This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json) Hash identifier: 08Jfb1SB1vMqGpVrgsMH/1OrH/d9kha6D18dwy4SzlE= Subject key identifier: BD:CB:5B:63:CE:34:84:27:01:9E:27:C0:9D:5A:9D:EA:3F:1C:65:57 Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019B3CEBDBE1578DD1C2D28CC9C4B8D30353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:00:48 +0000 Manifest this update: Sat 20 Dec 2025 18:00:48 +0000 Manifest next update: Sun 21 Dec 2025 18:00:48 +0000 Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: 1pGV/82aQ1u7sIMYeuxv3JXlPQpIGQwo/2XV+FObzDA=) 2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=) 3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:db:e1:57:8d:d1:c2:d2:8c:c9:c4:b8:d3:03:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Dec 20 18:00:48 2025 GMT Not After : Dec 21 18:00:48 2025 GMT Subject: CN=bdcb5b63ce348427019e27c09d5a9dea3f1c6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:3b:0d:5d:96:2b:5c:eb:4d:f1:cd:d3:bb: 01:a2:20:1a:73:75:cd:66:ab:07:4e:f2:c1:3d:da: 45:19:1a:20:18:e3:d1:f6:ca:8f:fb:8f:ac:5b:5f: 26:29:e9:98:b2:9c:14:fa:64:26:32:12:04:c4:bc: 89:5b:73:5b:67:b8:d5:7c:b5:99:34:59:fd:89:23: e3:bd:3e:8f:99:1e:96:6e:57:14:f6:39:9d:cb:3e: 24:f1:eb:9c:80:d6:b0:b1:35:7c:12:00:69:c5:c9: f1:25:4f:90:bf:81:9c:c0:20:43:44:a8:4e:c7:42: 54:36:02:8f:3a:9e:0f:86:b6:a6:09:e6:9d:c1:22: b8:cf:5d:97:ae:b9:e0:3c:63:8e:cd:d0:72:bc:ca: af:fc:65:80:f7:5c:3a:1b:81:8c:4b:a1:6f:c9:68: 49:32:97:88:f7:db:de:f2:49:cc:93:97:72:f3:09: 33:41:e4:92:9c:7e:a3:35:67:76:dc:73:c5:1c:e1: 19:b9:24:ae:83:b6:47:fa:5d:6a:f1:e8:87:5f:3a: 6e:ad:31:19:38:ee:3d:e4:fa:7c:9d:6c:43:f9:e3: 36:31:bc:ae:e9:ef:05:c1:69:25:1d:44:f4:03:63: d6:cd:b4:9b:bd:61:f5:ed:80:74:bb:fc:06:70:30: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CB:5B:63:CE:34:84:27:01:9E:27:C0:9D:5A:9D:EA:3F:1C:65:57 X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:00:70:ec:bd:48:9e:9c:75:1a:7d:9f:e5:0a:6b:8f:1b:f5: 9c:71:fb:38:72:be:ec:2f:ea:56:2f:0e:71:19:2a:b0:44:8d: 27:12:4b:95:1c:31:64:f8:da:14:63:37:fe:78:46:2e:92:31: 5b:50:5a:91:80:c2:06:81:20:cc:bf:57:2a:65:6f:81:5d:1e: ea:60:f8:ed:84:ee:5e:db:8b:59:0d:e4:fd:d6:14:8a:5f:68: 01:65:ae:f3:57:5b:85:0c:9d:38:7b:20:06:c1:48:06:31:19: 24:1d:37:68:77:10:02:f1:69:af:4c:31:b4:66:6e:f1:63:27: 38:ea:33:c7:53:ce:0a:f0:88:a9:f9:ad:db:cc:6e:e7:82:24: d6:aa:77:2c:24:17:09:a6:05:31:d7:04:51:ae:8b:75:22:6c: 30:72:52:35:13:be:4c:87:ff:dd:c9:d8:f7:1f:cb:1d:bb:10: 85:4b:5f:0b:15:24:51:7e:d1:4e:1a:6a:b9:fe:de:0d:c1:a2: dc:16:10:19:a2:00:1f:39:d1:82:63:43:a5:15:cd:72:6e:31: 08:1b:42:30:a5:de:e0:85:67:5b:3f:63:f6:d8:ec:7f:12:9f: 92:bd:f5:cb:16:28:c0:a6:be:c1:d8:a7:c4:07:d5:b2:1c:d2: 8a:38:f1:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869vhV43RwtKMycS40wNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjUxMjIwMTgwMDQ4WhcNMjUxMjIxMTgwMDQ4WjAzMTEwLwYDVQQD EyhiZGNiNWI2M2NlMzQ4NDI3MDE5ZTI3YzA5ZDVhOWRlYTNmMWM2NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruo7DV2WK1zrTfHN07sBoiAac3XN ZqsHTvLBPdpFGRogGOPR9sqP+4+sW18mKemYspwU+mQmMhIExLyJW3NbZ7jVfLWZ NFn9iSPjvT6PmR6WblcU9jmdyz4k8eucgNawsTV8EgBpxcnxJU+Qv4GcwCBDRKhO x0JUNgKPOp4PhramCeadwSK4z12XrrngPGOOzdByvMqv/GWA91w6G4GMS6FvyWhJ MpeI99ve8knMk5dy8wkzQeSSnH6jNWd23HPFHOEZuSSug7ZH+l1q8eiHXzpurTEZ OO495Pp8nWxD+eM2Mbyu6e8FwWklHUT0A2PWzbSbvWH17YB0u/wGcDDpmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3LW2PONIQnAZ4nwJ1aneo/HGVXMB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwBw7L1I npx1Gn2f5Qprjxv1nHH7OHK+7C/qVi8OcRkqsESNJxJLlRwxZPjaFGM3/nhGLpIx W1BakYDCBoEgzL9XKmVvgV0e6mD47YTuXtuLWQ3k/dYUil9oAWWu81dbhQydOHsg BsFIBjEZJB03aHcQAvFpr0wxtGZu8WMnOOozx1POCvCIqfmt28xu54Ik1qp3LCQX CaYFMdcEUa6LdSJsMHJSNRO+TIf/3cnY9x/LHbsQhUtfCxUkUX7RThpquf7eDcGi 3BYQGaIAHznRgmNDpRXNcm4xCBtCMKXe4IVnWz9j9tjsfxKfkr31yxYowKa+wdin xAfVshzSijjx8g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:17:50 2025 by rpki-client