This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json) Hash identifier: RP59qcg8EfUINCpXE9VodI9HeEm67TeQt6ScVZJBH78= Subject key identifier: E5:AA:3A:22:0D:4B:C1:42:ED:4D:40:D4:D9:90:C1:53:C7:4E:BA:73 Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7 Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7 Certificate serial: 019B4513C711E87376767715BF58FC0ECC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 08:01:22 +0000 Manifest this update: Mon 22 Dec 2025 08:01:22 +0000 Manifest next update: Tue 23 Dec 2025 08:01:22 +0000 Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=) 2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: cjxJWnQEN+qpxMC60wrwmsvNV+WKq0yzVqm78wLIIlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:c7:11:e8:73:76:76:77:15:bf:58:fc:0e:cc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7 Validity Not Before: Dec 22 08:01:22 2025 GMT Not After : Dec 23 08:01:22 2025 GMT Subject: CN=e5aa3a220d4bc142ed4d40d4d990c153c74eba73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:2d:02:aa:ff:e7:3f:32:10:79:40:46:35: 16:72:6f:26:e3:78:e3:ca:21:92:bd:e9:91:02:eb: 76:67:a5:50:d4:19:53:e4:4b:5a:cd:73:75:e2:eb: 3a:0c:46:c6:bb:68:d2:5f:30:a6:83:30:5c:e8:40: 38:d7:e3:44:94:db:69:17:85:06:45:fe:c3:cb:71: 3d:af:cf:05:5a:20:39:c5:36:e2:ae:57:d0:ef:2e: 5b:c5:7c:22:39:ce:d1:0d:b0:c0:a8:c5:4a:7a:ea: 96:85:7a:69:81:7d:17:2d:a8:bf:f4:6f:32:2f:80: ab:b0:e3:97:49:c8:dc:1c:fd:8b:a5:94:ab:17:10: 91:f8:07:62:42:90:4b:8a:b3:ff:4d:e7:39:0d:bc: fe:c3:a2:62:81:ba:5d:e5:0e:8c:3e:21:92:1e:1b: dc:32:9d:71:c7:db:fd:74:11:ee:8a:4d:ac:3c:ce: 41:b4:78:4a:7e:4d:73:a5:a2:15:9a:42:b0:a1:a8: dc:e3:7d:eb:de:c7:3b:48:16:62:fd:58:6a:d4:ca: 7e:01:64:ad:9f:39:4c:10:80:48:c3:10:4e:50:ff: 38:70:bd:10:eb:9d:25:d4:46:1d:68:2c:63:17:a4: 9c:47:f1:28:d7:75:39:e5:37:7e:21:9e:a7:93:ae: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:3A:22:0D:4B:C1:42:ED:4D:40:D4:D9:90:C1:53:C7:4E:BA:73 X509v3 Authority Key Identifier: keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:17:bc:26:19:ea:70:8e:e2:4e:c4:4d:10:0a:ad:a0:c7:85: 5c:c3:a0:71:4d:f6:a5:3c:21:10:dd:dd:19:54:35:18:42:a8: 0e:c1:55:1f:dd:18:9f:61:44:57:2e:4b:ee:12:86:fc:d6:2f: cf:2c:7e:90:49:c9:9b:fc:5a:8e:99:10:ee:68:83:d9:be:12: 57:28:f5:72:13:5f:38:fd:f5:32:82:04:49:43:68:8a:52:1d: a7:5c:eb:c4:d4:22:5e:91:a3:71:22:7c:b1:2c:12:c0:34:be: ae:3c:da:52:ef:68:83:66:74:a4:8a:d9:39:1c:52:e5:40:2d: 05:c6:ab:47:52:5c:f4:e7:9b:1d:26:bc:e1:6b:bb:42:2e:03: da:1e:43:91:87:2c:3e:96:c7:b0:98:19:2f:77:a0:ad:98:91: 72:b5:02:1a:aa:79:6b:ce:44:b8:47:ac:25:b6:84:9d:d4:cc: a2:4b:62:f6:a8:66:8f:ed:9f:a3:8c:73:31:ce:27:83:44:38: aa:a3:9d:62:bb:1f:2a:82:ad:e9:02:c0:0e:88:74:03:71:da: 98:a9:d8:da:07:1d:af:25:8a:56:f5:49:93:28:9b:3d:52:73: 74:a5:e0:56:60:c9:c8:ae:45:19:6e:f8:1c:af:20:fe:c0:28: a0:97:c8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE8cR6HN2dncVv1j8DswGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTQ2MDU2ZjBmYmJkZTYxOGJmZjAxMWMwZjIyYmE3NGE1 ODMyYjcwHhcNMjUxMjIyMDgwMTIyWhcNMjUxMjIzMDgwMTIyWjAzMTEwLwYDVQQD EyhlNWFhM2EyMjBkNGJjMTQyZWQ0ZDQwZDRkOTkwYzE1M2M3NGViYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbMtAqr/5z8yEHlARjUWcm8m43jj yiGSvemRAut2Z6VQ1BlT5EtazXN14us6DEbGu2jSXzCmgzBc6EA41+NElNtpF4UG Rf7Dy3E9r88FWiA5xTbirlfQ7y5bxXwiOc7RDbDAqMVKeuqWhXppgX0XLai/9G8y L4CrsOOXScjcHP2LpZSrFxCR+AdiQpBLirP/Tec5Dbz+w6Jigbpd5Q6MPiGSHhvc Mp1xx9v9dBHuik2sPM5BtHhKfk1zpaIVmkKwoajc433r3sc7SBZi/Vhq1Mp+AWSt nzlMEIBIwxBOUP84cL0Q650l1EYdaCxjF6ScR/Eo13U55Td+IZ6nk64WwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWqOiINS8FC7U1A1NmQwVPHTrpzMB8GA1UdIwQY MBaAFG0UYFbw+73mGL/wEcDyK6dKWDK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQt OGVjZjc1MTA1N2FjLzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQtOGVjZjc1MTA1N2Fj LzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xe8Jhnq cI7iTsRNEAqtoMeFXMOgcU32pTwhEN3dGVQ1GEKoDsFVH90Yn2FEVy5L7hKG/NYv zyx+kEnJm/xajpkQ7miD2b4SVyj1chNfOP31MoIESUNoilIdp1zrxNQiXpGjcSJ8 sSwSwDS+rjzaUu9og2Z0pIrZORxS5UAtBcarR1Jc9OebHSa84Wu7Qi4D2h5DkYcs PpbHsJgZL3egrZiRcrUCGqp5a85EuEesJbaEndTMokti9qhmj+2fo4xzMc4ng0Q4 qqOdYrsfKoKt6QLADoh0A3HamKnY2gcdryWKVvVJkyibPVJzdKXgVmDJyK5FGW74 HK8g/sAooJfI3w== -----END CERTIFICATE-----Generated at Mon Dec 22 16:12:17 2025 by rpki-client