This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json) Hash identifier: 0RO92GdFY1f0lxQMVcfsBqtxw8AFX5IT6hMQxuCBOLs= Subject key identifier: D9:FF:AB:D0:02:AC:44:93:A4:E2:FD:D2:40:05:EB:52:DF:5D:B3:97 Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Certificate serial: 019B40C8AE524903BF5DE2AA85F882C1C8DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 12:00:52 +0000 Manifest this update: Sun 21 Dec 2025 12:00:52 +0000 Manifest next update: Mon 22 Dec 2025 12:00:52 +0000 Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=) 2: DPfDzK5MIgt9uCqb-OzrjnTt0XE.asa (hash: xVJ7dS76yV9K4GLx/NHqZB5JP3AMDX7XWVpGOyoTdvQ=) 3: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=) 4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: VPYwHtXlEmY+Prkddlo4VJuuVdO9FXDfuzxPrGLo21k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ae:52:49:03:bf:5d:e2:aa:85:f8:82:c1:c8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Validity Not Before: Dec 21 12:00:52 2025 GMT Not After : Dec 22 12:00:52 2025 GMT Subject: CN=d9ffabd002ac4493a4e2fdd24005eb52df5db397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:38:c7:3f:df:e1:e9:f6:e0:17:02:75:de: 2a:29:f7:41:18:7c:14:7e:ea:08:1e:ac:a5:29:b8: 0e:e4:27:fc:f5:0d:d9:60:24:dc:be:7f:e8:7a:35: 1c:d0:e1:12:90:0a:57:4e:31:30:13:3c:0b:e0:95: e7:19:7d:35:cf:c5:88:d7:b6:1a:08:26:77:41:03: cc:bf:2a:86:5a:72:a3:63:3a:09:00:3b:da:49:db: 44:0f:e8:d4:e3:8c:f3:2d:4b:3c:fe:36:d1:ed:b0: 90:76:b5:8e:3f:bd:0f:ac:e1:f2:89:74:c7:47:14: 0b:5e:84:48:a2:9f:61:ba:cb:a9:33:aa:a8:0a:0e: 0c:8d:13:d5:95:db:73:de:ff:32:3b:b5:9a:66:e8: 5a:55:69:06:81:bc:9a:0d:ee:ad:bf:f6:f7:e2:2f: 5c:04:0a:fa:e2:b0:3a:78:d4:6e:89:de:a3:e7:3d: 9d:8e:4f:53:1a:e4:43:c6:b8:a7:f0:99:a0:a7:90: 5b:6c:5d:45:11:b9:6e:4b:15:93:4f:c0:6c:aa:f8: c1:34:ff:a8:ce:1d:8e:35:74:15:88:f0:2d:c8:03: 1a:ec:f0:3d:eb:be:49:6c:94:d4:68:7f:70:a7:61: 3e:2e:fc:1f:b3:b9:63:45:ee:9f:e2:5c:a3:e1:c6: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:AB:D0:02:AC:44:93:A4:E2:FD:D2:40:05:EB:52:DF:5D:B3:97 X509v3 Authority Key Identifier: keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:75:f1:27:16:6b:e7:4a:65:c6:52:37:d1:52:e1:26:39: 4f:88:c2:ad:74:61:72:45:ab:59:ed:eb:46:ae:03:29:43:65: 6d:81:84:f4:54:3e:02:85:dd:65:9a:11:9a:86:52:d7:4e:83: 8e:72:26:93:68:bd:23:5b:ba:6b:8e:ac:ae:89:54:95:a3:d2: 91:b8:e1:3f:4d:c7:78:01:52:e2:a7:5b:04:3d:fa:47:1c:cb: 97:2f:53:72:e1:60:6d:04:ca:09:dd:c1:d3:49:5e:98:2b:bd: 48:be:bf:8a:1c:cc:14:d8:e4:c9:ed:b5:dd:69:4c:b5:c4:07: 35:c5:95:94:87:a4:0b:17:fa:01:80:e9:4a:89:70:92:8b:1b: 7b:27:1c:2d:b1:37:22:53:f4:c1:0d:40:1a:f2:8c:39:c7:a3: dc:ef:13:cf:68:06:c5:f1:0f:eb:29:a5:7e:2b:2d:e2:11:2a: 04:94:bd:37:57:62:c6:45:aa:96:0e:74:1d:cf:6e:16:8a:2a: ea:0e:d4:50:56:78:c8:6a:90:2b:06:7f:73:b0:76:ba:32:de: 72:87:21:04:3a:72:27:f2:28:68:e3:76:ca:35:c3:c0:39:fc: 85:72:45:21:41:9c:2c:e5:77:1b:e1:c7:b2:d3:40:18:f6:6a: e2:70:2e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyK5SSQO/XeKqhfiCwcjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0 M2YxNzQwHhcNMjUxMjIxMTIwMDUyWhcNMjUxMjIyMTIwMDUyWjAzMTEwLwYDVQQD EyhkOWZmYWJkMDAyYWM0NDkzYTRlMmZkZDI0MDA1ZWI1MmRmNWRiMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc84xz/f4en24BcCdd4qKfdBGHwU fuoIHqylKbgO5Cf89Q3ZYCTcvn/oejUc0OESkApXTjEwEzwL4JXnGX01z8WI17Ya CCZ3QQPMvyqGWnKjYzoJADvaSdtED+jU44zzLUs8/jbR7bCQdrWOP70PrOHyiXTH RxQLXoRIop9husupM6qoCg4MjRPVldtz3v8yO7WaZuhaVWkGgbyaDe6tv/b34i9c BAr64rA6eNRuid6j5z2djk9TGuRDxrin8Jmgp5BbbF1FEbluSxWTT8BsqvjBNP+o zh2ONXQViPAtyAMa7PA9675JbJTUaH9wp2E+Lvwfs7ljRe6f4lyj4cYjBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn/q9ACrESTpOL90kAF61LfXbOXMB8GA1UdIwQY MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOV18ScW a+dKZcZSN9FS4SY5T4jCrXRhckWrWe3rRq4DKUNlbYGE9FQ+AoXdZZoRmoZS106D jnImk2i9I1u6a46srolUlaPSkbjhP03HeAFS4qdbBD36RxzLly9TcuFgbQTKCd3B 00lemCu9SL6/ihzMFNjkye213WlMtcQHNcWVlIekCxf6AYDpSolwkosbeyccLbE3 IlP0wQ1AGvKMOcej3O8Tz2gGxfEP6ymlfist4hEqBJS9N1dixkWqlg50Hc9uFooq 6g7UUFZ4yGqQKwZ/c7B2ujLecochBDpyJ/IoaON2yjXDwDn8hXJFIUGcLOV3G+HH stNAGPZq4nAuiA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:21:52 2025 by rpki-client