This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json) Hash identifier: 2fDJ5ln/V6c+y621ipKM6Md2sG05uYzBWJXG6Gn/CCo= Subject key identifier: D1:B3:B2:5C:59:94:75:E1:51:C5:B5:B2:D4:0B:E0:81:0D:3A:80:6E Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Certificate serial: 019B552B912811C256091134F56EE07EB0ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft Manifest number: 102F Signing time: Thu 25 Dec 2025 11:01:16 +0000 Manifest this update: Thu 25 Dec 2025 11:01:16 +0000 Manifest next update: Fri 26 Dec 2025 11:01:16 +0000 Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=) 2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: tfhf6p4KXVdvE4vuRTiLDUHr1hpBGqN4Z5frjz0z6SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:91:28:11:c2:56:09:11:34:f5:6e:e0:7e:b0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Validity Not Before: Dec 25 11:01:16 2025 GMT Not After : Dec 26 11:01:16 2025 GMT Subject: CN=d1b3b25c599475e151c5b5b2d40be0810d3a806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:ef:0b:71:7a:2e:0f:97:78:13:36:f9:5f: fe:11:c2:09:1b:b3:3f:82:ee:01:a9:ae:96:d3:37: 1b:e9:ba:52:1d:ac:3a:a5:8c:f8:a7:cb:13:5a:be: 1e:3d:d5:b8:a1:e5:fb:b0:5a:6b:54:d4:88:be:52: dc:8e:ac:5f:cb:b9:79:38:ba:9b:bc:ca:7d:b8:29: c1:b1:2c:f1:5c:63:90:df:c8:56:5f:81:e4:f9:37: e7:9d:b8:9b:92:02:0e:b9:4b:df:b2:ad:2e:7a:30: 3b:44:97:40:a3:f8:61:92:1e:ec:88:a4:86:59:97: de:2d:8a:4f:26:a2:2c:f1:64:d0:e0:fa:d9:32:9e: 26:e9:ed:24:dd:76:63:57:15:1d:9e:9b:f3:b3:0c: 07:5d:8b:0d:e4:29:2e:73:c4:b3:ad:9b:be:05:00: 8b:e5:10:7e:38:a6:e7:ef:52:a4:49:e1:cf:da:a2: 51:e5:02:6e:e8:ff:d8:e6:47:29:73:0e:04:aa:1a: 08:ec:c3:22:c2:60:33:65:b2:d4:bf:1e:52:9f:57: 78:86:85:47:03:25:77:a2:e4:04:de:01:be:1b:62: ba:9b:b4:bb:4d:12:3c:36:ca:53:e7:0c:65:dd:85: 14:e8:88:c6:0a:11:63:8d:20:20:9e:8b:69:5a:6f: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:B2:5C:59:94:75:E1:51:C5:B5:B2:D4:0B:E0:81:0D:3A:80:6E X509v3 Authority Key Identifier: keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c4:2d:73:cd:1d:73:0a:df:71:e7:91:0d:45:f3:6a:99:75: fc:0a:74:69:be:11:7d:68:a7:b1:db:cb:04:c8:1d:c3:1f:c3: 4c:c3:2d:dc:83:41:2b:ce:1c:95:ee:17:df:ee:c6:e2:c4:85: dd:a2:65:e3:a1:7e:b3:d5:c1:30:74:f2:ef:5f:18:a2:77:a6: 89:d7:7b:49:26:be:06:0c:52:f5:82:74:99:b9:7b:7d:ed:ae: b4:e5:b0:72:ee:86:00:16:a6:02:62:a6:c4:d6:c9:54:c3:cc: 71:5f:5b:ff:ce:21:e1:2f:90:0c:af:0b:be:2a:2c:bc:10:f2: 48:9a:cc:e9:de:9f:91:47:b6:42:97:8c:74:fb:6b:2a:df:33: 3d:a9:57:93:e1:34:62:a7:2b:a3:c9:73:6b:8d:e9:28:65:08: 6c:06:01:0b:a2:1d:ea:9f:f2:d1:43:be:6c:44:9b:a1:84:e6: 46:bb:f2:e7:ef:65:a3:fe:78:8a:22:f7:7f:9f:9f:dd:3c:f8: 02:5b:8a:06:98:9e:8d:57:93:ec:8f:aa:e8:26:8a:4c:f1:c4: 4e:87:42:3a:96:e8:1c:bc:ad:05:bd:5f:47:c4:2e:05:52:fb: 01:3f:8f:98:a9:06:2d:3a:2c:53:e8:06:7d:43:c0:03:b0:61: 60:da:9f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK5EoEcJWCRE09W7gfrDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2 Nzg2ZGMwHhcNMjUxMjI1MTEwMTE2WhcNMjUxMjI2MTEwMTE2WjAzMTEwLwYDVQQD EyhkMWIzYjI1YzU5OTQ3NWUxNTFjNWI1YjJkNDBiZTA4MTBkM2E4MDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zjvC3F6Lg+XeBM2+V/+EcIJG7M/ gu4Bqa6W0zcb6bpSHaw6pYz4p8sTWr4ePdW4oeX7sFprVNSIvlLcjqxfy7l5OLqb vMp9uCnBsSzxXGOQ38hWX4Hk+TfnnbibkgIOuUvfsq0uejA7RJdAo/hhkh7siKSG WZfeLYpPJqIs8WTQ4PrZMp4m6e0k3XZjVxUdnpvzswwHXYsN5Ckuc8SzrZu+BQCL 5RB+OKbn71KkSeHP2qJR5QJu6P/Y5kcpcw4EqhoI7MMiwmAzZbLUvx5Sn1d4hoVH AyV3ouQE3gG+G2K6m7S7TRI8NspT5wxl3YUU6IjGChFjjSAgnotpWm9PiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGzslxZlHXhUcW1stQL4IENOoBuMB8GA1UdIwQY MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsQtc80d cwrfceeRDUXzapl1/Ap0ab4RfWinsdvLBMgdwx/DTMMt3INBK84cle4X3+7G4sSF 3aJl46F+s9XBMHTy718Yonemidd7SSa+BgxS9YJ0mbl7fe2utOWwcu6GABamAmKm xNbJVMPMcV9b/84h4S+QDK8LviosvBDySJrM6d6fkUe2QpeMdPtrKt8zPalXk+E0 Yqcro8lza43pKGUIbAYBC6Id6p/y0UO+bESboYTmRrvy5+9lo/54iiL3f5+f3Tz4 AluKBpiejVeT7I+q6CaKTPHETodCOpboHLytBb1fR8QuBVL7AT+PmKkGLTosU+gG fUPAA7BhYNqffA== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:14 2025 by rpki-client