:39:c7:9a:02:d3:b4:19: 6e:74:29:a7:d2:30:93:5d:f1:3c:d2:bd:35:3a:40:25:a3:cd: d4:27:29:bc:28:cc:fc:f8:7a:2f:31:8b:fa:5b:a0:20:1f:81: 42:8a:d2:a0:de:fa:74:c5:b1:e9:aa:91:43:9a:98:fa:f5:f9: 00:75:cb:39:47:9b:d0:6f:41:e3:74:0f:35:a5:af:00:97:d2: 83:07:08:80:37:92:88:92:49:a9:57:f1:36:fc:dc:df:55:d6: 19:8a:d4:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknqDspELoWyesOYqqMy4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1 ZDJkOGEwHhcNMjUxMjI4MTEwMTE2WhcNMjUxMjI5MTEwMTE2WjAzMTEwLwYDVQQD EyhiNTdlYjFkNDc5ZWQ2ZmEwNjhiZjhkZjI5OTI0YTYzMWU2OTYxNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuou+nWB8O2PWKtZWwRlNCSaxLkED I6PexilfOjwQbo7odbqLbb7WS2k1TOPAExW63wVBAJZfAr/xxv9EzOZsQVJ0LIde NKQngUSD9+CjDOaCVeI7R/50bzkz5NT1Ty44o6Z+qGhtsW3e1iE8Cg8+cJsX4n1X 5y/k/10UiNBREw4+tqIDHK9rfINzB8PGQkgp/xHvDuD198OQaSOoD88nuYZSm4Ds Q7xUDptqnanVVA3s4ziqb9IqRpzIFDT+6XQLc92CvbBLlNqJ77NWnm6MfWI6GcQk v8nV+JqtCNqRPrMs6AaG6ZoQnVfUsUTFiRYFEtnAJ0c/8x3lcIKEHcZtXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV+sdR57W+gaL+N8pkkpjHmlhaQMB8GA1UdIwQY MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2 LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvLEajHE quEerwb39VjmApTcTJp3q5II3xS72Yrn9gLqSe7OKh8Q7NlhSE46XLeCIVpTHk31 1DIpaOHLEjs9D06h0Yq5QlVR3KeT+H2hPvr5eIF6cqTdoHZjUTl6x7HZrLNwN12W XDYz0y6NZ99+ZptBjWu0Ks/UwZRYuMYOQhwOXjxPjwW8nznaFHhm01qxksBlbjj2 DGRoKC05x5oC07QZbnQpp9Iwk13xPNK9NTpAJaPN1CcpvCjM/Ph6LzGL+lugIB+B QorSoN76dMWx6aqRQ5qY+vX5AHXLOUeb0G9B43QPNaWvAJfSgwcIgDeSiJJJqVfx Nvzc31XWGYrUMQ== -----END CERTIFICATE-----Generated at Sun Dec 28 13:02:05 2025 by rpki-client