This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json) Hash identifier: yZtUHIUWAWRv8CpWZ7vnsI0wCEYrKaQNAvUeIV6ZRXE= Subject key identifier: 21:FD:72:7C:AE:9E:61:AD:FF:92:B9:7E:65:AE:2F:F5:3A:7B:F6:A1 Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Certificate serial: 019B405C8262556592C228D286ECC4CE339A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:02:43 +0000 Manifest this update: Sun 21 Dec 2025 10:02:43 +0000 Manifest next update: Mon 22 Dec 2025 10:02:43 +0000 Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: ck4Y8DTynyhOir7eXOui7v8dSSiDCT19yj7FhCiEGO4=) 2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:82:62:55:65:92:c2:28:d2:86:ec:c4:ce:33:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Validity Not Before: Dec 21 10:02:43 2025 GMT Not After : Dec 22 10:02:43 2025 GMT Subject: CN=21fd727cae9e61adff92b97e65ae2ff53a7bf6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:19:7c:48:4f:5b:90:5a:3c:13:77:24:0e: 16:17:a1:44:dd:d0:4a:bd:79:7d:fd:e1:22:ad:7c: a0:6e:16:90:2a:fb:72:e5:73:5b:1a:2e:c6:27:d9: 0b:86:1e:21:b5:19:45:5f:9e:23:09:9c:2b:05:be: 57:e7:78:75:df:3a:47:62:9c:6a:48:c7:20:4e:ef: 1d:41:cd:ec:2f:e4:75:b7:d3:4d:55:0a:d5:75:da: c9:ac:57:7d:8c:1d:cf:4e:da:78:cf:ff:f1:0b:e0: 82:a1:0b:ef:b2:c5:fd:51:8a:c0:c3:6b:d9:3d:6a: 6a:0d:51:b4:58:c7:5e:99:e6:46:3c:90:17:a5:bf: 28:19:50:71:80:88:2d:a0:01:4f:4c:b9:ba:91:52: d0:b7:c4:88:c4:12:dc:38:70:e9:39:6e:cc:e9:fc: 00:8f:3c:0c:16:c2:fb:3c:35:b5:e0:77:5a:d8:87: 65:a5:91:13:7f:a0:96:86:ae:87:2b:2c:a4:9b:e3: f0:86:e2:bb:0b:1b:a0:91:69:29:e9:53:8b:a5:a3: e0:ec:5d:cc:d7:d9:50:69:97:6f:4d:91:18:4b:46: e3:e1:6a:c3:f7:e2:65:5d:39:44:b8:a2:32:17:f2: 5b:1e:e3:c6:7f:4e:f9:3b:31:89:61:f2:f7:46:61: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:72:7C:AE:9E:61:AD:FF:92:B9:7E:65:AE:2F:F5:3A:7B:F6:A1 X509v3 Authority Key Identifier: keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:6e:95:ad:41:20:77:68:a4:b1:47:72:96:b0:56:43:cb: 96:05:b6:f7:7c:01:31:53:fc:89:4f:43:97:18:af:48:82:5d: a2:10:e8:3c:04:60:9e:ed:40:c1:89:3e:a9:2f:b6:f5:9c:fd: 29:6b:d4:c4:2b:64:05:f0:a7:ab:a3:78:ba:05:a5:a4:39:ae: 7f:3c:e3:d4:03:22:f3:7c:30:16:33:66:f3:b9:d1:b4:5e:fd: 46:26:c4:2f:5a:72:f5:88:d3:d0:19:bd:2b:7b:ba:45:b8:a5: aa:df:4b:b3:9f:e3:fb:72:4d:ea:d0:ea:cd:89:57:9a:8f:b8: 18:ae:7c:da:2d:76:96:30:b6:e1:ff:64:30:10:1c:7e:b0:9e: 6a:cb:3e:6e:e9:f0:a9:20:86:18:9a:9d:64:e3:e9:b1:b6:ea: 5e:40:00:ad:a7:11:2b:b2:54:8a:93:9d:11:7c:fb:ac:34:2c: 88:a2:0d:dd:0f:d4:01:0d:98:26:ac:e3:7c:a0:e2:37:9b:19: 33:35:3b:8f:68:68:82:64:e1:ec:0c:56:9a:0a:b2:63:9f:43: e5:90:d2:49:0b:54:0c:83:2b:35:0c:17:7f:5a:57:24:c0:54: 70:21:0a:73:7f:55:2f:63:fc:7a:f9:ee:a4:fb:59:c7:0d:9a: f2:cd:64:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXIJiVWWSwijShuzEzjOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3 NWNlMGQwHhcNMjUxMjIxMTAwMjQzWhcNMjUxMjIyMTAwMjQzWjAzMTEwLwYDVQQD EygyMWZkNzI3Y2FlOWU2MWFkZmY5MmI5N2U2NWFlMmZmNTNhN2JmNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9kZfEhPW5BaPBN3JA4WF6FE3dBK vXl9/eEirXygbhaQKvty5XNbGi7GJ9kLhh4htRlFX54jCZwrBb5X53h13zpHYpxq SMcgTu8dQc3sL+R1t9NNVQrVddrJrFd9jB3PTtp4z//xC+CCoQvvssX9UYrAw2vZ PWpqDVG0WMdemeZGPJAXpb8oGVBxgIgtoAFPTLm6kVLQt8SIxBLcOHDpOW7M6fwA jzwMFsL7PDW14Hda2IdlpZETf6CWhq6HKyykm+PwhuK7CxugkWkp6VOLpaPg7F3M 19lQaZdvTZEYS0bj4WrD9+JlXTlEuKIyF/JbHuPGf075OzGJYfL3RmFJOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH9cnyunmGt/5K5fmWuL/U6e/ahMB8GA1UdIwQY MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0xula1B IHdopLFHcpawVkPLlgW293wBMVP8iU9DlxivSIJdohDoPARgnu1AwYk+qS+29Zz9 KWvUxCtkBfCnq6N4ugWlpDmufzzj1AMi83wwFjNm87nRtF79RibEL1py9YjT0Bm9 K3u6Rbilqt9Ls5/j+3JN6tDqzYlXmo+4GK582i12ljC24f9kMBAcfrCeass+bunw qSCGGJqdZOPpsbbqXkAAracRK7JUipOdEXz7rDQsiKIN3Q/UAQ2YJqzjfKDiN5sZ MzU7j2hogmTh7AxWmgqyY59D5ZDSSQtUDIMrNQwXf1pXJMBUcCEKc39VL2P8evnu pPtZxw2a8s1k4A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:36 2025 by rpki-client