This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json) Hash identifier: WFiZuF985WGh8OWnfmTnCEbMONBAX8uFg/kDwnZm3KI= Subject key identifier: 57:3D:C8:CF:5B:13:FF:04:6E:15:7E:89:BD:BB:87:B7:E9:F8:AE:1A Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Certificate serial: 019B443808837A7F527D44B2BE71FEF4D968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:01:21 +0000 Manifest this update: Mon 22 Dec 2025 04:01:21 +0000 Manifest next update: Tue 23 Dec 2025 04:01:21 +0000 Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=) 2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: EvqGtV7qp+vzRFiYxGgR8Im46rYMhTktMSGgPjNfb/o=) 3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=) 4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:08:83:7a:7f:52:7d:44:b2:be:71:fe:f4:d9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Validity Not Before: Dec 22 04:01:21 2025 GMT Not After : Dec 23 04:01:21 2025 GMT Subject: CN=573dc8cf5b13ff046e157e89bdbb87b7e9f8ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:0d:e4:fe:44:76:6e:d0:be:99:5c:0c:b2: 39:4a:83:03:ac:3b:a0:0e:8e:6e:5b:60:31:d4:d2: a3:2c:41:b7:ec:e4:0d:58:c8:7b:05:72:be:66:cb: 8f:dc:db:1e:02:5f:58:61:9b:a5:32:f6:f1:a4:5d: ab:1e:67:3a:33:eb:3e:fa:c9:76:c8:ea:1f:e0:e7: c9:04:f7:7b:d4:fb:28:f4:b0:66:21:12:d3:f5:b9: b7:e7:a4:02:4c:9f:d1:a4:6e:d8:b2:ab:a7:89:36: da:f2:a9:0a:e6:54:4f:b4:4b:7e:cb:39:13:a8:c0: 70:cc:15:87:8f:ae:8f:b1:f6:8f:b3:b2:02:d1:61: b8:73:15:14:fc:e0:08:19:9d:29:e0:96:bd:35:26: 1a:96:73:11:8a:cf:20:84:16:9d:7c:1e:39:81:6d: 78:c7:9d:5b:0e:dd:a9:93:5f:90:f1:5e:44:30:79: 30:1d:8e:73:19:35:be:58:07:6d:78:d1:2b:58:d4: 8a:9b:e4:6f:3b:de:ca:66:73:ec:6f:26:59:96:67: 93:a7:d7:2c:7e:5a:24:c2:a4:b1:23:54:b0:c2:3c: 23:94:84:57:d2:10:06:39:a6:24:b5:54:fc:da:ca: 1b:4d:7b:d3:76:c3:bf:80:a5:8b:7a:f6:bd:06:cf: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:C8:CF:5B:13:FF:04:6E:15:7E:89:BD:BB:87:B7:E9:F8:AE:1A X509v3 Authority Key Identifier: keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:da:a6:7f:2b:84:4c:05:e8:54:3a:44:9c:9b:be:6b:59:66: a7:ea:c6:f4:b5:15:08:03:e5:d1:98:05:91:01:8e:5e:92:04: b0:d3:18:f4:e5:31:7b:f3:91:3d:c7:ab:67:77:03:b9:73:48: 84:a7:45:1b:1b:c1:2f:50:79:31:f8:db:c7:2d:9e:fa:f6:3f: e4:98:59:7e:08:99:45:e3:22:ed:82:37:9f:e7:88:d5:3d:68: c2:ed:4b:26:0c:c0:11:0e:a4:c5:05:f1:f7:c0:d7:cc:32:ef: 5b:46:f0:ad:a5:87:e2:8f:93:9d:4f:33:15:c7:ae:08:aa:69: df:1f:e5:a6:a1:6b:46:44:d3:c7:f3:60:61:75:45:1c:6b:d1: 2a:3d:6b:b5:aa:b4:04:ea:13:78:d4:29:63:3f:19:0d:d5:3d: 0d:18:7a:99:b7:03:74:cb:b1:52:e7:f5:ab:17:e1:d9:49:b8: 7b:a5:b1:6a:0a:28:bf:3c:f7:4b:55:36:40:21:55:f2:77:76: e9:b6:72:4f:7a:6c:ac:ef:44:53:c8:58:a8:00:2c:0e:d9:ff: ae:a2:cb:32:0d:79:e6:e6:91:53:79:f4:f6:88:f5:a0:f9:b0: e8:26:bc:a1:c0:6f:96:6b:f1:81:6d:ff:e1:92:bf:d7:04:3d: 0d:5a:9b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOAiDen9SfUSyvnH+9NloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw ZGMzMjQwHhcNMjUxMjIyMDQwMTIxWhcNMjUxMjIzMDQwMTIxWjAzMTEwLwYDVQQD Eyg1NzNkYzhjZjViMTNmZjA0NmUxNTdlODliZGJiODdiN2U5ZjhhZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkgN5P5Edm7QvplcDLI5SoMDrDug Do5uW2Ax1NKjLEG37OQNWMh7BXK+ZsuP3NseAl9YYZulMvbxpF2rHmc6M+s++sl2 yOof4OfJBPd71Pso9LBmIRLT9bm356QCTJ/RpG7YsquniTba8qkK5lRPtEt+yzkT qMBwzBWHj66PsfaPs7IC0WG4cxUU/OAIGZ0p4Ja9NSYalnMRis8ghBadfB45gW14 x51bDt2pk1+Q8V5EMHkwHY5zGTW+WAdteNErWNSKm+RvO97KZnPsbyZZlmeTp9cs flokwqSxI1SwwjwjlIRX0hAGOaYktVT82sobTXvTdsO/gKWLeva9Bs82TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc9yM9bE/8EbhV+ib27h7fp+K4aMB8GA1UdIwQY MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt ZjYyOTdhNzdhMzdiLzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9qmfyuE TAXoVDpEnJu+a1lmp+rG9LUVCAPl0ZgFkQGOXpIEsNMY9OUxe/ORPcerZ3cDuXNI hKdFGxvBL1B5Mfjbxy2e+vY/5JhZfgiZReMi7YI3n+eI1T1owu1LJgzAEQ6kxQXx 98DXzDLvW0bwraWH4o+TnU8zFceuCKpp3x/lpqFrRkTTx/NgYXVFHGvRKj1rtaq0 BOoTeNQpYz8ZDdU9DRh6mbcDdMuxUuf1qxfh2Um4e6Wxagoovzz3S1U2QCFV8nd2 6bZyT3psrO9EU8hYqAAsDtn/rqLLMg155uaRU3n09oj1oPmw6Ca8ocBvlmvxgW3/ 4ZK/1wQ9DVqbgw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:52 2025 by rpki-client