This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft File: BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json) Hash identifier: UaKNb1i7vu3tfrm9zra/uGnZ2peZWKEyhHTyXSRUKEQ= Subject key identifier: 4C:20:55:F6:AC:5E:91:CE:C7:F1:60:10:79:FF:FA:43:2D:D3:B6:3E Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654 Certificate serial: 019B386A2C35836F0D63322BCA96DEFAAA89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 21:00:40 +0000 Manifest this update: Fri 19 Dec 2025 21:00:40 +0000 Manifest next update: Sat 20 Dec 2025 21:00:40 +0000 Files and hashes: 1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=) 2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=) 3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: tEEaBMIMJW63yysgSCT9t7NHqUrHxPgV3qVpqtaoJu0=) 4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=) 5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:2c:35:83:6f:0d:63:32:2b:ca:96:de:fa:aa:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Validity Not Before: Dec 19 21:00:40 2025 GMT Not After : Dec 20 21:00:40 2025 GMT Subject: CN=4c2055f6ac5e91cec7f1601079fffa432dd3b63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:66:2c:e6:41:df:b2:96:19:d9:0e:2d:7c: 39:6d:06:ce:b1:93:b6:4f:68:b5:13:d5:f4:a0:74: 6e:45:c1:79:c3:98:ba:1b:0c:98:50:1a:36:8e:27: 63:7d:c0:44:6c:2a:1e:46:91:80:2f:12:be:d3:fd: 5e:ee:9e:ad:04:07:c7:50:3c:8a:2c:76:63:5f:35: 5d:74:3b:16:08:5a:87:4d:0b:b2:43:fb:b4:a8:bc: ab:ef:93:86:60:21:72:c6:6a:82:b4:07:1b:08:f2: af:16:be:9a:bd:7f:9b:36:2f:42:f3:66:24:22:c5: c3:68:4f:20:40:33:47:fd:83:2c:cd:28:92:2a:a1: 7a:70:3e:f7:93:9b:20:d3:70:8b:7b:d6:db:51:87: 1d:cf:ea:67:10:16:ed:e8:94:b7:db:c2:62:95:3a: 0b:66:da:cc:1f:a7:80:ec:79:7d:39:39:0f:1a:7c: c7:fe:8a:2c:0f:88:eb:91:fa:49:36:2d:63:76:0a: fc:ae:ed:5e:99:37:12:ce:7b:64:00:3f:81:3c:ab: e3:c8:11:da:6d:da:a0:99:f3:fd:49:2e:91:77:1c: 8e:5e:47:61:10:e6:4b:0e:e0:9a:cd:ee:4b:94:d5: b9:0a:7f:d3:3e:cb:2e:bd:bd:22:3f:a3:f4:09:b3: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:55:F6:AC:5E:91:CE:C7:F1:60:10:79:FF:FA:43:2D:D3:B6:3E X509v3 Authority Key Identifier: keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9a:8d:03:5c:aa:cb:2f:25:cc:0d:4b:d7:b4:ea:bb:82:ce: 2e:b4:40:6e:18:47:c7:52:1a:3e:fc:62:4a:b0:6b:66:92:6e: fe:21:ff:ea:92:4b:01:a8:67:0c:2e:c3:e5:d5:0f:10:04:07: 05:df:ae:5a:8e:06:49:fd:63:fe:5f:4c:b8:5f:b5:a3:96:6a: 3c:c6:35:89:e8:9e:ac:b7:ed:b7:0c:21:d0:d0:e7:54:ea:17: e9:51:12:28:0c:30:28:1d:93:1e:51:f6:1f:57:59:36:7b:7b: a9:ac:2a:4b:50:d7:07:07:92:7e:e7:30:74:d2:73:09:e2:24: 55:1e:28:24:0d:e7:0a:76:9d:61:64:73:96:45:fb:58:e7:6b: ef:c2:82:f1:eb:c8:15:0a:f2:9c:e0:3c:f8:5c:00:31:c3:0c: 67:ec:47:9b:e3:91:76:9f:f7:0c:3e:08:8b:bd:a0:7b:05:53: a0:80:db:1b:0a:18:34:50:8e:eb:18:ab:8e:4d:d0:48:22:e8: 41:fa:f8:c8:7f:b0:e9:3e:ba:7a:6f:95:79:3c:24:14:09:23: 19:61:71:3d:34:af:a2:7a:a2:81:c2:26:8f:c9:24:60:9b:a6: 51:c5:bb:7d:f5:d9:8b:57:5b:a5:9d:66:ca:e2:a5:8d:0a:f1: b0:9a:18:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4aiw1g28NYzIrypbe+qqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2 MjE2NTQwHhcNMjUxMjE5MjEwMDQwWhcNMjUxMjIwMjEwMDQwWjAzMTEwLwYDVQQD Eyg0YzIwNTVmNmFjNWU5MWNlYzdmMTYwMTA3OWZmZmE0MzJkZDNiNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP5mLOZB37KWGdkOLXw5bQbOsZO2 T2i1E9X0oHRuRcF5w5i6GwyYUBo2jidjfcBEbCoeRpGALxK+0/1e7p6tBAfHUDyK LHZjXzVddDsWCFqHTQuyQ/u0qLyr75OGYCFyxmqCtAcbCPKvFr6avX+bNi9C82Yk IsXDaE8gQDNH/YMszSiSKqF6cD73k5sg03CLe9bbUYcdz+pnEBbt6JS328JilToL ZtrMH6eA7Hl9OTkPGnzH/oosD4jrkfpJNi1jdgr8ru1emTcSzntkAD+BPKvjyBHa bdqgmfP9SS6RdxyOXkdhEOZLDuCaze5LlNW5Cn/TPssuvb0iP6P0CbOhxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwgVfasXpHOx/FgEHn/+kMt07Y+MB8GA1UdIwQY MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZqNA1yq yy8lzA1L17Tqu4LOLrRAbhhHx1IaPvxiSrBrZpJu/iH/6pJLAahnDC7D5dUPEAQH Bd+uWo4GSf1j/l9MuF+1o5ZqPMY1ieierLfttwwh0NDnVOoX6VESKAwwKB2THlH2 H1dZNnt7qawqS1DXBweSfucwdNJzCeIkVR4oJA3nCnadYWRzlkX7WOdr78KC8evI FQrynOA8+FwAMcMMZ+xHm+ORdp/3DD4Ii72gewVToIDbGwoYNFCO6xirjk3QSCLo Qfr4yH+w6T66em+VeTwkFAkjGWFxPTSvonqigcImj8kkYJumUcW7ffXZi1dbpZ1m yuKljQrxsJoYbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:57:56 2025 by rpki-client