This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json) Hash identifier: jN0S+H74ar4j9OECFAUWAGaoJl9/rxKEpDuVXcsHDWM= Subject key identifier: 91:94:7F:99:67:01:9E:20:B9:E3:CF:27:B1:87:E1:E4:B0:CC:C1:09 Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Certificate serial: 019B3D238EB419673FE2A86DFCE75FFF74A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 19:01:38 +0000 Manifest this update: Sat 20 Dec 2025 19:01:38 +0000 Manifest next update: Sun 21 Dec 2025 19:01:38 +0000 Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: AuB+T03KM5fsYa1hEXbsoGc3GD+VpnvEc8EZ95mPv7c=) 2: UmT_FPNudJQYBwqyPv7j4HzM6OI.roa (hash: NKhaW/ar4SkRZtdC4lRXtLsrSNtnCSoqYCwabcn3p1g=) 3: bJq6ETjit8XTjbk2oJhGlWom8cM.roa (hash: zn7CY4jZHhhwSZI7xV7Y9Ja2NslHPnbSuuGmdSXZLlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:8e:b4:19:67:3f:e2:a8:6d:fc:e7:5f:ff:74:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Validity Not Before: Dec 20 19:01:38 2025 GMT Not After : Dec 21 19:01:38 2025 GMT Subject: CN=91947f9967019e20b9e3cf27b187e1e4b0ccc109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:1a:3c:5f:09:bc:2b:d0:8f:c7:30:c1:60: 99:53:fe:b0:53:ac:7c:b6:61:6e:59:53:af:d7:d9: fa:4b:07:4d:77:92:67:a1:ad:cb:3a:93:f8:26:cf: 28:f9:23:6b:72:6f:8a:18:ee:7d:8d:d2:8a:51:cc: 38:3f:2b:38:e1:76:e3:bc:a2:0d:6c:a9:a1:da:36: e0:60:e7:a5:92:9d:84:9f:95:22:69:e5:ee:af:e8: 66:a3:c4:6f:0d:fa:2e:57:7e:88:26:1b:8d:9e:95: f1:17:6b:58:22:d5:da:91:b0:3c:d8:57:d7:0b:3d: 42:07:a6:14:4c:26:7c:40:94:94:84:aa:6c:06:10: 3c:43:f4:d2:c5:37:13:71:41:b7:fc:e0:4d:e0:4e: fb:0c:1c:52:d7:aa:36:6e:02:dd:f5:c0:c6:ab:de: 59:bb:03:a3:87:ba:1f:7a:33:1e:e0:7f:cb:1b:f5: 8e:16:a8:e0:8d:cd:9e:ec:f0:a6:e6:bf:98:47:5d: a9:93:79:b6:d9:6c:f0:16:7b:a3:71:ee:18:fd:0e: 12:5b:cf:f5:d8:14:b9:51:b4:26:66:6f:02:08:2b: 41:56:c0:3d:85:6b:57:89:10:95:fd:ec:52:aa:5d: 45:d7:47:71:68:7e:04:d8:4f:af:7d:4e:f5:30:23: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:7F:99:67:01:9E:20:B9:E3:CF:27:B1:87:E1:E4:B0:CC:C1:09 X509v3 Authority Key Identifier: keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:b4:97:b6:9f:65:75:f2:bc:d8:da:98:63:70:95:33:71: 85:33:3b:03:05:2d:5f:f6:b8:ee:2d:17:68:dd:8d:78:18:87: e5:16:87:34:6f:bd:a7:9c:fd:2e:d8:16:46:f8:a0:33:ad:55: b2:5b:cf:4a:94:cd:1e:87:6a:cd:78:2c:ad:e0:bd:4b:20:ea: 8e:13:f6:bc:99:5b:8b:20:42:cb:d7:fe:32:45:e4:cb:e3:11: 52:55:33:fd:5a:f1:d7:b3:4c:f0:4e:b6:15:42:ce:ff:74:39: 63:20:8e:2a:2d:bc:5c:c6:92:68:9a:98:26:a4:00:b1:d1:ae: 6a:ca:34:6d:52:22:db:05:ac:3d:3b:de:37:94:58:0a:a5:35: 9e:c7:32:63:c2:61:72:f0:10:9d:e1:7e:e8:0c:10:5e:a6:f7: 4a:a1:88:7c:2a:24:84:42:f3:76:c8:a3:f5:d4:f8:1e:20:81: 82:1e:8f:a2:8a:f1:a6:50:9c:13:b6:16:d5:dc:6f:98:57:e7: 0c:e6:e8:0b:d1:1d:6f:47:71:a5:f9:66:8b:17:1e:8d:f6:2a: 19:f6:90:c9:ff:21:83:0f:3a:6e:8d:86:ee:f7:43:b0:e4:6d: 36:4c:38:b3:16:74:3d:63:c9:cd:69:d7:43:63:00:9f:27:d4: eb:1d:77:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I460GWc/4qht/Odf/3SjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx MWQwNTEwHhcNMjUxMjIwMTkwMTM4WhcNMjUxMjIxMTkwMTM4WjAzMTEwLwYDVQQD Eyg5MTk0N2Y5OTY3MDE5ZTIwYjllM2NmMjdiMTg3ZTFlNGIwY2NjMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMgaPF8JvCvQj8cwwWCZU/6wU6x8 tmFuWVOv19n6SwdNd5Jnoa3LOpP4Js8o+SNrcm+KGO59jdKKUcw4Pys44XbjvKIN bKmh2jbgYOelkp2En5UiaeXur+hmo8RvDfouV36IJhuNnpXxF2tYItXakbA82FfX Cz1CB6YUTCZ8QJSUhKpsBhA8Q/TSxTcTcUG3/OBN4E77DBxS16o2bgLd9cDGq95Z uwOjh7ofejMe4H/LG/WOFqjgjc2e7PCm5r+YR12pk3m22WzwFnujce4Y/Q4SW8/1 2BS5UbQmZm8CCCtBVsA9hWtXiRCV/exSql1F10dxaH4E2E+vfU71MCPtNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGUf5lnAZ4guePPJ7GH4eSwzMEJMB8GA1UdIwQY MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQy0l7af ZXXyvNjamGNwlTNxhTM7AwUtX/a47i0XaN2NeBiH5RaHNG+9p5z9LtgWRvigM61V slvPSpTNHodqzXgsreC9SyDqjhP2vJlbiyBCy9f+MkXky+MRUlUz/Vrx17NM8E62 FULO/3Q5YyCOKi28XMaSaJqYJqQAsdGuaso0bVIi2wWsPTveN5RYCqU1nscyY8Jh cvAQneF+6AwQXqb3SqGIfCokhELzdsij9dT4HiCBgh6PoorxplCcE7YW1dxvmFfn DOboC9Edb0dxpflmixcejfYqGfaQyf8hgw86bo2G7vdDsORtNkw4sxZ0PWPJzWnX Q2MAnyfU6x13yw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:49:05 2025 by rpki-client