This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json) Hash identifier: 19pK0QuThD5PrXmIW040Gp/pjnXq/S0PvxjkM66EXNk= Subject key identifier: C2:34:30:76:3C:58:83:3C:65:93:A4:70:7E:9E:01:C8:53:E1:34:12 Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Certificate serial: 019B405AB8453C8269BC08BD38EB0D232AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:00:45 +0000 Manifest this update: Sun 21 Dec 2025 10:00:45 +0000 Manifest next update: Mon 22 Dec 2025 10:00:45 +0000 Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=) 2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=) 3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: ZaX5oB91n4xMjoUhu6xQNHAwjuj7tZf0ZMo/iwkpcxs=) 4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:b8:45:3c:82:69:bc:08:bd:38:eb:0d:23:2a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Validity Not Before: Dec 21 10:00:45 2025 GMT Not After : Dec 22 10:00:45 2025 GMT Subject: CN=c23430763c58833c6593a4707e9e01c853e13412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:32:28:db:8e:c3:1d:e5:47:1a:ee:80:9e: 4b:c0:da:b8:3b:61:ae:59:cc:56:50:b2:a6:ad:74: cd:7e:5e:fe:a0:2b:09:50:88:00:a6:d7:3a:a7:53: a0:5b:9f:3f:92:48:e9:f5:cc:d9:07:ad:93:16:8e: ec:ad:3e:e5:6f:c2:36:dd:7f:f9:06:eb:1a:e8:bd: aa:64:4f:25:88:8a:ed:4c:e0:24:28:56:3d:de:a9: 70:bd:c7:25:ab:6d:1b:82:a5:fc:eb:ff:67:17:95: 94:8d:02:29:67:c0:9a:aa:0a:55:f4:2d:fa:76:8a: 45:b7:71:08:da:5a:21:a4:c5:b9:33:ee:32:7f:fe: 3d:9d:a6:8e:c9:b4:ab:d8:bc:df:cd:8f:34:bc:5c: bc:0f:63:b8:74:a1:7d:a1:17:18:9b:76:12:9c:0c: e0:c5:9a:e8:41:ba:19:d0:38:77:e9:75:4c:7a:d4: 9e:c9:04:74:7b:63:96:81:88:1c:f9:59:8a:53:25: 98:b7:80:51:d4:82:60:e7:d2:72:fa:a9:11:7e:2b: b1:b9:ea:4c:1c:30:4c:0b:a7:2b:2e:13:44:62:1d: 77:78:46:ed:b0:a9:d7:e6:6d:75:b7:f6:0c:f2:d7: 02:15:1c:f4:66:05:51:c2:e2:d2:3f:39:59:73:1e: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:30:76:3C:58:83:3C:65:93:A4:70:7E:9E:01:C8:53:E1:34:12 X509v3 Authority Key Identifier: keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cb:d6:16:7b:c4:10:14:90:60:08:8e:35:44:63:50:45:f5: 5a:0b:9d:47:8f:52:47:86:00:95:60:e7:20:e2:17:a5:0e:b7: db:a5:c1:67:c1:ec:0a:f5:c4:33:0f:d3:29:2f:cd:69:1f:49: b6:49:a1:c3:09:0a:16:63:41:6d:fe:1a:15:e2:41:ef:88:32: 58:ca:67:b3:ec:2b:a5:23:05:13:63:ca:14:2d:fb:17:f0:fd: 3a:c9:53:93:4a:a7:87:18:50:87:ea:36:9a:e4:f2:b4:c7:0a: 6c:d4:cc:ad:7c:a9:48:e7:5b:ea:af:85:bf:18:72:9f:b9:22: 84:00:cc:80:13:c4:24:78:d9:96:52:99:ff:e0:ed:12:3e:c6: 26:20:c3:a6:ad:eb:35:06:6e:3d:3f:2a:1b:f6:0d:cc:45:49: 46:f7:b7:b3:21:4b:cb:dd:28:2a:ee:7e:2b:e1:e1:15:fe:b2: a1:a3:32:7c:78:ac:69:4a:55:e1:9e:97:ee:f7:4a:b0:78:e5: 28:ef:2d:57:6c:a6:57:a1:13:a9:a1:52:79:c8:e7:0c:53:61: 46:fb:d0:0c:0f:d4:b1:c7:47:a4:f8:72:a3:eb:9e:b4:e8:7e: 2f:93:e8:f2:e5:50:65:ab:83:d9:4a:91:6e:6b:f3:0a:13:88: 46:93:27:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWrhFPIJpvAi9OOsNIyr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4 NjVmZDMwHhcNMjUxMjIxMTAwMDQ1WhcNMjUxMjIyMTAwMDQ1WjAzMTEwLwYDVQQD EyhjMjM0MzA3NjNjNTg4MzNjNjU5M2E0NzA3ZTllMDFjODUzZTEzNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjIyKNuOwx3lRxrugJ5LwNq4O2Gu WcxWULKmrXTNfl7+oCsJUIgAptc6p1OgW58/kkjp9czZB62TFo7srT7lb8I23X/5 Busa6L2qZE8liIrtTOAkKFY93qlwvcclq20bgqX86/9nF5WUjQIpZ8CaqgpV9C36 dopFt3EI2lohpMW5M+4yf/49naaOybSr2LzfzY80vFy8D2O4dKF9oRcYm3YSnAzg xZroQboZ0Dh36XVMetSeyQR0e2OWgYgc+VmKUyWYt4BR1IJg59Jy+qkRfiuxuepM HDBMC6crLhNEYh13eEbtsKnX5m11t/YM8tcCFRz0ZgVRwuLSPzlZcx5MMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI0MHY8WIM8ZZOkcH6eAchT4TQSMB8GA1UdIwQY MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt MzkyYTc1MjQ2NGIxLzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsvWFnvE EBSQYAiONURjUEX1WgudR49SR4YAlWDnIOIXpQ6326XBZ8HsCvXEMw/TKS/NaR9J tkmhwwkKFmNBbf4aFeJB74gyWMpns+wrpSMFE2PKFC37F/D9OslTk0qnhxhQh+o2 muTytMcKbNTMrXypSOdb6q+Fvxhyn7kihADMgBPEJHjZllKZ/+DtEj7GJiDDpq3r NQZuPT8qG/YNzEVJRve3syFLy90oKu5+K+HhFf6yoaMyfHisaUpV4Z6X7vdKsHjl KO8tV2ymV6ETqaFSecjnDFNhRvvQDA/UscdHpPhyo+uetOh+L5Po8uVQZauD2UqR bmvzChOIRpMnxA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:31:16 2025 by rpki-client