This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json) Hash identifier: k8U7h9JlVTRnpUYoD6xq5WB2wGhZvjNX+p2cNvvDMqE= Subject key identifier: 44:71:FA:3F:F4:D4:5E:50:3B:91:CA:2E:BA:0C:E3:2F:6A:83:D5:89 Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Certificate serial: 019B4815B0EFA12F769CE2765CE6F0C318E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 22:02:19 +0000 Manifest this update: Mon 22 Dec 2025 22:02:19 +0000 Manifest next update: Tue 23 Dec 2025 22:02:19 +0000 Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=) 2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: ziTmjYHbhjbaqGBHfAvJRBzQTv+Uu0aeDgiddhlBFU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:b0:ef:a1:2f:76:9c:e2:76:5c:e6:f0:c3:18:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Validity Not Before: Dec 22 22:02:19 2025 GMT Not After : Dec 23 22:02:19 2025 GMT Subject: CN=4471fa3ff4d45e503b91ca2eba0ce32f6a83d589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:a2:74:2a:5e:4f:6b:6c:c8:65:91:ee:79: 32:fd:77:88:14:73:a2:04:41:5b:0a:6b:1c:2b:5b: cf:43:ec:bc:07:f9:44:78:a9:5b:f3:14:16:d2:bd: c7:03:55:e0:3a:b8:f1:3f:9c:0e:35:b9:ef:e1:f6: 9c:26:32:56:f2:ca:33:4f:ab:cf:70:a0:39:13:cf: 8f:e7:44:1a:16:1f:b0:b8:a6:15:39:63:9c:3e:ac: 3b:21:ac:21:86:62:7a:fa:a2:3b:24:02:ce:dc:a8: fe:c2:53:83:a9:99:da:34:0f:02:27:88:da:b9:e8: 9d:95:54:45:4b:f6:07:d7:ae:6b:87:28:74:39:7a: 41:d8:2a:cf:c2:c6:08:63:09:ca:1f:3c:b1:c1:aa: bc:34:64:31:e1:6f:e4:99:0c:45:fc:8b:0f:54:37: c1:3b:6f:ba:8a:43:e9:e8:cd:b2:86:79:75:0d:0f: e4:20:a9:dc:a4:b5:bc:fc:a6:cd:96:33:a3:04:8a: 62:ae:0a:d6:51:a7:d7:26:47:ef:5f:e6:7b:f8:8b: 71:d8:42:48:7b:63:28:3f:86:3b:c8:0d:2c:e0:a7: fe:38:4f:2c:6d:34:dd:2b:8e:9a:7e:53:ca:ea:a0: 53:b2:c0:95:4f:d9:73:1f:e5:5d:23:d3:f5:ce:62: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:FA:3F:F4:D4:5E:50:3B:91:CA:2E:BA:0C:E3:2F:6A:83:D5:89 X509v3 Authority Key Identifier: keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:56:01:8b:d9:9c:f9:7b:5f:37:af:1b:67:55:23:e4:4d: 9b:57:3e:92:b4:6d:16:57:76:7b:a1:d1:f3:0e:10:02:2c:14: ce:4c:b5:ed:d2:77:08:a3:d8:31:d8:d7:14:a9:91:7a:9a:89: e4:c8:8b:e9:d4:56:44:fa:9c:69:28:5d:ea:8b:82:12:50:02: c4:9e:61:00:55:4f:9f:68:06:00:0f:8d:00:60:66:bf:1c:da: e6:b1:4e:36:74:61:e5:9a:1d:cc:23:21:c4:b0:2b:fc:40:ef: 5c:04:25:a6:03:da:3d:f2:11:bc:3f:3f:63:c3:07:80:f1:c1: a2:b8:5f:b4:ea:39:12:e1:1d:bc:cd:24:94:e6:64:c2:ed:85: fe:ea:fd:57:de:8d:c8:31:0f:49:b8:9e:33:d4:62:68:de:43: a4:fd:8e:68:50:08:96:f9:d7:90:c4:8f:d1:aa:0c:96:ae:93: fe:41:71:a0:08:2d:c3:bc:f6:f0:63:16:e5:9d:92:b2:9e:7f: 7d:d5:e6:fe:61:7e:50:b4:e7:10:fb:8e:9c:07:f2:93:9b:f0: 4c:81:75:3c:80:43:15:e8:14:d8:d8:4e:d8:c6:bd:93:c6:6d: 74:6f:fb:f5:b7:46:c5:4c:06:9a:b7:df:96:26:be:79:15:cf: fa:3a:5b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbDvoS92nOJ2XObwwxjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDg5ZmUxYzdlMjBhMGIwYzYzODQyYzQ1YzE2YzU3NjMx Nzg1ZDMwHhcNMjUxMjIyMjIwMjE5WhcNMjUxMjIzMjIwMjE5WjAzMTEwLwYDVQQD Eyg0NDcxZmEzZmY0ZDQ1ZTUwM2I5MWNhMmViYTBjZTMyZjZhODNkNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryGidCpeT2tsyGWR7nky/XeIFHOi BEFbCmscK1vPQ+y8B/lEeKlb8xQW0r3HA1XgOrjxP5wONbnv4facJjJW8sozT6vP cKA5E8+P50QaFh+wuKYVOWOcPqw7IawhhmJ6+qI7JALO3Kj+wlODqZnaNA8CJ4ja ueidlVRFS/YH165rhyh0OXpB2CrPwsYIYwnKHzyxwaq8NGQx4W/kmQxF/IsPVDfB O2+6ikPp6M2yhnl1DQ/kIKncpLW8/KbNljOjBIpirgrWUafXJkfvX+Z7+Itx2EJI e2MoP4Y7yA0s4Kf+OE8sbTTdK46aflPK6qBTssCVT9lzH+VdI9P1zmKE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERx+j/01F5QO5HKLroM4y9qg9WJMB8GA1UdIwQY MBaAFG5In+HH4goLDGOELEXBbFdjF4XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjIt ZDg4NjkzMTE0OTlhLzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjItZDg4NjkzMTE0OTlh LzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/VWAYvZ nPl7XzevG2dVI+RNm1c+krRtFld2e6HR8w4QAiwUzky17dJ3CKPYMdjXFKmRepqJ 5MiL6dRWRPqcaShd6ouCElACxJ5hAFVPn2gGAA+NAGBmvxza5rFONnRh5ZodzCMh xLAr/EDvXAQlpgPaPfIRvD8/Y8MHgPHBorhftOo5EuEdvM0klOZkwu2F/ur9V96N yDEPSbieM9RiaN5DpP2OaFAIlvnXkMSP0aoMlq6T/kFxoAgtw7z28GMW5Z2Ssp5/ fdXm/mF+ULTnEPuOnAfyk5vwTIF1PIBDFegU2NhO2Ma9k8ZtdG/79bdGxUwGmrff lia+eRXP+jpbPg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:12 2025 by rpki-client