This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 5HPE3wOP79IWwiDmEMHAGzDQkxxoAxD91pemNWyHmd4= Subject key identifier: A4:CC:61:44:5E:64:48:BC:17:DE:77:41:42:74:99:28:4C:6C:8D:51 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B3CB512AB53D732C08FC1E620229A34E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: PmO9r2bXovuNGB11jMssVVMJfbdkQ5ePfdoUUA02AlQ=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:12:ab:53:d7:32:c0:8f:c1:e6:20:22:9a:34:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=a4cc61445e6448bc17de7741427499284c6c8d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:7b:96:14:d3:39:8f:f3:c6:97:d4:61:db: 58:db:0e:c1:cc:0c:94:46:cb:87:d7:56:9e:be:3a: 21:d1:45:b0:b7:c6:1c:e2:19:32:97:7e:98:6f:78: 73:6f:52:e1:a3:49:47:8d:7d:02:53:a1:5c:70:24: 22:49:75:7c:0b:95:5a:19:db:35:8b:55:27:d3:84: 8c:db:33:b2:35:4d:44:b6:71:6a:f2:b3:60:d1:da: 7a:64:79:1a:fe:33:5d:fa:16:2d:fc:ab:b8:ed:8d: e1:a2:74:48:86:c8:fb:58:7a:65:40:f0:5b:4b:f4: 17:5f:27:03:2e:7b:eb:3f:d7:10:77:a1:58:90:02: d4:87:dc:b1:d6:93:83:e7:9b:7f:a5:54:5d:58:40: 51:26:87:85:b2:e2:84:92:2b:52:51:2e:ab:5a:11: b3:02:f6:f6:81:cc:e7:0f:db:24:3a:a1:3b:04:c4: 7f:f4:27:75:01:e2:ae:b8:fc:8b:dc:8a:49:55:55: a0:34:ab:84:1f:01:1c:54:32:4c:c8:32:30:cd:a1: ae:82:42:ae:5c:d0:26:16:07:93:eb:03:96:9c:64: fd:80:ad:fb:71:71:9f:72:8c:30:61:1b:1b:2b:6b: 3e:89:e6:26:d9:c0:fa:48:a6:ac:c5:72:49:54:1d: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:61:44:5E:64:48:BC:17:DE:77:41:42:74:99:28:4C:6C:8D:51 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a2:7b:df:af:32:57:c4:b7:a7:59:a4:5b:2f:c5:10:b2:29: 49:f7:70:fe:51:3b:c1:f8:eb:7a:24:1c:ac:cc:d6:17:7b:a4: 8b:98:50:2d:71:85:21:07:d1:44:7e:b2:06:42:62:5e:e7:65: 22:52:df:1b:f8:e1:84:ac:f1:fb:3a:db:6c:aa:1d:3d:ac:46: 74:9b:d8:75:89:a1:6a:db:f9:9c:e1:fb:aa:fb:c1:c3:99:49: 50:09:88:1c:0a:d6:83:c8:53:27:58:cf:b3:12:64:5e:50:02: 92:23:f7:85:ae:31:2d:4b:c4:b3:1b:4e:da:4d:77:c4:47:f6: 3d:43:be:7c:79:30:e2:6f:b7:33:ba:57:6b:7a:53:ba:d6:42: 57:19:4b:16:40:38:e6:0b:77:fc:c6:a4:b7:d0:ef:79:4c:ff: 31:98:ed:62:4c:d9:eb:98:e4:cf:0a:14:55:5b:b9:fa:1f:23: 56:6a:86:65:39:da:5f:5b:80:33:02:77:38:bb:04:be:aa:38: e4:4e:59:2e:33:50:22:2a:1a:77:b3:2c:2c:aa:6a:3f:aa:62: 42:52:bf:cc:ed:72:80:a5:e2:d5:20:90:f2:60:26:49:1d:25: 93:14:bb:f3:56:01:41:9c:e1:b1:83:cc:74:bb:2a:ea:8a:4b: 81:11:84:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRKrU9cywI/B5iAimjTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD EyhhNGNjNjE0NDVlNjQ0OGJjMTdkZTc3NDE0Mjc0OTkyODRjNmM4ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F97lhTTOY/zxpfUYdtY2w7BzAyU RsuH11aevjoh0UWwt8Yc4hkyl36Yb3hzb1Lho0lHjX0CU6FccCQiSXV8C5VaGds1 i1Un04SM2zOyNU1EtnFq8rNg0dp6ZHka/jNd+hYt/Ku47Y3honRIhsj7WHplQPBb S/QXXycDLnvrP9cQd6FYkALUh9yx1pOD55t/pVRdWEBRJoeFsuKEkitSUS6rWhGz Avb2gcznD9skOqE7BMR/9Cd1AeKuuPyL3IpJVVWgNKuEHwEcVDJMyDIwzaGugkKu XNAmFgeT6wOWnGT9gK37cXGfcowwYRsbK2s+ieYm2cD6SKasxXJJVB240QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTMYUReZEi8F953QUJ0mShMbI1RMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaJ7368y V8S3p1mkWy/FELIpSfdw/lE7wfjreiQcrMzWF3uki5hQLXGFIQfRRH6yBkJiXudl IlLfG/jhhKzx+zrbbKodPaxGdJvYdYmhatv5nOH7qvvBw5lJUAmIHArWg8hTJ1jP sxJkXlACkiP3ha4xLUvEsxtO2k13xEf2PUO+fHkw4m+3M7pXa3pTutZCVxlLFkA4 5gt3/Makt9DveUz/MZjtYkzZ65jkzwoUVVu5+h8jVmqGZTnaX1uAMwJ3OLsEvqo4 5E5ZLjNQIioad7MsLKpqP6piQlK/zO1ygKXi1SCQ8mAmSR0lkxS781YBQZzhsYPM dLsq6opLgRGEdA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:22 2025 by rpki-client