This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json) Hash identifier: 9HmM/nxg1k2QId95AVe916jZNnO3arFUwMlMYqPvb3g= Subject key identifier: 37:7A:64:23:5A:D4:BD:CB:65:85:A7:79:79:6A:8B:2E:28:0B:A2:15 Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8 Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8 Certificate serial: 019B4437C13DD1AC093A1237DEFD456377B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 04:01:03 +0000 Manifest this update: Mon 22 Dec 2025 04:01:03 +0000 Manifest next update: Tue 23 Dec 2025 04:01:03 +0000 Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: To5bSvNzI0tdQH+6rOXMkL7sitJ1qrzRPHgQNUitJjg=) 2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:c1:3d:d1:ac:09:3a:12:37:de:fd:45:63:77:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8 Validity Not Before: Dec 22 04:01:03 2025 GMT Not After : Dec 23 04:01:03 2025 GMT Subject: CN=377a64235ad4bdcb6585a779796a8b2e280ba215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:d3:78:3b:6e:15:43:7f:17:31:5a:61:22: cd:15:fa:2d:15:28:d6:34:86:7b:e0:3f:34:5e:8d: f2:5e:3b:9a:71:65:d0:3f:52:fd:3a:e4:81:3a:64: 53:9e:7a:1b:d7:0e:4a:76:63:e2:2a:9a:1c:b1:bc: 73:71:d2:f6:f2:8d:ec:26:bd:91:7d:ce:37:c5:dc: 9a:d2:12:d3:96:61:8c:4d:26:76:41:dc:3a:40:f2: f3:23:d1:46:38:b7:26:86:bd:4a:9a:90:41:ae:a6: df:40:2b:d3:3e:99:b2:f9:1f:9c:04:44:d7:f1:86: 85:21:ec:e9:22:48:e8:1a:2e:48:8e:38:62:9a:b4: ec:a9:52:0b:eb:a5:7c:b3:35:1b:04:bf:33:9e:ac: 86:3a:ca:1e:f9:70:da:2a:46:1b:a0:8e:2e:a0:30: 8c:8c:85:66:9f:7b:c5:5c:ca:53:3d:7e:17:d4:a2: e2:97:0b:9f:d7:86:d9:3f:9b:84:53:b1:b9:5c:68: 00:38:e8:4b:2d:bb:77:48:54:4a:25:c3:e0:0a:e6: 4c:d2:f6:3b:db:d1:ac:b7:a0:90:94:9d:a9:02:8e: 3d:21:5c:b4:04:23:81:5e:0b:f7:04:d7:28:c0:8a: 23:bd:25:2b:1b:e4:5c:b2:cd:14:f4:eb:7b:f7:80: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:64:23:5A:D4:BD:CB:65:85:A7:79:79:6A:8B:2E:28:0B:A2:15 X509v3 Authority Key Identifier: keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a2:fa:53:97:5e:08:0a:40:cb:28:12:58:5e:d7:de:8b:92: ba:75:e5:ec:57:84:07:62:79:e5:f1:af:3d:9d:aa:34:6f:36: ce:f4:74:cb:86:f9:f6:e8:5b:80:69:5b:b6:ac:a4:e8:32:c4: 2e:73:8b:cf:37:44:51:35:72:d5:97:73:5a:5f:a5:05:ef:f5: 04:1b:a3:7f:2d:e1:62:b6:8c:19:2c:98:70:ff:1e:16:42:05: 01:82:6e:ae:70:d0:d8:28:f7:88:8d:c6:4a:ef:4c:0b:79:6c: f2:c9:04:95:86:9a:e3:63:79:3b:77:70:57:28:a0:c6:f9:da: e7:11:b7:67:4b:b0:92:94:25:bb:c2:4f:94:6b:57:c8:4f:b9: 47:fa:bd:42:6f:93:d2:89:21:f1:4e:1d:18:19:cb:dc:c6:a2: 54:9d:09:63:6d:18:c5:f0:3f:8d:2a:1a:16:81:f8:9c:55:77: ec:10:1d:79:b5:8a:c0:c9:c8:ab:d3:23:cf:71:66:89:e8:e0: 25:2c:0b:57:51:45:81:8d:da:a8:18:f7:b2:73:2e:64:be:ef: 80:8a:bd:0f:4d:dd:5d:69:5f:b6:c3:0c:c0:3c:03:b0:05:af: 38:09:3f:7a:75:16:33:60:40:ed:ef:d5:51:51:fb:e6:35:39: 09:42:64:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN8E90awJOhI33v1FY3e2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmE1OTAxM2EzYWYwM2Y3Yzk2YzI0ZTY4ZDk1ZTE4MWEw MzA1YTgwHhcNMjUxMjIyMDQwMTAzWhcNMjUxMjIzMDQwMTAzWjAzMTEwLwYDVQQD EygzNzdhNjQyMzVhZDRiZGNiNjU4NWE3Nzk3OTZhOGIyZTI4MGJhMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9TTeDtuFUN/FzFaYSLNFfotFSjW NIZ74D80Xo3yXjuacWXQP1L9OuSBOmRTnnob1w5KdmPiKpocsbxzcdL28o3sJr2R fc43xdya0hLTlmGMTSZ2Qdw6QPLzI9FGOLcmhr1KmpBBrqbfQCvTPpmy+R+cBETX 8YaFIezpIkjoGi5IjjhimrTsqVIL66V8szUbBL8znqyGOsoe+XDaKkYboI4uoDCM jIVmn3vFXMpTPX4X1KLilwuf14bZP5uEU7G5XGgAOOhLLbt3SFRKJcPgCuZM0vY7 29Gst6CQlJ2pAo49IVy0BCOBXgv3BNcowIojvSUrG+Rcss0U9Ot794BnPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd6ZCNa1L3LZYWneXlqiy4oC6IVMB8GA1UdIwQY MBaAFG/6WQE6OvA/fJbCTmjZXhgaAwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYt ZDgyMjk3ZTk0NWFjLzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYtZDgyMjk3ZTk0NWFj LzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKL6U5de CApAyygSWF7X3ouSunXl7FeEB2J55fGvPZ2qNG82zvR0y4b59uhbgGlbtqyk6DLE LnOLzzdEUTVy1ZdzWl+lBe/1BBujfy3hYraMGSyYcP8eFkIFAYJurnDQ2Cj3iI3G Su9MC3ls8skElYaa42N5O3dwVyigxvna5xG3Z0uwkpQlu8JPlGtXyE+5R/q9Qm+T 0okh8U4dGBnL3MaiVJ0JY20YxfA/jSoaFoH4nFV37BAdebWKwMnIq9Mjz3Fmiejg JSwLV1FFgY3aqBj3snMuZL7vgIq9D03dXWlftsMMwDwDsAWvOAk/enUWM2BA7e/V UVH75jU5CUJkTw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:17:50 2025 by rpki-client