This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json) Hash identifier: XRqzdF0e6goXHRKIWD4o0UDYvN1hFgMX+0EJtafms2Y= Subject key identifier: AD:27:C5:4B:F0:C4:93:49:61:B4:EF:92:8C:27:36:96:57:9F:F9:67 Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Certificate serial: 019B62AFE3B87B14C5CD8D1436383F7FB577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 02:00:52 +0000 Manifest this update: Sun 28 Dec 2025 02:00:52 +0000 Manifest next update: Mon 29 Dec 2025 02:00:52 +0000 Files and hashes: 1: 3v4XT_Zkb0JR6zbO2RFLVtIvqcM.roa (hash: aLhicbgV4nIT1UVqMuVw+q4GdC1H71gXhIrWh3frlJs=) 2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: v/xnzm9ZoDpe+ZX0oDc3ceVv+OCycJG1wnIoyhPH0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:e3:b8:7b:14:c5:cd:8d:14:36:38:3f:7f:b5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Validity Not Before: Dec 28 02:00:52 2025 GMT Not After : Dec 29 02:00:52 2025 GMT Subject: CN=ad27c54bf0c4934961b4ef928c273696579ff967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:dc:f6:a9:04:83:a3:bc:64:95:16:44:f4: 3d:12:6e:18:e0:d9:46:9c:c8:5d:b2:4d:ae:07:38: 87:db:ee:32:98:ce:5e:ce:d0:27:29:3a:3d:41:d1: c8:16:ac:06:fd:d2:02:2e:da:c6:24:c0:c6:9b:95: c1:15:06:33:a3:65:3e:19:16:69:c8:4a:ef:58:40: 20:e9:bb:97:35:3e:21:7f:6d:a7:7a:5d:62:ec:43: 74:75:03:81:20:b9:85:c1:56:14:22:7e:ac:36:c4: df:78:59:c7:6a:7e:1a:aa:ce:a0:3d:b3:cb:02:f5: 14:c5:88:6a:27:73:d6:00:2c:68:25:5a:49:5a:f8: e9:c4:46:89:26:41:e7:a4:57:8f:c8:b9:1b:3f:34: 2c:1c:d4:df:f7:85:17:b5:15:6f:26:29:bb:cc:bc: 52:ff:63:f6:44:a6:e6:b9:a0:90:d8:ac:91:e3:6a: 52:5f:93:4f:73:04:20:ea:ec:96:73:ba:42:7e:35: ed:b9:a1:62:18:da:93:57:91:54:b6:98:2c:ca:2a: c2:7d:c4:8a:3e:cf:60:f7:f1:cb:92:39:2a:41:07: b8:68:5f:2d:16:55:51:5f:31:06:32:e4:49:f3:7d: 43:ef:f0:57:19:23:6f:56:60:23:e0:8d:07:1a:34: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:C5:4B:F0:C4:93:49:61:B4:EF:92:8C:27:36:96:57:9F:F9:67 X509v3 Authority Key Identifier: keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:39:ac:c1:5b:11:8d:d6:af:a6:80:11:06:72:1f:df:ef:72: 56:94:f2:81:56:43:88:68:fa:b0:2c:94:65:80:c2:0e:33:71: 27:a3:9c:e8:fb:82:52:50:54:8b:1a:b2:66:53:80:2b:3b:4a: 28:d0:b8:b8:98:12:5d:7c:fa:ef:7c:11:b9:4f:f3:6c:af:2c: 2a:8b:27:94:e3:e9:b7:98:14:97:74:a4:58:4b:5b:68:a6:c4: 42:30:a9:44:a6:49:48:9f:f5:1f:e1:f7:96:e5:cf:88:cb:d9: 43:b6:42:a1:49:55:81:c0:05:d5:23:66:ac:9d:51:64:b3:87: e2:37:8d:cf:ec:e2:ce:9b:85:1b:0c:0d:ee:9c:53:28:fe:13: 23:9a:c8:ba:1a:cb:43:61:30:23:6b:4f:bd:75:f3:c4:bb:ea: a7:3d:4a:bd:ea:94:05:1f:d0:60:b3:e5:6e:1a:36:b3:f4:8b: 9a:aa:92:f9:db:48:29:46:40:0c:7c:f2:e0:bd:36:7d:b1:99: ab:fb:0e:05:ca:98:32:06:55:2a:aa:93:d1:dd:90:ee:3a:08: 7e:c1:e3:fe:eb:7f:5c:69:9a:03:a5:a1:19:ff:b8:37:d6:56: f1:99:c6:de:7a:af:7c:ac:df:9a:4e:39:a7:5f:e9:b0:77:34: d3:60:4e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir+O4exTFzY0UNjg/f7V3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1 ZDJkOGEwHhcNMjUxMjI4MDIwMDUyWhcNMjUxMjI5MDIwMDUyWjAzMTEwLwYDVQQD EyhhZDI3YzU0YmYwYzQ5MzQ5NjFiNGVmOTI4YzI3MzY5NjU3OWZmOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dvc9qkEg6O8ZJUWRPQ9Em4Y4NlG nMhdsk2uBziH2+4ymM5eztAnKTo9QdHIFqwG/dICLtrGJMDGm5XBFQYzo2U+GRZp yErvWEAg6buXNT4hf22nel1i7EN0dQOBILmFwVYUIn6sNsTfeFnHan4aqs6gPbPL AvUUxYhqJ3PWACxoJVpJWvjpxEaJJkHnpFePyLkbPzQsHNTf94UXtRVvJim7zLxS /2P2RKbmuaCQ2KyR42pSX5NPcwQg6uyWc7pCfjXtuaFiGNqTV5FUtpgsyirCfcSK Ps9g9/HLkjkqQQe4aF8tFlVRXzEGMuRJ831D7/BXGSNvVmAj4I0HGjRz7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0nxUvwxJNJYbTvkownNpZXn/lnMB8GA1UdIwQY MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2 LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujmswVsR jdavpoARBnIf3+9yVpTygVZDiGj6sCyUZYDCDjNxJ6Oc6PuCUlBUixqyZlOAKztK KNC4uJgSXXz673wRuU/zbK8sKosnlOPpt5gUl3SkWEtbaKbEQjCpRKZJSJ/1H+H3 luXPiMvZQ7ZCoUlVgcAF1SNmrJ1RZLOH4jeNz+zizpuFGwwN7pxTKP4TI5rIuhrL Q2EwI2tPvXXzxLvqpz1KveqUBR/QYLPlbho2s/SLmqqS+dtIKUZADHzy4L02fbGZ q/sOBcqYMgZVKqqT0d2Q7joIfsHj/ut/XGmaA6WhGf+4N9ZW8ZnG3nqvfKzfmk45 p1/psHc002BOoA== -----END CERTIFICATE-----Generated at Sun Dec 28 11:24:44 2025 by rpki-client