This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json) Hash identifier: YQhDBjcPlaObtOWd6c6KiKXdFEARh+zYdsUm8MroLHo= Subject key identifier: 2F:6E:35:CD:5E:5B:63:A2:62:CF:4F:10:C7:97:A2:6E:8F:BC:AE:F4 Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af Certificate serial: 019B3E3562917E24155C2AD5156764635671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 00:00:44 +0000 Manifest this update: Sun 21 Dec 2025 00:00:44 +0000 Manifest next update: Mon 22 Dec 2025 00:00:44 +0000 Files and hashes: 1: OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa (hash: zJFIUz1mYifZofZ0Na7vRc0V1qQdfg8lAP69hFan3Gw=) 2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: tsUIPNbzuQNV1qr6vllgvFgfUybt5Xq6o3SnjqWr2Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:62:91:7e:24:15:5c:2a:d5:15:67:64:63:56:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af Validity Not Before: Dec 21 00:00:44 2025 GMT Not After : Dec 22 00:00:44 2025 GMT Subject: CN=2f6e35cd5e5b63a262cf4f10c797a26e8fbcaef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:ee:f4:8c:b4:91:c0:17:b7:fd:ea:15:14: b1:91:95:75:0e:cf:30:90:ef:fd:b2:9a:44:a6:14: ee:77:ea:88:c3:a4:a6:62:42:78:32:06:ce:93:fb: ca:e2:b9:20:da:eb:8f:7e:99:a3:b7:32:7c:dc:96: 74:eb:c5:71:10:d6:ea:79:c6:ae:18:66:3c:ee:d8: 8b:22:70:f3:56:9b:ad:1c:d2:f3:4a:98:b9:1c:2c: 1b:c6:ed:06:9c:cf:32:ae:0a:ab:3d:98:63:c0:23: 96:6e:cd:6f:f8:c5:81:65:eb:95:ab:30:bb:a1:3f: 47:92:57:a4:be:de:83:fd:56:df:c6:62:13:bb:ec: 4b:d4:00:47:73:cf:bb:6b:17:65:c0:a6:68:df:07: 78:4a:5e:36:77:b7:f8:da:42:22:46:89:b5:ff:ba: 7a:69:1d:bc:3c:43:23:09:d4:57:06:03:8d:62:3d: dd:95:bf:ef:62:7a:37:65:d0:33:9b:75:7b:f8:b0: 5d:f9:29:e2:db:03:a5:56:80:b3:ac:ed:cd:be:58: c1:bd:fa:c2:04:43:42:67:08:5c:14:2d:14:a2:43: 71:d3:66:96:8e:e2:cb:6f:99:ad:be:b6:f8:7d:44: c8:f5:95:ad:08:e4:44:25:6f:a9:91:c9:9d:31:bf: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6E:35:CD:5E:5B:63:A2:62:CF:4F:10:C7:97:A2:6E:8F:BC:AE:F4 X509v3 Authority Key Identifier: keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0a:dc:e0:34:a4:71:d4:bd:49:5f:d4:fe:7e:46:92:ca:ee: 99:f6:50:15:bb:8b:b3:93:58:74:f6:e3:20:1f:ea:68:9f:43: 8e:17:0e:ca:a7:5d:ee:f5:57:09:47:31:8a:3f:f5:20:37:6f: 23:4a:6b:af:81:0b:45:14:b5:17:30:cf:12:7a:a9:09:5b:fa: 6a:0a:ce:d6:b3:e4:c0:f9:63:d5:43:77:74:af:e7:7a:8a:c3: b2:0d:ae:76:fc:db:58:0b:c9:e0:73:7b:20:c9:18:a1:5a:b2: ac:8b:60:61:b6:88:64:ca:59:53:3e:ab:3a:7a:56:49:f5:c3: 06:a2:b1:ea:00:97:b2:3b:71:70:fd:58:79:93:a0:75:43:69: 56:1b:e5:4a:e0:2f:cb:ff:6a:16:de:f5:f5:c7:aa:b6:fb:5c: 57:26:f6:dc:3a:7c:69:7c:9c:23:d8:a7:4a:81:fe:9b:0d:eb: 25:ca:c7:5a:88:13:20:3e:94:a5:11:16:e2:cb:ce:f1:b3:12: 3e:4e:bc:04:7a:d4:a1:22:0d:3d:da:7e:a8:22:ad:22:70:c5: 4b:7c:21:72:d5:2a:28:df:12:b3:02:35:36:6e:e5:b0:5c:29: ae:d7:57:8e:56:98:06:56:94:11:b0:ee:a5:22:b7:6d:6e:bf: 23:59:85:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NWKRfiQVXCrVFWdkY1ZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj MjM4YWYwHhcNMjUxMjIxMDAwMDQ0WhcNMjUxMjIyMDAwMDQ0WjAzMTEwLwYDVQQD EygyZjZlMzVjZDVlNWI2M2EyNjJjZjRmMTBjNzk3YTI2ZThmYmNhZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Izu9Iy0kcAXt/3qFRSxkZV1Ds8w kO/9sppEphTud+qIw6SmYkJ4MgbOk/vK4rkg2uuPfpmjtzJ83JZ068VxENbqecau GGY87tiLInDzVputHNLzSpi5HCwbxu0GnM8yrgqrPZhjwCOWbs1v+MWBZeuVqzC7 oT9Hklekvt6D/VbfxmITu+xL1ABHc8+7axdlwKZo3wd4Sl42d7f42kIiRom1/7p6 aR28PEMjCdRXBgONYj3dlb/vYno3ZdAzm3V7+LBd+Sni2wOlVoCzrO3NvljBvfrC BENCZwhcFC0UokNx02aWjuLLb5mtvrb4fUTI9ZWtCOREJW+pkcmdMb+SYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9uNc1eW2OiYs9PEMeXom6PvK70MB8GA1UdIwQY MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQrc4DSk cdS9SV/U/n5GksrumfZQFbuLs5NYdPbjIB/qaJ9DjhcOyqdd7vVXCUcxij/1IDdv I0prr4ELRRS1FzDPEnqpCVv6agrO1rPkwPlj1UN3dK/neorDsg2udvzbWAvJ4HN7 IMkYoVqyrItgYbaIZMpZUz6rOnpWSfXDBqKx6gCXsjtxcP1YeZOgdUNpVhvlSuAv y/9qFt719ceqtvtcVyb23Dp8aXycI9inSoH+mw3rJcrHWogTID6UpREW4svO8bMS Pk68BHrUoSINPdp+qCKtInDFS3whctUqKN8SswI1Nm7lsFwprtdXjlaYBlaUEbDu pSK3bW6/I1mFbA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:26 2025 by rpki-client