This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json) Hash identifier: 7vxWC7K+gNEeCoUlzPTdMbU4TF/5l1lLvj9Lg5KlGYA= Subject key identifier: B2:C0:4E:3F:75:B8:43:D3:FB:03:81:F8:89:7F:11:FC:A2:DE:EC:1A Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019B45B80A14C66787D17224FB995EECEF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 11:00:47 +0000 Manifest this update: Mon 22 Dec 2025 11:00:47 +0000 Manifest next update: Tue 23 Dec 2025 11:00:47 +0000 Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=) 2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: f9Qn/ZtOA7QmSAyk1rcXrmqLVepltVKMd7nrL7kyMnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:0a:14:c6:67:87:d1:72:24:fb:99:5e:ec:ef:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Dec 22 11:00:47 2025 GMT Not After : Dec 23 11:00:47 2025 GMT Subject: CN=b2c04e3f75b843d3fb0381f8897f11fca2deec1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:17:cd:50:c9:a8:47:b8:53:ed:c0:12:be: 53:71:3f:49:59:28:0c:01:56:2d:b3:ec:17:0e:a0: 40:16:45:04:f5:47:19:c2:46:7a:61:3a:aa:1d:21: 58:b6:e4:a3:47:04:35:ed:11:f6:f9:33:9e:7e:86: 52:bc:51:be:41:a2:b3:c7:4d:d9:40:be:ab:d5:90: 96:11:ad:4b:a3:68:a8:74:e0:04:a1:54:62:ff:1f: bb:ff:ea:ea:eb:6a:a3:cf:23:c8:6e:f8:8f:9b:03: fd:96:d4:6a:7b:40:50:86:23:97:99:de:a3:ad:63: 30:30:ae:d6:98:29:e9:a1:72:93:db:73:d2:9d:2d: a4:a9:dc:09:c7:91:1d:10:46:ef:02:41:08:7c:ee: 32:62:00:a5:8a:52:50:e7:02:14:ac:2a:5e:74:81: f0:40:92:41:e8:cf:ec:09:cb:ab:f4:55:9f:66:72: 9e:15:a6:13:5e:8a:7c:3f:c0:d5:2a:5a:e8:41:62: 73:a4:87:90:20:ef:8f:a3:c8:80:c2:9e:7a:48:ff: 38:91:56:dc:85:18:49:c6:cd:6f:33:2f:4c:e7:67: 19:f6:60:c8:bd:cc:14:62:22:97:ee:8e:14:eb:e0: a5:1f:97:59:7a:c2:70:48:94:f0:be:1c:53:06:2a: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C0:4E:3F:75:B8:43:D3:FB:03:81:F8:89:7F:11:FC:A2:DE:EC:1A X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4a:bf:84:24:3d:79:fe:4f:cf:58:cf:e9:5f:42:23:21:12: e9:37:1a:78:84:dc:50:b4:98:d4:db:35:52:f3:21:d3:b2:fa: f7:e9:a2:54:c8:cc:d7:72:60:77:ae:68:a1:af:6a:24:a9:9c: 35:68:d9:16:f5:d7:92:50:df:64:57:ff:74:38:70:90:68:39: cb:b9:2b:9b:d6:39:a2:a5:9e:90:fd:24:94:09:e0:3d:f2:f7: b9:d7:2f:dd:a9:ea:09:3e:d3:e3:0a:af:77:01:d7:8c:19:03: 45:ae:65:67:54:c3:1f:d2:c5:aa:63:fc:91:44:29:06:8d:84: 9e:d5:24:4e:d0:2a:98:ae:86:42:f1:ce:fd:e4:60:2d:5e:41: 08:19:50:24:a0:6a:75:00:2f:81:46:03:e8:45:a2:ca:22:1d: 90:68:f3:8c:58:b1:07:aa:83:ea:aa:07:35:01:84:ba:29:61: d6:fd:52:36:8a:f4:45:06:5f:99:5e:45:03:c2:a6:a0:22:a4: b2:e4:94:75:95:11:b8:b5:29:c2:db:c7:0a:b8:8c:03:47:49: 61:9a:cd:63:44:c2:18:5d:47:2d:d4:fe:5c:0d:ae:14:0b:19: 47:db:30:39:bb:b2:1e:f6:b0:8d:a1:55:ad:30:75:51:47:41: ed:7a:01:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuAoUxmeH0XIk+5le7O8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjUxMjIyMTEwMDQ3WhcNMjUxMjIzMTEwMDQ3WjAzMTEwLwYDVQQD EyhiMmMwNGUzZjc1Yjg0M2QzZmIwMzgxZjg4OTdmMTFmY2EyZGVlYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhcXzVDJqEe4U+3AEr5TcT9JWSgM AVYts+wXDqBAFkUE9UcZwkZ6YTqqHSFYtuSjRwQ17RH2+TOefoZSvFG+QaKzx03Z QL6r1ZCWEa1Lo2iodOAEoVRi/x+7/+rq62qjzyPIbviPmwP9ltRqe0BQhiOXmd6j rWMwMK7WmCnpoXKT23PSnS2kqdwJx5EdEEbvAkEIfO4yYgClilJQ5wIUrCpedIHw QJJB6M/sCcur9FWfZnKeFaYTXop8P8DVKlroQWJzpIeQIO+Po8iAwp56SP84kVbc hRhJxs1vMy9M52cZ9mDIvcwUYiKX7o4U6+ClH5dZesJwSJTwvhxTBiox6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLATj91uEPT+wOB+Il/Efyi3uwaMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkq/hCQ9 ef5Pz1jP6V9CIyES6TcaeITcULSY1Ns1UvMh07L69+miVMjM13Jgd65ooa9qJKmc NWjZFvXXklDfZFf/dDhwkGg5y7krm9Y5oqWekP0klAngPfL3udcv3anqCT7T4wqv dwHXjBkDRa5lZ1TDH9LFqmP8kUQpBo2EntUkTtAqmK6GQvHO/eRgLV5BCBlQJKBq dQAvgUYD6EWiyiIdkGjzjFixB6qD6qoHNQGEuilh1v1SNor0RQZfmV5FA8KmoCKk suSUdZURuLUpwtvHCriMA0dJYZrNY0TCGF1HLdT+XA2uFAsZR9swObuyHvawjaFV rTB1UUdB7XoBxw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:13:17 2025 by rpki-client