This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json) Hash identifier: EsXNoXoHVsm6H9vi6rgSSAVBIPES+gUCIDrsbOg9ek0= Subject key identifier: 82:C6:72:F5:7F:D2:E4:F0:42:61:FC:C3:0B:58:75:91:19:69:30:C1 Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c Certificate serial: 019B3EDA03713F3D0D31B2854DCE6584A0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 03:00:33 +0000 Manifest this update: Sun 21 Dec 2025 03:00:33 +0000 Manifest next update: Mon 22 Dec 2025 03:00:33 +0000 Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=) 2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: RzV542YFpC2hyo9Thn+JzymaVxjqVFRbKX/BzlZaq/o=) 3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=) 4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:03:71:3f:3d:0d:31:b2:85:4d:ce:65:84:a0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c Validity Not Before: Dec 21 03:00:33 2025 GMT Not After : Dec 22 03:00:33 2025 GMT Subject: CN=82c672f57fd2e4f04261fcc30b587591196930c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:6a:6f:b4:b4:ce:99:d3:ff:3f:2a:7d:f2: 0a:2e:f6:81:f0:bd:99:72:79:5a:55:6b:e6:e6:24: 2c:f3:3f:99:d6:20:88:e4:fb:df:b4:90:ca:2f:de: 57:b5:c8:ef:ab:fa:7d:60:96:0c:d1:e2:d5:46:e8: f3:95:d3:9d:53:99:e2:5a:a9:a4:17:45:5e:05:66: fa:88:63:6a:e6:59:4f:53:ac:3d:cd:7a:23:27:c0: 9e:f2:18:2b:e6:40:23:e3:a2:09:eb:9e:37:36:73: d4:97:1b:ed:8b:0f:4e:e9:6a:ee:fb:ed:63:b5:62: 7f:9c:bc:57:15:09:2c:43:3a:ab:94:2a:16:7f:1a: 4a:59:9c:84:9a:2a:87:c2:21:ef:51:92:96:d3:ee: b4:3c:d8:d3:61:57:bb:ac:f5:f7:cf:93:4d:99:10: 9c:04:06:85:ca:9f:dd:06:3a:2d:c3:10:cc:25:8b: bc:8a:00:58:24:2d:9d:1f:fc:ab:09:03:bf:2c:c8: 79:ea:88:39:1e:48:a0:be:ea:c4:67:74:fd:8c:41: 43:4e:d9:22:32:a0:65:cb:41:29:c2:9f:2f:df:9c: 72:62:ce:7b:e3:8a:8b:9b:ec:b5:b6:7d:d3:6d:02: 36:d9:d4:c2:2e:b2:2c:45:b3:8b:12:ea:b1:3c:07: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:72:F5:7F:D2:E4:F0:42:61:FC:C3:0B:58:75:91:19:69:30:C1 X509v3 Authority Key Identifier: keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:f8:b9:f2:9e:68:a8:d5:f5:77:97:4a:73:15:31:28:af: bd:97:ce:96:35:c1:17:d9:49:18:cd:38:eb:6b:6e:dc:57:98: bb:fe:22:9c:0f:ea:54:51:1c:fb:49:11:55:9c:ab:48:9b:cb: f6:79:30:8e:fd:d2:7c:e9:a0:25:45:34:cc:49:00:29:91:6d: 78:b8:10:5b:bf:67:e0:67:11:f1:ce:54:26:11:d5:ea:29:df: 77:b6:bb:eb:a8:9f:2a:f6:4c:83:6f:4f:42:44:d3:d1:b9:d4: 4b:5f:a8:18:ff:95:f2:6f:f4:b8:1d:cb:5b:2e:cd:31:64:30: 81:5f:e6:3f:8f:08:a6:fa:b8:ce:da:be:8b:77:22:9d:3a:81: 60:b3:82:3f:2a:54:5f:92:51:5c:2f:e5:f6:83:ba:2d:84:5e: d5:29:b2:86:3a:ee:b0:14:7f:f0:d2:ba:86:81:fb:77:9a:ac: 33:d5:cb:ef:09:86:c9:12:87:5a:e1:b9:80:9f:0d:d9:f8:4a: c8:9e:f7:c2:f4:79:24:41:1f:64:88:69:db:19:e5:59:82:e7: 68:be:83:c2:d5:4d:89:69:d3:26:21:8e:b0:5b:4c:6e:bf:7a: 9f:e1:f5:42:5a:61:a8:eb:99:b5:1c:56:43:78:81:78:0b:23: 90:f4:1d:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gNxPz0NMbKFTc5lhKDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0 ZTJjOWMwHhcNMjUxMjIxMDMwMDMzWhcNMjUxMjIyMDMwMDMzWjAzMTEwLwYDVQQD Eyg4MmM2NzJmNTdmZDJlNGYwNDI2MWZjYzMwYjU4NzU5MTE5NjkzMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ehqb7S0zpnT/z8qffIKLvaB8L2Z cnlaVWvm5iQs8z+Z1iCI5PvftJDKL95Xtcjvq/p9YJYM0eLVRujzldOdU5niWqmk F0VeBWb6iGNq5llPU6w9zXojJ8Ce8hgr5kAj46IJ6543NnPUlxvtiw9O6Wru++1j tWJ/nLxXFQksQzqrlCoWfxpKWZyEmiqHwiHvUZKW0+60PNjTYVe7rPX3z5NNmRCc BAaFyp/dBjotwxDMJYu8igBYJC2dH/yrCQO/LMh56og5HkigvurEZ3T9jEFDTtki MqBly0Epwp8v35xyYs5744qLm+y1tn3TbQI22dTCLrIsRbOLEuqxPAcklwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILGcvV/0uTwQmH8wwtYdZEZaTDBMB8GA1UdIwQY MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt YWVhYzVkOWNkYzdiLzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVL4ufKe aKjV9XeXSnMVMSivvZfOljXBF9lJGM0462tu3FeYu/4inA/qVFEc+0kRVZyrSJvL 9nkwjv3SfOmgJUU0zEkAKZFteLgQW79n4GcR8c5UJhHV6infd7a766ifKvZMg29P QkTT0bnUS1+oGP+V8m/0uB3LWy7NMWQwgV/mP48Ipvq4ztq+i3cinTqBYLOCPypU X5JRXC/l9oO6LYRe1SmyhjrusBR/8NK6hoH7d5qsM9XL7wmGyRKHWuG5gJ8N2fhK yJ73wvR5JEEfZIhp2xnlWYLnaL6DwtVNiWnTJiGOsFtMbr96n+H1QlphqOuZtRxW Q3iBeAsjkPQdtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:39 2025 by rpki-client