This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json) Hash identifier: BkWRgQliE8eFT5qFC25+n9ItixjFIa2sm9WDEMSOP0A= Subject key identifier: 36:99:2E:16:51:AE:CC:D2:DA:D8:3E:BE:2E:4C:3E:95:C7:B2:71:FF Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019B3DC79966ECA83B572926D3AB5DAE70DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 22:00:49 +0000 Manifest this update: Sat 20 Dec 2025 22:00:49 +0000 Manifest next update: Sun 21 Dec 2025 22:00:49 +0000 Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: 3jKWOGtYiM0GWfNYLQEkmW4wG4ggDyQWfOgmENVIhIA=) 2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:99:66:ec:a8:3b:57:29:26:d3:ab:5d:ae:70:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Dec 20 22:00:49 2025 GMT Not After : Dec 21 22:00:49 2025 GMT Subject: CN=36992e1651aeccd2dad83ebe2e4c3e95c7b271ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:d6:ce:4f:51:67:99:d8:69:89:96:9f:c6: f8:da:72:2c:c3:e4:4e:61:72:52:08:87:2b:fe:b0: 6a:a5:bf:e4:d4:de:f2:87:50:21:4c:a3:3e:59:ea: e1:11:7c:32:4b:ba:42:81:40:6f:7d:ca:08:e4:29: a2:0d:bf:e0:82:2e:ce:79:cb:1c:aa:28:b2:cc:d1: 75:9e:69:99:60:82:97:12:a5:3f:ae:26:ac:4c:f1: 69:75:ab:46:87:78:99:1b:26:3c:fb:bc:49:10:67: cd:62:94:68:15:58:0a:c0:a2:2b:a7:38:48:19:96: 5c:08:17:ec:40:91:72:9f:d1:8f:a7:2a:a2:9b:a3: a5:84:73:c4:f5:44:65:b7:bb:79:12:b6:27:b9:1d: 4a:d1:a2:0d:40:21:6f:79:2d:3b:d4:f4:31:3b:02: 70:86:20:37:67:79:88:53:d7:da:69:57:67:e0:5a: c3:87:28:c2:b8:f1:d0:04:48:86:30:1e:0b:cd:03: 5c:35:79:f4:cc:33:c6:21:ab:a9:1a:ff:0c:7b:8d: 47:a1:a7:54:51:91:81:d7:ed:98:ce:3e:fc:56:a0: d8:1c:b5:49:a9:83:df:91:23:21:dd:91:f6:ac:31: b3:e9:98:b9:04:17:f9:76:a0:15:cf:bb:e0:32:18: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:99:2E:16:51:AE:CC:D2:DA:D8:3E:BE:2E:4C:3E:95:C7:B2:71:FF X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:52:b4:df:3d:4e:35:f9:9c:24:3a:81:b9:cb:89:5e:9a:c1: 92:b6:23:8c:2e:38:18:e7:bb:1f:d1:e2:de:ae:5a:68:2f:cd: 5d:71:12:51:22:c3:06:da:18:cf:5f:40:55:f5:38:99:d1:da: 91:d6:e7:51:89:f2:ba:7f:36:39:51:0c:b2:50:b2:1f:b7:4c: dd:7c:0a:35:ad:7d:02:3e:39:57:3d:3a:d8:0c:4c:04:a4:05: 9c:86:05:9f:25:fe:e8:f2:02:6c:cb:b3:e3:d6:40:9b:4d:4c: 5b:4e:8c:0f:39:bc:ef:67:31:fe:71:a5:e0:33:60:bb:9d:ca: 35:96:6c:d5:eb:7c:7b:45:21:53:86:4d:99:e9:4d:b9:d6:4e: b9:62:a9:9f:88:81:7f:29:90:9f:2b:ed:6c:bb:95:6e:ef:ae: fb:0a:40:3b:6c:af:ec:1c:d8:ce:a4:5e:6b:14:3c:2d:2c:54: d7:71:30:9d:91:44:6e:b9:05:60:22:48:21:79:bc:d9:bf:90: c0:79:b8:5c:9b:50:37:aa:f4:63:f0:80:fb:b0:45:5a:79:af: da:30:4e:c8:e1:c3:ed:ae:bf:12:39:8b:16:08:89:f2:82:0b: 35:64:44:42:b1:02:3b:db:b3:d4:14:a9:15:f4:2d:fd:5d:07: 31:49:b9:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5lm7Kg7Vykm06tdrnDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjUxMjIwMjIwMDQ5WhcNMjUxMjIxMjIwMDQ5WjAzMTEwLwYDVQQD EygzNjk5MmUxNjUxYWVjY2QyZGFkODNlYmUyZTRjM2U5NWM3YjI3MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTPWzk9RZ5nYaYmWn8b42nIsw+RO YXJSCIcr/rBqpb/k1N7yh1AhTKM+WerhEXwyS7pCgUBvfcoI5CmiDb/ggi7Oecsc qiiyzNF1nmmZYIKXEqU/riasTPFpdatGh3iZGyY8+7xJEGfNYpRoFVgKwKIrpzhI GZZcCBfsQJFyn9GPpyqim6OlhHPE9URlt7t5ErYnuR1K0aINQCFveS071PQxOwJw hiA3Z3mIU9faaVdn4FrDhyjCuPHQBEiGMB4LzQNcNXn0zDPGIaupGv8Me41HoadU UZGB1+2Yzj78VqDYHLVJqYPfkSMh3ZH2rDGz6Zi5BBf5dqAVz7vgMhiMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaZLhZRrszS2tg+vi5MPpXHsnH/MB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1K03z1O NfmcJDqBucuJXprBkrYjjC44GOe7H9Hi3q5aaC/NXXESUSLDBtoYz19AVfU4mdHa kdbnUYnyun82OVEMslCyH7dM3XwKNa19Aj45Vz062AxMBKQFnIYFnyX+6PICbMuz 49ZAm01MW06MDzm872cx/nGl4DNgu53KNZZs1et8e0UhU4ZNmelNudZOuWKpn4iB fymQnyvtbLuVbu+u+wpAO2yv7BzYzqReaxQ8LSxU13EwnZFEbrkFYCJIIXm82b+Q wHm4XJtQN6r0Y/CA+7BFWnmv2jBOyOHD7a6/EjmLFgiJ8oILNWREQrECO9uz1BSp FfQt/V0HMUm5/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:22 2025 by rpki-client