This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json) Hash identifier: 58tUwjXJJRzSddS+CuzkwXQYLc7h6Qo8oXi+FRBlhKQ= Subject key identifier: 3C:A0:44:8A:3C:97:B5:E9:AF:23:0B:DA:E1:69:D7:31:B2:DF:A1:E5 Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa Certificate serial: 019B3DC77190E11B6214AC9F5809E4BD721D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 22:00:39 +0000 Manifest this update: Sat 20 Dec 2025 22:00:39 +0000 Manifest next update: Sun 21 Dec 2025 22:00:39 +0000 Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: 91mq34VmJmv0ib+BWBhIWdzRd8MEuxhzkASqIoVmylE=) 2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:71:90:e1:1b:62:14:ac:9f:58:09:e4:bd:72:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa Validity Not Before: Dec 20 22:00:39 2025 GMT Not After : Dec 21 22:00:39 2025 GMT Subject: CN=3ca0448a3c97b5e9af230bdae169d731b2dfa1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:8d:ed:6b:29:50:d9:f8:6c:ec:d7:ab:72: 94:61:38:a6:f9:94:f8:09:f3:ec:3e:47:7e:66:06: 86:52:aa:1a:d2:2e:28:a9:71:51:2b:7f:78:ad:11: 61:92:22:6d:2d:f2:e9:07:ac:43:0f:e0:cf:b6:99: 98:b9:e7:98:f9:e9:27:36:fa:62:b0:2f:ff:5e:e8: eb:67:6f:0c:76:fe:0c:5a:f0:f8:23:c9:fa:f3:fa: 2a:48:68:dc:1d:4c:37:36:a1:06:ea:52:c6:d0:4d: 2e:13:0d:8d:c4:cc:85:b3:6b:13:f0:7f:fc:3c:c9: 02:ef:9d:8c:48:c7:57:75:b3:1d:c6:46:97:50:7d: af:19:c4:6e:d7:16:3c:4f:6c:4f:e9:fa:bc:c4:8d: a4:90:62:a8:42:a2:fd:ca:75:13:2e:16:e5:24:e0: b1:4b:a0:41:f4:c6:13:86:aa:8d:4f:63:40:04:8a: f1:dc:ba:35:71:51:e3:83:d0:c9:57:2a:ab:a8:ae: 1b:2a:cc:4a:2e:52:18:ff:95:d1:75:fb:0a:17:28: 7b:b3:d0:70:70:21:70:77:c0:a5:7d:41:c8:ab:a4: f0:ff:53:84:d1:75:3b:03:d7:50:a8:59:b4:fc:c4: 5a:f1:85:3c:fc:60:fe:30:e7:10:6a:8e:fb:d7:ed: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A0:44:8A:3C:97:B5:E9:AF:23:0B:DA:E1:69:D7:31:B2:DF:A1:E5 X509v3 Authority Key Identifier: keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:38:12:d6:48:51:7a:6d:67:b1:4c:90:1c:d7:8b:2f:e4:14: a6:ff:87:cf:d7:f5:46:01:33:a9:06:cf:05:23:bd:e6:c4:3b: 9c:79:a7:47:7a:bf:e0:89:7a:d1:59:87:2d:7d:60:4f:c4:b8: 64:5b:0c:5f:05:3f:41:e0:2c:f5:5a:a0:6c:3a:41:c6:0e:df: f7:4d:c8:ca:c5:62:65:df:3c:b2:94:27:a1:90:c3:2d:c6:e3: 27:ec:1f:e6:ad:d6:e3:1e:ab:3d:b9:4c:a1:10:42:5e:98:56: 7a:ea:0c:e4:fa:e1:cc:df:93:4d:7d:dc:de:4a:ff:94:3d:48: ac:8b:be:07:26:c9:82:80:74:a9:43:f1:04:9f:31:e4:37:d9: a6:e7:23:83:95:d2:5a:dc:18:82:a6:d7:da:58:77:3b:c2:e1: c2:24:f8:a6:99:0a:1b:eb:11:1b:da:8b:57:f3:35:f5:c7:a4: d6:d8:0e:5f:94:19:57:a7:c3:9e:70:fe:81:d7:76:4c:16:c1: 41:01:6b:db:44:b5:8c:de:00:bf:2b:21:5e:4c:8d:1c:2f:f4: 48:3a:d6:38:28:0a:c5:5e:f5:74:fd:eb:43:fa:2a:9c:d0:ed: f2:54:a1:e5:bb:7c:62:d3:cd:28:f0:f9:81:6c:57:61:4e:f7: 8e:dc:c2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3GQ4RtiFKyfWAnkvXIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGRjM2I5MjNjNzczOGY5YTU4ZWU4MGI0OWJjZDBjNWU3 ZGNmZmEwHhcNMjUxMjIwMjIwMDM5WhcNMjUxMjIxMjIwMDM5WjAzMTEwLwYDVQQD EygzY2EwNDQ4YTNjOTdiNWU5YWYyMzBiZGFlMTY5ZDczMWIyZGZhMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcKN7WspUNn4bOzXq3KUYTim+ZT4 CfPsPkd+ZgaGUqoa0i4oqXFRK394rRFhkiJtLfLpB6xDD+DPtpmYueeY+eknNvpi sC//XujrZ28Mdv4MWvD4I8n68/oqSGjcHUw3NqEG6lLG0E0uEw2NxMyFs2sT8H/8 PMkC752MSMdXdbMdxkaXUH2vGcRu1xY8T2xP6fq8xI2kkGKoQqL9ynUTLhblJOCx S6BB9MYThqqNT2NABIrx3Lo1cVHjg9DJVyqrqK4bKsxKLlIY/5XRdfsKFyh7s9Bw cCFwd8ClfUHIq6Tw/1OE0XU7A9dQqFm0/MRa8YU8/GD+MOcQao771+1C/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDygRIo8l7XpryML2uFp1zGy36HlMB8GA1UdIwQY MBaAFASNw7kjx3OPmljugLSbzQxefc/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQt MmVjODcxNDY1NTk5LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQtMmVjODcxNDY1NTk5 LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzgS1khR em1nsUyQHNeLL+QUpv+Hz9f1RgEzqQbPBSO95sQ7nHmnR3q/4Il60VmHLX1gT8S4 ZFsMXwU/QeAs9VqgbDpBxg7f903IysViZd88spQnoZDDLcbjJ+wf5q3W4x6rPblM oRBCXphWeuoM5PrhzN+TTX3c3kr/lD1IrIu+BybJgoB0qUPxBJ8x5DfZpucjg5XS WtwYgqbX2lh3O8LhwiT4ppkKG+sRG9qLV/M19cek1tgOX5QZV6fDnnD+gdd2TBbB QQFr20S1jN4AvyshXkyNHC/0SDrWOCgKxV71dP3rQ/oqnNDt8lSh5bt8YtPNKPD5 gWxXYU73jtzCVw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:29 2025 by rpki-client